This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft
File: 63003FFDD063104898793061BDB2DB8D0788745D.mft (raw, json)
Hash identifier: hqgm8nG05xZ7lgrWM22YUS+3g5RrjeLUXjF0tNHkn3U=
Subject key identifier: 74:66:77:0A:78:86:BF:DC:BC:A0:0E:26:AF:65:DC:83:F0:7A:C5:CB
Authority key identifier: 63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D
Certificate issuer: /CN=63003FFDD063104898793061BDB2DB8D0788745D
Certificate serial: 253A7E742739AAEBE3B9CCDA039152EB02C1BACE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft
Manifest number: 04FA
Signing time: Wed 17 Dec 2025 05:41:51 +0000
Manifest this update: Wed 17 Dec 2025 05:36:51 +0000
Manifest next update: Sat 20 Dec 2025 10:07:51 +0000
Files and hashes: 1: 3138302e3135302e3233322e302f32312d3234203d3e203234323130.roa (hash: uBYWq9KOdocMUKkuJh410FmbT/FJLpr3pkzLuhHu42c=)
2: 63003FFDD063104898793061BDB2DB8D0788745D.crl (hash: NIgkynVBtwVRzHW7jOYbHeyWZ7Pb301+2GZAmIlQZok=)
3: 3230322e3137332e31362e302f32312d3234203d3e203234323130.roa (hash: 8ngGpaw5U41sV4BmmrJGa5VA7KiMpIyW6XxofkOK1bo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl
rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 10:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3a:7e:74:27:39:aa:eb:e3:b9:cc:da:03:91:52:eb:02:c1:ba:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63003FFDD063104898793061BDB2DB8D0788745D
Validity
Not Before: Dec 17 05:36:51 2025 GMT
Not After : Dec 20 10:07:51 2025 GMT
Subject: CN=7466770A7886BFDCBCA00E26AF65DC83F07AC5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:df:96:ad:d1:df:17:89:ca:06:cf:84:64:
f3:1c:e8:56:68:9b:35:7b:0d:73:ef:8b:38:78:60:
b1:10:dc:28:09:98:1a:ff:1a:c4:fa:c3:11:2d:f2:
45:d5:40:b8:95:22:d5:d5:24:fe:6c:9d:ad:23:83:
9c:24:71:14:93:1f:bd:55:9a:da:2a:f6:bd:2d:60:
83:9d:4c:1d:94:5d:f5:85:cc:b0:fc:58:37:31:17:
0b:fb:ec:e7:05:04:ca:09:af:9b:4d:82:06:5c:3a:
b9:42:c4:ab:ee:bd:42:f8:c7:3a:93:ea:3a:b1:bc:
7f:e7:a9:5e:5f:9b:29:3f:fc:eb:89:13:e8:3b:a8:
ea:35:f7:62:9e:1e:a5:89:40:d8:53:29:5c:66:bb:
3d:54:68:aa:fc:66:f1:d4:40:7f:ff:b4:66:1a:3e:
56:4e:fc:db:ed:96:cd:19:b1:b4:39:40:94:37:ea:
52:d2:d1:29:64:27:22:b4:af:76:6f:c1:0a:33:76:
88:d5:ca:32:41:81:46:89:e7:94:83:19:73:c4:18:
67:4d:7f:52:5f:83:86:5b:5b:4a:18:0a:c3:a2:23:
b2:e5:7d:21:63:7b:53:ec:26:89:37:7d:9e:68:5e:
e8:c7:0e:d7:4e:51:ae:ad:bc:ab:d9:fa:04:2e:9e:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:77:0A:78:86:BF:DC:BC:A0:0E:26:AF:65:DC:83:F0:7A:C5:CB
X509v3 Authority Key Identifier:
keyid:63:00:3F:FD:D0:63:10:48:98:79:30:61:BD:B2:DB:8D:07:88:74:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63003FFDD063104898793061BDB2DB8D0788745D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a017b828-17fa-48a2-a113-149f9467a328/0/63003FFDD063104898793061BDB2DB8D0788745D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:67:b9:5b:f3:c4:de:f8:5e:31:e0:98:61:eb:9b:25:b4:86:
26:7a:db:fb:a1:81:6b:72:05:a5:97:c0:8c:27:64:4e:e4:c4:
c1:a0:d5:1c:42:00:17:1a:22:ef:27:2f:72:4f:24:6e:1a:c9:
e3:3f:0b:23:b3:05:eb:49:87:75:b0:6d:c9:9d:9b:fa:cb:69:
9a:1e:87:08:58:62:38:7e:1a:1b:8a:82:4f:95:30:fb:98:ad:
83:7f:93:6c:3f:ac:e9:cf:b4:68:b7:0a:7e:70:54:89:fb:4d:
64:09:0f:d5:c8:50:f0:48:19:e7:38:f7:d0:07:d4:52:93:b0:
76:f5:a0:da:99:52:50:14:c6:48:11:01:43:6f:2a:af:e8:d8:
03:50:89:25:e3:5a:2b:d9:8a:33:a6:41:18:5e:40:11:a6:68:
41:34:b4:af:51:74:a0:b7:25:38:76:ff:b3:0d:b4:87:b4:94:
e1:41:ae:76:90:ba:11:38:d9:36:ae:8b:8f:06:04:dc:e3:92:
d2:d1:5b:da:c1:c9:fe:7f:7a:fe:ef:6f:6d:97:11:82:4c:a0:
38:e2:2a:44:f1:48:61:62:15:d4:8a:24:19:50:e5:e7:84:de:
5f:d0:0b:a5:80:cd:4d:1c:f3:11:17:3e:d1:4b:dc:67:67:49:
f5:23:3c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:05:38 2025 by rpki-client