This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft File: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft (raw, json) Hash identifier: 1zua8gwoHTJ4EhlvNJLrdee8fCROg7mVb3wLhlkcNqU= Subject key identifier: 06:A3:B7:59:6F:7D:38:06:8B:19:18:EA:D6:6D:30:2C:76:F8:5D:30 Authority key identifier: 63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 Certificate issuer: /CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Certificate serial: 71F826D079CC498A2938F3A3B2773F57E7527DAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft Manifest number: 01EC Signing time: Wed 24 Dec 2025 11:51:17 +0000 Manifest this update: Wed 24 Dec 2025 11:46:17 +0000 Manifest next update: Sat 27 Dec 2025 12:09:17 +0000 Files and hashes: 1: 63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl (hash: +vbcsc9RN8mTOcL1onDUm4kLyskcKZbZSfa+zmLv07E=) 2: 3130332e35312e3230342e302f32332d3234203d3e203435333035.roa (hash: UrdeubFj8MJMBosQTjUTlkyTLJKd5ipS0sOIHGHNGXw=) 3: 3130332e35312e3230352e302f32342d3234203d3e203435333035.roa (hash: ghssEE9zj9axglbKjUOvFcXIOFWwWgWFdjOGnyGNun8=) 4: 3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (hash: fJYZwNXP9c0qCqp/KxrF/x9WsoAi9ZRyA7KgfjlBJW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f8:26:d0:79:cc:49:8a:29:38:f3:a3:b2:77:3f:57:e7:52:7d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07 Validity Not Before: Dec 24 11:46:17 2025 GMT Not After : Dec 27 12:09:17 2025 GMT Subject: CN=06A3B7596F7D38068B1918EAD66D302C76F85D30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:2a:0c:1f:56:2d:d6:fb:25:9c:73:e9:a3: cc:36:c3:d8:99:fb:cf:e0:d2:fc:68:a3:ee:fb:ed: 97:31:ec:d4:41:f7:dd:2e:0d:1f:0d:14:da:1c:95: 0a:7f:10:78:53:6b:47:a3:91:59:e0:5e:02:d2:37: 6f:37:37:01:7a:c7:87:67:a8:95:86:36:7e:82:23: d8:ec:f4:dc:3e:90:34:5e:be:ff:44:86:14:97:ba: a0:e3:58:21:e4:c5:4b:7e:e2:86:e9:51:da:7d:dd: 21:88:7b:85:2e:f6:a3:35:a8:23:8a:c2:f3:2b:a3: f6:11:48:89:3d:99:a3:61:3b:00:1e:09:8c:29:e5: 49:22:39:04:77:42:87:85:b3:e2:6b:89:26:dc:7d: 7f:43:21:68:9b:a4:a6:50:44:5c:19:a0:22:3c:ec: 79:29:88:c4:90:2c:7f:d0:79:e6:5b:8b:5e:96:a6: 5c:fe:9e:9f:13:15:b0:b6:3f:8e:29:ae:83:7a:12: 1d:08:46:19:90:cc:8c:e9:29:71:a5:82:de:3e:c0: 99:12:c2:f7:18:3a:c1:78:47:b8:46:e5:29:f8:24: c4:bf:b9:5d:91:5a:4b:e3:00:d6:03:8a:73:9f:e2: dc:a6:93:cf:63:59:f4:14:bc:cb:fb:d1:85:d2:d6: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A3:B7:59:6F:7D:38:06:8B:19:18:EA:D6:6D:30:2C:76:F8:5D:30 X509v3 Authority Key Identifier: keyid:63:E0:67:66:3A:09:E3:E8:4F:1C:5B:1C:31:DE:AB:FF:2A:4A:7C:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/63E067663A09E3E84F1C5B1C31DEABFF2A4A7C07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:29:e2:8c:90:be:5b:92:cf:14:1b:b6:2e:37:04:6b:db:bb: 68:90:9f:67:47:83:c4:c8:30:de:7f:7b:81:48:bf:99:43:9a: 65:ea:d5:5b:67:4a:ee:8e:5d:7e:04:09:f8:2d:cb:ee:b1:96: 4b:b3:31:8c:5d:ab:21:cc:45:80:5d:6d:63:22:2e:47:8e:19: bc:f3:ba:50:74:03:a0:42:82:66:f6:53:02:9c:c9:3e:6a:c3: 02:1e:e3:d8:e0:ab:ac:b0:25:96:bc:44:3e:50:48:7d:d2:9f: d6:51:9e:19:62:29:aa:3d:bb:a3:0f:b0:67:33:18:a9:6e:6c: 57:05:be:29:e7:26:7f:bf:04:d2:2d:40:d2:29:79:4d:1f:0e: 2b:00:17:3f:70:d1:9b:da:5f:68:72:b5:d1:59:1e:af:b6:48: cd:4c:90:c8:9b:40:72:9a:45:25:a1:19:4a:6c:64:58:aa:ad: e9:7a:fd:26:b2:4d:8a:f6:8e:cf:3e:d8:d9:ad:7f:60:c7:55: 2f:22:00:f0:9a:bb:9f:9f:5b:e4:2b:2d:b9:23:03:00:81:01: 10:1b:f4:59:c8:f4:55:95:0b:64:15:02:f1:92:88:23:8d:7a: 8d:4d:f7:4b:b9:3b:17:d8:ac:7a:ce:b0:cf:34:98:44:df:ec: 79:80:79:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfgm0HnMSYopOPOjsnc/V+dSfa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYy QTRBN0MwNzAeFw0yNTEyMjQxMTQ2MTdaFw0yNTEyMjcxMjA5MTdaMDMxMTAvBgNV BAMTKDA2QTNCNzU5NkY3RDM4MDY4QjE5MThFQUQ2NkQzMDJDNzZGODVEMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbpioMH1Yt1vslnHPpo8w2w9iZ +8/g0vxoo+777Zcx7NRB990uDR8NFNoclQp/EHhTa0ejkVngXgLSN283NwF6x4dn qJWGNn6CI9js9Nw+kDRevv9EhhSXuqDjWCHkxUt+4obpUdp93SGIe4Uu9qM1qCOK wvMro/YRSIk9maNhOwAeCYwp5UkiOQR3QoeFs+JriSbcfX9DIWibpKZQRFwZoCI8 7HkpiMSQLH/QeeZbi16Wplz+np8TFbC2P44proN6Eh0IRhmQzIzpKXGlgt4+wJkS wvcYOsF4R7hG5Sn4JMS/uV2RWkvjANYDinOf4tymk89jWfQUvMv70YXS1g7vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBqO3WW99OAaLGRjq1m0wLHb4XTAwHwYDVR0j BBgwFoAUY+BnZjoJ4+hPHFscMd6r/ypKfAcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjViODRmMi05ODA0LTQ2NzAtOGJiYy1jMzMyNzFiNTkyNTkvMC82M0UwNjc2NjNB MDlFM0U4NEYxQzVCMUMzMURFQUJGRjJBNEE3QzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFCRkYyQTRB N0MwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY1Yjg0ZjItOTgwNC00NjcwLThi YmMtYzMzMjcxYjU5MjU5LzAvNjNFMDY3NjYzQTA5RTNFODRGMUM1QjFDMzFERUFC RkYyQTRBN0MwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcp4oyQvluSzxQbti43BGvbu2iQn2dHg8TI MN5/e4FIv5lDmmXq1VtnSu6OXX4ECfgty+6xlkuzMYxdqyHMRYBdbWMiLkeOGbzz ulB0A6BCgmb2UwKcyT5qwwIe49jgq6ywJZa8RD5QSH3Sn9ZRnhliKao9u6MPsGcz GKlubFcFvinnJn+/BNItQNIpeU0fDisAFz9w0ZvaX2hytdFZHq+2SM1MkMibQHKa RSWhGUpsZFiqrel6/SayTYr2js8+2Nmtf2DHVS8iAPCau5+fW+QrLbkjAwCBARAb 9FnI9FWVC2QVAvGSiCONeo1N90u5OxfYrHrOsM80mETf7HmAeZs= -----END CERTIFICATE-----Generated at Wed Dec 24 20:04:49 2025 by rpki-client