This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: iBXDOMTqVW4s4bMIw6HfyrH47jOehs7uWyWshw1G5Z8= Subject key identifier: 11:7E:98:62:8D:7D:23:E5:7F:F8:D0:84:32:42:52:7E:47:B1:7E:CF Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 360D407C8624E8B0B1232F3758CC05CA54D0043B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: F5 Signing time: Sun 07 Dec 2025 01:12:22 +0000 Manifest this update: Sun 07 Dec 2025 01:07:22 +0000 Manifest next update: Wed 10 Dec 2025 12:04:22 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: IilM93e81x4M7QuyT3k5b1zD5rZmhurmazbOM5Et4ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0d:40:7c:86:24:e8:b0:b1:23:2f:37:58:cc:05:ca:54:d0:04:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Dec 7 01:07:22 2025 GMT Not After : Dec 10 12:04:22 2025 GMT Subject: CN=117E98628D7D23E57FF8D0843242527E47B17ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:25:16:45:04:df:ba:6d:19:a7:9e:b2:ee: 89:8e:5d:a3:9f:60:3e:b1:26:7d:55:05:33:62:9e: 26:41:a1:53:2e:61:8e:52:66:de:93:a4:dd:46:02: 57:42:ab:72:2a:de:f0:cb:bb:74:28:10:68:42:ca: d5:1f:7e:9b:03:fe:ae:91:79:2e:47:80:e0:f1:38: 9a:11:9d:6a:ad:2b:e1:9a:c5:2a:37:7e:a4:8e:6e: 8a:1e:22:8a:96:9f:dd:d8:c7:b0:75:48:35:98:4b: 12:44:a0:81:5f:a0:69:8e:30:c1:db:1e:db:ec:b8: 56:f0:5f:a9:63:fa:13:26:91:a5:4b:d2:12:a1:e4: d7:f2:2f:42:39:30:6f:6c:2d:9c:9a:6b:df:ec:d1: 6e:09:1b:90:a2:a0:17:79:d4:d1:07:5e:c3:9e:5e: 40:c8:b7:c6:96:0f:c3:8b:5c:57:b0:9b:bf:e0:78: f1:a4:7a:d7:96:0b:e1:ba:e1:00:29:e7:87:43:97: a0:5a:8a:d7:76:82:b8:6e:e3:e6:d6:30:6b:48:04: 43:fd:cc:75:ca:03:6e:fc:e3:57:23:ba:c7:8c:5d: 6a:df:f5:72:00:1f:27:12:bb:41:0f:c4:5c:41:41: 53:fc:80:2f:ba:24:ec:91:02:1c:09:0f:cd:09:7e: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:98:62:8D:7D:23:E5:7F:F8:D0:84:32:42:52:7E:47:B1:7E:CF X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a4:d4:05:70:31:a2:d7:a7:7c:05:e9:6f:9a:a2:18:e8:93: 26:9f:26:96:b0:76:d0:68:67:f3:14:e4:1c:39:15:25:bb:16: 4c:9c:cb:2b:8b:a0:69:0a:aa:fb:16:d6:66:58:df:41:61:3e: 83:5a:5f:41:08:7f:14:98:35:c0:54:fb:e0:c7:23:ce:84:50: 5f:d5:72:5d:0d:72:dc:6c:0f:2c:a1:c4:91:32:5c:25:44:f8: 6b:dd:b2:b1:9f:da:72:b0:9b:34:02:6e:21:81:77:3d:cd:88: 65:af:23:08:16:bb:a5:c1:23:4b:c8:22:a5:bc:8e:c8:5a:6c: 98:8f:27:f5:b5:a2:77:c3:1e:d6:15:40:cf:57:96:06:ac:6a: 60:f9:ba:20:ae:72:e2:58:e9:a9:5a:76:c0:7a:7d:ea:78:5e: ba:bc:28:85:8f:28:b8:b3:78:06:a5:1a:50:22:5e:1c:37:a4: 5f:fa:54:9a:61:35:de:21:74:eb:72:7e:2b:49:89:97:6e:ec: 67:c8:0e:72:8e:fc:64:48:b9:00:f9:9d:8a:c0:9a:eb:76:c5: 62:bc:80:67:a6:2a:c2:86:c8:3d:a7:aa:83:01:48:c1:48:ac: 62:41:1a:bc:2a:b6:99:6f:2f:73:6b:39:50:5e:47:37:c8:fe: ca:99:9b:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNg1AfIYk6LCxIy83WMwFylTQBDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNTEyMDcwMTA3MjJaFw0yNTEyMTAxMjA0MjJaMDMxMTAvBgNV BAMTKDExN0U5ODYyOEQ3RDIzRTU3RkY4RDA4NDMyNDI1MjdFNDdCMTdFQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttSUWRQTfum0Zp56y7omOXaOf YD6xJn1VBTNiniZBoVMuYY5SZt6TpN1GAldCq3Iq3vDLu3QoEGhCytUffpsD/q6R eS5HgODxOJoRnWqtK+GaxSo3fqSObooeIoqWn93Yx7B1SDWYSxJEoIFfoGmOMMHb HtvsuFbwX6lj+hMmkaVL0hKh5NfyL0I5MG9sLZyaa9/s0W4JG5CioBd51NEHXsOe XkDIt8aWD8OLXFewm7/gePGketeWC+G64QAp54dDl6Baitd2grhu4+bWMGtIBEP9 zHXKA27841cjuseMXWrf9XIAHycSu0EPxFxBQVP8gC+6JOyRAhwJD80JfkEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEX6YYo19I+V/+NCEMkJSfkexfs8wHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOk1AVwMaLXp3wF6W+aohjokyafJpawdtBo Z/MU5Bw5FSW7FkycyyuLoGkKqvsW1mZY30FhPoNaX0EIfxSYNcBU++DHI86EUF/V cl0NctxsDyyhxJEyXCVE+GvdsrGf2nKwmzQCbiGBdz3NiGWvIwgWu6XBI0vIIqW8 jshabJiPJ/W1onfDHtYVQM9XlgasamD5uiCucuJY6aladsB6fep4Xrq8KIWPKLiz eAalGlAiXhw3pF/6VJphNd4hdOtyfitJiZdu7GfIDnKO/GRIuQD5nYrAmut2xWK8 gGemKsKGyD2nqoMBSMFIrGJBGrwqtplvL3NrOVBeRzfI/sqZm18= -----END CERTIFICATE-----Generated at Sun Dec 7 18:54:51 2025 by rpki-client