This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: SjfU31z6tlV+Q1YdD7hlUKSjJF6/85SiH54ghCaV5rk= Subject key identifier: 4B:C7:A6:39:C7:79:88:BC:C3:1D:25:32:55:ED:34:A5:B3:7B:CB:18 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 2C3E89A88126804B98654F9F4A852ABCC29BA1BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0263 Signing time: Tue 02 Dec 2025 06:21:53 +0000 Manifest this update: Tue 02 Dec 2025 06:16:53 +0000 Manifest next update: Fri 05 Dec 2025 08:30:53 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 3: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: RtA6PZU82ezacIVuiEdIHojwXMXWtW/yPp/PLL5R0wI=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3e:89:a8:81:26:80:4b:98:65:4f:9f:4a:85:2a:bc:c2:9b:a1:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Dec 2 06:16:53 2025 GMT Not After : Dec 5 08:30:53 2025 GMT Subject: CN=4BC7A639C77988BCC31D253255ED34A5B37BCB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c3:b0:97:ee:6f:eb:12:de:2f:66:c3:a7:12: 44:41:dd:1f:3c:fa:3e:9f:12:97:be:6c:2c:7f:57: 10:6c:4e:bb:ff:70:55:e9:0f:78:d1:df:15:4f:6c: b0:7b:a7:54:ad:e5:fe:84:32:2f:fb:14:94:69:60: 13:1f:f6:37:03:a0:22:34:ca:32:23:54:49:59:e2: b5:5a:c5:64:43:74:45:d0:db:6d:89:e0:2e:03:76: df:f1:b4:e7:9b:a0:dc:54:d5:f1:ff:b9:04:72:dc: 6b:af:92:60:87:2d:39:df:e8:a4:9f:72:b5:dc:95: 64:89:64:9d:83:25:cf:17:5b:cc:71:9c:e6:0c:63: 62:6a:05:15:b9:1c:e1:d7:ac:3d:a6:83:70:a7:2a: e7:de:18:53:03:fe:1a:07:c0:e5:5b:e6:ed:02:c1: 98:0b:4b:d0:19:3c:41:92:f4:74:0b:8b:a1:90:8b: 76:84:98:29:1d:9b:d5:6e:da:3e:68:18:32:f3:4b: 9c:16:92:a7:8f:b0:3f:d6:d6:41:f5:26:a3:c1:0d: 4d:dc:5c:de:cb:ff:d6:84:ec:ec:27:90:e8:cf:23: 17:9b:80:bc:e8:ca:a9:ee:7a:b7:a0:ee:30:85:1a: bc:75:13:70:ba:aa:08:53:2c:d8:04:f0:e1:53:ea: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C7:A6:39:C7:79:88:BC:C3:1D:25:32:55:ED:34:A5:B3:7B:CB:18 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:30:40:18:f2:53:ac:e2:e4:db:51:07:3d:15:e6:15:1c:0f: 37:2d:4a:f3:15:7e:00:8a:02:26:8a:3d:2d:10:b0:46:3e:77: 30:cb:48:4f:2d:76:da:85:be:26:11:23:8a:69:42:c8:05:ff: 5c:3a:c0:49:bf:f1:4d:43:3d:c3:0f:fd:9f:12:f1:df:91:82: 9f:fe:a5:d2:07:0b:f7:ce:86:d6:13:84:58:28:80:da:5a:4c: a2:4c:78:a5:a0:0f:a1:e1:5e:50:a9:4e:cb:8c:58:fa:c2:64: 7e:f8:d4:4e:f8:ce:03:cd:2c:1f:11:5d:ca:b8:ec:64:5f:92: 99:87:6a:03:fe:97:19:95:82:d0:7d:4b:b8:28:f0:e0:e6:53: 3d:98:bc:37:cc:2e:6d:1f:e5:2e:28:44:49:65:8b:93:a2:e3: d9:7b:a4:e1:e6:cf:6b:2e:33:5a:7d:ab:f0:31:a2:eb:2b:d9: db:3d:09:2f:eb:54:c4:66:0d:a2:57:24:1c:23:c5:b4:b2:0e: 0c:0e:0c:7a:e5:63:1d:c5:07:1d:3b:38:b2:36:78:4d:a2:df: 59:13:05:09:78:ca:9c:a4:01:e6:2d:89:8b:b7:c3:ed:89:17: 5b:a3:de:45:58:13:37:7d:e1:84:db:22:6d:b6:7d:81:9b:28: 7a:0f:3b:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULD6JqIEmgEuYZU+fSoUqvMKbobowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTEyMDIwNjE2NTNaFw0yNTEyMDUwODMwNTNaMDMxMTAvBgNV BAMTKDRCQzdBNjM5Qzc3OTg4QkNDMzFEMjUzMjU1RUQzNEE1QjM3QkNCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGw7CX7m/rEt4vZsOnEkRB3R88 +j6fEpe+bCx/VxBsTrv/cFXpD3jR3xVPbLB7p1St5f6EMi/7FJRpYBMf9jcDoCI0 yjIjVElZ4rVaxWRDdEXQ222J4C4Ddt/xtOeboNxU1fH/uQRy3GuvkmCHLTnf6KSf crXclWSJZJ2DJc8XW8xxnOYMY2JqBRW5HOHXrD2mg3CnKufeGFMD/hoHwOVb5u0C wZgLS9AZPEGS9HQLi6GQi3aEmCkdm9Vu2j5oGDLzS5wWkqePsD/W1kH1JqPBDU3c XN7L/9aE7OwnkOjPIxebgLzoyqnuereg7jCFGrx1E3C6qghTLNgE8OFT6i8bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS8emOcd5iLzDHSUyVe00pbN7yxgwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0wQBjyU6zi5NtRBz0V5hUcDzctSvMVfgCK AiaKPS0QsEY+dzDLSE8tdtqFviYRI4ppQsgF/1w6wEm/8U1DPcMP/Z8S8d+Rgp/+ pdIHC/fOhtYThFgogNpaTKJMeKWgD6HhXlCpTsuMWPrCZH741E74zgPNLB8RXcq4 7GRfkpmHagP+lxmVgtB9S7go8ODmUz2YvDfMLm0f5S4oRElli5Oi49l7pOHmz2su M1p9q/Axousr2ds9CS/rVMRmDaJXJBwjxbSyDgwODHrlYx3FBx07OLI2eE2i31kT BQl4ypykAeYtiYu3w+2JF1uj3kVYEzd94YTbIm22fYGbKHoPO6M= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:19 2025 by rpki-client