This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: LjeV1NIrv0koKbCR2vLH/SjeLQKWaEnEofsQX5FTQ40= Subject key identifier: 3E:CC:CB:F2:0E:37:0E:04:E0:D1:7E:43:C7:2E:65:8B:04:40:A4:91 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 46F699B02F7492CBDD1C3B9EC94A6899E012AB7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: A8 Signing time: Sat 13 Dec 2025 08:51:49 +0000 Manifest this update: Sat 13 Dec 2025 08:46:49 +0000 Manifest next update: Tue 16 Dec 2025 09:14:49 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: X2iCyYEOj1tnqdylNxRQLnaEfD9UkyfzioYJxQifR08=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f6:99:b0:2f:74:92:cb:dd:1c:3b:9e:c9:4a:68:99:e0:12:ab:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Dec 13 08:46:49 2025 GMT Not After : Dec 16 09:14:49 2025 GMT Subject: CN=3ECCCBF20E370E04E0D17E43C72E658B0440A491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2a:f7:42:d8:ea:f8:a2:e2:a5:da:ab:3d:df: 01:c7:c6:28:e0:51:ca:c0:a4:e9:cb:e6:2f:ac:8a: 0b:62:60:8d:06:95:c6:5b:e3:8d:0d:4d:d9:53:98: c4:fc:f0:fd:9f:1e:cd:ed:da:ec:82:67:5f:0c:c3: 33:bf:29:aa:46:33:cf:1b:45:2f:38:e5:52:34:a6: 3e:fc:20:81:4c:41:d7:21:e9:bb:29:43:9d:0a:7b: 30:58:8e:e2:62:27:91:01:36:2b:7a:1d:9b:69:86: b3:2c:9a:1e:cb:d7:c6:be:98:de:e8:30:74:c9:b9: 6a:54:d2:dc:8c:10:02:7c:e9:a3:39:06:40:48:e9: 20:4a:ed:7b:72:91:ff:a0:b1:c2:7e:9f:5f:f4:47: 2c:6a:4e:d0:28:77:bb:35:7f:62:f2:eb:2c:81:64: 8d:26:ff:71:87:eb:84:f6:4e:56:b1:e2:82:42:c3: cc:c1:dd:a6:e9:e8:60:e2:f7:95:08:3f:6b:70:3e: df:67:ea:44:f3:a1:f2:ee:11:71:8b:02:94:10:71: 9b:dc:c3:eb:41:e0:77:35:77:ba:fd:33:c6:be:5c: 2d:f6:cb:65:93:73:49:40:0a:87:1f:77:d1:2a:be: 6f:92:75:e8:77:b3:b1:9f:3d:e7:99:40:61:4a:84: d2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CC:CB:F2:0E:37:0E:04:E0:D1:7E:43:C7:2E:65:8B:04:40:A4:91 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:a9:de:1f:0b:0b:66:df:6d:aa:3e:18:88:9d:18:61:87:29: 96:80:3c:88:f0:61:48:89:f0:05:c5:d3:4b:71:46:2c:19:d2: 1b:4a:80:b2:b2:0f:38:e4:7d:5a:3d:f9:8b:a5:68:4d:b0:bc: d3:55:c8:b1:a4:8e:70:ac:29:80:01:17:f3:85:a3:55:4a:32: 6f:34:30:e4:21:be:9a:55:60:b6:03:20:bd:69:3d:73:a7:d7: 4c:78:6b:02:1d:91:be:9b:c4:64:cb:d7:b9:e2:0b:3d:44:50: a5:e9:9a:75:f2:d6:4d:22:90:14:b0:72:69:95:18:36:da:78: 5f:b8:38:91:66:17:af:46:02:26:ae:65:0c:5b:00:7f:89:bb: ba:46:26:65:8b:02:39:67:3c:37:e2:91:94:5c:cb:1d:d8:5b: 89:84:bc:f9:cf:d6:aa:a6:e1:2f:20:d8:4b:a7:c1:f4:4a:9f: ca:1b:5b:6c:34:59:99:fe:fe:61:d5:b2:72:16:d6:00:6f:ef: 4f:d6:82:ed:a8:7a:16:6e:32:cc:ea:8d:e7:12:c2:65:2c:8a: 1e:49:72:c9:95:26:cf:fa:a1:43:19:0a:89:3a:4c:0b:78:0a: 13:2f:a8:00:2a:10:38:f1:49:de:c5:6f:dc:1a:fe:41:f3:ff: bc:01:9a:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvaZsC90ksvdHDueyUpomeASq30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTEyMTMwODQ2NDlaFw0yNTEyMTYwOTE0NDlaMDMxMTAvBgNV BAMTKDNFQ0NDQkYyMEUzNzBFMDRFMEQxN0U0M0M3MkU2NThCMDQ0MEE0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKvdC2Or4ouKl2qs93wHHxijg UcrApOnL5i+sigtiYI0GlcZb440NTdlTmMT88P2fHs3t2uyCZ18MwzO/KapGM88b RS845VI0pj78IIFMQdch6bspQ50KezBYjuJiJ5EBNit6HZtphrMsmh7L18a+mN7o MHTJuWpU0tyMEAJ86aM5BkBI6SBK7Xtykf+gscJ+n1/0RyxqTtAod7s1f2Ly6yyB ZI0m/3GH64T2Tlax4oJCw8zB3abp6GDi95UIP2twPt9n6kTzofLuEXGLApQQcZvc w+tB4Hc1d7r9M8a+XC32y2WTc0lACocfd9Eqvm+Sdeh3s7GfPeeZQGFKhNKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPszL8g43DgTg0X5Dxy5liwRApJEwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMip3h8LC2bfbao+GIidGGGHKZaAPIjwYUiJ 8AXF00txRiwZ0htKgLKyDzjkfVo9+YulaE2wvNNVyLGkjnCsKYABF/OFo1VKMm80 MOQhvppVYLYDIL1pPXOn10x4awIdkb6bxGTL17niCz1EUKXpmnXy1k0ikBSwcmmV GDbaeF+4OJFmF69GAiauZQxbAH+Ju7pGJmWLAjlnPDfikZRcyx3YW4mEvPnP1qqm 4S8g2EunwfRKn8obW2w0WZn+/mHVsnIW1gBv70/Wgu2oehZuMszqjecSwmUsih5J csmVJs/6oUMZCok6TAt4ChMvqAAqEDjxSd7Fb9wa/kHz/7wBmg4= -----END CERTIFICATE-----Generated at Sun Dec 14 18:58:37 2025 by rpki-client