This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: Zud4zMQGNDNWYdbRUCjWGFsQZJnsjt3UAnIPmX6rXyQ= Subject key identifier: BE:5F:D2:28:99:AB:2C:28:42:52:6F:8F:2E:BD:90:BA:8D:B4:62:01 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 06F3EC3340DB73650B4026DD4AC153A16D982400 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 96 Signing time: Tue 02 Dec 2025 10:42:21 +0000 Manifest this update: Tue 02 Dec 2025 10:37:21 +0000 Manifest next update: Fri 05 Dec 2025 18:07:21 +0000 Files and hashes: 1: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: YVg/Q2XjeWf9Usx6GMOwDY5seP9oBtkHY18v015iF0w=) 2: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: ERIuVwLQ9z+fqdl2+TYtXyXghfTrKtxoiSA29lPcvDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:07:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:ec:33:40:db:73:65:0b:40:26:dd:4a:c1:53:a1:6d:98:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Dec 2 10:37:21 2025 GMT Not After : Dec 5 18:07:21 2025 GMT Subject: CN=BE5FD22899AB2C2842526F8F2EBD90BA8DB46201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:fe:87:e8:4d:7e:fa:92:56:f8:74:1a:21: 5d:ef:f2:16:6e:86:66:5e:55:3c:a7:14:4d:84:2c: da:51:86:c7:c9:e5:3d:e5:00:ad:bc:5a:45:10:e0: fa:ff:c8:22:17:ed:ca:f4:92:ac:ef:86:65:2d:1a: d1:69:06:32:32:35:ab:69:4e:3b:dd:cb:b0:cf:fb: a1:ac:81:7d:a7:42:dd:0b:0a:97:e3:40:64:83:09: 4a:29:e1:be:5e:99:f5:5f:08:68:94:b5:34:51:ad: 1f:19:dd:ee:e5:61:49:39:a4:ec:d4:78:bf:37:f3: d9:b0:96:59:b4:cd:92:38:b1:1a:d8:0e:b7:b2:07: e8:c7:7e:46:69:66:7a:c9:72:94:4b:d9:d9:9f:b2: a3:3d:60:dc:18:8a:85:c2:8b:dc:fc:e7:13:47:f2: 1b:13:b4:7a:8f:74:1b:ef:87:c8:5e:b9:d8:e1:bc: 31:c9:84:e2:f3:31:1a:3f:6e:5d:b5:23:56:59:29: 9d:1f:fd:ed:c5:f8:17:dd:37:e6:5b:5a:a9:d8:0c: 7a:c3:f0:12:e5:fa:bf:dd:bb:a2:3d:76:16:33:f9: ad:d4:49:43:ab:ab:d8:7d:9b:71:ba:bd:14:8b:10: ee:67:f8:04:e3:ce:4b:28:a7:f6:1e:75:59:ae:94: a2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:D2:28:99:AB:2C:28:42:52:6F:8F:2E:BD:90:BA:8D:B4:62:01 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:33:c9:ce:b4:45:a8:f2:08:a6:b2:4d:5c:03:28:c5:38:a9: 1d:05:4c:ba:4d:1b:e2:16:83:aa:d3:01:ad:87:c3:cf:b0:fa: 23:9e:f2:76:e5:2d:0b:6d:77:3c:99:00:4a:d3:46:aa:15:9e: 38:e4:47:b4:f1:35:a9:aa:18:31:b4:d5:86:76:64:cd:d4:fd: 04:79:59:06:93:e7:cc:b3:5d:d1:c4:28:e6:d6:75:a3:2e:ab: 82:7e:c4:99:2c:35:dc:50:02:eb:bc:4d:d5:70:26:d8:95:95: 77:55:30:a8:70:af:89:da:95:23:04:54:13:06:c1:36:01:66: 99:86:31:40:54:4e:f4:ac:7f:4c:60:a0:26:72:c1:87:63:21: 4c:35:47:92:a1:ea:19:f5:22:a3:cb:23:d3:d9:29:4a:65:14: 79:d4:38:05:68:6c:aa:b4:7b:c4:e3:50:4c:79:00:17:a1:51: d0:57:af:98:10:18:73:6f:20:cc:46:37:3c:77:96:39:fc:b6: 41:f8:d6:59:4a:f2:27:2d:89:38:e7:7a:9d:76:ec:7c:4f:e0: 90:d1:b6:d8:5f:89:04:61:c8:40:eb:be:b9:fd:25:6c:45:ca: 83:b5:6a:1e:6b:8a:4e:35:8f:44:4e:89:33:e7:7c:9f:3e:22: 8f:60:f7:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvPsM0Dbc2ULQCbdSsFToW2YJAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTEyMDIxMDM3MjFaFw0yNTEyMDUxODA3MjFaMDMxMTAvBgNV BAMTKEJFNUZEMjI4OTlBQjJDMjg0MjUyNkY4RjJFQkQ5MEJBOERCNDYyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Rv6H6E1++pJW+HQaIV3v8hZu hmZeVTynFE2ELNpRhsfJ5T3lAK28WkUQ4Pr/yCIX7cr0kqzvhmUtGtFpBjIyNatp Tjvdy7DP+6GsgX2nQt0LCpfjQGSDCUop4b5emfVfCGiUtTRRrR8Z3e7lYUk5pOzU eL8389mwllm0zZI4sRrYDreyB+jHfkZpZnrJcpRL2dmfsqM9YNwYioXCi9z85xNH 8hsTtHqPdBvvh8heudjhvDHJhOLzMRo/bl21I1ZZKZ0f/e3F+BfdN+ZbWqnYDHrD 8BLl+r/du6I9dhYz+a3USUOrq9h9m3G6vRSLEO5n+ATjzksop/YedVmulKK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvl/SKJmrLChCUm+PLr2Quo20YgEwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIzyc60RajyCKayTVwDKMU4qR0FTLpNG+IW g6rTAa2Hw8+w+iOe8nblLQttdzyZAErTRqoVnjjkR7TxNamqGDG01YZ2ZM3U/QR5 WQaT58yzXdHEKObWdaMuq4J+xJksNdxQAuu8TdVwJtiVlXdVMKhwr4nalSMEVBMG wTYBZpmGMUBUTvSsf0xgoCZywYdjIUw1R5Kh6hn1IqPLI9PZKUplFHnUOAVobKq0 e8TjUEx5ABehUdBXr5gQGHNvIMxGNzx3ljn8tkH41llK8ictiTjnep127HxP4JDR tthfiQRhyEDrvrn9JWxFyoO1ah5rik41j0ROiTPnfJ8+Io9g9yA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:35 2025 by rpki-client