This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: cdM2MCWyadycG2ML6GZcv3BOl6QITQg0+nlnVwIJ9I8= Subject key identifier: B7:E8:4E:72:FD:DE:56:2E:28:33:F6:D7:B7:C6:D3:D8:EC:BD:A2:6C Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 155F249089BAD3425363718AECFF9A8F1C74444F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01D1 Signing time: Mon 01 Dec 2025 20:32:27 +0000 Manifest this update: Mon 01 Dec 2025 20:27:27 +0000 Manifest next update: Thu 04 Dec 2025 23:52:27 +0000 Files and hashes: 1: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 2: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: 2JlB7XN0D6rx7LGzea8gpwOORlm5ghdK6Na31afg/zk=) 3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5f:24:90:89:ba:d3:42:53:63:71:8a:ec:ff:9a:8f:1c:74:44:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Dec 1 20:27:27 2025 GMT Not After : Dec 4 23:52:27 2025 GMT Subject: CN=B7E84E72FDDE562E2833F6D7B7C6D3D8ECBDA26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fe:9f:30:e1:2e:50:5a:e1:0f:20:a1:68:97: 82:75:8c:00:27:10:5a:ed:b1:fe:0b:5b:d1:7f:29: 96:2a:fd:42:dc:3e:2b:1b:43:4c:6d:3e:ca:e8:21: 3c:45:b4:d3:8b:40:66:cf:3b:c0:dc:4e:d0:79:9e: 7a:35:29:d1:f9:8b:90:da:53:90:46:07:a6:84:f6: 91:e9:96:25:c9:e5:bb:4b:09:06:ca:23:9f:41:04: 16:ed:f3:fa:30:1b:a2:7b:6a:80:0b:d6:ae:9e:57: e3:dc:9d:df:dc:c3:33:75:a8:47:90:de:c4:ae:21: e5:38:f1:9a:df:63:68:72:97:20:e4:c8:3d:15:0f: f8:e7:e4:76:f3:a8:e7:b0:93:05:ae:25:e5:f3:9a: b7:2e:8b:bf:b8:db:e9:0f:6a:86:b4:81:1f:22:30: b9:97:de:29:7e:18:2b:0f:a6:5b:1b:71:1a:33:30: f5:d7:eb:ef:77:a4:30:29:7b:bc:27:3f:6e:1b:b9: f4:f1:2a:d7:59:0f:3f:70:f0:33:3f:d0:4c:24:e0: 00:59:cf:76:95:23:7b:f7:53:3a:81:7f:02:ed:24: c1:bd:b1:17:b0:27:46:4d:71:e4:87:11:dd:80:aa: aa:64:88:38:eb:cf:a4:78:09:fb:61:a5:0a:9d:30: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E8:4E:72:FD:DE:56:2E:28:33:F6:D7:B7:C6:D3:D8:EC:BD:A2:6C X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9c:29:6f:1c:3f:02:9c:9b:2d:90:06:95:28:c1:8f:9c:fa: 1c:8f:a8:84:2a:f3:87:d3:73:ea:79:30:b2:90:e7:71:35:3c: 0b:f0:32:d0:f0:a4:ea:a2:d1:99:4c:8b:ed:89:dc:a5:75:3f: 49:e6:9c:d3:63:b8:6b:77:95:cc:31:1c:14:0e:71:88:43:1b: 20:02:e1:42:e5:bf:7e:f8:ff:51:a8:11:e0:ee:93:e5:ca:3d: 67:38:36:f9:f1:f3:67:65:7d:f5:aa:57:b0:f6:6e:6f:99:c5: ed:2d:ba:4d:a3:69:17:73:ae:58:cd:a7:9e:08:68:b1:cb:c7: b5:fe:81:3f:3e:09:b6:39:22:08:96:db:0a:32:e4:19:ad:48: 00:96:b1:ff:c9:05:d8:09:af:fb:96:75:ec:df:89:fe:9d:48: f6:d5:20:ed:e2:0c:88:c1:9e:4c:fd:7c:7f:75:72:3e:46:e8: 85:6d:a7:93:30:1a:d5:d9:33:9a:25:6a:73:44:32:f4:b0:12: be:7e:26:dd:b0:d8:1e:0a:56:5f:0d:97:2e:68:0e:99:43:ad: 80:68:55:42:3f:5a:20:da:d4:ea:17:ba:6e:44:da:a2:a9:22: 26:69:e5:d0:64:52:4b:72:b5:0a:99:e2:0e:ac:46:14:26:70: 10:0d:0e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFV8kkIm600JTY3GK7P+ajxx0RE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTEyMDEyMDI3MjdaFw0yNTEyMDQyMzUyMjdaMDMxMTAvBgNV BAMTKEI3RTg0RTcyRkRERTU2MkUyODMzRjZEN0I3QzZEM0Q4RUNCREEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/p8w4S5QWuEPIKFol4J1jAAn EFrtsf4LW9F/KZYq/ULcPisbQ0xtPsroITxFtNOLQGbPO8DcTtB5nno1KdH5i5Da U5BGB6aE9pHpliXJ5btLCQbKI59BBBbt8/owG6J7aoAL1q6eV+Pcnd/cwzN1qEeQ 3sSuIeU48ZrfY2hylyDkyD0VD/jn5HbzqOewkwWuJeXzmrcui7+42+kPaoa0gR8i MLmX3il+GCsPplsbcRozMPXX6+93pDApe7wnP24bufTxKtdZDz9w8DM/0Ewk4ABZ z3aVI3v3UzqBfwLtJMG9sRewJ0ZNceSHEd2AqqpkiDjrz6R4CfthpQqdMLXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt+hOcv3eVi4oM/bXt8bT2Oy9omwwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAicKW8cPwKcmy2QBpUowY+c+hyPqIQq84fT c+p5MLKQ53E1PAvwMtDwpOqi0ZlMi+2J3KV1P0nmnNNjuGt3lcwxHBQOcYhDGyAC 4ULlv374/1GoEeDuk+XKPWc4Nvnx82dlffWqV7D2bm+Zxe0tuk2jaRdzrljNp54I aLHLx7X+gT8+CbY5IgiW2woy5BmtSACWsf/JBdgJr/uWdezfif6dSPbVIO3iDIjB nkz9fH91cj5G6IVtp5MwGtXZM5olanNEMvSwEr5+Jt2w2B4KVl8Nly5oDplDrYBo VUI/WiDa1OoXum5E2qKpIiZp5dBkUktytQqZ4g6sRhQmcBANDpw= -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:07 2025 by rpki-client