This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: 33Dpmet0zKnVvw/vKo1CWjDmIX4V2rHbTGyNOBxY6Sc= Subject key identifier: 75:8B:F0:7D:E8:D9:CD:EB:E4:B2:A0:BF:F1:6B:59:1C:99:CD:6F:60 Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 2E19B9033DA5A4E9270FEC3AC63D7B0E135B885A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01D8 Signing time: Wed 17 Dec 2025 11:22:26 +0000 Manifest this update: Wed 17 Dec 2025 11:17:26 +0000 Manifest next update: Sat 20 Dec 2025 13:31:26 +0000 Files and hashes: 1: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: reH2Hif3Jk/+PCBRs0Djl77MdK6HBoqscsjJBDwgw3c=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:19:b9:03:3d:a5:a4:e9:27:0f:ec:3a:c6:3d:7b:0e:13:5b:88:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Dec 17 11:17:26 2025 GMT Not After : Dec 20 13:31:26 2025 GMT Subject: CN=758BF07DE8D9CDEBE4B2A0BFF16B591C99CD6F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b7:be:cc:ea:8a:38:98:c9:6d:71:e6:29:0b: af:fd:d8:a4:d0:8f:c0:0f:0b:4d:90:33:bb:16:1e: 89:8f:7f:4c:dd:20:37:99:ad:e6:f0:4c:0b:2f:e2: d9:20:d4:b6:32:3e:72:f5:38:29:11:53:14:fd:b5: 16:b3:b3:aa:3f:45:ee:78:c0:92:bd:f8:5a:a0:5e: 6b:05:e3:c7:c7:81:d6:73:40:dc:f2:e3:dd:a8:ca: f8:2a:33:70:fd:ab:de:7e:db:7e:4c:83:d9:e4:eb: 8b:a8:e3:51:54:38:2f:6c:9a:36:3e:77:bf:f1:0e: e4:b3:a4:c8:b8:d3:ab:fc:18:a6:f5:2b:de:f0:3a: 5f:8b:cb:10:21:0f:e0:55:51:82:2f:96:a4:0f:0a: e1:a1:f0:08:84:4e:0f:7e:d6:b4:94:81:b6:8e:f6: 1f:ec:2c:fc:34:6e:8c:20:60:cb:35:85:32:3e:df: a0:5a:d2:d4:a9:e9:83:7b:5a:d1:93:16:d4:2f:74: ba:72:56:f2:85:6c:77:1e:58:ab:ce:e5:b7:af:b6: 49:d0:7d:bb:ee:77:dd:70:db:09:0e:90:ce:6d:1c: 48:cd:2d:ff:e8:28:95:76:a7:d2:47:df:ce:ca:ff: ad:5a:01:74:64:22:b2:cc:7a:2e:84:da:8a:07:d7: a0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8B:F0:7D:E8:D9:CD:EB:E4:B2:A0:BF:F1:6B:59:1C:99:CD:6F:60 X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8a:11:85:d1:c6:ab:b8:67:6a:d6:f3:e2:27:f3:d1:1f:af: 98:cf:93:70:43:f9:f6:8d:a7:8f:b2:0d:61:46:8a:43:f1:c1: b6:06:19:50:e0:aa:dc:5f:b2:78:f4:3b:13:75:60:65:77:11: ae:3e:1a:22:55:8b:5c:f5:bf:db:95:6d:7c:d7:7f:fb:66:b8: d4:80:85:10:e3:d6:9e:91:20:cd:bf:15:e4:2e:61:95:02:14: f2:ab:34:c4:6d:8e:b4:41:e3:9f:59:5b:05:4d:8b:70:1d:4c: 9c:99:6d:dc:32:34:e4:29:83:0d:b6:51:d2:e9:99:f0:cf:a2: 00:a5:dc:42:c3:9f:b6:eb:46:ff:01:41:d6:3d:10:23:fa:b9: c1:ab:19:9e:01:d0:34:75:78:36:c6:de:10:a6:ba:05:ed:8b: b6:46:b6:7b:21:95:e1:ad:c0:b0:fd:a2:02:a4:3f:b2:fb:c3: 5c:28:75:1a:50:71:ba:16:3b:64:e4:3c:e7:14:1b:b0:ab:26: 5e:73:16:60:f9:fb:84:d7:ac:11:40:2a:cc:8b:6a:ca:e3:26: 9e:ce:8b:c1:3c:13:ab:26:83:48:95:c6:43:20:dd:44:0a:36: ae:37:a7:82:31:05:94:c9:47:59:f4:b6:97:1e:d5:f4:e7:91: 6a:c2:b2:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhm5Az2lpOknD+w6xj17DhNbiFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTEyMTcxMTE3MjZaFw0yNTEyMjAxMzMxMjZaMDMxMTAvBgNV BAMTKDc1OEJGMDdERThEOUNERUJFNEIyQTBCRkYxNkI1OTFDOTlDRDZGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxt77M6oo4mMltceYpC6/92KTQ j8APC02QM7sWHomPf0zdIDeZrebwTAsv4tkg1LYyPnL1OCkRUxT9tRazs6o/Re54 wJK9+FqgXmsF48fHgdZzQNzy492oyvgqM3D9q95+235Mg9nk64uo41FUOC9smjY+ d7/xDuSzpMi406v8GKb1K97wOl+LyxAhD+BVUYIvlqQPCuGh8AiETg9+1rSUgbaO 9h/sLPw0bowgYMs1hTI+36Ba0tSp6YN7WtGTFtQvdLpyVvKFbHceWKvO5bevtknQ fbvud91w2wkOkM5tHEjNLf/oKJV2p9JH387K/61aAXRkIrLMei6E2ooH16APAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdYvwfejZzevksqC/8WtZHJnNb2AwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+KEYXRxqu4Z2rW8+In89Efr5jPk3BD+faN p4+yDWFGikPxwbYGGVDgqtxfsnj0OxN1YGV3Ea4+GiJVi1z1v9uVbXzXf/tmuNSA hRDj1p6RIM2/FeQuYZUCFPKrNMRtjrRB459ZWwVNi3AdTJyZbdwyNOQpgw22UdLp mfDPogCl3ELDn7brRv8BQdY9ECP6ucGrGZ4B0DR1eDbG3hCmugXti7ZGtnshleGt wLD9ogKkP7L7w1wodRpQcboWO2TkPOcUG7CrJl5zFmD5+4TXrBFAKsyLasrjJp7O i8E8E6smg0iVxkMg3UQKNq43p4IxBZTJR1n0tpce1fTnkWrCsiU= -----END CERTIFICATE-----Generated at Thu Dec 18 09:30:45 2025 by rpki-client