This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: v4S9JH+c4e2eq27ciOwQhVjDmJGpUuufQnA219I7Y30= Subject key identifier: FA:CB:EA:5B:47:81:CD:E1:05:7B:90:88:4F:7F:6B:55:A4:EA:76:C9 Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 0819E08D5157547D416D3897826FACC5C23D243A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 022A Signing time: Wed 03 Dec 2025 04:11:26 +0000 Manifest this update: Wed 03 Dec 2025 04:06:26 +0000 Manifest next update: Sat 06 Dec 2025 09:01:26 +0000 Files and hashes: 1: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: SQEisBhY0DV53zHr/sBQtcOCDd0Bbr0+fAzbajSxd3s=) 2: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: O62FaU7sfJ7WBpQAG4VOlHgoxy59qAGq0CxPAvacDkY=) 3: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: gA+79cWcbs4apGlthkfYWO05EFEZPi7ImFZlxbfouIc=) 4: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:19:e0:8d:51:57:54:7d:41:6d:38:97:82:6f:ac:c5:c2:3d:24:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Dec 3 04:06:26 2025 GMT Not After : Dec 6 09:01:26 2025 GMT Subject: CN=FACBEA5B4781CDE1057B90884F7F6B55A4EA76C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7a:f8:06:bf:6f:31:e5:f9:6a:78:e4:f9:00: 2b:74:c6:03:e5:fd:71:86:73:6c:fb:95:3b:c0:1b: 3a:cb:19:3c:4d:1f:e2:c9:25:d5:d3:b7:e0:dc:63: 90:2a:8f:43:80:dc:2c:83:20:4c:9d:57:f4:05:46: 1c:ba:ca:76:09:8c:38:f7:a0:22:ca:e9:ec:6a:3a: 5b:26:78:5d:ad:08:d1:0a:81:e0:fd:92:18:99:06: ad:d3:2d:5d:7d:31:b9:73:81:c6:7b:03:5f:be:a7: 1f:37:00:39:ad:a9:1b:61:a2:fd:80:40:9a:ac:7f: 87:48:0a:4c:50:44:9b:3f:3f:ee:04:fd:91:73:d3: c3:90:9a:91:59:ee:cc:9c:48:64:fc:20:62:53:16: 83:ba:74:e4:fb:ff:4b:c3:ad:32:e6:df:e8:3e:f2: ae:9e:84:55:a9:a7:05:fb:87:a3:b0:a4:35:28:da: a9:16:1d:d5:79:0d:ef:36:6c:ae:b0:ac:e9:8c:49: 8d:65:a3:b4:9b:1d:bf:f3:cb:92:de:76:1c:de:b8: 9e:0f:e3:74:00:64:e0:0e:22:1c:8a:e5:d6:5b:b1: 8c:96:57:85:48:d3:61:09:86:49:ba:ec:77:b0:d5: c4:ce:3c:ea:eb:20:7a:60:01:6e:01:bb:b4:6c:81: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CB:EA:5B:47:81:CD:E1:05:7B:90:88:4F:7F:6B:55:A4:EA:76:C9 X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:9d:28:c9:e6:e3:7b:22:23:19:3d:63:d1:4c:17:92:76: 1e:23:17:37:23:00:cd:7b:e1:70:6f:f4:3d:28:55:88:60:df: cb:1e:70:7d:c1:be:c6:66:5e:d7:17:12:04:2d:34:83:47:45: 45:a0:a1:dc:35:e0:74:2d:39:1d:88:93:8f:7c:bc:a0:e0:f8: a5:95:93:50:d6:f7:71:a6:cd:23:b6:42:bd:1f:12:15:28:1e: 09:0c:56:d8:16:19:b4:d3:ad:f1:ad:62:39:e0:eb:60:d0:6f: e8:1c:bb:bf:c8:3d:8b:f4:7c:6a:35:f3:45:d2:01:14:27:98: 17:b8:8e:79:52:05:d1:92:8b:53:24:ea:1e:77:bc:fd:56:d5: 38:cc:fc:8f:af:7a:1d:33:d8:7e:6b:f0:24:87:44:26:16:82: f3:ba:ac:16:75:45:70:4d:ee:3a:21:d8:fe:d5:15:c7:93:77: 8a:c2:c7:86:a1:cd:27:c1:66:dc:5d:5d:47:bb:22:e3:b5:30: eb:c0:fd:20:78:5c:1f:71:40:f9:ae:56:c7:14:dc:17:2d:80: 6f:07:f1:9c:a3:bf:2a:8c:e3:6f:3a:81:f5:7f:35:ef:86:e2: b4:75:ca:65:65:13:e1:77:43:84:6c:3d:d7:1f:df:82:a0:43: 49:07:23:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCBngjVFXVH1BbTiXgm+sxcI9JDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTEyMDMwNDA2MjZaFw0yNTEyMDYwOTAxMjZaMDMxMTAvBgNV BAMTKEZBQ0JFQTVCNDc4MUNERTEwNTdCOTA4ODRGN0Y2QjU1QTRFQTc2QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoevgGv28x5flqeOT5ACt0xgPl /XGGc2z7lTvAGzrLGTxNH+LJJdXTt+DcY5Aqj0OA3CyDIEydV/QFRhy6ynYJjDj3 oCLK6exqOlsmeF2tCNEKgeD9khiZBq3TLV19MblzgcZ7A1++px83ADmtqRthov2A QJqsf4dICkxQRJs/P+4E/ZFz08OQmpFZ7sycSGT8IGJTFoO6dOT7/0vDrTLm3+g+ 8q6ehFWppwX7h6OwpDUo2qkWHdV5De82bK6wrOmMSY1lo7SbHb/zy5LedhzeuJ4P 43QAZOAOIhyK5dZbsYyWV4VI02EJhkm67Hew1cTOPOrrIHpgAW4Bu7RsgSoPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+svqW0eBzeEFe5CIT39rVaTqdskwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA56nSjJ5uN7IiMZPWPRTBeSdh4jFzcjAM17 4XBv9D0oVYhg38secH3BvsZmXtcXEgQtNINHRUWgodw14HQtOR2Ik498vKDg+KWV k1DW93GmzSO2Qr0fEhUoHgkMVtgWGbTTrfGtYjng62DQb+gcu7/IPYv0fGo180XS ARQnmBe4jnlSBdGSi1Mk6h53vP1W1TjM/I+veh0z2H5r8CSHRCYWgvO6rBZ1RXBN 7joh2P7VFceTd4rCx4ahzSfBZtxdXUe7IuO1MOvA/SB4XB9xQPmuVscU3BctgG8H 8ZyjvyqM4286gfV/Ne+G4rR1ymVlE+F3Q4RsPdcf34KgQ0kHI6g= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:32 2025 by rpki-client