This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: rEUD3A56ipR7MCIBmshjUVcgtiuj1pWhKsn/PPnSzwE= Subject key identifier: 56:0F:D1:D1:29:D2:92:FA:34:14:D1:5C:D9:4C:4D:C6:A2:99:BB:7A Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 7F8BB3DD1C08DE6FFA354DF1FEB6BF9455ED76B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 0199 Signing time: Mon 01 Dec 2025 19:11:24 +0000 Manifest this update: Mon 01 Dec 2025 19:06:24 +0000 Manifest next update: Fri 05 Dec 2025 03:00:24 +0000 Files and hashes: 1: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=) 2: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: R1iBWVVDyn/EJftTgw2PiU4ZEWVH2ep7iInuAyRqngk=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8b:b3:dd:1c:08:de:6f:fa:35:4d:f1:fe:b6:bf:94:55:ed:76:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Dec 1 19:06:24 2025 GMT Not After : Dec 5 03:00:24 2025 GMT Subject: CN=560FD1D129D292FA3414D15CD94C4DC6A299BB7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:ee:2c:02:db:bb:ff:a8:11:14:d2:6e:9b: 2f:e3:a1:72:f8:c3:2b:8f:61:80:5c:b3:17:59:43: 3f:01:6f:77:32:e3:0c:41:4a:56:6b:a8:70:09:10: 16:1c:0c:50:09:e4:9c:dc:5e:8b:00:23:21:b6:79: 15:f8:69:fe:95:e9:d3:7b:fd:fb:32:79:88:5d:7f: 4c:08:18:74:c9:a9:89:dc:e1:8b:5c:52:e2:8c:e3: 22:55:76:54:35:d7:c9:c1:ef:49:ce:91:44:41:f7: d9:2a:07:ba:4a:99:e6:8c:90:b4:ff:9a:c6:ef:4f: e0:7a:8e:bf:f6:40:43:7f:39:e1:59:df:c8:26:74: 30:ac:ee:50:4c:39:60:72:9e:7b:80:25:02:17:d7: 80:ad:83:33:b4:b3:bd:64:29:77:61:79:01:b3:65: c2:fa:56:9d:0f:49:fd:4f:d4:01:04:b7:3d:e8:74: 5f:59:3f:33:a1:96:c2:75:70:d0:74:0a:43:aa:60: fd:ca:5a:dd:6e:37:55:e3:e3:a8:08:54:e4:e2:78: 0c:96:4d:29:8f:ad:75:18:ff:54:2d:62:fa:fb:e0: b5:a1:e8:85:c7:7d:63:0e:f0:e2:6b:0a:4f:4d:4c: 1a:2a:72:99:f6:25:7e:39:e8:75:aa:ca:98:cc:4c: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0F:D1:D1:29:D2:92:FA:34:14:D1:5C:D9:4C:4D:C6:A2:99:BB:7A X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a9:69:d0:bc:94:48:48:a5:9b:a8:c4:1b:db:a6:87:19:70: fc:41:8a:cb:2b:f4:8a:39:62:58:d0:61:16:14:1d:65:a3:af: 67:54:e4:3c:e0:8b:40:f8:cb:ee:37:64:1f:a7:2f:08:09:c6: 1b:f3:98:de:42:c4:97:34:43:b2:04:aa:18:ab:ea:1b:5d:31: c7:ff:15:a2:31:7f:17:96:38:ed:6e:0c:23:df:eb:04:43:9c: 2f:0e:f5:41:d5:3c:da:fd:91:9e:de:59:37:12:9a:43:17:e6: fd:3f:0b:53:a3:9a:99:62:26:6d:27:c9:7a:f8:ca:eb:73:03: de:51:88:e5:5a:08:00:0c:1f:17:0e:ee:59:c1:cc:7e:54:94: e2:d1:30:be:8c:18:87:0f:a9:06:b4:74:d2:a5:af:76:30:6d: ed:71:47:f4:c8:6e:b7:28:5a:b5:c2:8d:d2:60:e2:2a:6c:d0: 67:67:4b:e6:cf:fd:61:7e:d7:3d:83:40:a9:19:6c:80:b2:ea: 26:de:d3:d8:79:c8:98:d3:0c:2b:95:5c:9d:51:41:09:a8:3e: 0c:86:69:42:b2:42:f7:d2:2e:71:43:f6:66:dd:75:8f:1e:5c: c0:0c:9f:21:1a:d1:d1:ab:e1:2d:ef:de:99:0f:82:53:cc:91: 52:97:38:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf4uz3RwI3m/6NU3x/ra/lFXtdrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTEyMDExOTA2MjRaFw0yNTEyMDUwMzAwMjRaMDMxMTAvBgNV BAMTKDU2MEZEMUQxMjlEMjkyRkEzNDE0RDE1Q0Q5NEM0REM2QTI5OUJCN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0O4sAtu7/6gRFNJumy/joXL4 wyuPYYBcsxdZQz8Bb3cy4wxBSlZrqHAJEBYcDFAJ5JzcXosAIyG2eRX4af6V6dN7 /fsyeYhdf0wIGHTJqYnc4YtcUuKM4yJVdlQ118nB70nOkURB99kqB7pKmeaMkLT/ msbvT+B6jr/2QEN/OeFZ38gmdDCs7lBMOWBynnuAJQIX14CtgzO0s71kKXdheQGz ZcL6Vp0PSf1P1AEEtz3odF9ZPzOhlsJ1cNB0CkOqYP3KWt1uN1Xj46gIVOTieAyW TSmPrXUY/1QtYvr74LWh6IXHfWMO8OJrCk9NTBoqcpn2JX456HWqypjMTCW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVg/R0SnSkvo0FNFc2UxNxqKZu3owHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFupadC8lEhIpZuoxBvbpocZcPxBissr9Io5 YljQYRYUHWWjr2dU5Dzgi0D4y+43ZB+nLwgJxhvzmN5CxJc0Q7IEqhir6htdMcf/ FaIxfxeWOO1uDCPf6wRDnC8O9UHVPNr9kZ7eWTcSmkMX5v0/C1OjmpliJm0nyXr4 yutzA95RiOVaCAAMHxcO7lnBzH5UlOLRML6MGIcPqQa0dNKlr3Ywbe1xR/TIbrco WrXCjdJg4ips0GdnS+bP/WF+1z2DQKkZbICy6ibe09h5yJjTDCuVXJ1RQQmoPgyG aUKyQvfSLnFD9mbddY8eXMAMnyEa0dGr4S3v3pkPglPMkVKXODo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:09 2025 by rpki-client