This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: w8zS3F3zOHn0gLMe+5vVZglRVdEw0ScY7fzGK+Ce8I8= Subject key identifier: BD:AE:44:A8:6C:B4:B3:CF:CE:EB:81:72:E5:C6:5D:CA:B6:DC:52:DD Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 5A0ED3799DF12FABFDC550A1B56223B68C2FEDA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02E7 Signing time: Sun 14 Dec 2025 11:21:38 +0000 Manifest this update: Sun 14 Dec 2025 11:16:38 +0000 Manifest next update: Wed 17 Dec 2025 21:52:38 +0000 Files and hashes: 1: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 2: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=) 3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: wwrV/W8BUc5E3o8wvHHI+CWMIzb0ZzgtwWnu5Q7uDQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 21:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0e:d3:79:9d:f1:2f:ab:fd:c5:50:a1:b5:62:23:b6:8c:2f:ed:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Dec 14 11:16:38 2025 GMT Not After : Dec 17 21:52:38 2025 GMT Subject: CN=BDAE44A86CB4B3CFCEEB8172E5C65DCAB6DC52DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:31:e9:83:cf:50:35:b1:5c:36:e9:bc:0d:12: 6e:8e:86:75:03:33:34:3a:aa:3c:cd:83:e4:44:fa: d0:eb:e7:3f:41:a3:b8:84:63:9d:ea:8f:c2:6f:07: 7b:06:18:71:11:26:cb:e4:5e:b5:01:d3:fe:5d:ad: 7e:d8:f3:46:f3:7a:99:59:0a:5c:97:bf:55:e4:2c: 43:19:d5:41:2d:6c:87:32:2d:33:76:09:43:5b:d2: 05:4a:34:0b:b5:00:bf:49:87:a8:b2:e5:63:d5:29: bd:1d:5e:ef:f3:e0:a0:a3:9f:0f:92:55:be:d5:80: 18:ec:77:95:69:43:1e:09:d1:3a:5b:76:af:dd:3a: 9f:4a:3c:40:4c:df:97:09:79:c8:49:5b:43:6e:cc: fe:ee:d2:4c:35:22:5e:b0:50:60:f6:7d:c4:3f:e5: ff:4f:b9:f4:e5:80:71:b4:30:03:02:fc:4d:07:31: 85:b7:ff:db:07:7c:46:98:fe:d6:88:42:62:40:cb: 85:44:a2:e5:4f:49:2a:75:a3:e1:3f:7f:9a:ba:a2: 65:db:00:9a:27:f4:cb:8d:2b:a0:58:43:0d:f8:40: ab:9f:28:11:e4:55:92:26:dd:d7:dc:45:d9:d4:de: 65:f0:73:df:bd:20:e4:f6:a0:53:c7:a6:c1:6e:9b: 55:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:44:A8:6C:B4:B3:CF:CE:EB:81:72:E5:C6:5D:CA:B6:DC:52:DD X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:ec:5d:b1:88:ed:50:e5:c7:2b:59:b9:be:b0:3d:b6:f4: 15:c7:5e:29:74:6d:57:34:b4:d9:a9:4c:c9:68:75:de:03:b9: b4:94:82:3b:84:57:6f:6e:1a:11:50:e4:22:f6:b6:d5:e8:de: 44:5a:69:60:bf:a8:8a:e0:88:00:d1:cc:21:da:cb:45:e3:c2: a2:ba:be:9b:c0:f8:5e:a0:6e:d6:bf:b6:66:31:b1:d5:97:bc: 43:6a:26:47:2b:96:42:f8:17:40:6f:03:de:fe:1a:df:57:ee: a1:b9:c2:4b:4e:59:5b:3e:9b:ab:39:9a:95:57:b3:16:b1:78: b5:92:17:0d:3d:07:c5:50:cf:7b:d2:75:d3:ab:28:fc:41:70: a0:d1:0c:58:9c:c6:85:5a:e7:d8:b5:56:ee:54:3e:3f:cd:25: 77:ce:dd:67:c6:4c:5e:af:2f:7c:f1:9f:e9:f7:1b:94:88:2e: be:6c:fc:a0:fd:d3:3d:47:c1:57:cb:6d:15:82:eb:04:02:b9: b2:d0:6e:d9:54:4c:65:7a:af:5b:85:6b:47:89:f6:a8:ec:1e: 14:6d:2f:be:c2:78:ce:78:31:5f:8e:16:21:2c:72:15:4c:0b: d2:24:fd:d0:56:8d:21:78:fe:97:43:d0:b7:bd:e8:15:0e:1c: d5:44:e5:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWg7TeZ3xL6v9xVChtWIjtowv7aYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTEyMTQxMTE2MzhaFw0yNTEyMTcyMTUyMzhaMDMxMTAvBgNV BAMTKEJEQUU0NEE4NkNCNEIzQ0ZDRUVCODE3MkU1QzY1RENBQjZEQzUyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMemDz1A1sVw26bwNEm6OhnUD MzQ6qjzNg+RE+tDr5z9Bo7iEY53qj8JvB3sGGHERJsvkXrUB0/5drX7Y80bzeplZ ClyXv1XkLEMZ1UEtbIcyLTN2CUNb0gVKNAu1AL9Jh6iy5WPVKb0dXu/z4KCjnw+S Vb7VgBjsd5VpQx4J0Tpbdq/dOp9KPEBM35cJechJW0NuzP7u0kw1Il6wUGD2fcQ/ 5f9PufTlgHG0MAMC/E0HMYW3/9sHfEaY/taIQmJAy4VEouVPSSp1o+E/f5q6omXb AJon9MuNK6BYQw34QKufKBHkVZIm3dfcRdnU3mXwc9+9IOT2oFPHpsFum1XdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUva5EqGy0s8/O64Fy5cZdyrbcUt0wHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFH47F2xiO1Q5ccrWbm+sD229BXHXil0bVc0 tNmpTMlodd4DubSUgjuEV29uGhFQ5CL2ttXo3kRaaWC/qIrgiADRzCHay0XjwqK6 vpvA+F6gbta/tmYxsdWXvENqJkcrlkL4F0BvA97+Gt9X7qG5wktOWVs+m6s5mpVX sxaxeLWSFw09B8VQz3vSddOrKPxBcKDRDFicxoVa59i1Vu5UPj/NJXfO3WfGTF6v L3zxn+n3G5SILr5s/KD90z1HwVfLbRWC6wQCubLQbtlUTGV6r1uFa0eJ9qjsHhRt L77CeM54MV+OFiEschVMC9Ik/dBWjSF4/pdD0Le96BUOHNVE5SY= -----END CERTIFICATE-----Generated at Tue Dec 16 07:30:27 2025 by rpki-client