This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: UKzyUXHjRPGlsQwcJj+POVgVC9mZUMZ0SX/Bloy7w5E= Subject key identifier: 78:60:5F:1A:E6:18:1C:32:5E:C2:54:18:2C:15:84:39:F1:CF:0A:FE Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 14326095945C6A79D3B11E2097F293788C29948E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0244 Signing time: Wed 03 Dec 2025 05:12:12 +0000 Manifest this update: Wed 03 Dec 2025 05:07:12 +0000 Manifest next update: Sat 06 Dec 2025 12:39:12 +0000 Files and hashes: 1: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: mzo0L2ktbD52su9B0aVHJY+VP+IOnVlWykCM42YPP6s=) 3: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 4: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:32:60:95:94:5c:6a:79:d3:b1:1e:20:97:f2:93:78:8c:29:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Dec 3 05:07:12 2025 GMT Not After : Dec 6 12:39:12 2025 GMT Subject: CN=78605F1AE6181C325EC254182C158439F1CF0AFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:ad:e9:2c:5f:94:14:b3:45:b8:e5:f9:18: 9a:87:b2:d9:0b:0f:66:3c:88:7f:cf:62:a5:41:40: 2e:f5:e0:1d:98:8a:38:26:4d:ab:9d:6a:41:44:bd: 5a:8c:eb:59:53:cc:aa:f6:51:12:b1:cb:94:ee:72: 82:64:0c:21:8c:66:b6:ea:85:b1:bc:86:9d:04:09: e9:8e:a7:40:a6:9e:79:b7:b6:b4:55:70:fe:b9:a3: ee:87:4c:4f:64:58:7b:7d:7c:f5:f7:f0:00:ad:eb: b3:14:6f:00:30:c6:a6:e7:2c:3e:31:f7:dd:a1:c5: 1a:73:6e:da:ad:dc:3d:a0:ad:ad:eb:79:ba:ae:7d: b7:57:be:17:7f:92:81:42:dd:12:a8:f8:cb:1d:a1: 95:dc:dd:46:d5:b7:c3:0f:5f:68:71:62:f8:75:b7: 75:af:b9:b3:b0:ee:b5:26:a5:7c:d6:94:86:d3:ee: 9c:dd:4d:5a:77:4b:33:70:c3:c1:c5:01:e5:94:0a: 9d:d6:76:29:57:15:fb:c8:2b:01:f0:d3:d5:aa:3f: 15:f5:66:0f:b8:c4:6d:f8:78:c6:48:f1:c8:ae:33: e4:2c:b3:f0:01:d6:1f:41:33:8d:8b:ec:8d:9c:b6: 31:da:53:58:67:b1:be:a5:54:d9:b1:64:ea:66:aa: 64:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:60:5F:1A:E6:18:1C:32:5E:C2:54:18:2C:15:84:39:F1:CF:0A:FE X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a6:3b:60:fa:a7:18:7c:5e:78:94:57:35:35:3d:9d:f0:6f: 54:b3:02:d4:d9:1f:20:63:20:3b:46:cc:77:90:5a:9e:06:9a: 1f:73:0d:c8:9b:d9:ba:bf:63:ca:3a:ea:31:bd:c6:fb:bc:42: 77:f9:16:4f:a9:e1:8d:92:82:3c:4a:af:f5:93:ac:b2:2d:d2: d6:e7:21:62:ba:ff:67:5c:8d:00:e5:97:c8:47:97:1e:fd:3f: 5e:38:36:b0:bc:cb:6c:8f:db:a3:47:b8:c3:c6:ff:ec:32:52: 55:c0:91:57:3b:f6:a2:42:e1:3b:79:53:0f:03:78:6c:6d:c7: 9f:e0:ea:e1:89:84:db:9f:42:bc:f2:b4:c8:d3:64:5f:49:31: b1:a9:68:43:4b:96:13:9e:d0:05:3a:6b:56:26:a3:00:0e:d6: d1:db:96:29:4b:ac:32:9b:58:7a:02:f4:c8:de:3b:0f:75:ef: 00:8f:6a:6d:3b:46:80:42:9e:68:4b:87:35:e2:33:5a:19:15: 54:d2:53:31:ab:f0:5e:83:b3:12:fc:cf:36:76:36:d7:fd:58: bb:c1:85:3c:00:99:0a:67:28:b9:bf:55:4d:8f:91:37:46:b2: 81:af:1d:60:7d:d1:51:8b:8c:2b:81:6f:20:92:68:6e:78:14: ce:21:7c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDJglZRcannTsR4gl/KTeIwplI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTEyMDMwNTA3MTJaFw0yNTEyMDYxMjM5MTJaMDMxMTAvBgNV BAMTKDc4NjA1RjFBRTYxODFDMzI1RUMyNTQxODJDMTU4NDM5RjFDRjBBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoR63pLF+UFLNFuOX5GJqHstkL D2Y8iH/PYqVBQC714B2YijgmTaudakFEvVqM61lTzKr2URKxy5TucoJkDCGMZrbq hbG8hp0ECemOp0Cmnnm3trRVcP65o+6HTE9kWHt9fPX38ACt67MUbwAwxqbnLD4x 992hxRpzbtqt3D2gra3rebqufbdXvhd/koFC3RKo+MsdoZXc3UbVt8MPX2hxYvh1 t3WvubOw7rUmpXzWlIbT7pzdTVp3SzNww8HFAeWUCp3WdilXFfvIKwHw09WqPxX1 Zg+4xG34eMZI8ciuM+Qss/AB1h9BM42L7I2ctjHaU1hnsb6lVNmxZOpmqmS7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeGBfGuYYHDJewlQYLBWEOfHPCv4wHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWmO2D6pxh8XniUVzU1PZ3wb1SzAtTZHyBj IDtGzHeQWp4Gmh9zDcib2bq/Y8o66jG9xvu8Qnf5Fk+p4Y2SgjxKr/WTrLIt0tbn IWK6/2dcjQDll8hHlx79P144NrC8y2yP26NHuMPG/+wyUlXAkVc79qJC4Tt5Uw8D eGxtx5/g6uGJhNufQrzytMjTZF9JMbGpaENLlhOe0AU6a1YmowAO1tHblilLrDKb WHoC9MjeOw917wCPam07RoBCnmhLhzXiM1oZFVTSUzGr8F6DsxL8zzZ2Ntf9WLvB hTwAmQpnKLm/VU2PkTdGsoGvHWB90VGLjCuBbyCSaG54FM4hfPU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:12 2025 by rpki-client