This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: x4JVU687WqrVqK6cQlHR2Fb3rt8N2biTYfI99aQLTa0= Subject key identifier: 67:DD:87:52:1C:7C:50:D7:6E:2C:A6:A7:5B:C4:29:7B:B6:7E:8E:D4 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 5D54DAA4FC27F6CA7814FF50326BCC00A31E1DDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03B7 Signing time: Tue 16 Dec 2025 13:51:07 +0000 Manifest this update: Tue 16 Dec 2025 13:46:07 +0000 Manifest next update: Sat 20 Dec 2025 01:50:07 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: GaYBdENMVKPBHmQDeFO0kYa3woAbS9gbSpeym5SUqgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:54:da:a4:fc:27:f6:ca:78:14:ff:50:32:6b:cc:00:a3:1e:1d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Dec 16 13:46:07 2025 GMT Not After : Dec 20 01:50:07 2025 GMT Subject: CN=67DD87521C7C50D76E2CA6A75BC4297BB67E8ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:31:1a:89:b2:31:d0:94:b8:ec:2e:cc:9f:77: 11:fb:c1:e3:91:0a:a2:e7:1f:7b:cf:5b:40:34:75: 59:4f:d2:e3:48:f9:61:7b:90:bc:25:49:43:75:68: b5:a7:be:fc:43:b2:d5:47:54:7f:e4:56:05:d0:a0: c5:63:3d:91:ad:62:49:8f:ee:5a:36:e0:32:5b:f3: d7:d0:0b:77:4a:c1:9c:60:44:7b:8d:4e:62:cf:4b: bc:73:78:e2:0f:b0:2c:5f:8e:64:50:fb:3f:75:9f: 65:00:4e:c2:bf:a8:0c:85:30:74:c1:de:8f:9e:d8: 4f:35:e9:2b:05:d2:87:24:d1:d4:16:87:86:2b:a6: 45:74:9c:b2:95:fc:f4:8c:31:e8:36:b7:a5:5a:21: d7:3c:87:91:38:d2:1c:ed:fc:e0:f7:ef:5b:93:e0: 99:f2:56:8a:f4:e5:6f:a6:d9:e3:16:07:2f:2c:e1: f6:5c:14:cd:ee:b6:f7:98:63:bb:0e:11:af:ec:07: 8c:a3:d4:ec:30:bc:ea:c0:54:58:d4:29:4d:57:e8: f6:52:59:39:98:ea:9b:f8:08:be:c3:21:0a:14:d9: 7c:4b:f0:2a:9e:40:c0:a9:16:a1:fe:3e:b2:e6:bf: 7a:fa:9d:5a:51:fc:59:19:3f:55:e3:0e:98:35:18: 1b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DD:87:52:1C:7C:50:D7:6E:2C:A6:A7:5B:C4:29:7B:B6:7E:8E:D4 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9e:4d:4e:13:7a:14:97:98:59:90:a0:13:60:c6:b9:53:8a: 87:28:77:eb:d9:86:c5:de:e9:a9:a3:9e:5e:99:8e:8c:90:d5: 00:8e:8c:6a:33:06:e9:c7:eb:63:ca:01:4f:f3:4b:b0:1c:c0: 25:05:65:09:d7:68:6e:6b:38:fb:5c:d4:d3:0a:6b:b2:e0:92: bd:59:6c:bb:f5:47:76:35:ad:6b:0c:78:05:90:27:88:0a:df: 65:af:6c:fb:66:da:22:04:e2:af:47:3a:7f:09:d6:63:31:89: f1:db:3c:c1:1b:b4:90:c9:c3:c0:09:c2:48:b9:22:42:c7:71: 48:9f:3f:32:f6:3d:8e:ea:64:6b:0c:34:2a:32:4e:bd:d5:8f: 9f:a7:9c:65:81:80:f9:3f:d3:6e:ae:29:8e:72:49:8f:88:67: 3a:13:c6:11:55:f6:83:41:c4:cd:98:7f:0c:c8:ee:8d:8b:92: 90:74:87:db:38:94:8b:2e:e0:14:7f:f2:e7:e8:46:fe:79:9c: 30:79:8d:47:31:01:91:44:df:eb:3b:a4:11:e4:c0:a1:2b:b9: 5c:2b:6f:3b:40:28:e9:88:fa:da:55:53:95:d9:ec:57:01:35: e9:8c:c8:ea:bc:a8:b9:d5:b6:04:85:47:be:30:8b:35:a5:83: 2d:37:72:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVTapPwn9sp4FP9QMmvMAKMeHdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTEyMTYxMzQ2MDdaFw0yNTEyMjAwMTUwMDdaMDMxMTAvBgNV BAMTKDY3REQ4NzUyMUM3QzUwRDc2RTJDQTZBNzVCQzQyOTdCQjY3RThFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYMRqJsjHQlLjsLsyfdxH7weOR CqLnH3vPW0A0dVlP0uNI+WF7kLwlSUN1aLWnvvxDstVHVH/kVgXQoMVjPZGtYkmP 7lo24DJb89fQC3dKwZxgRHuNTmLPS7xzeOIPsCxfjmRQ+z91n2UATsK/qAyFMHTB 3o+e2E816SsF0ock0dQWh4YrpkV0nLKV/PSMMeg2t6VaIdc8h5E40hzt/OD371uT 4JnyVor05W+m2eMWBy8s4fZcFM3utveYY7sOEa/sB4yj1OwwvOrAVFjUKU1X6PZS WTmY6pv4CL7DIQoU2XxL8CqeQMCpFqH+PrLmv3r6nVpR/FkZP1XjDpg1GBsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ92HUhx8UNduLKanW8Qpe7Z+jtQwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJaeTU4TehSXmFmQoBNgxrlTiocod+vZhsXe 6amjnl6ZjoyQ1QCOjGozBunH62PKAU/zS7AcwCUFZQnXaG5rOPtc1NMKa7Lgkr1Z bLv1R3Y1rWsMeAWQJ4gK32WvbPtm2iIE4q9HOn8J1mMxifHbPMEbtJDJw8AJwki5 IkLHcUifPzL2PY7qZGsMNCoyTr3Vj5+nnGWBgPk/026uKY5ySY+IZzoTxhFV9oNB xM2YfwzI7o2LkpB0h9s4lIsu4BR/8ufoRv55nDB5jUcxAZFE3+s7pBHkwKEruVwr bztAKOmI+tpVU5XZ7FcBNemMyOq8qLnVtgSFR74wizWlgy03cu4= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:56 2025 by rpki-client