This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: yHNSdKK41XNdzwnoeo8tjEl7h8SLMg/FB3x1nL/Zu/Y= Subject key identifier: F8:D2:0A:AD:C7:FA:C0:09:EF:1C:4E:A2:92:D1:15:0D:15:FB:F6:8B Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 755B36C950682C4CA8737F2733EDE1CF2D8BC612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: CC Signing time: Sat 06 Dec 2025 21:51:06 +0000 Manifest this update: Sat 06 Dec 2025 21:46:06 +0000 Manifest next update: Wed 10 Dec 2025 00:47:06 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: Ffo8aucfO2ogh4tut2kOfr5E/BFye3K68Ag3wOgWP4k=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5b:36:c9:50:68:2c:4c:a8:73:7f:27:33:ed:e1:cf:2d:8b:c6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Dec 6 21:46:06 2025 GMT Not After : Dec 10 00:47:06 2025 GMT Subject: CN=F8D20AADC7FAC009EF1C4EA292D1150D15FBF68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:85:ae:4a:fa:6f:b7:0e:9d:02:6b:59:1d: f2:61:fe:e1:90:c9:5e:86:1b:1f:81:09:39:4e:22: 15:f1:42:52:bb:10:63:2d:0e:8f:3b:55:d8:22:73: ce:8c:d6:60:61:55:de:5f:c0:33:32:a6:47:1a:b0: 9c:c2:ba:78:99:c1:49:9c:a9:3b:81:55:98:5c:06: a9:1b:e6:5a:6a:21:f1:3a:cd:bb:32:6e:83:94:f8: 2f:f1:a0:8c:31:d7:84:a2:e6:2b:c2:5a:95:b7:9e: 35:fc:47:fd:5b:79:f3:3d:dd:d3:fd:fd:22:be:4c: 7d:84:9f:5d:7a:09:df:1f:2f:78:39:48:24:7e:10: 33:16:59:7b:99:e3:7b:d7:3e:f6:f2:73:ed:68:45: 44:ed:f2:7f:48:7f:61:4b:67:81:a1:5d:14:3f:cd: 4d:f9:50:5a:c5:6a:7e:a5:ff:7e:b5:32:57:5b:91: 58:d9:f6:d3:e9:0f:af:2e:f1:cb:2c:c7:f4:82:d2: d1:b2:dd:ad:94:38:aa:c3:2a:dd:52:33:28:4f:51: c2:9b:85:86:4b:3d:1e:4d:a7:7b:a9:a9:b1:76:c8: 52:4e:8c:d2:95:39:18:9a:11:9b:a6:41:11:42:11: 8c:bc:50:47:31:fd:57:21:c8:47:d9:80:e5:ad:b0: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D2:0A:AD:C7:FA:C0:09:EF:1C:4E:A2:92:D1:15:0D:15:FB:F6:8B X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:72:06:ed:7c:0c:a0:90:5f:c9:ac:c4:f2:98:a2:b9:d4:74: f5:a6:aa:fc:94:fa:cc:05:69:99:7e:f4:62:76:b8:03:ba:4c: 58:b7:d2:ab:7d:17:24:38:be:74:5d:ee:c7:03:0c:6a:65:ff: b2:96:19:5c:bc:09:f1:1d:dc:87:ca:8f:9e:0e:88:d6:dd:60: d6:72:27:f4:a9:03:6f:df:5e:30:83:e6:5d:5c:0f:64:b6:d6: b4:60:61:e9:23:ad:ac:a9:f4:a6:62:51:d7:1a:c7:41:57:56: d4:05:b1:c2:f6:d1:a5:2d:62:a2:12:04:f7:f9:bb:dd:8a:51: 2d:74:98:9d:3c:c4:48:b8:8c:6c:c8:35:b9:f2:45:c5:61:80: 89:df:95:c0:59:71:30:56:1f:4f:9f:85:5a:e1:6c:a6:a1:c6: f8:f6:78:f3:38:26:97:ac:4f:31:13:1c:94:fd:3d:ee:d6:1e: 84:a3:47:f4:ba:d4:3c:f9:62:ef:73:74:68:8c:a0:e8:31:c0: ce:e7:46:da:93:9f:b4:50:46:7d:b7:ef:72:09:8e:ec:7e:a9: 48:73:9d:21:64:21:14:49:ba:47:73:c9:7f:dc:88:41:3a:0f: 4f:d7:5f:7a:71:37:fc:c4:09:53:b1:60:af:92:76:ae:1a:bd: 59:46:bf:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVs2yVBoLEyoc38nM+3hzy2LxhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNTEyMDYyMTQ2MDZaFw0yNTEyMTAwMDQ3MDZaMDMxMTAvBgNV BAMTKEY4RDIwQUFEQzdGQUMwMDlFRjFDNEVBMjkyRDExNTBEMTVGQkY2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYYWuSvpvtw6dAmtZHfJh/uGQ yV6GGx+BCTlOIhXxQlK7EGMtDo87Vdgic86M1mBhVd5fwDMypkcasJzCuniZwUmc qTuBVZhcBqkb5lpqIfE6zbsyboOU+C/xoIwx14Si5ivCWpW3njX8R/1befM93dP9 /SK+TH2En116Cd8fL3g5SCR+EDMWWXuZ43vXPvbyc+1oRUTt8n9If2FLZ4GhXRQ/ zU35UFrFan6l/361MldbkVjZ9tPpD68u8cssx/SC0tGy3a2UOKrDKt1SMyhPUcKb hYZLPR5Np3upqbF2yFJOjNKVORiaEZumQRFCEYy8UEcx/VchyEfZgOWtsLdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+NIKrcf6wAnvHE6iktEVDRX79oswHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFyBu18DKCQX8msxPKYornUdPWmqvyU+swF aZl+9GJ2uAO6TFi30qt9FyQ4vnRd7scDDGpl/7KWGVy8CfEd3IfKj54OiNbdYNZy J/SpA2/fXjCD5l1cD2S21rRgYekjrayp9KZiUdcax0FXVtQFscL20aUtYqISBPf5 u92KUS10mJ08xEi4jGzINbnyRcVhgInflcBZcTBWH0+fhVrhbKahxvj2ePM4Jpes TzETHJT9Pe7WHoSjR/S61Dz5Yu9zdGiMoOgxwM7nRtqTn7RQRn2373IJjux+qUhz nSFkIRRJukdzyX/ciEE6D0/XX3pxN/zECVOxYK+Sdq4avVlGv8E= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:00 2025 by rpki-client