This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: za3ZvoMsRt1dtWSjf5v+uoJJInO/UTiclTBoDFKPJrs= Subject key identifier: 20:36:E9:88:BD:2B:44:80:AF:F3:1C:EE:B2:D0:3C:C1:DE:34:98:E5 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 3D678777CCEC10B797EEC341D9A38AC92CDC37B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0265 Signing time: Sat 06 Dec 2025 13:51:53 +0000 Manifest this update: Sat 06 Dec 2025 13:46:53 +0000 Manifest next update: Tue 09 Dec 2025 17:35:53 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: tAiFOHhkXbR94q5BhG3d/GdXJXe1i6ztoHzu1LGkzbw=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:67:87:77:cc:ec:10:b7:97:ee:c3:41:d9:a3:8a:c9:2c:dc:37:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Dec 6 13:46:53 2025 GMT Not After : Dec 9 17:35:53 2025 GMT Subject: CN=2036E988BD2B4480AFF31CEEB2D03CC1DE3498E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:b7:76:98:32:ee:c0:ec:9d:e3:87:b3:7b: df:f1:cc:70:49:ce:d8:9e:52:1f:ce:ea:3d:1a:be: 9e:67:75:3f:70:4f:56:6b:42:aa:ee:a5:45:59:5e: dd:f5:28:7c:85:f9:81:5a:9b:f8:00:56:ef:5e:35: 14:c2:a3:37:a6:bd:e0:c1:f2:e5:94:12:6a:3c:b6: 50:2f:e3:b1:70:5c:68:f5:92:c6:85:f0:ec:da:7e: 1c:d9:b4:05:91:69:51:5f:c0:75:b9:7c:d8:fe:81: 4d:a2:bc:66:b1:01:5a:96:80:d9:47:74:4b:5b:6d: d9:55:57:cc:c2:00:80:f2:a9:8e:2a:83:41:fe:8e: 36:18:e9:a9:cf:a5:00:c7:90:0c:62:c0:85:d0:1b: f6:fe:e9:b8:8d:6e:99:e5:da:74:4d:d6:72:d6:7c: 0a:e3:69:b8:76:e9:30:d5:a2:6c:fb:9a:21:58:24: 2d:c1:02:c7:5a:1e:b0:cc:e2:79:26:05:c6:5a:bf: 28:34:bd:98:82:e7:a6:e2:59:4d:08:b1:f3:59:5d: 50:f3:cd:5f:5f:1c:e7:ad:dc:da:80:1e:b7:ef:81: b8:74:ef:bd:48:a0:51:e2:9f:2c:e3:7f:ec:99:99: a8:db:97:12:c2:ab:89:ec:78:75:84:4f:51:8e:bf: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:36:E9:88:BD:2B:44:80:AF:F3:1C:EE:B2:D0:3C:C1:DE:34:98:E5 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e5:11:e5:71:02:e6:a1:34:18:e8:f3:33:8d:a2:ef:89:13: 6b:d7:ef:df:e1:17:f0:1e:9d:06:23:ed:4c:9d:83:4e:46:c2: 38:82:90:49:d8:ae:3a:be:2c:1e:0a:c4:04:bd:9c:55:99:d4: 2e:ae:56:5b:40:b6:fa:18:26:1b:bf:da:d3:c2:7f:5f:fb:d7: 96:c1:bf:50:3b:9d:65:2c:e0:87:7f:4c:17:64:96:60:8c:f6: 10:5d:d5:23:4c:5b:ce:fe:73:33:68:02:66:68:b0:2e:49:58: 0d:c2:04:cd:5a:06:82:58:dd:1f:d1:e5:39:fd:d3:37:8c:50: ed:8f:f7:3b:e7:4a:f8:fb:cb:1a:50:58:10:71:4f:f9:d4:a7: ee:89:45:7b:c3:b9:9b:88:96:ef:db:aa:d6:85:a3:99:13:5a: 45:38:d0:7c:9f:78:d4:8a:23:91:2b:12:44:6f:e1:00:02:90: d1:24:83:b9:30:86:fa:87:b1:72:e4:c9:5c:98:22:f5:6a:83: 5f:19:eb:02:4d:93:41:0c:7e:f9:55:85:36:4f:52:07:72:b4: 38:8b:ff:1b:e9:71:95:a5:08:5b:d6:ef:f4:2d:0f:88:33:79: c8:a0:d4:d3:c0:de:fb:8d:5a:62:9c:5e:8e:4c:15:e0:39:11: 42:11:79:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWeHd8zsELeX7sNB2aOKySzcN7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTEyMDYxMzQ2NTNaFw0yNTEyMDkxNzM1NTNaMDMxMTAvBgNV BAMTKDIwMzZFOTg4QkQyQjQ0ODBBRkYzMUNFRUIyRDAzQ0MxREUzNDk4RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHLd2mDLuwOyd44eze9/xzHBJ ztieUh/O6j0avp5ndT9wT1ZrQqrupUVZXt31KHyF+YFam/gAVu9eNRTCozemveDB 8uWUEmo8tlAv47FwXGj1ksaF8OzafhzZtAWRaVFfwHW5fNj+gU2ivGaxAVqWgNlH dEtbbdlVV8zCAIDyqY4qg0H+jjYY6anPpQDHkAxiwIXQG/b+6biNbpnl2nRN1nLW fArjabh26TDVomz7miFYJC3BAsdaHrDM4nkmBcZavyg0vZiC56biWU0IsfNZXVDz zV9fHOet3NqAHrfvgbh0771IoFHinyzjf+yZmajblxLCq4nseHWET1GOv2mvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDbpiL0rRICv8xzustA8wd40mOUwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrlEeVxAuahNBjo8zONou+JE2vX79/hF/Ae nQYj7Uydg05GwjiCkEnYrjq+LB4KxAS9nFWZ1C6uVltAtvoYJhu/2tPCf1/715bB v1A7nWUs4Id/TBdklmCM9hBd1SNMW87+czNoAmZosC5JWA3CBM1aBoJY3R/R5Tn9 0zeMUO2P9zvnSvj7yxpQWBBxT/nUp+6JRXvDuZuIlu/bqtaFo5kTWkU40HyfeNSK I5ErEkRv4QACkNEkg7kwhvqHsXLkyVyYIvVqg18Z6wJNk0EMfvlVhTZPUgdytDiL /xvpcZWlCFvW7/QtD4gzecig1NPA3vuNWmKcXo5MFeA5EUIReSs= -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:31 2025 by rpki-client