This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: yWNr8YeHCZB+Ptxdwf/9J8cd8UGcPLIz6RX+YoARxho= Subject key identifier: 05:A1:6A:FD:EE:F7:10:44:B2:81:C3:5C:8E:38:29:91:A3:59:08:95 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 6D367F65CA0069BCBEF0B8ADC54F30C092413D7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: A5 Signing time: Sat 06 Dec 2025 07:41:49 +0000 Manifest this update: Sat 06 Dec 2025 07:36:49 +0000 Manifest next update: Tue 09 Dec 2025 17:32:49 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: +kTDPH08YrEGUQIMjeXGet2SdaImR7uUoHHnTq4lEgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:36:7f:65:ca:00:69:bc:be:f0:b8:ad:c5:4f:30:c0:92:41:3d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Dec 6 07:36:49 2025 GMT Not After : Dec 9 17:32:49 2025 GMT Subject: CN=05A16AFDEEF71044B281C35C8E382991A3590895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:49:c1:64:d6:c1:ce:8a:0e:dc:67:c7:49:af: ac:b4:c4:9f:f9:4d:b7:df:8f:1b:77:d9:3d:9c:2d: c8:20:7a:52:8b:56:4c:40:db:84:21:83:b4:37:8f: ff:58:4d:d7:cf:b7:9a:3c:58:41:a6:58:e9:45:bc: 8c:70:4e:d1:98:54:99:4d:97:fb:3e:4d:39:48:3a: 02:ff:8e:7a:ea:62:16:fe:a7:15:bb:47:7e:32:fe: d4:5e:08:dd:c3:05:d4:1a:53:8d:52:8b:71:b9:1e: 70:5e:2d:d6:0e:36:71:04:1d:87:22:d7:b6:39:4b: 77:45:89:7e:ec:45:13:35:f4:3f:04:7c:f4:a5:ac: 83:d2:95:1a:2b:18:2a:b4:ef:72:3c:42:f9:85:3b: f1:92:29:95:7d:37:8b:66:f5:b3:43:88:87:f4:a4: a8:d8:af:ea:27:72:2c:2a:98:0e:1e:f4:a4:a7:80: 80:2d:57:de:76:57:39:6b:9a:e3:1e:0b:2e:5c:b0: a6:6d:57:a3:a7:5e:30:a4:08:f6:02:0a:74:61:8c: ed:39:e9:71:1b:78:49:ca:38:41:26:16:da:57:76: 77:1a:0f:76:3e:76:eb:87:4c:e4:db:d8:9d:60:6a: e7:d4:a9:63:c2:f9:03:7d:eb:0d:7b:bd:6d:f9:69: 8b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A1:6A:FD:EE:F7:10:44:B2:81:C3:5C:8E:38:29:91:A3:59:08:95 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:56:75:4f:b3:ba:58:b6:ad:f0:53:7a:b1:1b:8d:79:a4:a4: fb:81:13:b5:27:59:d4:d6:b8:4b:0c:db:dc:75:e6:9b:a1:d0: 09:9c:25:38:c2:db:94:83:ec:93:91:7c:b7:31:f7:2d:21:e3: 92:ad:44:42:0a:61:64:df:ac:6d:9e:22:0e:31:5b:d8:06:c2: 84:5c:35:46:4d:4c:b9:0b:31:62:94:06:15:6d:36:74:4a:3e: 1a:25:91:03:2d:cb:2a:c1:54:5a:8a:2b:83:b9:31:e6:a8:c7: d7:28:1a:58:a8:23:d9:54:ef:ec:e6:02:59:81:a3:4c:f3:ab: fa:87:55:5a:ef:e2:47:c5:64:b2:68:50:2f:7a:f0:3e:73:2a: 2c:fc:3c:58:02:3b:10:6f:18:f0:7d:b6:3a:24:84:11:5d:44: 6c:3f:25:4b:48:78:0c:d0:1f:82:f5:cc:bd:b8:d4:1a:58:93: 54:c8:fb:7f:e6:6a:72:e0:c1:02:cf:9c:49:2b:d6:49:59:f5: e1:dd:41:c7:69:05:d2:0f:d7:66:03:1f:60:f6:30:20:25:6e: 7b:1e:10:18:b7:2d:0b:5d:7d:20:1d:c4:7b:0b:91:db:f0:3f: a4:89:36:74:a1:34:af:91:c2:14:10:60:5a:1e:2a:6c:ef:52: c6:ac:45:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTZ/ZcoAaby+8LitxU8wwJJBPXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTEyMDYwNzM2NDlaFw0yNTEyMDkxNzMyNDlaMDMxMTAvBgNV BAMTKDA1QTE2QUZERUVGNzEwNDRCMjgxQzM1QzhFMzgyOTkxQTM1OTA4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDScFk1sHOig7cZ8dJr6y0xJ/5 Tbffjxt32T2cLcggelKLVkxA24Qhg7Q3j/9YTdfPt5o8WEGmWOlFvIxwTtGYVJlN l/s+TTlIOgL/jnrqYhb+pxW7R34y/tReCN3DBdQaU41Si3G5HnBeLdYONnEEHYci 17Y5S3dFiX7sRRM19D8EfPSlrIPSlRorGCq073I8QvmFO/GSKZV9N4tm9bNDiIf0 pKjYr+onciwqmA4e9KSngIAtV952VzlrmuMeCy5csKZtV6OnXjCkCPYCCnRhjO05 6XEbeEnKOEEmFtpXdncaD3Y+duuHTOTb2J1gaufUqWPC+QN96w17vW35aYslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBaFq/e73EESygcNcjjgpkaNZCJUwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVWdU+zuli2rfBTerEbjXmkpPuBE7UnWdTW uEsM29x15puh0AmcJTjC25SD7JORfLcx9y0h45KtREIKYWTfrG2eIg4xW9gGwoRc NUZNTLkLMWKUBhVtNnRKPholkQMtyyrBVFqKK4O5Meaox9coGlioI9lU7+zmAlmB o0zzq/qHVVrv4kfFZLJoUC968D5zKiz8PFgCOxBvGPB9tjokhBFdRGw/JUtIeAzQ H4L1zL241BpYk1TI+3/manLgwQLPnEkr1klZ9eHdQcdpBdIP12YDH2D2MCAlbnse EBi3LQtdfSAdxHsLkdvwP6SJNnShNK+RwhQQYFoeKmzvUsasRbs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:23 2025 by rpki-client