This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: bvOkaKIUzR/8lxR1NsWwXUYwtGrZbrQ2pJNwE/YqTLc= Subject key identifier: 44:F6:0C:AB:58:EB:B1:B6:E7:FB:59:99:3B:B6:FF:0A:BB:25:E8:16 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 19C676F33992F1D930A3D118F7C3FD5DA663AD20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 9D Signing time: Thu 18 Dec 2025 14:32:22 +0000 Manifest this update: Thu 18 Dec 2025 14:27:22 +0000 Manifest next update: Sun 21 Dec 2025 17:35:22 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: K2W9qbBj9KtIPfv2sbPkGTtIyrnqSh85ZwXUf2SSTZc=) 2: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: 5fl/dvbtWICM/qi5L1YqJ6ukQpVq6+9yz92Wtcida58=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c6:76:f3:39:92:f1:d9:30:a3:d1:18:f7:c3:fd:5d:a6:63:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Dec 18 14:27:22 2025 GMT Not After : Dec 21 17:35:22 2025 GMT Subject: CN=44F60CAB58EBB1B6E7FB59993BB6FF0ABB25E816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:ed:a1:18:e3:4a:64:f6:79:82:83:76:82: 2a:05:d7:45:17:1f:a3:fe:65:72:39:84:12:14:5d: a9:fd:83:83:bc:a0:ef:db:89:82:d9:90:9d:5f:98: cb:bd:08:48:bf:de:b8:fb:2a:4a:13:df:cf:db:d6: e6:a7:1a:37:66:c9:db:56:53:ad:37:b1:32:70:7e: 50:54:c9:80:1f:40:40:dd:e0:b3:6a:f9:82:60:f9: 9a:6d:09:60:72:6a:05:f5:41:8e:23:36:89:36:d2: 16:c8:1d:ab:97:a4:83:a1:4c:ed:3c:8e:fe:b3:e5: 4d:22:f4:25:0a:a7:cf:ba:95:4c:0a:35:24:f7:65: 8c:de:3a:3e:a5:4b:76:48:59:b4:b7:fb:a2:f8:ee: 31:5a:d1:9e:c6:d5:b6:de:bd:53:c3:69:6f:89:78: 00:12:73:ab:b0:2e:2e:52:77:9c:c2:cd:62:2f:50: ef:c1:f7:9c:5e:b4:ec:7c:4f:1a:87:22:e8:cd:0c: 36:ca:e9:d4:6f:19:3a:16:1d:22:01:43:1b:c6:79: 9c:4a:b2:ee:48:bc:24:be:fa:ac:2a:4c:60:ba:fb: dc:2b:9e:e0:2e:1e:77:9b:ac:b9:24:bd:cb:a5:35: 37:25:a5:80:20:7f:f4:fd:e7:e7:9d:a5:ee:1f:ba: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F6:0C:AB:58:EB:B1:B6:E7:FB:59:99:3B:B6:FF:0A:BB:25:E8:16 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:10:4c:eb:0b:44:c4:19:b1:ef:8b:b4:07:31:1a:4d:59:2b: 87:4f:3a:49:6a:c4:95:c7:ca:c6:7f:f5:41:22:8c:9a:95:db: fa:d8:73:91:22:e2:9e:d1:52:54:de:3a:d2:a8:cc:2b:87:11: 11:7a:95:af:17:b3:91:2e:b1:f9:aa:32:24:eb:63:c5:54:f1: 9b:01:d4:42:07:77:31:89:7b:f7:ce:94:e9:a1:a9:77:42:92: 90:81:ec:3f:aa:40:99:6e:1d:32:82:07:b7:cd:34:4c:7c:f9: 18:e4:a8:ef:49:8f:10:af:22:ef:86:5a:f1:8b:50:b0:71:fb: f5:7e:e4:50:bf:24:81:9e:1b:f2:75:26:ee:9e:f4:f0:a4:96: de:eb:75:d3:89:e0:98:ff:cf:c8:44:34:0a:45:bf:b4:cf:03: 9b:e8:93:30:50:e5:d2:32:77:18:1c:c1:2d:3a:d5:10:e4:4b: 4c:9d:aa:c1:23:f4:fd:43:1a:58:81:7e:f1:2b:03:d8:dc:5d: c8:39:06:2f:f7:c1:cc:92:34:6a:41:f1:b2:52:9a:55:d6:91: fa:36:a5:e8:de:bf:d7:aa:c1:97:78:2a:ce:d9:38:50:fd:51: 7e:ed:bb:2e:05:21:95:14:f5:9e:ac:25:59:15:2a:89:4c:55: ed:05:d9:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcZ28zmS8dkwo9EY98P9XaZjrSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTEyMTgxNDI3MjJaFw0yNTEyMjExNzM1MjJaMDMxMTAvBgNV BAMTKDQ0RjYwQ0FCNThFQkIxQjZFN0ZCNTk5OTNCQjZGRjBBQkIyNUU4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxLu2hGONKZPZ5goN2gioF10UX H6P+ZXI5hBIUXan9g4O8oO/biYLZkJ1fmMu9CEi/3rj7KkoT38/b1uanGjdmydtW U603sTJwflBUyYAfQEDd4LNq+YJg+ZptCWByagX1QY4jNok20hbIHauXpIOhTO08 jv6z5U0i9CUKp8+6lUwKNST3ZYzeOj6lS3ZIWbS3+6L47jFa0Z7G1bbevVPDaW+J eAASc6uwLi5Sd5zCzWIvUO/B95xetOx8TxqHIujNDDbK6dRvGToWHSIBQxvGeZxK su5IvCS++qwqTGC6+9wrnuAuHnebrLkkvculNTclpYAgf/T95+edpe4fulqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPYMq1jrsbbn+1mZO7b/Crsl6BYwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0QTOsLRMQZse+LtAcxGk1ZK4dPOklqxJXH ysZ/9UEijJqV2/rYc5Ei4p7RUlTeOtKozCuHERF6la8Xs5EusfmqMiTrY8VU8ZsB 1EIHdzGJe/fOlOmhqXdCkpCB7D+qQJluHTKCB7fNNEx8+RjkqO9JjxCvIu+GWvGL ULBx+/V+5FC/JIGeG/J1Ju6e9PCklt7rddOJ4Jj/z8hENApFv7TPA5vokzBQ5dIy dxgcwS061RDkS0ydqsEj9P1DGliBfvErA9jcXcg5Bi/3wcySNGpB8bJSmlXWkfo2 pejev9eqwZd4Ks7ZOFD9UX7tuy4FIZUU9Z6sJVkVKolMVe0F2TI= -----END CERTIFICATE-----Generated at Thu Dec 18 19:11:14 2025 by rpki-client