This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: nLkq/vzSXDd4HIICVLrBMvliEEyJX6JAvmoSMickp+8= Subject key identifier: 61:C4:FC:55:F1:1B:6C:F7:20:7B:46:DA:86:AD:38:48:CB:1D:CB:91 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 551AE7EA4A2B3D73640F9DF4252E64425CCE2933 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: 98 Signing time: Sat 06 Dec 2025 15:12:19 +0000 Manifest this update: Sat 06 Dec 2025 15:07:19 +0000 Manifest next update: Wed 10 Dec 2025 02:24:19 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: K2W9qbBj9KtIPfv2sbPkGTtIyrnqSh85ZwXUf2SSTZc=) 2: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: Pi/RTMpXSQx7xxOLu4Sfrheo0+EFU+7vKzb21OBSfJY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1a:e7:ea:4a:2b:3d:73:64:0f:9d:f4:25:2e:64:42:5c:ce:29:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Dec 6 15:07:19 2025 GMT Not After : Dec 10 02:24:19 2025 GMT Subject: CN=61C4FC55F11B6CF7207B46DA86AD3848CB1DCB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d6:76:10:fd:31:38:34:57:16:90:d7:5d:53: ee:e8:12:3c:34:b9:65:16:40:d6:84:dc:0c:43:30: fd:89:a3:d9:f7:1d:1f:85:60:25:1d:03:d8:bf:33: 98:1e:6f:4f:7e:95:14:1f:38:5b:c9:14:1f:8a:e3: c1:95:28:9e:eb:68:41:fc:95:4e:76:df:73:ea:0b: a5:89:ed:39:91:f2:e8:cd:0f:50:8e:57:99:c2:95: ee:70:8a:6f:05:7e:38:ea:db:9e:47:0f:ee:20:f7: 6e:27:17:de:5d:fb:a6:c9:ef:a1:46:ad:53:e3:84: f2:fc:85:f1:93:c8:1c:85:7e:f9:88:fa:08:16:df: 1e:b8:33:24:a5:e0:7c:32:70:e8:88:45:4a:4a:54: 26:09:9f:42:4e:b0:16:ac:25:a1:2a:43:fb:69:63: 0b:70:66:46:9a:8e:e1:db:c8:c3:11:ac:26:83:f3: 26:07:7b:38:0f:70:3d:8b:e9:a8:52:6b:1b:6c:1b: 41:47:83:1d:32:90:c1:5c:77:1b:32:7b:3f:67:74: 0c:37:a9:1c:81:f2:20:19:14:1e:90:89:a2:cb:86: fd:30:0c:d6:fb:f8:db:7f:04:dd:98:44:71:64:9e: e3:4a:94:11:06:e1:ba:b6:c5:8d:53:c7:67:89:a3: ba:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C4:FC:55:F1:1B:6C:F7:20:7B:46:DA:86:AD:38:48:CB:1D:CB:91 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:85:eb:0c:b5:a8:cc:96:03:cf:2b:6f:2c:e2:88:6f:8d:ef: e3:52:a4:79:7a:e8:aa:30:f2:00:5c:ed:bc:f5:6d:2d:17:0f: a7:b1:e1:13:53:f0:f1:da:7e:ea:0a:0d:7a:b5:dd:df:96:d7: db:2a:fe:af:82:3c:a3:a2:9e:25:9f:31:85:1d:72:6e:71:ce: 30:c1:f7:7d:4e:60:c1:76:ac:2b:9d:7c:67:d8:1f:d7:c5:ff: de:7d:50:05:44:6f:c3:d6:d9:27:c9:23:a6:57:20:5e:aa:f4: 9a:a8:08:87:98:2b:ee:d4:74:c3:d8:3a:7e:99:e8:5f:a2:5d: 24:1f:89:88:9e:02:9d:f2:b5:d1:d7:f0:c8:8a:79:99:e5:34: dd:68:7d:07:0d:ac:c9:4b:3a:d4:b3:c8:e2:98:40:c9:50:e1: bd:35:4a:4a:8c:8d:9d:11:00:81:77:db:29:fc:d2:27:66:d5: ac:b1:c1:20:48:9e:92:cb:3f:a0:80:e9:d0:7b:0c:36:cc:a3: 1f:89:f2:ae:a8:4c:ae:8c:34:3a:3b:84:39:40:5f:f5:4a:8f: c6:8e:69:b7:bf:88:46:f3:82:79:1e:24:db:0d:51:74:f5:95: 67:cb:2f:16:9e:d2:c2:31:7d:a9:5a:f5:94:a9:d6:43:47:cc: 92:53:06:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRrn6korPXNkD530JS5kQlzOKTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNTEyMDYxNTA3MTlaFw0yNTEyMTAwMjI0MTlaMDMxMTAvBgNV BAMTKDYxQzRGQzU1RjExQjZDRjcyMDdCNDZEQTg2QUQzODQ4Q0IxRENCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr1nYQ/TE4NFcWkNddU+7oEjw0 uWUWQNaE3AxDMP2Jo9n3HR+FYCUdA9i/M5geb09+lRQfOFvJFB+K48GVKJ7raEH8 lU5233PqC6WJ7TmR8ujND1COV5nCle5wim8Ffjjq255HD+4g924nF95d+6bJ76FG rVPjhPL8hfGTyByFfvmI+ggW3x64MySl4HwycOiIRUpKVCYJn0JOsBasJaEqQ/tp YwtwZkaajuHbyMMRrCaD8yYHezgPcD2L6ahSaxtsG0FHgx0ykMFcdxsyez9ndAw3 qRyB8iAZFB6QiaLLhv0wDNb7+Nt/BN2YRHFknuNKlBEG4bq2xY1Tx2eJo7rTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcT8VfEbbPcge0bahq04SMsdy5EwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWF6wy1qMyWA88rbyziiG+N7+NSpHl66Kow 8gBc7bz1bS0XD6ex4RNT8PHafuoKDXq13d+W19sq/q+CPKOiniWfMYUdcm5xzjDB 931OYMF2rCudfGfYH9fF/959UAVEb8PW2SfJI6ZXIF6q9JqoCIeYK+7UdMPYOn6Z 6F+iXSQfiYieAp3ytdHX8MiKeZnlNN1ofQcNrMlLOtSzyOKYQMlQ4b01SkqMjZ0R AIF32yn80idm1ayxwSBInpLLP6CA6dB7DDbMox+J8q6oTK6MNDo7hDlAX/VKj8aO abe/iEbzgnkeJNsNUXT1lWfLLxae0sIxfala9ZSp1kNHzJJTBn8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:21 2025 by rpki-client