This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: 5dlitL6xSZdMFeog3+mQQm/9gra5VPbms16kP1wc8X4= Subject key identifier: 4A:D3:53:BB:02:14:CB:99:E7:D5:F1:5D:32:FB:C7:9D:3A:F5:1B:56 Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 6EF9B73ABE9F1F026B2F0360151A92BD4B921575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01D3 Signing time: Sat 06 Dec 2025 02:12:24 +0000 Manifest this update: Sat 06 Dec 2025 02:07:24 +0000 Manifest next update: Tue 09 Dec 2025 08:02:24 +0000 Files and hashes: 1: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: CExPiCx6CybG7h0AKDzY24qnknV8IX5nMSGruZpnamk=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 3: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f9:b7:3a:be:9f:1f:02:6b:2f:03:60:15:1a:92:bd:4b:92:15:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Dec 6 02:07:24 2025 GMT Not After : Dec 9 08:02:24 2025 GMT Subject: CN=4AD353BB0214CB99E7D5F15D32FBC79D3AF51B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:9c:cb:76:e2:49:c6:ff:90:44:4a:fa:ff: 30:1d:15:05:71:e8:4c:d9:7c:3c:c0:39:62:c2:90: 7b:d7:c9:dd:eb:94:21:31:8d:57:62:f8:98:b1:e9: 4d:8f:3a:ec:24:65:43:4b:e4:20:57:22:a9:2b:c5: ca:85:83:4f:d4:cb:bf:b2:42:c3:0f:d8:91:fe:58: cd:18:17:02:1e:1d:6b:23:34:8a:9f:99:f7:a5:5e: 8d:ba:ce:9a:47:66:9d:51:e8:62:76:a0:42:94:3f: 61:f9:ac:18:b7:3f:8b:4a:4d:57:76:12:23:b7:42: 4e:a5:72:52:e6:94:7f:b2:90:40:08:00:ff:53:b5: a9:8f:60:af:e8:3c:e3:30:f4:0f:e9:0b:c2:c3:59: ba:e5:81:e5:2e:a3:fe:24:91:98:63:54:5a:d4:a9: b4:37:f6:15:0e:6a:54:04:96:92:96:8e:6a:f5:62: b3:90:e4:70:6e:c2:f9:20:fc:56:3f:aa:d8:3f:fd: 46:36:11:2a:e2:d0:e1:31:e1:00:59:84:45:c8:33: 7f:c0:c0:6e:12:46:2c:70:5f:84:8b:cb:ad:5b:91: a5:0b:a9:e2:6b:e2:2c:41:76:c9:c6:f2:a3:1d:58: dc:42:bc:02:0d:fa:a6:68:07:99:b1:d4:f8:11:61: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D3:53:BB:02:14:CB:99:E7:D5:F1:5D:32:FB:C7:9D:3A:F5:1B:56 X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e8:58:7a:28:58:77:97:5a:79:b8:17:a5:82:04:70:a9:19: 6c:08:c5:c6:8f:68:fd:7c:89:4f:ae:96:09:48:7f:62:c5:2d: e3:6c:b8:e3:69:ff:bd:69:e5:60:74:03:6f:30:9b:42:ef:6b: 70:ad:57:7c:37:19:99:c1:af:18:e1:e6:04:cf:b2:bf:62:18: e1:17:cd:58:7b:c8:1d:4b:ea:34:a6:1c:38:10:23:63:d9:a7: 17:3a:d5:52:33:8a:ce:66:05:02:55:8d:ca:48:0e:8f:86:3e: dd:9d:ee:38:38:b6:3c:73:50:d0:85:0c:27:0e:cd:31:ba:0e: 5b:f0:27:47:f6:5e:44:a7:00:6c:08:11:6e:91:87:6d:4d:66: 29:e1:b1:88:ae:ce:53:d4:ca:30:7c:02:e1:df:5b:7b:f0:83: 26:4d:61:73:52:b6:fc:d3:34:e2:4d:a0:20:eb:85:6a:6c:50: 1a:8b:84:52:cd:61:56:b4:76:53:d2:15:95:02:5a:07:51:a1: 34:6f:96:49:2d:86:9d:cd:dd:3b:39:7f:bf:f4:ce:a3:85:49: 14:f0:21:38:9b:a0:32:7b:82:8d:78:e5:7c:44:16:dd:ad:34: f6:f2:77:ab:49:6b:aa:cc:c3:62:96:38:3b:dc:49:9e:cf:c0: 6f:cb:78:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbvm3Or6fHwJrLwNgFRqSvUuSFXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTEyMDYwMjA3MjRaFw0yNTEyMDkwODAyMjRaMDMxMTAvBgNV BAMTKDRBRDM1M0JCMDIxNENCOTlFN0Q1RjE1RDMyRkJDNzlEM0FGNTFCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWgpzLduJJxv+QREr6/zAdFQVx 6EzZfDzAOWLCkHvXyd3rlCExjVdi+Jix6U2POuwkZUNL5CBXIqkrxcqFg0/Uy7+y QsMP2JH+WM0YFwIeHWsjNIqfmfelXo26zppHZp1R6GJ2oEKUP2H5rBi3P4tKTVd2 EiO3Qk6lclLmlH+ykEAIAP9TtamPYK/oPOMw9A/pC8LDWbrlgeUuo/4kkZhjVFrU qbQ39hUOalQElpKWjmr1YrOQ5HBuwvkg/FY/qtg//UY2ESri0OEx4QBZhEXIM3/A wG4SRixwX4SLy61bkaULqeJr4ixBdsnG8qMdWNxCvAIN+qZoB5mx1PgRYcrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUStNTuwIUy5nn1fFdMvvHnTr1G1YwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3oWHooWHeXWnm4F6WCBHCpGWwIxcaPaP18 iU+ulglIf2LFLeNsuONp/71p5WB0A28wm0Lva3CtV3w3GZnBrxjh5gTPsr9iGOEX zVh7yB1L6jSmHDgQI2PZpxc61VIzis5mBQJVjcpIDo+GPt2d7jg4tjxzUNCFDCcO zTG6DlvwJ0f2XkSnAGwIEW6Rh21NZinhsYiuzlPUyjB8AuHfW3vwgyZNYXNStvzT NOJNoCDrhWpsUBqLhFLNYVa0dlPSFZUCWgdRoTRvlkkthp3N3Ts5f7/0zqOFSRTw ITiboDJ7go145XxEFt2tNPbyd6tJa6rMw2KWODvcSZ7PwG/LeBM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:40 2025 by rpki-client