This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: mQYMAPsy3aSpUaXU20VPJIU6VrHF97pGSeyMnwvMUqg= Subject key identifier: 14:D0:2E:EA:8A:7E:DA:BE:66:AF:77:A1:CD:57:BC:16:3C:2E:34:7A Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 568140F38F8E8CE0E5B4A6B72E4955A161267958 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 019B Signing time: Sat 06 Dec 2025 06:51:23 +0000 Manifest this update: Sat 06 Dec 2025 06:46:23 +0000 Manifest next update: Tue 09 Dec 2025 08:55:23 +0000 Files and hashes: 1: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: CJS4OVI0ZkvCFM0hplkkKRtDi4oW1mBk/70y3jze2sw=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=) 3: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:81:40:f3:8f:8e:8c:e0:e5:b4:a6:b7:2e:49:55:a1:61:26:79:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Dec 6 06:46:23 2025 GMT Not After : Dec 9 08:55:23 2025 GMT Subject: CN=14D02EEA8A7EDABE66AF77A1CD57BC163C2E347A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:10:d4:4e:4b:f0:70:88:84:4a:80:0d:2c: 80:c4:20:c4:52:78:aa:d7:ab:e7:57:c3:bf:b4:9f: b2:56:fc:39:bb:69:13:0b:3c:a8:6a:ba:fa:ed:92: 1a:83:0d:9e:98:b1:ce:b1:8b:2c:99:3f:ad:47:ae: ec:7e:1b:ec:b8:cd:4c:86:f2:9a:1f:ea:af:82:7b: a0:ca:42:31:58:1a:01:95:82:a3:01:2a:d3:0f:5b: d5:c6:95:09:2f:af:41:7b:c3:a3:96:ee:5b:e6:76: 81:72:f1:13:1e:66:fb:05:99:ac:6b:b0:f9:a4:ec: 43:88:aa:fd:69:ef:d9:a3:26:d7:55:49:75:ce:8b: 5e:c1:0d:bf:1e:40:aa:bb:f9:96:39:66:11:2c:53: eb:e9:22:ba:b8:5e:2b:74:8d:c9:bc:3c:f4:c0:68: 2f:74:cd:a9:56:df:d0:14:5c:1a:3c:30:98:42:cb: ff:05:d7:8d:6a:51:84:a7:38:a8:5e:dd:60:95:65: d7:bc:7b:dc:6e:17:d4:77:d4:61:b8:b3:6f:d9:d1: dc:6e:ef:1b:bd:37:ae:02:5b:72:7d:f6:70:50:f8: d2:7b:4b:e3:3e:3b:b7:48:09:ab:2e:34:19:e0:df: 11:c8:aa:c9:4a:05:1a:7f:27:9a:35:49:11:ca:3e: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:2E:EA:8A:7E:DA:BE:66:AF:77:A1:CD:57:BC:16:3C:2E:34:7A X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:60:9f:84:44:49:00:7b:d6:d1:82:27:87:df:7b:3d:98:5b: 4b:25:3d:52:de:54:e0:5b:bb:ed:47:9e:60:a2:ac:e8:40:59: 1a:0d:01:30:cc:e3:76:ca:81:18:0c:67:51:df:8f:1e:b0:ee: 4d:71:45:88:52:bd:7c:0c:88:97:be:04:9a:9c:a7:64:8a:2e: 07:68:b7:0f:13:a0:f3:ee:1c:36:27:f7:80:ff:4b:0f:75:e4: ba:19:69:fe:5a:bd:07:ea:fb:e9:cd:6f:6c:36:e9:b0:5d:7c: 72:d8:8b:9b:3a:29:a2:24:09:08:81:8e:ab:1f:dc:d0:22:48: 77:52:40:8a:ea:f3:8a:0f:1b:3e:72:83:41:69:66:3c:3c:4b: d2:c4:58:9f:b6:30:d1:40:e9:34:cf:e2:4a:21:b2:10:b6:8a: f5:b2:84:be:93:a1:95:1a:34:f5:a9:f3:2d:ac:0f:de:bd:f1: a1:a6:f3:b5:44:56:c7:ac:76:d8:73:71:e8:c9:1b:0c:59:06: 94:51:6a:40:8a:33:b8:0b:3e:db:af:96:f3:f1:ce:f3:92:91: f0:1b:fa:50:e4:61:5a:ef:d3:98:c4:0f:24:94:a7:66:58:9f: a6:6c:31:f7:3b:14:ac:34:47:2d:ae:7e:18:47:c5:90:bd:84: 36:b8:07:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVoFA84+OjODltKa3LklVoWEmeVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTEyMDYwNjQ2MjNaFw0yNTEyMDkwODU1MjNaMDMxMTAvBgNV BAMTKDE0RDAyRUVBOEE3RURBQkU2NkFGNzdBMUNENTdCQzE2M0MyRTM0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISBDUTkvwcIiESoANLIDEIMRS eKrXq+dXw7+0n7JW/Dm7aRMLPKhquvrtkhqDDZ6Ysc6xiyyZP61Hrux+G+y4zUyG 8pof6q+Ce6DKQjFYGgGVgqMBKtMPW9XGlQkvr0F7w6OW7lvmdoFy8RMeZvsFmaxr sPmk7EOIqv1p79mjJtdVSXXOi17BDb8eQKq7+ZY5ZhEsU+vpIrq4Xit0jcm8PPTA aC90zalW39AUXBo8MJhCy/8F141qUYSnOKhe3WCVZde8e9xuF9R31GG4s2/Z0dxu 7xu9N64CW3J99nBQ+NJ7S+M+O7dICasuNBng3xHIqslKBRp/J5o1SRHKPo5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNAu6op+2r5mr3ehzVe8FjwuNHowHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhgn4RESQB71tGCJ4ffez2YW0slPVLeVOBb u+1HnmCirOhAWRoNATDM43bKgRgMZ1Hfjx6w7k1xRYhSvXwMiJe+BJqcp2SKLgdo tw8ToPPuHDYn94D/Sw915LoZaf5avQfq++nNb2w26bBdfHLYi5s6KaIkCQiBjqsf 3NAiSHdSQIrq84oPGz5yg0FpZjw8S9LEWJ+2MNFA6TTP4kohshC2ivWyhL6ToZUa NPWp8y2sD9698aGm87VEVsesdthzcejJGwxZBpRRakCKM7gLPtuvlvPxzvOSkfAb +lDkYVrv05jEDySUp2ZYn6ZsMfc7FKw0Ry2ufhhHxZC9hDa4B74= -----END CERTIFICATE-----Generated at Sun Dec 7 07:27:27 2025 by rpki-client