This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: ISjtu5CPRW3boppp3xNKT/Es40GfLUbjnFn4wXzKT/c= Subject key identifier: 9C:86:D3:7B:8B:D9:1A:DA:48:8A:35:F1:4D:44:54:0D:E0:6C:75:CF Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 04EC1ED985F181561C110960644F8CA351C93719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0245 Signing time: Fri 05 Dec 2025 12:42:11 +0000 Manifest this update: Fri 05 Dec 2025 12:37:11 +0000 Manifest next update: Tue 09 Dec 2025 00:40:11 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: aZ5rvpOWdvFxKqE32QOdK2S+aGAJlhHMprqqItt9gvI=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ec:1e:d9:85:f1:81:56:1c:11:09:60:64:4f:8c:a3:51:c9:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Dec 5 12:37:11 2025 GMT Not After : Dec 9 00:40:11 2025 GMT Subject: CN=9C86D37B8BD91ADA488A35F14D44540DE06C75CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:16:54:80:b5:a3:70:55:36:5d:31:0a:9b: 66:28:12:9a:cf:2c:9b:33:cd:0f:71:47:97:78:54: f1:94:a4:1a:cb:e5:a9:87:8c:a5:f1:21:9d:d5:70: 5b:6c:d2:b1:ae:b9:d6:fc:4a:ec:cc:0c:36:71:6b: 7a:26:d6:7d:18:b4:ff:84:c8:fc:89:9a:f7:94:3e: 9d:1c:3f:c5:c1:90:27:45:b9:a5:68:db:f1:d9:65: 86:28:a1:b6:1e:8e:d7:af:38:e0:2e:e3:32:8a:eb: e3:86:b1:4b:58:de:36:ed:4a:96:2a:7c:cd:26:43: ee:cf:aa:e3:5e:04:b4:49:ad:ba:3c:98:80:38:94: 32:72:69:b3:eb:29:45:64:83:21:87:0f:37:78:44: 41:52:7d:f5:ec:6d:30:13:f4:e0:34:ba:90:c6:62: a9:02:7e:9b:c3:8e:6b:eb:b3:aa:57:a6:b8:cf:5a: e9:5b:bc:84:9d:30:a2:5a:b0:31:b1:75:84:90:1d: 02:5a:9d:3d:ac:5b:11:1d:a9:f4:5b:d6:b2:09:e4: 67:ac:44:4f:cf:b9:bf:d4:6d:05:4a:0c:85:c6:d9: 89:1b:5b:99:3a:9a:c6:12:aa:fe:8f:c4:25:c9:47: 6e:b2:07:2f:7e:bb:2f:a6:86:0c:5b:8b:cb:22:54: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:86:D3:7B:8B:D9:1A:DA:48:8A:35:F1:4D:44:54:0D:E0:6C:75:CF X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:9a:49:a5:de:41:65:d9:64:7d:8f:17:74:2a:30:31:24:3c: fd:3a:1d:37:85:02:09:8e:cf:49:9b:68:c7:fa:6b:27:e2:a0: 1f:cd:41:52:a4:1c:71:f3:02:2f:b7:60:1b:18:b8:f8:97:73: db:e6:7b:b0:f2:45:71:11:12:9d:14:02:c4:91:ab:e3:e6:ce: c4:19:31:01:22:78:eb:50:bd:0c:d7:65:69:94:3d:b1:4b:a4: 23:de:14:0b:d8:35:7d:de:9c:0a:1c:8c:3b:38:f8:bf:8d:56: 89:34:4b:51:2a:52:bb:28:87:6f:3e:12:23:f7:66:ee:f1:5a: 02:d2:52:38:24:f3:43:b9:fe:b1:36:51:06:31:b3:cd:58:84: 47:ea:bc:f7:17:4e:79:ae:68:fd:2d:02:b2:73:b2:67:4e:a2: 52:0c:5d:83:71:3a:81:27:e3:7d:4b:83:d2:0c:dd:27:f1:1a: 01:bd:88:3a:70:86:a2:9b:17:66:ca:7e:1f:ec:ef:4b:93:1d: 6b:bb:d6:85:a6:cb:fe:a2:bf:e9:b6:8d:36:a9:59:6a:a7:dd: e7:90:5a:d1:7a:f8:0f:9d:25:cd:8d:96:71:fc:5d:e5:c5:3e: 54:be:97:29:87:b9:62:01:3f:70:a0:73:8b:fc:90:18:0e:2d: 5f:97:66:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBOwe2YXxgVYcEQlgZE+Mo1HJNxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTEyMDUxMjM3MTFaFw0yNTEyMDkwMDQwMTFaMDMxMTAvBgNV BAMTKDlDODZEMzdCOEJEOTFBREE0ODhBMzVGMTRENDQ1NDBERTA2Qzc1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4hZUgLWjcFU2XTEKm2YoEprP LJszzQ9xR5d4VPGUpBrL5amHjKXxIZ3VcFts0rGuudb8SuzMDDZxa3om1n0YtP+E yPyJmveUPp0cP8XBkCdFuaVo2/HZZYYoobYejtevOOAu4zKK6+OGsUtY3jbtSpYq fM0mQ+7PquNeBLRJrbo8mIA4lDJyabPrKUVkgyGHDzd4REFSffXsbTAT9OA0upDG YqkCfpvDjmvrs6pXprjPWulbvISdMKJasDGxdYSQHQJanT2sWxEdqfRb1rIJ5Ges RE/Pub/UbQVKDIXG2YkbW5k6msYSqv6PxCXJR26yBy9+uy+mhgxbi8siVAHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnIbTe4vZGtpIijXxTURUDeBsdc8wHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2aSaXeQWXZZH2PF3QqMDEkPP06HTeFAgmO z0mbaMf6ayfioB/NQVKkHHHzAi+3YBsYuPiXc9vme7DyRXEREp0UAsSRq+PmzsQZ MQEieOtQvQzXZWmUPbFLpCPeFAvYNX3enAocjDs4+L+NVok0S1EqUrsoh28+EiP3 Zu7xWgLSUjgk80O5/rE2UQYxs81YhEfqvPcXTnmuaP0tArJzsmdOolIMXYNxOoEn 431Lg9IM3SfxGgG9iDpwhqKbF2bKfh/s70uTHWu71oWmy/6iv+m2jTapWWqn3eeQ WtF6+A+dJc2NlnH8XeXFPlS+lymHuWIBP3Cgc4v8kBgOLV+XZt8= -----END CERTIFICATE-----Generated at Sun Dec 7 03:41:19 2025 by rpki-client