This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: Wl/6H/BEpUb6uir/VzYPJQvbi7QxzAuu62+t+OQRutI= Subject key identifier: B0:FE:E0:6D:92:4E:E5:FE:DC:A0:A8:24:7D:54:79:74:3D:46:5D:F7 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 4A4217697A9C4761C3EB8C33FC7C7855685291E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03B2 Signing time: Thu 04 Dec 2025 23:31:05 +0000 Manifest this update: Thu 04 Dec 2025 23:26:05 +0000 Manifest next update: Mon 08 Dec 2025 10:17:05 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: tVp8gQV+StDSHpKoU09NvFaxhWklZcBzPHp4W7CsfVM=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:17:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:42:17:69:7a:9c:47:61:c3:eb:8c:33:fc:7c:78:55:68:52:91:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Dec 4 23:26:05 2025 GMT Not After : Dec 8 10:17:05 2025 GMT Subject: CN=B0FEE06D924EE5FEDCA0A8247D5479743D465DF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:31:c9:d1:0e:59:06:20:91:36:4a:27:7a: 17:bc:18:cb:99:bf:6d:f6:f5:6c:8f:1d:49:b7:e1: 51:84:8e:ca:1f:a6:10:e1:60:6e:f3:b4:5a:22:20: 84:84:09:94:b5:58:08:8b:f7:7a:14:fa:2e:77:b2: bc:7b:ae:2a:77:5b:5d:2e:1c:3c:37:a0:92:3b:d2: f3:d7:36:f3:32:df:27:0c:43:d3:47:41:c8:0d:03: 8e:31:c4:79:ac:a8:96:db:91:7b:73:e6:fd:18:6e: bd:8b:0b:d8:a9:f7:84:b8:d1:93:de:0b:5e:ad:89: 67:63:38:d3:36:53:05:c6:72:68:63:f8:a3:6e:f7: ba:0e:11:37:0b:5d:f3:c9:90:08:40:2b:46:72:6e: ed:ad:c8:58:9e:d7:6a:17:f0:da:6c:2f:8b:6f:ab: 4f:58:46:1b:58:ed:2c:c7:7c:f1:5e:5f:e1:f1:0e: ac:a2:88:e0:9f:03:3c:2f:05:6a:a1:4d:3f:69:3a: 80:5a:71:a8:cf:29:8c:9a:38:c0:e6:7c:c5:86:ba: bf:1a:71:3e:06:1c:7c:18:08:6d:de:c2:00:e0:fd: 4a:9d:e4:02:ab:94:4d:7c:a1:84:12:c2:a9:8d:52: ed:eb:fe:0f:00:69:56:72:12:cd:f1:a2:a0:cf:37: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FE:E0:6D:92:4E:E5:FE:DC:A0:A8:24:7D:54:79:74:3D:46:5D:F7 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:15:30:cb:b5:52:66:fe:59:41:c1:bf:51:b9:26:94:90: 54:c6:06:15:2b:2d:e9:b8:96:bf:15:26:a7:64:09:62:38:68: 48:b4:de:4e:a1:99:2a:c5:bf:2f:96:94:69:51:8a:48:20:4a: fc:06:5f:1e:47:d3:4a:a4:88:ba:27:2e:9b:c7:9a:b0:cb:04: d6:fd:02:fd:2d:68:5e:67:b7:35:7c:99:3c:ac:e9:72:47:89: e8:e2:9a:9f:ef:1f:2f:7b:ac:2b:a4:92:d4:2c:df:ca:13:6d: 72:48:a0:a0:63:74:16:21:f3:4c:0a:48:64:81:72:75:fb:0d: 5c:3e:6a:69:7c:43:6a:3c:24:7f:c1:b1:31:b5:fb:f1:4c:97: 0e:8b:2d:02:b0:f8:cf:10:63:08:b0:7a:2f:d9:a1:82:8e:ed: 2b:6b:34:8f:92:67:a1:1c:ff:03:d6:37:08:69:49:71:52:1f: 84:24:40:6f:2a:04:4d:34:14:6a:cc:8e:a7:42:59:ea:d8:82: 2e:c7:2c:33:88:7d:28:f4:9c:02:c5:e3:c6:5f:23:f1:dd:6c: b2:1f:30:25:51:da:b8:3b:f0:b0:de:53:af:b8:29:a2:43:57: 5c:0c:93:a7:7a:ef:d7:ce:78:94:8d:d1:52:02:4a:33:96:13: 6c:6e:f9:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkIXaXqcR2HD64wz/Hx4VWhSkeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTEyMDQyMzI2MDVaFw0yNTEyMDgxMDE3MDVaMDMxMTAvBgNV BAMTKEIwRkVFMDZEOTI0RUU1RkVEQ0EwQTgyNDdENTQ3OTc0M0Q0NjVERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4DHJ0Q5ZBiCRNkonehe8GMuZ v2329WyPHUm34VGEjsofphDhYG7ztFoiIISECZS1WAiL93oU+i53srx7rip3W10u HDw3oJI70vPXNvMy3ycMQ9NHQcgNA44xxHmsqJbbkXtz5v0Ybr2LC9ip94S40ZPe C16tiWdjONM2UwXGcmhj+KNu97oOETcLXfPJkAhAK0Zybu2tyFie12oX8NpsL4tv q09YRhtY7SzHfPFeX+HxDqyiiOCfAzwvBWqhTT9pOoBacajPKYyaOMDmfMWGur8a cT4GHHwYCG3ewgDg/Uqd5AKrlE18oYQSwqmNUu3r/g8AaVZyEs3xoqDPN8e5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsP7gbZJO5f7coKgkfVR5dD1GXfcwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0/FTDLtVJm/llBwb9RuSaUkFTGBhUrLem4 lr8VJqdkCWI4aEi03k6hmSrFvy+WlGlRikggSvwGXx5H00qkiLonLpvHmrDLBNb9 Av0taF5ntzV8mTys6XJHiejimp/vHy97rCukktQs38oTbXJIoKBjdBYh80wKSGSB cnX7DVw+aml8Q2o8JH/BsTG1+/FMlw6LLQKw+M8QYwiwei/ZoYKO7StrNI+SZ6Ec /wPWNwhpSXFSH4QkQG8qBE00FGrMjqdCWerYgi7HLDOIfSj0nALF48ZfI/HdbLIf MCVR2rg78LDeU6+4KaJDV1wMk6d679fOeJSN0VICSjOWE2xu+VA= -----END CERTIFICATE-----Generated at Sun Dec 7 08:19:23 2025 by rpki-client