This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
File: 011400263413DE61A797AA22B58664ACD84FD8DF.mft (raw, json)
Hash identifier: kxKXdNXbJVfqwZqVmcJxqwxttKjkqk15Vrf31SFtjG4=
Subject key identifier: 6A:D0:41:2F:71:E2:0A:7E:23:4C:9B:1C:CF:92:53:29:6F:0D:0A:91
Authority key identifier: 01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
Certificate issuer: /CN=011400263413DE61A797AA22B58664ACD84FD8DF
Certificate serial: 5A8A5DACDD84F469FEC2659E052BDCD960BAD8D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
Manifest number: 0114
Signing time: Mon 15 Dec 2025 00:30:41 +0000
Manifest this update: Mon 15 Dec 2025 00:25:41 +0000
Manifest next update: Thu 18 Dec 2025 09:38:41 +0000
Files and hashes: 1: 3130332e3136362e302e302f32342d3234203d3e20313431393238.roa (hash: meaRs6wyk1QjNIKGW41CEEaArTRNShkA67gAO4asuCg=)
2: 011400263413DE61A797AA22B58664ACD84FD8DF.crl (hash: K2LeqZwvf5HeR2GLSlQnWLJiiN+skk7Axf3dUgrxGKs=)
3: 3130332e3136362e302e302f32332d3233203d3e20313431393238.roa (hash: Oie9FfzxAUFeEWo0lOSHSrXoitg3kaiPf131UbGR7DM=)
4: 3130332e3136362e312e302f32342d3234203d3e20313431393238.roa (hash: xzEL+y0BJIItneMMeHfN4auA7BVJMCe6TjNvsIm3a8c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 09:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:8a:5d:ac:dd:84:f4:69:fe:c2:65:9e:05:2b:dc:d9:60:ba:d8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011400263413DE61A797AA22B58664ACD84FD8DF
Validity
Not Before: Dec 15 00:25:41 2025 GMT
Not After : Dec 18 09:38:41 2025 GMT
Subject: CN=6AD0412F71E20A7E234C9B1CCF9253296F0D0A91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:99:f2:8e:4d:4e:f9:b7:a2:e7:4e:e0:41:
a6:b1:80:e4:14:de:f3:5d:08:e5:88:4a:08:c1:32:
e2:28:d1:f3:29:36:a4:3b:83:6a:50:38:5e:cf:0b:
88:a6:34:49:f5:7f:e3:77:48:76:04:92:b9:40:b4:
9c:d2:29:3a:de:93:d3:80:f4:6d:b4:90:04:f6:1c:
40:4f:a2:b5:d0:f9:a5:e5:9e:3c:53:25:1f:19:d2:
04:67:2d:03:fe:78:c2:d0:cd:89:43:30:7d:15:44:
cb:29:49:17:f9:25:59:57:f7:85:9e:a2:45:5b:23:
e4:c5:6c:62:27:a1:68:54:64:46:bd:d9:fa:8a:86:
e9:8e:1a:d3:ed:2d:b5:88:70:31:58:d7:04:57:89:
eb:89:df:a1:44:2b:a1:0b:5a:a6:a7:5c:9b:fe:cd:
00:03:12:3f:a8:1a:a5:f1:ee:51:dc:9a:63:d6:ca:
2c:d2:90:5e:f9:72:9b:20:89:14:30:3e:2f:68:ff:
f8:61:52:31:81:70:5c:0b:28:29:c1:66:69:8d:c1:
a6:64:44:2d:61:d3:80:79:fb:c3:81:8b:55:a4:14:
7c:de:2b:b7:1c:30:b7:e5:6a:8b:49:1d:e3:0e:25:
17:8d:4f:ba:70:a9:10:50:68:8d:c8:4c:f5:76:71:
2b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:41:2F:71:E2:0A:7E:23:4C:9B:1C:CF:92:53:29:6F:0D:0A:91
X509v3 Authority Key Identifier:
keyid:01:14:00:26:34:13:DE:61:A7:97:AA:22:B5:86:64:AC:D8:4F:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/011400263413DE61A797AA22B58664ACD84FD8DF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05e603e3-f23e-4c6a-bb3c-06409d65c838/0/011400263413DE61A797AA22B58664ACD84FD8DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c8:f7:75:58:b4:ab:71:16:28:e1:98:ce:2f:8e:ef:88:ca:
cb:6c:25:9a:12:c1:dd:e3:e4:b4:a4:a1:34:79:0c:08:1e:4e:
27:15:a7:a2:b1:48:0c:0a:20:3a:3a:8f:f4:0d:17:d4:75:69:
ae:52:3b:31:20:13:69:ff:0c:7f:8d:2e:50:3a:96:c6:c2:58:
13:c9:66:16:fe:33:a5:82:34:79:b1:fe:0e:91:36:06:0a:7b:
6e:da:17:73:c3:8b:d0:ea:7a:2a:18:cb:21:7e:02:a5:8d:fa:
04:d0:0a:a9:f5:23:7d:62:1c:8e:9c:83:fb:64:40:70:ec:7d:
23:0b:e5:56:9a:9a:05:28:6e:2b:e8:c6:9e:97:96:cf:3c:0c:
23:b5:a8:03:37:77:b2:f7:0a:1c:21:03:0b:0c:d3:74:12:99:
48:2b:df:07:c0:26:c6:bb:5a:56:c3:54:d1:1a:7c:51:72:c6:
5e:74:26:31:4b:2d:d3:50:63:e8:d7:01:7c:9e:d9:65:72:bb:
0d:5f:97:81:e1:db:c0:7f:db:26:c2:f8:14:69:57:c6:04:35:
87:30:05:68:92:b4:b4:7b:69:16:0d:94:fe:0b:f2:61:7c:1d:
5e:2d:eb:b1:95:13:0b:d5:bc:e1:62:cf:ce:1c:83:db:1a:29:
14:ef:6c:8f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUWopdrN2E9Gn+wmWeBSvc2WC62NUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNE
ODRGRDhERjAeFw0yNTEyMTUwMDI1NDFaFw0yNTEyMTgwOTM4NDFaMDMxMTAvBgNV
BAMTKDZBRDA0MTJGNzFFMjBBN0UyMzRDOUIxQ0NGOTI1MzI5NkYwRDBBOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr2Znyjk1O+bei507gQaaxgOQU
3vNdCOWISgjBMuIo0fMpNqQ7g2pQOF7PC4imNEn1f+N3SHYEkrlAtJzSKTrek9OA
9G20kAT2HEBPorXQ+aXlnjxTJR8Z0gRnLQP+eMLQzYlDMH0VRMspSRf5JVlX94We
okVbI+TFbGInoWhUZEa92fqKhumOGtPtLbWIcDFY1wRXieuJ36FEK6ELWqanXJv+
zQADEj+oGqXx7lHcmmPWyizSkF75cpsgiRQwPi9o//hhUjGBcFwLKCnBZmmNwaZk
RC1h04B5+8OBi1WkFHzeK7ccMLflaotJHeMOJReNT7pwqRBQaI3ITPV2cStjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUatBBL3HiCn4jTJscz5JTKW8NCpEwHwYDVR0j
BBgwFoAUARQAJjQT3mGnl6oitYZkrNhP2N8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NWU2MDNlMy1mMjNlLTRjNmEtYmIzYy0wNjQwOWQ2NWM4MzgvMC8wMTE0MDAyNjM0
MTNERTYxQTc5N0FBMjJCNTg2NjRBQ0Q4NEZEOERGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0QUNEODRG
RDhERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVlNjAzZTMtZjIzZS00YzZhLWJi
M2MtMDY0MDlkNjVjODM4LzAvMDExNDAwMjYzNDEzREU2MUE3OTdBQTIyQjU4NjY0
QUNEODRGRDhERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAATI93VYtKtxFijhmM4vju+IystsJZoSwd3j
5LSkoTR5DAgeTicVp6KxSAwKIDo6j/QNF9R1aa5SOzEgE2n/DH+NLlA6lsbCWBPJ
Zhb+M6WCNHmx/g6RNgYKe27aF3PDi9DqeioYyyF+AqWN+gTQCqn1I31iHI6cg/tk
QHDsfSML5VaamgUobivoxp6Xls88DCO1qAM3d7L3ChwhAwsM03QSmUgr3wfAJsa7
WlbDVNEafFFyxl50JjFLLdNQY+jXAXye2WVyuw1fl4Hh28B/2ybC+BRpV8YENYcw
BWiStLR7aRYNlP4L8mF8HV4t67GVEwvVvOFiz84cg9saKRTvbI8=
-----END CERTIFICATE-----
Generated at Wed Dec 17 09:46:36 2025 by rpki-client