This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: zsTkDOGRYt2HMyHxeLbbKhRwu5F+F64Qu+Nw/pIxiEQ= Subject key identifier: EB:1A:81:CC:7A:6C:57:E9:A0:4F:D3:97:8B:0F:5A:75:13:AC:99:1F Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 2DF2D604FCC0095280FF355613FAD27C3E46EB5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 026A Signing time: Wed 17 Dec 2025 17:51:51 +0000 Manifest this update: Wed 17 Dec 2025 17:46:51 +0000 Manifest next update: Sun 21 Dec 2025 00:02:51 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 2: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: buT+O7LaZBO9pRzUkbrvVsPJIjKMHIwzKOg2sMVJvlY=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f2:d6:04:fc:c0:09:52:80:ff:35:56:13:fa:d2:7c:3e:46:eb:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Dec 17 17:46:51 2025 GMT Not After : Dec 21 00:02:51 2025 GMT Subject: CN=EB1A81CC7A6C57E9A04FD3978B0F5A7513AC991F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:fe:12:ed:8b:07:ba:b0:72:b0:d8:24:9f: 8e:13:2a:86:fd:51:0f:a3:f2:94:66:a3:70:1d:d7: 42:21:28:22:52:a7:09:f4:06:22:68:18:14:86:de: 26:3c:36:b4:05:af:58:b6:fd:63:e0:e8:00:d3:81: 90:a2:e1:4b:82:ae:9c:97:48:7e:15:81:11:83:9f: eb:47:c0:e0:84:5d:45:e4:a5:e4:cc:74:44:2f:08: 09:45:26:4c:78:c7:33:ae:25:96:10:ce:33:fa:47: 94:c4:ef:d2:b1:57:11:39:6e:82:21:70:00:5c:5c: 1f:4b:cf:90:fd:bd:b0:d9:f4:b1:c7:3c:a7:59:3c: d9:7e:fe:db:c0:a0:b7:aa:a8:2c:02:90:04:a9:fc: 02:db:33:32:48:4b:55:49:78:0b:96:16:df:af:8c: bd:9f:e3:f7:e4:e0:7d:e6:a0:e2:46:1f:20:69:37: 63:38:69:4d:dc:71:64:36:82:98:34:32:4e:ba:ec: 9b:6e:b2:02:49:34:e9:03:b9:13:ba:98:e4:b6:09: e6:03:d3:7a:0d:c4:fb:fb:d5:dc:5d:56:3f:ec:c4: 0f:08:08:ef:c8:39:df:b9:c9:ce:94:13:53:6c:76: e6:0a:b4:9e:6b:5b:ac:63:35:cb:b4:bf:e0:85:77: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:81:CC:7A:6C:57:E9:A0:4F:D3:97:8B:0F:5A:75:13:AC:99:1F X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:26:99:55:1b:69:8e:66:58:c9:a3:69:59:9b:6b:d2:7e:0a: 20:3b:96:ba:ca:16:c4:68:84:1c:be:43:2c:f3:b8:1c:4f:f9: 1f:64:02:6d:5c:1b:8a:24:49:2c:bb:7e:85:54:a7:87:29:cf: 49:85:e8:c6:10:66:01:40:16:ee:4c:f0:67:52:49:d6:32:03: e5:e3:44:77:6d:b6:91:51:f3:30:fb:08:95:3e:f9:8c:56:8e: 75:62:75:6e:87:ac:3e:b1:cb:6d:8d:cb:34:8e:ce:71:ea:c0: ec:d1:9a:5f:f1:34:f6:0a:5d:8e:d7:f1:82:36:1b:f1:b4:3d: e1:6d:ff:66:2f:7d:cd:29:58:a1:c2:d4:45:57:c6:59:b2:81: 80:10:59:dd:e4:f0:d2:67:0b:e9:7a:bd:9c:c1:27:4c:e2:17: 44:63:cc:d3:e2:cc:ad:3a:c6:c2:f7:5b:8b:74:f7:4f:b1:28: bc:8d:a6:d7:03:f3:5a:d1:38:b3:82:79:d3:f2:2a:83:6b:ce: 6c:43:56:38:45:5c:f1:23:05:48:27:29:2a:5f:df:22:ea:b4: 91:3d:3d:a9:08:6f:05:b0:bc:e7:59:cd:85:91:f7:51:a4:4b: 7b:f3:5d:b1:e7:e8:af:54:85:5b:58:79:48:c8:a5:f4:75:ef: 87:97:7f:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfLWBPzACVKA/zVWE/rSfD5G610wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNTEyMTcxNzQ2NTFaFw0yNTEyMjEwMDAyNTFaMDMxMTAvBgNV BAMTKEVCMUE4MUNDN0E2QzU3RTlBMDRGRDM5NzhCMEY1QTc1MTNBQzk5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6af4S7YsHurBysNgkn44TKob9 UQ+j8pRmo3Ad10IhKCJSpwn0BiJoGBSG3iY8NrQFr1i2/WPg6ADTgZCi4UuCrpyX SH4VgRGDn+tHwOCEXUXkpeTMdEQvCAlFJkx4xzOuJZYQzjP6R5TE79KxVxE5boIh cABcXB9Lz5D9vbDZ9LHHPKdZPNl+/tvAoLeqqCwCkASp/ALbMzJIS1VJeAuWFt+v jL2f4/fk4H3moOJGHyBpN2M4aU3ccWQ2gpg0Mk667JtusgJJNOkDuRO6mOS2CeYD 03oNxPv71dxdVj/sxA8ICO/IOd+5yc6UE1NsduYKtJ5rW6xjNcu0v+CFd+M1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6xqBzHpsV+mgT9OXiw9adROsmR8wHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgmmVUbaY5mWMmjaVmba9J+CiA7lrrKFsRo hBy+QyzzuBxP+R9kAm1cG4okSSy7foVUp4cpz0mF6MYQZgFAFu5M8GdSSdYyA+Xj RHdttpFR8zD7CJU++YxWjnVidW6HrD6xy22NyzSOznHqwOzRml/xNPYKXY7X8YI2 G/G0PeFt/2Yvfc0pWKHC1EVXxlmygYAQWd3k8NJnC+l6vZzBJ0ziF0RjzNPizK06 xsL3W4t090+xKLyNptcD81rROLOCedPyKoNrzmxDVjhFXPEjBUgnKSpf3yLqtJE9 PakIbwWwvOdZzYWR91GkS3vzXbHn6K9UhVtYeUjIpfR174eXf5E= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:02 2025 by rpki-client