This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: 0O2xetgqZZPidpGe/dGNms4ZWDi95lgbjTVDS93Y0eM= Subject key identifier: F4:52:7B:29:AA:00:C7:E8:D7:0D:3D:C0:6C:E5:87:77:7E:B2:63:5E Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 548CE480E08F6C81C6B1B94FA3997CDDD91778FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: A9 Signing time: Mon 15 Dec 2025 09:21:51 +0000 Manifest this update: Mon 15 Dec 2025 09:16:51 +0000 Manifest next update: Thu 18 Dec 2025 20:22:51 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: T3yDqS0+3dA+m+avlZ0leSvSfDibtDSTb9NhyNqQjCs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 20:22:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8c:e4:80:e0:8f:6c:81:c6:b1:b9:4f:a3:99:7c:dd:d9:17:78:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Dec 15 09:16:51 2025 GMT Not After : Dec 18 20:22:51 2025 GMT Subject: CN=F4527B29AA00C7E8D70D3DC06CE587777EB2635E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:4f:62:92:23:47:c9:ff:b8:e5:92:7d:13: 2d:ed:b3:73:ac:fc:76:35:9a:39:39:5e:c3:3d:9d: 3a:c3:51:f3:61:a9:74:61:b6:00:fb:b8:f8:af:4e: f1:b7:1f:e3:fd:f7:53:9c:8a:62:f6:06:4a:dd:1a: b1:6c:83:8f:b1:b2:fb:f6:38:d8:26:f9:3c:64:96: 55:93:b4:01:a3:d5:8e:4a:6e:bd:2b:5d:f2:b6:6c: 96:57:2b:ed:47:68:fe:f0:83:d8:ef:d0:09:2a:25: 91:e3:92:01:ed:2f:30:1f:8a:55:b1:71:02:78:cf: 57:3e:3e:ab:97:21:c2:13:0d:5b:c7:15:e8:0e:0d: 32:38:f7:d4:e7:32:4d:8f:17:0c:c5:c5:b2:ee:e6: a4:ea:91:7f:ee:87:28:2a:5f:26:47:cc:16:74:30: b1:f9:7b:1c:4e:a7:b1:1f:dd:da:0b:3b:1b:1b:c1: 79:77:a7:05:62:b6:ff:37:cd:b4:b5:b8:b3:a0:47: b0:ee:d8:ed:17:bf:73:7a:41:e2:5f:2f:11:7a:d8: 70:fb:a8:30:b7:2e:69:87:93:34:d5:b9:55:16:bb: 3d:b5:16:96:0b:62:6a:49:cb:02:9d:7f:aa:81:38: 0f:dd:8d:a8:09:92:2e:7d:aa:fe:27:7e:2e:e5:9d: fd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:52:7B:29:AA:00:C7:E8:D7:0D:3D:C0:6C:E5:87:77:7E:B2:63:5E X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d9:b4:56:0c:90:04:27:c1:e2:bc:81:d0:b2:13:ea:8d:e7: e1:d7:19:bd:f7:4e:47:a4:ae:9b:b5:ca:92:55:71:92:ad:15: 9c:e7:60:b4:23:b5:31:eb:05:23:cc:b5:cd:2c:33:93:30:b5: 3d:5e:c4:4a:47:54:e3:5f:30:2b:48:30:8d:89:99:18:9b:c3: b6:94:76:53:07:96:83:1f:9b:32:e0:00:f6:9a:35:da:cd:e7: 51:c6:7c:8d:87:14:3f:52:73:cd:9b:c4:8c:47:d3:89:48:f9: 1a:da:d4:d3:f5:cc:ae:1e:6a:ca:1b:33:1d:52:7a:20:08:57: f5:4e:6f:80:d8:74:a0:e5:1f:a5:25:53:2d:e0:4d:fa:58:96: df:e3:9e:9e:7e:f6:69:e4:da:2d:12:55:c7:bb:c3:f3:5b:6c: 2c:38:23:09:e4:b8:cb:33:a7:3a:5e:cf:b7:ed:37:51:83:50: f5:83:73:89:68:94:99:90:e7:6e:5f:c0:14:64:09:e8:06:46: ba:6b:44:c2:2e:39:11:6b:e5:77:da:29:ec:95:61:c7:bc:6d: 29:23:75:d0:95:85:38:a2:a0:f3:0e:27:f7:6e:c1:92:ac:8c: a6:bb:22:e8:1e:cd:7e:17:2a:28:ec:31:c2:c5:3f:c0:a9:39: 62:84:ad:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIzkgOCPbIHGsblPo5l83dkXeP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNTEyMTUwOTE2NTFaFw0yNTEyMTgyMDIyNTFaMDMxMTAvBgNV BAMTKEY0NTI3QjI5QUEwMEM3RThENzBEM0RDMDZDRTU4Nzc3N0VCMjYzNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4U9ikiNHyf+45ZJ9Ey3ts3Os /HY1mjk5XsM9nTrDUfNhqXRhtgD7uPivTvG3H+P991OcimL2BkrdGrFsg4+xsvv2 ONgm+TxkllWTtAGj1Y5Kbr0rXfK2bJZXK+1HaP7wg9jv0AkqJZHjkgHtLzAfilWx cQJ4z1c+PquXIcITDVvHFegODTI499TnMk2PFwzFxbLu5qTqkX/uhygqXyZHzBZ0 MLH5exxOp7Ef3doLOxsbwXl3pwVitv83zbS1uLOgR7Du2O0Xv3N6QeJfLxF62HD7 qDC3LmmHkzTVuVUWuz21FpYLYmpJywKdf6qBOA/djagJki59qv4nfi7lnf3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9FJ7KaoAx+jXDT3AbOWHd36yY14wHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnZtFYMkAQnweK8gdCyE+qN5+HXGb33Tkek rpu1ypJVcZKtFZznYLQjtTHrBSPMtc0sM5MwtT1exEpHVONfMCtIMI2JmRibw7aU dlMHloMfmzLgAPaaNdrN51HGfI2HFD9Sc82bxIxH04lI+Rra1NP1zK4easobMx1S eiAIV/VOb4DYdKDlH6UlUy3gTfpYlt/jnp5+9mnk2i0SVce7w/NbbCw4IwnkuMsz pzpez7ftN1GDUPWDc4lolJmQ525fwBRkCegGRrprRMIuORFr5XfaKeyVYce8bSkj ddCVhTiioPMOJ/duwZKsjKa7IugezX4XKijsMcLFP8CpOWKErXA= -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:45 2025 by rpki-client