This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: DtXzf7sdqy0LkOYFSU96WbVuIMbuY4d13timk37z1Mc= Subject key identifier: 21:01:F4:26:15:C4:0E:5A:FE:18:9B:58:4B:B1:86:13:27:10:44:9C Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 5CE0A9B1EA1A11243FD4EAFD3210F009C9FA5A3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 0531 Signing time: Fri 19 Dec 2025 20:02:56 +0000 Manifest this update: Fri 19 Dec 2025 19:57:56 +0000 Manifest next update: Tue 23 Dec 2025 07:20:56 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: QMHkqFMzKTLqEJBi+nFaXIwsFGd5CVCyzptSpPpX16Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e0:a9:b1:ea:1a:11:24:3f:d4:ea:fd:32:10:f0:09:c9:fa:5a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Dec 19 19:57:56 2025 GMT Not After : Dec 23 07:20:56 2025 GMT Subject: CN=2101F42615C40E5AFE189B584BB186132710449C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:52:ea:01:06:83:8d:2e:64:91:0e:b0:ba:e7: 3b:7a:a2:2c:e8:78:80:ee:80:a6:f3:8a:00:fb:15: e3:7a:8c:84:b9:a5:2f:32:00:8c:cd:90:2d:53:2b: a9:d1:02:b8:27:87:b8:89:b4:2a:f4:66:f7:8b:ce: 9d:19:89:63:98:22:28:d7:d9:05:13:4c:ca:8b:fb: 86:4f:71:a9:5c:02:2a:87:b8:9a:98:bf:85:d9:9f: 73:74:5e:0f:91:dc:24:3c:1b:f7:b9:83:4c:43:5c: c2:e8:e8:6d:1e:fd:e5:1e:2b:98:16:27:56:f9:2e: 34:51:10:55:50:fa:01:f9:17:72:39:c8:ed:fe:86: 7e:b0:1e:bf:57:05:9a:c4:64:2f:b8:f8:09:85:a7: b3:c7:26:3d:21:32:76:5a:68:ee:30:b6:83:e4:3f: 7c:50:8d:6a:99:b0:8b:02:ce:23:cc:50:89:02:5c: a1:06:ef:09:31:cc:20:22:5b:19:1a:e2:bd:ee:0c: 87:71:80:1a:7a:9e:25:e4:3a:29:5b:bb:60:44:c2: 01:9b:00:c4:41:7d:21:94:9d:f3:56:8b:26:e3:0c: 77:d6:8f:98:a2:bf:1c:9b:74:2a:da:1a:59:af:94: f7:0e:69:35:65:43:23:f1:47:bc:c9:13:3b:25:77: 15:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:01:F4:26:15:C4:0E:5A:FE:18:9B:58:4B:B1:86:13:27:10:44:9C X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:15:d2:00:c7:d1:8e:0e:3b:f4:6f:60:d5:08:37:e9:f3:39: c3:b7:3c:dc:c8:a4:64:07:f6:eb:4f:c8:15:c9:06:a0:0c:a6: a5:67:41:14:9d:aa:cc:1c:dc:84:11:5b:ab:5e:7a:30:39:41: 0b:ff:2f:f3:07:f0:28:41:b9:c0:68:e5:e8:b1:8c:69:f5:1a: bb:e1:67:42:ca:bf:58:c7:55:58:6d:3d:46:15:65:e4:b8:7b: 90:7e:83:a9:b9:3f:73:ac:65:6f:7f:f2:16:f8:91:df:19:d1: e5:6c:67:32:df:45:3f:3e:1a:29:dc:89:e5:77:c4:f5:e9:5a: c2:fd:12:fe:5d:c3:b2:78:ae:97:eb:cd:36:7c:0b:0b:9a:f0: c4:03:32:e2:d1:2b:06:c7:6f:cf:19:3e:88:7a:5a:c3:ff:e7: ad:b9:ac:97:15:56:47:93:aa:b2:34:3d:bd:74:5b:72:76:a4: 75:6f:50:f1:b0:1d:89:08:5d:46:54:16:2b:b8:ab:d8:c1:63: 60:24:68:dd:32:31:31:49:2f:06:72:38:68:13:31:91:81:3d: 91:34:b4:b2:56:c6:b0:17:29:ca:4a:3b:66:4b:20:59:3e:e1: b8:0c:ec:14:e2:fc:3a:6c:01:b4:1e:3a:eb:49:f9:ed:e5:00: de:ff:3d:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOCpseoaESQ/1Or9MhDwCcn6Wj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTEyMTkxOTU3NTZaFw0yNTEyMjMwNzIwNTZaMDMxMTAvBgNV BAMTKDIxMDFGNDI2MTVDNDBFNUFGRTE4OUI1ODRCQjE4NjEzMjcxMDQ0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUuoBBoONLmSRDrC65zt6oizo eIDugKbzigD7FeN6jIS5pS8yAIzNkC1TK6nRArgnh7iJtCr0ZveLzp0ZiWOYIijX 2QUTTMqL+4ZPcalcAiqHuJqYv4XZn3N0Xg+R3CQ8G/e5g0xDXMLo6G0e/eUeK5gW J1b5LjRREFVQ+gH5F3I5yO3+hn6wHr9XBZrEZC+4+AmFp7PHJj0hMnZaaO4wtoPk P3xQjWqZsIsCziPMUIkCXKEG7wkxzCAiWxka4r3uDIdxgBp6niXkOilbu2BEwgGb AMRBfSGUnfNWiybjDHfWj5iivxybdCraGlmvlPcOaTVlQyPxR7zJEzsldxXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQH0JhXEDlr+GJtYS7GGEycQRJwwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsV0gDH0Y4OO/RvYNUIN+nzOcO3PNzIpGQH 9utPyBXJBqAMpqVnQRSdqswc3IQRW6teejA5QQv/L/MH8ChBucBo5eixjGn1Grvh Z0LKv1jHVVhtPUYVZeS4e5B+g6m5P3OsZW9/8hb4kd8Z0eVsZzLfRT8+GincieV3 xPXpWsL9Ev5dw7J4rpfrzTZ8Cwua8MQDMuLRKwbHb88ZPoh6WsP/5625rJcVVkeT qrI0Pb10W3J2pHVvUPGwHYkIXUZUFiu4q9jBY2AkaN0yMTFJLwZyOGgTMZGBPZE0 tLJWxrAXKcpKO2ZLIFk+4bgM7BTi/DpsAbQeOutJ+e3lAN7/PZ0= -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:32 2025 by rpki-client