This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft File: D714F468978E86AB39DC1CFD7B22A6CED936605D.mft (raw, json) Hash identifier: VXjK4lB/iaXYsH5A6VPQ+wfef+VvAwAZFGrw4bUbY6A= Subject key identifier: FA:6E:FD:07:43:F7:0F:D9:89:07:6E:4C:D2:3B:F6:C8:D8:9F:BA:13 Authority key identifier: D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D Certificate issuer: /CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Certificate serial: 7B6C1C400A6B3F756A2EC754A370E441FC4CCD02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft Manifest number: 01DB Signing time: Wed 24 Dec 2025 04:32:41 +0000 Manifest this update: Wed 24 Dec 2025 04:27:41 +0000 Manifest next update: Sat 27 Dec 2025 16:18:41 +0000 Files and hashes: 1: 3130332e3132312e3134342e302f32332d3234203d3e20313335343738.roa (hash: +CdAlYM7nun1wI/1nBpguFrXp8lMNDu4i4cocPNWO9s=) 2: 3130332e3132312e3134362e302f32332d3234203d3e20313335343738.roa (hash: nWVhYRUUcfc8aYv1wy6ZUuBKnCS0BHar4Lt91zGFRLk=) 3: D714F468978E86AB39DC1CFD7B22A6CED936605D.crl (hash: 7XYthm4GdKgHIyC9QxJZ1MfV8z7XUXs+Ks2S8gkYgkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:18:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6c:1c:40:0a:6b:3f:75:6a:2e:c7:54:a3:70:e4:41:fc:4c:cd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D714F468978E86AB39DC1CFD7B22A6CED936605D Validity Not Before: Dec 24 04:27:41 2025 GMT Not After : Dec 27 16:18:41 2025 GMT Subject: CN=FA6EFD0743F70FD989076E4CD23BF6C8D89FBA13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:7e:53:0d:87:fa:50:b5:83:50:d1:a5:48: 73:e2:ec:0a:3d:7c:6f:8f:14:36:1e:8e:57:c4:74: d8:54:3e:23:5c:f4:7c:eb:28:62:ce:26:36:7c:57: b5:5f:ab:26:84:ee:ea:03:27:fc:85:2f:dd:18:7a: 83:cd:03:52:2c:87:f2:48:c6:13:ee:e3:a6:b0:10: c4:17:e8:90:39:6d:dd:ba:5e:ac:0e:ca:4f:0c:ab: ef:7a:91:3b:88:a1:3b:ff:8a:32:1c:3e:ac:01:ed: d1:cf:b0:75:1e:10:9d:4e:e3:af:64:b6:9e:d5:3f: 01:61:3b:fa:2a:7c:5e:91:7e:10:76:4b:91:3e:a7: 53:c4:64:67:8d:3c:64:8f:33:e2:0d:6b:5a:a7:c0: 04:3a:09:77:2b:09:30:c0:b3:c9:c2:8e:e3:8c:7f: 35:05:a0:d8:2d:6a:90:3c:c1:ea:bc:34:21:ff:c0: a7:23:73:60:8f:3b:86:38:cd:a8:4c:a0:3e:b7:76: 93:67:02:f9:0c:51:b8:d0:cf:65:d6:4d:ae:d3:77: ef:fb:4d:b3:80:1a:42:8b:36:10:1b:ba:a6:03:57: 47:47:ff:9e:6c:d1:99:da:85:7d:94:1a:b5:e6:e4: 9b:13:3e:28:98:6e:c3:d0:e3:60:e3:9c:48:0b:ea: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6E:FD:07:43:F7:0F:D9:89:07:6E:4C:D2:3B:F6:C8:D8:9F:BA:13 X509v3 Authority Key Identifier: keyid:D7:14:F4:68:97:8E:86:AB:39:DC:1C:FD:7B:22:A6:CE:D9:36:60:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D714F468978E86AB39DC1CFD7B22A6CED936605D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51e00779-4a39-47f0-8338-44f88c291706/0/D714F468978E86AB39DC1CFD7B22A6CED936605D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:77:f1:51:bd:55:e8:61:02:0d:e7:b4:ad:aa:c3:ca:e3:0b: 21:d6:47:8b:70:f7:0a:a2:b4:f1:96:a6:e0:b6:4b:f8:d6:4d: 16:23:0e:4e:4e:99:67:3a:b9:dc:fa:55:e0:f3:c7:7f:f5:b5: 35:3c:3f:66:71:f6:12:d2:13:36:52:e6:08:bb:0a:d3:8c:31: c9:b8:4c:f5:eb:75:a6:a2:46:92:da:a8:f3:76:83:25:f8:78: b4:3d:ec:e6:49:a8:7b:9c:73:93:2c:b9:a3:cc:22:9a:f9:be: 3d:76:f3:bc:3b:1c:50:cd:83:49:79:d6:e5:13:5f:cd:c2:28: 32:24:ab:38:fc:ea:2d:cd:47:45:bf:1d:89:74:28:e3:0d:05: 90:04:fe:cb:d0:d6:14:7e:3c:7a:d8:05:2b:55:23:5e:68:f3: ba:16:2c:57:25:92:8a:36:2e:e8:d0:62:55:91:81:21:56:4a: 0c:86:c6:ba:43:3e:79:df:66:87:a4:3c:a1:1f:61:d5:0a:77: d4:20:00:ae:fa:e9:11:2c:b8:3e:5b:fe:d6:88:f3:1d:6e:5b: 2c:61:7a:00:f8:cb:09:a9:21:3a:4f:65:0c:e5:ef:7b:c0:35: d0:39:99:ce:b7:aa:8f:5b:9f:42:92:78:98:8d:6c:14:fd:8e: 20:d5:01:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe2wcQAprP3VqLsdUo3DkQfxMzQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VE OTM2NjA1RDAeFw0yNTEyMjQwNDI3NDFaFw0yNTEyMjcxNjE4NDFaMDMxMTAvBgNV BAMTKEZBNkVGRDA3NDNGNzBGRDk4OTA3NkU0Q0QyM0JGNkM4RDg5RkJBMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48H5TDYf6ULWDUNGlSHPi7Ao9 fG+PFDYejlfEdNhUPiNc9HzrKGLOJjZ8V7VfqyaE7uoDJ/yFL90YeoPNA1Ish/JI xhPu46awEMQX6JA5bd26XqwOyk8Mq+96kTuIoTv/ijIcPqwB7dHPsHUeEJ1O469k tp7VPwFhO/oqfF6RfhB2S5E+p1PEZGeNPGSPM+INa1qnwAQ6CXcrCTDAs8nCjuOM fzUFoNgtapA8weq8NCH/wKcjc2CPO4Y4zahMoD63dpNnAvkMUbjQz2XWTa7Td+/7 TbOAGkKLNhAbuqYDV0dH/55s0ZnahX2UGrXm5JsTPiiYbsPQ42DjnEgL6j+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+m79B0P3D9mJB25M0jv2yNifuhMwHwYDVR0j BBgwFoAU1xT0aJeOhqs53Bz9eyKmztk2YF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWUwMDc3OS00YTM5LTQ3ZjAtODMzOC00NGY4OGMyOTE3MDYvMC9ENzE0RjQ2ODk3 OEU4NkFCMzlEQzFDRkQ3QjIyQTZDRUQ5MzY2MDVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2Q0VEOTM2 NjA1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFlMDA3NzktNGEzOS00N2YwLTgz MzgtNDRmODhjMjkxNzA2LzAvRDcxNEY0Njg5NzhFODZBQjM5REMxQ0ZEN0IyMkE2 Q0VEOTM2NjA1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV38VG9VehhAg3ntK2qw8rjCyHWR4tw9wqi tPGWpuC2S/jWTRYjDk5OmWc6udz6VeDzx3/1tTU8P2Zx9hLSEzZS5gi7CtOMMcm4 TPXrdaaiRpLaqPN2gyX4eLQ97OZJqHucc5MsuaPMIpr5vj1287w7HFDNg0l51uUT X83CKDIkqzj86i3NR0W/HYl0KOMNBZAE/svQ1hR+PHrYBStVI15o87oWLFclkoo2 LujQYlWRgSFWSgyGxrpDPnnfZoekPKEfYdUKd9QgAK766REsuD5b/taI8x1uWyxh egD4ywmpITpPZQzl73vANdA5mc63qo9bn0KSeJiNbBT9jiDVAQM= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:15 2025 by rpki-client