This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft File: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft (raw, json) Hash identifier: GjAqb6A6W8kuY+bl3XXnILzg90DBvgpCXt2I/JeZJ6E= Subject key identifier: 63:09:C8:72:2A:0B:AE:41:70:50:F7:E7:D4:2E:47:B8:CA:4D:66:AC Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B Certificate issuer: /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Certificate serial: 95B63253E8B1D112714846F97BA6EE0A98A7B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft Manifest number: 0232 Signing time: Sun 21 Dec 2025 08:21:28 +0000 Manifest this update: Sun 21 Dec 2025 08:16:28 +0000 Manifest next update: Wed 24 Dec 2025 11:22:28 +0000 Files and hashes: 1: 3130332e3131312e3131382e302f32342d3234203d3e20313439393531.roa (hash: FK++k16W5o1G1ymHbgbWCr22LclnvM/8CkDyIWrtSXU=) 2: 323030313a6466313a316563303a3a2f34382d3438203d3e20313439393531.roa (hash: O62FaU7sfJ7WBpQAG4VOlHgoxy59qAGq0CxPAvacDkY=) 3: 3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (hash: SQEisBhY0DV53zHr/sBQtcOCDd0Bbr0+fAzbajSxd3s=) 4: CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl (hash: s+0pT8/Rr+F2VYeW1SuT9ot2osElDGDECFCBd/YK2SQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95:b6:32:53:e8:b1:d1:12:71:48:46:f9:7b:a6:ee:0a:98:a7:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B Validity Not Before: Dec 21 08:16:28 2025 GMT Not After : Dec 24 11:22:28 2025 GMT Subject: CN=6309C8722A0BAE417050F7E7D42E47B8CA4D66AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:b5:8e:4c:05:34:2d:57:b7:84:81:ce:ab: 8d:91:ed:4c:fa:12:5c:ac:77:6b:f7:9b:59:8d:4c: 64:64:24:cc:69:15:02:61:4d:84:ac:ab:b5:98:24: c0:3f:51:d3:90:40:1b:f8:3d:f8:bc:81:e0:3f:aa: ff:13:0d:27:81:7d:9e:b0:aa:32:7e:4f:3e:35:23: f4:19:b7:47:67:7e:c2:56:e7:a9:dd:fa:a7:c3:9b: e6:07:2e:97:a5:fd:ba:f0:7b:47:e7:15:7e:0b:6b: 9b:71:82:8a:29:b9:c0:2d:01:6c:a6:43:f0:21:c9: de:4e:74:66:63:00:a4:30:77:c5:db:ff:45:2b:55: 8e:20:21:4e:18:81:9f:cb:d9:0f:96:a7:84:15:6e: 7d:d0:93:2a:15:3f:08:94:37:e9:88:a7:97:15:0e: d1:26:3e:7b:8e:08:78:ae:e2:32:1d:3a:dc:a7:7f: fd:35:56:61:43:0e:6e:bb:42:fb:97:55:04:b3:c9: a2:75:62:f4:14:0d:f6:7d:5c:52:65:d5:8c:5a:06: b7:4d:eb:af:7e:b0:61:26:e3:8f:2e:e2:06:8d:9a: 2a:3a:86:53:c3:d1:36:7d:90:74:81:1d:ed:b2:36: b7:e1:d3:47:c0:cd:54:2b:86:a5:f7:d1:f2:8a:14: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:09:C8:72:2A:0B:AE:41:70:50:F7:E7:D4:2E:47:B8:CA:4D:66:AC X509v3 Authority Key Identifier: keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:88:0a:61:a2:89:fe:0f:aa:59:88:79:45:40:79:7d:9f:94: ba:7b:06:40:3e:ea:b7:b6:f6:68:2e:71:0f:1e:7b:65:f9:e6: 02:0d:58:e3:f6:5b:46:37:78:a5:8a:d6:2d:e8:18:83:23:7f: b4:08:18:09:08:bc:9d:24:2d:2b:34:97:70:8c:08:91:14:d4: 31:d4:5f:b5:eb:8c:9b:b6:fe:25:2d:70:91:57:5b:0f:58:b0: 62:46:ce:21:3c:5f:29:a3:65:54:61:78:48:09:f6:69:9c:5d: 4c:e4:f5:d7:e8:df:bc:e1:c5:8e:bc:5c:87:aa:e2:c1:60:52: 88:19:d5:68:9b:2c:83:1f:a4:24:d4:78:d1:62:87:0c:1d:23: 26:65:8f:f2:4c:6f:07:d2:84:ef:4d:cd:6f:90:1a:c9:9a:16: a9:b8:f4:63:15:9a:e6:c2:ab:ad:67:db:07:32:20:fa:bc:ad: 12:03:99:ab:86:e5:7d:da:53:e9:d1:72:50:cd:29:f5:c8:a2: 9a:a4:52:4b:d8:fd:6c:20:6f:bb:98:a4:6a:74:1e:58:72:d2: 26:30:79:ad:39:58:e1:9d:0f:d2:24:c3:c2:4a:11:17:fb:73: 04:e4:78:f5:44:f1:ce:7c:b5:a3:9c:59:67:0d:4c:89:9a:4f: 5e:5c:fc:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJW2MlPosdEScUhG+Xum7gqYp7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1 N0IxRTM1QjAeFw0yNTEyMjEwODE2MjhaFw0yNTEyMjQxMTIyMjhaMDMxMTAvBgNV BAMTKDYzMDlDODcyMkEwQkFFNDE3MDUwRjdFN0Q0MkU0N0I4Q0E0RDY2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn97WOTAU0LVe3hIHOq42R7Uz6 Elysd2v3m1mNTGRkJMxpFQJhTYSsq7WYJMA/UdOQQBv4Pfi8geA/qv8TDSeBfZ6w qjJ+Tz41I/QZt0dnfsJW56nd+qfDm+YHLpel/brwe0fnFX4La5txgoopucAtAWym Q/Ahyd5OdGZjAKQwd8Xb/0UrVY4gIU4YgZ/L2Q+Wp4QVbn3QkyoVPwiUN+mIp5cV DtEmPnuOCHiu4jIdOtynf/01VmFDDm67QvuXVQSzyaJ1YvQUDfZ9XFJl1YxaBrdN 669+sGEm448u4gaNmio6hlPD0TZ9kHSBHe2yNrfh00fAzVQrhqX30fKKFH3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwnIcioLrkFwUPfn1C5HuMpNZqwwHwYDVR0j BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix RTM1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTFmMTZjNDUtOTZmYi00YzkyLTgw NGUtNjRiMGJmMjgwMzAyLzAvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFC MkQ1N0IxRTM1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmICmGiif4PqlmIeUVAeX2flLp7BkA+6re2 9mgucQ8ee2X55gINWOP2W0Y3eKWK1i3oGIMjf7QIGAkIvJ0kLSs0l3CMCJEU1DHU X7XrjJu2/iUtcJFXWw9YsGJGziE8XymjZVRheEgJ9mmcXUzk9dfo37zhxY68XIeq 4sFgUogZ1WibLIMfpCTUeNFihwwdIyZlj/JMbwfShO9NzW+QGsmaFqm49GMVmubC q61n2wcyIPq8rRIDmauG5X3aU+nRclDNKfXIopqkUkvY/Wwgb7uYpGp0Hlhy0iYw ea05WOGdD9Ikw8JKERf7cwTkePVE8c58taOcWWcNTImaT15c/K4= -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:07 2025 by rpki-client