This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft (raw, json) Hash identifier: WBBgatmYRficE0g9K+uJAUWRCxK+FoTv05xqOeqFt7g= Subject key identifier: 61:FF:61:10:AA:8F:FC:A1:15:C2:B8:E1:0E:A4:5F:5F:65:A1:81:BF Authority key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Certificate issuer: /CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Certificate serial: 145AFE196123FA029F88103638926CA6013935C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft Manifest number: 01A3 Signing time: Wed 24 Dec 2025 04:31:36 +0000 Manifest this update: Wed 24 Dec 2025 04:26:36 +0000 Manifest next update: Sat 27 Dec 2025 06:34:36 +0000 Files and hashes: 1: 3130332e3136322e3135302e302f32342d3234203d3e20313431363536.roa (hash: XzO2HW08c8tz8kihLQyrbNCIzWk3BylBcXWZmEuiX14=) 2: 3130332e3136322e3135312e302f32342d3234203d3e20313431363536.roa (hash: 4gEYG74hLJoWqqDL/9mjAvBzy+wEC65juI9diH8YI3I=) 3: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl (hash: zUXD59B3Vya7nH0ybj3XSs6KHnHMHSVB9o+/3shsNtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 06:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5a:fe:19:61:23:fa:02:9f:88:10:36:38:92:6c:a6:01:39:35:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Validity Not Before: Dec 24 04:26:36 2025 GMT Not After : Dec 27 06:34:36 2025 GMT Subject: CN=61FF6110AA8FFCA115C2B8E10EA45F5F65A181BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cb:f2:ae:8b:a7:19:54:03:13:8c:2c:98:4c: c1:78:5a:e7:35:92:8a:0d:1e:8d:61:a2:3c:31:11: 52:bb:26:a9:80:da:88:6e:df:72:1e:e2:42:6a:d4: 00:11:6d:f5:84:30:06:be:04:c9:81:eb:05:45:2f: cd:f4:e0:e1:e7:5f:d7:98:5b:e1:ac:61:56:dd:53: 0b:5f:b8:7a:8f:fb:1c:a7:92:5a:34:42:e4:9b:cc: 11:bd:de:fc:de:c9:10:c6:ca:c2:be:7d:1e:5e:55: e6:94:eb:57:e0:d5:4e:88:2e:24:49:ad:7c:b3:47: e7:f9:7a:0b:3c:d1:96:b7:88:d9:87:b1:22:1a:e3: 32:1e:17:b5:2c:18:cc:9d:1b:36:40:14:8c:eb:9b: f6:9b:76:e9:8f:b9:dc:b0:29:67:d4:1b:06:83:76: 5f:58:dc:2e:26:eb:9a:1a:1a:63:16:f3:21:e8:de: 57:6d:84:07:19:bc:20:c5:88:9b:7b:ab:2d:88:dd: ba:7e:69:90:66:51:e1:bd:0f:39:93:17:5a:67:ae: 7f:12:87:8d:62:9d:bb:66:25:d9:40:6d:19:39:f9: 0b:60:d8:d7:2e:f8:9b:4a:76:7c:85:48:60:ca:42: 62:24:2d:ae:69:8d:2d:8e:1a:d0:2e:0c:e7:0c:70: 99:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FF:61:10:AA:8F:FC:A1:15:C2:B8:E1:0E:A4:5F:5F:65:A1:81:BF X509v3 Authority Key Identifier: keyid:14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:f6:a0:e2:6b:4b:6f:27:da:32:95:bd:04:61:9a:4a:25: ab:63:63:b6:d5:6e:c2:a6:70:32:56:8c:a4:02:fb:e2:0e:10: 94:b2:b4:bb:6c:fe:26:6b:b7:95:cc:26:0a:82:bd:1f:91:20: 76:6f:73:f3:e2:3d:52:cb:f9:e8:a1:cd:23:19:5c:26:a9:6f: db:53:1a:cc:5e:4e:44:43:92:0a:66:f9:1e:12:d3:fd:98:80: 39:d7:4d:67:af:61:5a:5a:70:86:ec:b4:b3:47:c3:24:04:4a: f0:9a:2b:ed:4a:25:1b:92:de:a3:57:4a:d3:70:b1:e8:06:47: d0:78:6f:1b:9a:1f:14:8f:e9:7c:39:01:5f:8d:1b:9c:5c:23: 09:e6:8c:fa:0d:5c:a8:2c:b7:2b:3e:ba:b4:de:c0:31:73:c4: d2:8d:03:3d:de:e9:42:83:24:c9:4f:2e:6c:c6:1a:4d:f0:11: 30:ce:14:cc:80:4c:22:53:5b:c6:9a:ca:2d:a1:02:ee:9e:4f: 5e:e0:7c:8e:8d:bd:23:4c:01:b9:1f:4d:eb:ff:f8:14:e7:20: 80:b4:21:fb:8b:ec:71:90:24:06:2b:07:c4:4d:92:ae:6f:93: af:9c:46:72:74:76:67:ab:bd:a1:8f:8e:71:d1:c7:58:2c:ea: 15:c2:34:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFr+GWEj+gKfiBA2OJJspgE5NcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBE RUVDMUU2MTAeFw0yNTEyMjQwNDI2MzZaFw0yNTEyMjcwNjM0MzZaMDMxMTAvBgNV BAMTKDYxRkY2MTEwQUE4RkZDQTExNUMyQjhFMTBFQTQ1RjVGNjVBMTgxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsy/Kui6cZVAMTjCyYTMF4Wuc1 kooNHo1hojwxEVK7JqmA2ohu33Ie4kJq1AARbfWEMAa+BMmB6wVFL8304OHnX9eY W+GsYVbdUwtfuHqP+xynklo0QuSbzBG93vzeyRDGysK+fR5eVeaU61fg1U6ILiRJ rXyzR+f5egs80Za3iNmHsSIa4zIeF7UsGMydGzZAFIzrm/abdumPudywKWfUGwaD dl9Y3C4m65oaGmMW8yHo3ldthAcZvCDFiJt7qy2I3bp+aZBmUeG9DzmTF1pnrn8S h41inbtmJdlAbRk5+Qtg2Ncu+JtKdnyFSGDKQmIkLa5pjS2OGtAuDOcMcJkLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYf9hEKqP/KEVwrjhDqRfX2Whgb8wHwYDVR0j BBgwFoAUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWQ5ZWEyMC0zNDNkLTRhY2ItOTU4MS04MWY5ZDdlYTkyZmUvMC8xNDA0MzE2M0E4 QkZGNTA2MDBGMTY0MTBERTI3QjdBMERFRUMxRTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3QTBERUVD MUU2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAtMzQzZC00YWNiLTk1 ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAwRjE2NDEwREUyN0I3 QTBERUVDMUU2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFos9qDia0tvJ9oylb0EYZpKJatjY7bVbsKm cDJWjKQC++IOEJSytLts/iZrt5XMJgqCvR+RIHZvc/PiPVLL+eihzSMZXCapb9tT GsxeTkRDkgpm+R4S0/2YgDnXTWevYVpacIbstLNHwyQESvCaK+1KJRuS3qNXStNw segGR9B4bxuaHxSP6Xw5AV+NG5xcIwnmjPoNXKgstys+urTewDFzxNKNAz3e6UKD JMlPLmzGGk3wETDOFMyATCJTW8aayi2hAu6eT17gfI6NvSNMAbkfTev/+BTnIIC0 IfuL7HGQJAYrB8RNkq5vk6+cRnJ0dmervaGPjnHRx1gs6hXCNF0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:09:42 2025 by rpki-client