This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: R5/cHl31YaUU5mw8zQvsQUVC4ChHyTypxP7kbE7GMH0= Subject key identifier: 78:0C:E5:EE:F2:0A:85:4A:22:88:27:22:98:EF:8A:D8:29:F6:F2:AC Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 247A8EC7C6E158C320401C9A8A3BE12A7EF31A7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02EA Signing time: Sun 21 Dec 2025 00:11:37 +0000 Manifest this update: Sun 21 Dec 2025 00:06:37 +0000 Manifest next update: Wed 24 Dec 2025 00:50:37 +0000 Files and hashes: 1: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=) 2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 3: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: zWUg5p8vKALoA7ACV2yTcl4vtPy3abMMePfYaKEjSLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 00:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:7a:8e:c7:c6:e1:58:c3:20:40:1c:9a:8a:3b:e1:2a:7e:f3:1a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Dec 21 00:06:37 2025 GMT Not After : Dec 24 00:50:37 2025 GMT Subject: CN=780CE5EEF20A854A2288272298EF8AD829F6F2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4e:e1:c8:17:7e:ac:ed:06:e3:26:ac:52:ea: a7:71:25:73:6d:1b:ad:3b:ba:57:18:bf:01:4e:08: 82:a8:75:bd:15:60:34:f0:63:01:bb:83:22:67:b3: 10:7e:c8:3f:13:13:3e:c4:63:a6:d1:ba:ed:21:92: 16:12:14:45:e4:cd:7a:fa:45:7b:86:cf:ea:32:e5: 54:64:f4:f1:70:81:f0:03:4e:8e:e5:65:40:f5:c7: c4:d1:b3:e5:1f:17:13:fe:16:64:60:ef:78:5e:a4: 9a:6a:db:61:e8:bc:aa:75:b9:5d:4a:8b:88:b5:6b: 15:ae:28:c5:b8:e9:a1:27:d9:da:76:88:75:4a:6b: fe:be:27:87:36:19:1b:12:c3:ae:5b:82:47:62:61: 2f:3d:70:9d:d6:47:2a:84:64:92:f7:78:06:0f:d4: d5:96:12:95:6b:6b:ad:b4:a7:47:da:46:f3:5b:76: df:50:c3:18:57:57:ec:45:7a:ec:8b:4a:ec:da:46: 93:9c:af:a9:4c:a8:0d:f6:71:b0:b3:24:ff:68:aa: 4e:11:82:ec:67:35:55:36:91:3e:2e:26:66:03:67: a2:90:43:c6:8a:61:c8:3b:a9:59:31:0b:af:69:61: 70:5f:17:21:5c:21:50:7b:d0:c7:60:b1:2a:ad:0c: 82:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:E5:EE:F2:0A:85:4A:22:88:27:22:98:EF:8A:D8:29:F6:F2:AC X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:bc:10:97:0a:ce:81:36:91:03:d9:55:f3:39:86:5b:74:18: da:02:f6:2a:1d:b9:1e:1b:8e:16:03:9a:2f:c5:35:44:07:e3: d5:44:32:e0:2f:8e:eb:90:60:04:67:02:18:fd:b8:5b:43:b1: a5:f8:10:82:29:43:71:95:62:48:9d:b7:a8:5c:72:34:0a:f7: 1c:8b:82:e9:8d:fe:e0:d4:7c:9c:1a:7e:54:93:d2:e7:60:4c: a2:6b:75:cb:08:f8:e2:04:47:ac:37:c6:d1:5b:4d:c6:65:72: df:e7:9b:45:35:4a:f7:d9:2a:42:9f:0b:a5:f2:3d:de:82:4a: ee:78:90:5a:0f:2e:19:66:d8:3d:17:c8:97:40:00:ce:bb:93: 00:68:ca:8b:97:b4:c7:7f:f3:3b:c9:6b:f7:19:f3:c4:3e:44: 65:83:a8:eb:fd:41:29:a1:4b:34:8e:dd:f8:1b:96:e4:ad:8c: 7f:28:11:b3:ab:28:a5:8f:7b:b9:e1:1d:47:31:db:fd:b7:4b: 58:ee:2f:50:05:88:50:27:63:e1:22:b4:a0:2a:34:cd:57:d3: 40:60:22:7e:e2:0d:14:ec:17:6c:c2:29:5f:e3:f2:a1:db:95: f6:79:83:59:17:f1:8c:c6:a2:61:5d:a9:96:d8:67:65:fe:4e: 0f:ff:d7:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHqOx8bhWMMgQByaijvhKn7zGn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNTEyMjEwMDA2MzdaFw0yNTEyMjQwMDUwMzdaMDMxMTAvBgNV BAMTKDc4MENFNUVFRjIwQTg1NEEyMjg4MjcyMjk4RUY4QUQ4MjlGNkYyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTuHIF36s7QbjJqxS6qdxJXNt G607ulcYvwFOCIKodb0VYDTwYwG7gyJnsxB+yD8TEz7EY6bRuu0hkhYSFEXkzXr6 RXuGz+oy5VRk9PFwgfADTo7lZUD1x8TRs+UfFxP+FmRg73hepJpq22HovKp1uV1K i4i1axWuKMW46aEn2dp2iHVKa/6+J4c2GRsSw65bgkdiYS89cJ3WRyqEZJL3eAYP 1NWWEpVra620p0faRvNbdt9QwxhXV+xFeuyLSuzaRpOcr6lMqA32cbCzJP9oqk4R guxnNVU2kT4uJmYDZ6KQQ8aKYcg7qVkxC69pYXBfFyFcIVB70MdgsSqtDILZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAzl7vIKhUoiiCcimO+K2Cn28qwwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK8EJcKzoE2kQPZVfM5hlt0GNoC9ioduR4b jhYDmi/FNUQH49VEMuAvjuuQYARnAhj9uFtDsaX4EIIpQ3GVYkidt6hccjQK9xyL gumN/uDUfJwaflST0udgTKJrdcsI+OIER6w3xtFbTcZlct/nm0U1SvfZKkKfC6Xy Pd6CSu54kFoPLhlm2D0XyJdAAM67kwBoyouXtMd/8zvJa/cZ88Q+RGWDqOv9QSmh SzSO3fgbluStjH8oEbOrKKWPe7nhHUcx2/23S1juL1AFiFAnY+EitKAqNM1X00Bg In7iDRTsF2zCKV/j8qHblfZ5g1kX8YzGomFdqZbYZ2X+Tg//150= -----END CERTIFICATE-----Generated at Sun Dec 21 16:15:51 2025 by rpki-client