This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: CpFtF3xTFpVZqNwl4AXR8txmZxeXnOxC5my3A7QjXJM= Subject key identifier: E2:96:16:58:62:D2:C9:E3:9E:2C:5E:8A:8C:77:D2:85:14:0B:5E:62 Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 34DB0870E73F144DCE714597BAB4956F9FE9F54C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: BF Signing time: Fri 26 Dec 2025 16:32:04 +0000 Manifest this update: Fri 26 Dec 2025 16:27:04 +0000 Manifest next update: Tue 30 Dec 2025 03:11:04 +0000 Files and hashes: 1: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: U9K8zqcSYDs9Ur/ISBlJmCQKMEEPTB5DW3Qu7nN/n3w=) 2: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:db:08:70:e7:3f:14:4d:ce:71:45:97:ba:b4:95:6f:9f:e9:f5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Dec 26 16:27:04 2025 GMT Not After : Dec 30 03:11:04 2025 GMT Subject: CN=E296165862D2C9E39E2C5E8A8C77D285140B5E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:b4:f9:e6:71:d8:11:f8:c7:65:55:3c:8e: f2:ee:ea:b9:5c:b8:21:2e:50:c7:79:57:45:69:8b: cf:81:e9:a8:23:5c:af:8a:62:04:bb:44:88:27:fa: 0d:2b:1d:ae:de:ee:fa:62:6c:65:61:0f:7f:d1:d7: 29:52:46:6f:16:97:b2:91:6f:d5:ae:ed:f8:0c:1c: e8:96:53:30:3a:4b:3c:46:3c:1a:e1:35:cd:66:16: 7d:81:20:e9:5b:84:82:92:75:64:2b:bb:7b:da:48: 8e:17:2a:b7:79:a6:60:3e:7f:99:13:e3:ae:88:f9: 19:2a:27:46:fb:84:8a:ca:ce:a6:89:f2:03:3a:0b: 17:13:0d:a7:f0:8b:a5:5b:2b:21:e6:9f:05:12:15: 72:f9:ff:49:1c:63:26:29:e0:2f:8f:ed:24:ea:eb: ee:79:09:1d:3d:de:43:89:98:7a:c5:6f:71:d0:e9: e2:51:a6:a9:bb:b0:0f:0f:86:fc:d9:07:2a:67:54: da:95:e6:62:7c:4f:8b:02:ab:e6:4f:7e:2b:7c:c9: 4f:8e:8b:7b:54:16:55:98:7e:5f:c9:28:33:0c:24: 5a:0a:b6:da:86:62:6f:de:93:ad:22:aa:0b:6a:27: 3f:f2:6f:ca:67:94:e1:89:71:eb:c2:3d:0f:60:b3: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:16:58:62:D2:C9:E3:9E:2C:5E:8A:8C:77:D2:85:14:0B:5E:62 X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:fb:3f:3e:11:4c:8f:1e:e0:49:57:66:37:e1:06:d9:af: cb:4e:81:48:b6:5d:f3:17:df:4d:20:b5:1d:c0:1a:1d:cf:a2: 0d:c4:ad:7f:9f:91:66:5d:20:75:19:2a:8f:17:2c:1a:97:38: e4:bf:f9:8d:05:fb:8e:6d:45:f2:93:f0:cb:be:82:89:b4:a1: 15:a3:e2:06:3f:58:34:63:20:42:d6:41:cb:e4:b5:b1:5f:8a: 4d:59:94:87:07:c4:7d:0c:77:7a:d9:b0:fc:59:01:80:26:d2: eb:6c:21:87:34:4c:23:f0:ca:e1:db:98:9a:14:57:31:69:19: 7d:b5:91:52:e2:d6:b2:7f:44:eb:2c:44:29:74:aa:9b:aa:e9: 6d:07:2e:91:bd:50:ec:c4:9f:59:09:43:bf:8f:1b:1a:a9:11: 11:6a:69:c7:b5:af:56:77:35:0f:e9:37:14:87:8b:f7:9c:62: 5f:87:6c:42:3f:a5:e5:d0:1a:0a:b8:b5:3c:de:a0:8b:73:30: 8d:67:7f:0c:ef:d3:a5:46:68:38:62:f9:92:69:61:94:91:03: c8:7b:20:11:75:05:a7:42:77:da:73:c0:4d:d3:3f:33:50:01: 66:e0:dc:ba:9b:da:ce:e8:3d:47:de:a7:e9:9f:e7:07:34:3e: ee:df:64:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNNsIcOc/FE3OcUWXurSVb5/p9UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNTEyMjYxNjI3MDRaFw0yNTEyMzAwMzExMDRaMDMxMTAvBgNV BAMTKEUyOTYxNjU4NjJEMkM5RTM5RTJDNUU4QThDNzdEMjg1MTQwQjVFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5TrT55nHYEfjHZVU8jvLu6rlc uCEuUMd5V0Vpi8+B6agjXK+KYgS7RIgn+g0rHa7e7vpibGVhD3/R1ylSRm8Wl7KR b9Wu7fgMHOiWUzA6SzxGPBrhNc1mFn2BIOlbhIKSdWQru3vaSI4XKrd5pmA+f5kT 466I+RkqJ0b7hIrKzqaJ8gM6CxcTDafwi6VbKyHmnwUSFXL5/0kcYyYp4C+P7STq 6+55CR093kOJmHrFb3HQ6eJRpqm7sA8PhvzZBypnVNqV5mJ8T4sCq+ZPfit8yU+O i3tUFlWYfl/JKDMMJFoKttqGYm/ek60iqgtqJz/yb8pnlOGJcevCPQ9gs2ThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pYWWGLSyeOeLF6KjHfShRQLXmIwHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/N+z8+EUyPHuBJV2Y34QbZr8tOgUi2XfMX 300gtR3AGh3Pog3ErX+fkWZdIHUZKo8XLBqXOOS/+Y0F+45tRfKT8Mu+gom0oRWj 4gY/WDRjIELWQcvktbFfik1ZlIcHxH0Md3rZsPxZAYAm0utsIYc0TCPwyuHbmJoU VzFpGX21kVLi1rJ/ROssRCl0qpuq6W0HLpG9UOzEn1kJQ7+PGxqpERFqace1r1Z3 NQ/pNxSHi/ecYl+HbEI/peXQGgq4tTzeoItzMI1nfwzv06VGaDhi+ZJpYZSRA8h7 IBF1BadCd9pzwE3TPzNQAWbg3Lqb2s7oPUfep+mf5wc0Pu7fZKo= -----END CERTIFICATE-----Generated at Fri Dec 26 23:56:56 2025 by rpki-client