This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: 9I7jDADi+5VFyOwF28eaYZLuMHXFzurB2Fx3RTo6dx4= Subject key identifier: D9:34:3E:C4:8A:EA:04:D9:EF:56:8E:FA:6E:F9:A7:EA:8B:53:AA:62 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 5BF546D31B732DB3B3923C4AFFC42B149EC05182 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 024A Signing time: Wed 17 Dec 2025 02:22:12 +0000 Manifest this update: Wed 17 Dec 2025 02:17:12 +0000 Manifest next update: Sat 20 Dec 2025 12:29:12 +0000 Files and hashes: 1: 3130332e3134342e34372e302f32342d3234203d3e20313430343732.roa (hash: PoUfFWTvv28uKyrYeaMh3T/jvxQb6hulFIaz7fVYPTw=) 2: 3130332e3134342e34362e302f32342d3234203d3e20313430343732.roa (hash: ZRfsCQv1mcZoiRSwy7LI1d6CoRcsZN8L2GBIckM4y/U=) 3: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: +bHiRhmYdaP2W3HEEMI9ZEd4oEkZogS8ycXn9UQl3v8=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: uU+9x3F5Wh10f2yBN/1eDuWO0H9Ms5DAoMSr38lZ7RI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:f5:46:d3:1b:73:2d:b3:b3:92:3c:4a:ff:c4:2b:14:9e:c0:51:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Dec 17 02:17:12 2025 GMT Not After : Dec 20 12:29:12 2025 GMT Subject: CN=D9343EC48AEA04D9EF568EFA6EF9A7EA8B53AA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:8b:5d:fd:90:72:e8:d6:03:da:45:91:7e: 20:c6:59:d8:c4:16:04:95:eb:44:35:44:25:5e:89: 71:91:7d:b1:90:e9:61:bc:41:4b:f8:fa:f6:e8:8e: 0c:a0:3b:f6:72:7c:a4:9c:5e:26:d6:ab:f4:23:e3: 5d:e1:fb:52:88:26:d3:d7:1b:84:f5:90:6a:91:ea: 1b:de:7b:6b:f8:bf:b5:56:1f:87:8f:b7:4f:dd:49: 85:29:c7:30:52:3d:e7:02:28:76:88:ba:7a:15:ab: 0a:77:80:bf:e3:48:d1:a1:06:e9:14:45:56:d9:b9: 48:c4:21:e8:41:9a:ef:5e:28:84:9c:ac:86:5c:fb: ed:9b:00:f7:3f:57:98:19:67:d8:54:a0:b3:5c:85: 6c:96:39:b9:6d:1f:40:5e:3f:30:8f:c6:bf:b6:3c: aa:d7:35:cb:98:23:bb:3c:a5:6e:8f:cc:a2:84:c8: b3:76:94:95:ac:2f:10:f4:d8:76:e9:10:9f:fd:1d: d0:fa:95:03:7c:1a:8a:d5:d7:08:90:db:59:85:db: 52:40:8a:bc:34:93:f9:28:41:68:1a:3f:2b:40:83: 1f:81:26:9d:21:5a:7f:c1:30:fd:3f:05:4b:59:a2: a1:bd:8b:dc:80:00:92:f6:55:ae:1d:18:04:01:88: 7c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:3E:C4:8A:EA:04:D9:EF:56:8E:FA:6E:F9:A7:EA:8B:53:AA:62 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5d:c8:88:cc:51:a5:82:72:4c:42:cc:ad:99:9e:b4:16:03: d4:d1:d4:f6:0e:b6:63:1f:1a:4c:e8:1c:e3:5a:01:6e:20:a0: f1:ad:0e:b9:be:85:d2:5c:aa:85:39:26:1a:29:a2:4f:9f:b2: 37:5f:80:22:5f:96:0b:e3:11:20:cb:5c:96:9a:17:ea:88:7b: 6c:10:a1:09:1c:97:50:58:ff:12:17:1b:2e:dd:73:0c:14:0b: b6:ed:8f:d2:ae:44:ba:be:d4:26:fa:8e:51:e6:81:84:94:4d: 7c:b5:9a:2c:b1:a7:65:9c:2e:96:f6:f9:a1:0c:81:bb:4e:13: 7a:fc:ec:67:bb:c1:1b:8c:30:2f:cd:9d:34:9a:38:a7:37:58: c0:e7:51:a2:c7:bb:4f:fb:89:15:49:80:c4:12:39:bc:2f:0b: 4d:a3:9e:7b:64:3e:59:b6:c7:77:eb:b0:e2:16:a4:db:be:fa: c1:a9:14:4f:a2:c0:74:fe:8b:c0:d3:40:2d:fb:79:17:41:ac: 73:e4:89:30:dd:93:03:be:25:45:d0:eb:ea:1b:53:30:35:9b: 26:2d:ea:d8:88:aa:a5:ad:40:27:4d:d8:bc:27:7b:56:52:d0: 86:95:e8:d7:fb:d8:4f:cd:ea:37:82:16:16:f0:b7:f5:fa:b3: 9e:09:ca:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/VG0xtzLbOzkjxK/8QrFJ7AUYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNTEyMTcwMjE3MTJaFw0yNTEyMjAxMjI5MTJaMDMxMTAvBgNV BAMTKEQ5MzQzRUM0OEFFQTA0RDlFRjU2OEVGQTZFRjlBN0VBOEI1M0FBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKn4td/ZBy6NYD2kWRfiDGWdjE FgSV60Q1RCVeiXGRfbGQ6WG8QUv4+vbojgygO/ZyfKScXibWq/Qj413h+1KIJtPX G4T1kGqR6hvee2v4v7VWH4ePt0/dSYUpxzBSPecCKHaIunoVqwp3gL/jSNGhBukU RVbZuUjEIehBmu9eKIScrIZc++2bAPc/V5gZZ9hUoLNchWyWObltH0BePzCPxr+2 PKrXNcuYI7s8pW6PzKKEyLN2lJWsLxD02HbpEJ/9HdD6lQN8GorV1wiQ21mF21JA irw0k/koQWgaPytAgx+BJp0hWn/BMP0/BUtZoqG9i9yAAJL2Va4dGAQBiHzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2TQ+xIrqBNnvVo76bvmn6otTqmIwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxdyIjMUaWCckxCzK2ZnrQWA9TR1PYOtmMf GkzoHONaAW4goPGtDrm+hdJcqoU5Jhopok+fsjdfgCJflgvjESDLXJaaF+qIe2wQ oQkcl1BY/xIXGy7dcwwUC7btj9KuRLq+1Cb6jlHmgYSUTXy1miyxp2WcLpb2+aEM gbtOE3r87Ge7wRuMMC/NnTSaOKc3WMDnUaLHu0/7iRVJgMQSObwvC02jnntkPlm2 x3frsOIWpNu++sGpFE+iwHT+i8DTQC37eRdBrHPkiTDdkwO+JUXQ6+obUzA1myYt 6tiIqqWtQCdN2Lwne1ZS0IaV6Nf72E/N6jeCFhbwt/X6s54Jyvw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:02 2025 by rpki-client