This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: UEChQzbRapPrZ6TjlPfKSEMLcUXHSGQWnAorcDTsEq0= Subject key identifier: 53:B4:D3:85:64:A6:C2:62:A6:37:F9:EA:9C:67:FD:35:E7:B7:15:FE Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 058BE0D623B5C9A000A369496679F3B2072FE9DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03BA Signing time: Tue 23 Dec 2025 21:41:41 +0000 Manifest this update: Tue 23 Dec 2025 21:36:41 +0000 Manifest next update: Sat 27 Dec 2025 06:00:41 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: BgKTMcjbRkK0QMM2Cv3mqOqq+0dZSEX6y85qGliF7ZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8b:e0:d6:23:b5:c9:a0:00:a3:69:49:66:79:f3:b2:07:2f:e9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Dec 23 21:36:41 2025 GMT Not After : Dec 27 06:00:41 2025 GMT Subject: CN=53B4D38564A6C262A637F9EA9C67FD35E7B715FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:3a:e2:68:ca:97:cc:a3:58:e3:de:7a:a4: 0f:df:10:3c:cf:7c:21:01:75:bb:4a:4c:67:fa:be: 4e:7e:b3:11:de:23:46:d6:38:bd:e7:4f:2b:d2:ac: 1c:0b:9d:29:90:4e:50:b2:fe:33:38:a4:7d:67:41: 05:79:b2:72:8c:57:77:4f:40:49:ee:6b:b0:41:e9: 7d:57:91:6d:32:d9:6d:24:0f:c4:14:43:16:10:f5: bb:07:2d:e5:54:19:c1:8a:4f:e6:4b:3b:af:0e:99: 64:16:43:7f:b3:30:d7:e0:43:9c:6b:89:e4:e3:51: 94:96:56:85:2e:ce:9d:22:55:e0:2d:ff:aa:bf:ec: 1b:85:e4:af:b4:6c:25:16:93:57:fb:46:9f:21:1f: 9b:2f:01:5c:74:e6:3d:a9:ec:b5:16:ad:3c:91:9e: 4b:09:cf:fa:d0:39:9a:7b:3b:4e:52:f8:be:25:3c: 22:41:79:1d:e4:11:ba:b7:b7:b6:86:5f:98:de:3f: c5:c5:b8:4b:8b:cc:8f:1b:46:e9:46:22:95:3f:f7: 90:dd:ac:62:e6:a5:2f:bb:fc:c3:72:fc:54:6d:52: 92:67:7d:6f:1d:e9:46:b5:d4:aa:c0:5c:b3:90:2b: c0:9c:fc:12:e1:8d:c5:3d:0f:65:00:60:a5:e1:67: 0d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B4:D3:85:64:A6:C2:62:A6:37:F9:EA:9C:67:FD:35:E7:B7:15:FE X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:30:b2:31:70:b8:67:a6:88:73:cc:cc:37:e5:58:48:eb:58: 1c:aa:ac:88:d4:63:21:39:c2:eb:0f:e5:0b:fa:43:c5:e1:14: 12:48:cf:62:e1:db:34:99:a2:7d:86:a0:93:0b:55:4e:8f:06: a4:a6:6c:4f:d4:cd:6b:d3:c1:ed:e1:be:87:b7:97:64:92:83: 54:ee:ca:52:8f:1b:59:84:2e:42:94:2e:00:e6:1a:6e:c5:27: b5:3c:fa:00:37:77:78:6f:d9:7c:0b:55:ad:9b:37:1f:63:04: 42:3b:f4:a6:26:18:21:fa:03:6e:18:45:2c:e1:93:6e:46:6f: 9a:42:a2:dc:3d:2a:1d:44:d0:e6:be:5b:f3:50:1e:fe:d9:1b: 3b:e6:5a:59:1f:4c:52:35:a0:e9:d0:5a:54:1d:58:d6:01:96: a7:fe:bd:e4:d5:7d:e9:a1:ee:31:0e:b7:1a:64:95:5e:ec:eb: 08:f4:46:84:35:4e:3c:b0:3e:02:ca:88:a4:31:cc:04:03:9c: d8:b3:3a:75:37:3d:57:ed:54:66:cf:7b:2c:85:7a:18:c3:9f: 49:40:c6:c1:5d:c3:62:5e:e6:c5:68:b7:cf:61:42:cb:33:5e: 5b:b9:9f:ac:80:b9:e9:1c:f5:d1:ed:a7:51:9e:b4:a6:8a:36: 35:96:4a:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYvg1iO1yaAAo2lJZnnzsgcv6dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNTEyMjMyMTM2NDFaFw0yNTEyMjcwNjAwNDFaMDMxMTAvBgNV BAMTKDUzQjREMzg1NjRBNkMyNjJBNjM3RjlFQTlDNjdGRDM1RTdCNzE1RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJCjriaMqXzKNY4956pA/fEDzP fCEBdbtKTGf6vk5+sxHeI0bWOL3nTyvSrBwLnSmQTlCy/jM4pH1nQQV5snKMV3dP QEnua7BB6X1XkW0y2W0kD8QUQxYQ9bsHLeVUGcGKT+ZLO68OmWQWQ3+zMNfgQ5xr ieTjUZSWVoUuzp0iVeAt/6q/7BuF5K+0bCUWk1f7Rp8hH5svAVx05j2p7LUWrTyR nksJz/rQOZp7O05S+L4lPCJBeR3kEbq3t7aGX5jeP8XFuEuLzI8bRulGIpU/95Dd rGLmpS+7/MNy/FRtUpJnfW8d6Ua11KrAXLOQK8Cc/BLhjcU9D2UAYKXhZw3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7TThWSmwmKmN/nqnGf9Nee3Ff4wHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgwsjFwuGemiHPMzDflWEjrWByqrIjUYyE5 wusP5Qv6Q8XhFBJIz2Lh2zSZon2GoJMLVU6PBqSmbE/UzWvTwe3hvoe3l2SSg1Tu ylKPG1mELkKULgDmGm7FJ7U8+gA3d3hv2XwLVa2bNx9jBEI79KYmGCH6A24YRSzh k25Gb5pCotw9Kh1E0Oa+W/NQHv7ZGzvmWlkfTFI1oOnQWlQdWNYBlqf+veTVfemh 7jEOtxpklV7s6wj0RoQ1TjywPgLKiKQxzAQDnNizOnU3PVftVGbPeyyFehjDn0lA xsFdw2Je5sVot89hQsszXlu5n6yAuekc9dHtp1GetKaKNjWWShg= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:08 2025 by rpki-client