This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: 1KCriM39noufAxDsp3RQO04ZeFGajybO+U91xd5n9xE= Subject key identifier: ED:09:30:D4:C3:E8:03:8E:35:DE:A9:87:0D:37:01:C8:A5:21:30:24 Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 46D73BBC215F56BB8D9BFA06F6D87D964E9AB5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: E2 Signing time: Sat 24 Jan 2026 10:21:06 +0000 Manifest this update: Sat 24 Jan 2026 10:16:06 +0000 Manifest next update: Tue 27 Jan 2026 12:43:06 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: SX0gW7YxzXosA1xM4awNL0XChuwMDHQCTjLeLxgfaiY=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d7:3b:bc:21:5f:56:bb:8d:9b:fa:06:f6:d8:7d:96:4e:9a:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Jan 24 10:16:06 2026 GMT Not After : Jan 27 12:43:06 2026 GMT Subject: CN=ED0930D4C3E8038E35DEA9870D3701C8A5213024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:1f:f4:36:04:ad:d4:e5:91:7b:e6:b3:37: 01:b9:18:af:21:db:a0:b8:e5:43:cd:78:b7:cc:53: b1:9d:04:40:ef:4c:ca:fc:b9:42:ef:fc:22:ce:19: 4e:86:6d:92:19:30:3c:10:6c:8a:c3:e2:78:1c:70: 46:88:ab:56:00:51:45:e9:e1:79:6c:4e:34:6e:cc: e0:b8:9c:eb:09:55:10:6d:98:ba:f1:b0:99:ff:5f: 98:75:cb:36:a0:ed:d6:e0:99:21:de:33:3c:e8:36: 1a:64:e9:ac:20:aa:8d:ec:8c:61:17:b2:b6:91:1f: 5c:e9:f9:f4:dd:38:f3:e3:9f:29:d5:d6:87:ab:32: b2:62:d0:ea:ff:b6:8d:f4:df:a7:8a:14:60:be:c2: 05:36:35:1e:e1:f8:1a:1c:85:ce:73:d5:80:47:8b: d6:02:33:59:1b:63:bb:7a:3a:4f:23:18:47:87:1c: a9:21:5b:4e:cf:b1:4a:82:bf:75:5a:c7:bd:94:05: 7e:e5:47:1f:73:7c:1a:99:14:88:bb:de:21:39:be: 89:c8:97:d6:77:c4:2c:43:c6:df:79:37:15:ca:68: b4:9e:0a:a2:c4:91:19:bf:0c:be:5c:6b:fd:e9:85: 09:d8:94:c5:fa:d3:12:82:64:00:dc:27:01:9e:d4: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:09:30:D4:C3:E8:03:8E:35:DE:A9:87:0D:37:01:C8:A5:21:30:24 X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9a:ab:cf:21:ca:62:6c:9d:07:b3:73:bb:99:47:28:ef:bf: 47:e9:80:ec:2d:c8:20:90:ec:78:bd:e3:07:0a:30:1c:73:bc: 89:a2:97:36:30:a4:bd:01:08:25:22:47:a6:3b:57:e2:0e:6a: e5:45:e2:f3:25:9b:d8:7f:ac:e4:db:b3:86:78:fa:27:53:0b: c4:8e:9f:3b:38:fd:4e:c2:b0:a1:a9:15:fe:eb:d7:be:34:5a: 23:7f:00:55:a8:f8:b1:c2:f9:c0:d6:eb:a5:34:70:70:2c:05: 7d:8d:89:86:76:ba:62:59:52:82:67:d1:51:e5:2d:28:9f:f7: cc:39:92:3f:09:a8:15:07:04:d9:3e:a8:bd:da:bc:4e:46:a2: 3e:95:93:d6:b8:98:73:6d:8b:6d:e2:48:7f:76:43:6c:d5:6f: 82:66:85:05:df:a5:ef:6a:88:c0:fd:9b:e5:81:87:de:e9:13: 3c:2e:41:0f:08:9d:0c:5b:40:82:3d:33:34:01:e7:47:f8:d1: 77:d6:6b:d3:20:33:5a:37:e6:80:be:36:dc:36:a3:92:01:d0: b1:01:55:de:b3:93:db:99:26:29:e2:78:7d:10:15:eb:7c:c9: a2:42:1b:86:5f:17:cf:b0:d6:ec:93:fb:ad:91:91:96:a0:11: bb:40:d5:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtc7vCFfVruNm/oG9th9lk6atbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNjAxMjQxMDE2MDZaFw0yNjAxMjcxMjQzMDZaMDMxMTAvBgNV BAMTKEVEMDkzMEQ0QzNFODAzOEUzNURFQTk4NzBEMzcwMUM4QTUyMTMwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjR/0NgSt1OWRe+azNwG5GK8h 26C45UPNeLfMU7GdBEDvTMr8uULv/CLOGU6GbZIZMDwQbIrD4ngccEaIq1YAUUXp 4XlsTjRuzOC4nOsJVRBtmLrxsJn/X5h1yzag7dbgmSHeMzzoNhpk6awgqo3sjGEX sraRH1zp+fTdOPPjnynV1oerMrJi0Or/to3036eKFGC+wgU2NR7h+Bochc5z1YBH i9YCM1kbY7t6Ok8jGEeHHKkhW07PsUqCv3Vax72UBX7lRx9zfBqZFIi73iE5vonI l9Z3xCxDxt95NxXKaLSeCqLEkRm/DL5ca/3phQnYlMX60xKCZADcJwGe1LmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Qkw1MPoA4413qmHDTcByKUhMCQwHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6aq88hymJsnQezc7uZRyjvv0fpgOwtyCCQ 7Hi94wcKMBxzvImilzYwpL0BCCUiR6Y7V+IOauVF4vMlm9h/rOTbs4Z4+idTC8SO nzs4/U7CsKGpFf7r1740WiN/AFWo+LHC+cDW66U0cHAsBX2NiYZ2umJZUoJn0VHl LSif98w5kj8JqBUHBNk+qL3avE5Goj6Vk9a4mHNti23iSH92Q2zVb4JmhQXfpe9q iMD9m+WBh97pEzwuQQ8InQxbQII9MzQB50f40XfWa9MgM1o35oC+Ntw2o5IB0LEB Vd6zk9uZJinieH0QFet8yaJCG4ZfF8+w1uyT+62RkZagEbtA1e0= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:37 2026 by rpki-client