This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: sMPhPkfBSnEpyn5JxUtJgjSaYaTJW5GaoXUsQGipFFg= Subject key identifier: 52:97:2C:9D:C6:8D:18:98:67:D2:FC:A7:C0:57:6F:F4:26:76:A4:F6 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 0B6A2893C8D79249DCB0C504FBFFD3547A4C1632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 027B Signing time: Sat 24 Jan 2026 16:21:59 +0000 Manifest this update: Sat 24 Jan 2026 16:16:59 +0000 Manifest next update: Tue 27 Jan 2026 16:30:59 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: pMpU36WPjH6ABOBM8Xbxr4yW3VD3OaqtlWv3CBwq2KA=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 4: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6a:28:93:c8:d7:92:49:dc:b0:c5:04:fb:ff:d3:54:7a:4c:16:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Jan 24 16:16:59 2026 GMT Not After : Jan 27 16:30:59 2026 GMT Subject: CN=52972C9DC68D189867D2FCA7C0576FF42676A4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:a3:78:56:b8:93:16:f1:a5:ea:52:0c:bf: ef:31:87:77:0c:e0:90:c6:b2:69:fd:7b:4c:8d:0c: 26:64:c3:8c:28:71:2f:bc:df:23:48:26:80:56:e3: 09:ea:5f:9f:f4:48:f4:b6:be:38:82:7d:1d:87:56: 1b:99:c8:ac:5a:30:6a:8a:08:67:1f:63:54:b6:e8: a5:21:4d:c7:c9:13:95:b9:b5:8b:9d:80:5b:95:07: e9:0b:af:db:53:6b:73:d2:4b:17:a9:09:92:51:ca: d8:92:61:50:d1:e0:cc:a1:ba:53:69:93:85:84:9e: 11:69:33:39:67:5a:21:24:58:d6:35:60:79:bd:2c: 44:02:c3:49:6f:4c:4f:24:61:dc:40:16:ed:e3:18: 04:4a:d1:3b:5f:fa:2f:38:6d:76:89:2f:f3:e0:d1: f6:4d:d3:e6:b3:9d:b5:56:49:00:8b:1f:e8:60:8b: f8:56:8d:45:d5:09:75:0f:85:ae:9b:50:cf:d5:72: 8e:d7:bf:0f:98:4d:9e:6b:3f:4a:f5:d1:3a:a1:f8: 77:4b:7d:02:81:90:b1:64:53:0b:26:b9:73:24:7f: 23:de:55:36:eb:fa:1e:94:81:72:01:c3:6e:ee:2d: 41:78:3e:6c:a9:d8:fa:15:1f:b7:59:59:ed:aa:96: df:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:2C:9D:C6:8D:18:98:67:D2:FC:A7:C0:57:6F:F4:26:76:A4:F6 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:cd:b4:1b:fc:6a:fb:6f:be:d0:61:cc:4b:65:b7:af:fd:a4: 9d:4e:c0:f1:18:4b:d7:11:4f:58:27:15:a7:c7:9b:f7:da:16: ba:85:e8:ab:a1:28:a8:6b:eb:cf:3c:eb:3c:11:c7:fd:75:3f: f9:7e:da:30:ab:3c:5d:ab:62:4b:a3:ae:cc:21:e0:57:ca:40: b0:8b:d5:4c:34:1b:0d:d1:3b:0e:29:79:b6:a7:80:66:8d:c0: 06:ae:fb:93:62:e2:19:70:14:6e:bc:fd:ad:ce:30:3a:5a:fb: 2e:06:ad:33:25:2c:22:91:54:5f:79:ab:b5:40:c7:cf:d9:68: 21:a5:3d:6a:00:cc:47:7f:9e:c7:02:d6:14:9c:56:16:19:93: 56:b8:20:1c:8b:2e:47:90:52:3c:b6:fc:c1:75:f0:2d:6b:d7: 1b:ca:8c:fb:53:29:6b:cc:ce:5e:17:c5:5e:95:72:eb:6d:c3: b6:fa:fe:a7:d2:c4:ac:65:c6:39:15:d4:82:a2:9b:49:05:21: 80:66:a9:16:5e:e5:40:a4:1e:35:b8:06:de:19:72:d9:fe:fc: f7:b2:4a:06:83:22:eb:28:26:5f:41:16:a4:4e:2a:d7:5a:c6: 0e:34:6e:bd:a8:b1:2a:8a:9d:14:be:b2:d8:fa:d8:8f:2e:6a: 8b:cc:9a:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2ook8jXkkncsMUE+//TVHpMFjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNjAxMjQxNjE2NTlaFw0yNjAxMjcxNjMwNTlaMDMxMTAvBgNV BAMTKDUyOTcyQzlEQzY4RDE4OTg2N0QyRkNBN0MwNTc2RkY0MjY3NkE0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcQqN4VriTFvGl6lIMv+8xh3cM 4JDGsmn9e0yNDCZkw4wocS+83yNIJoBW4wnqX5/0SPS2vjiCfR2HVhuZyKxaMGqK CGcfY1S26KUhTcfJE5W5tYudgFuVB+kLr9tTa3PSSxepCZJRytiSYVDR4MyhulNp k4WEnhFpMzlnWiEkWNY1YHm9LEQCw0lvTE8kYdxAFu3jGARK0Ttf+i84bXaJL/Pg 0fZN0+aznbVWSQCLH+hgi/hWjUXVCXUPha6bUM/Vco7Xvw+YTZ5rP0r10Tqh+HdL fQKBkLFkUwsmuXMkfyPeVTbr+h6UgXIBw27uLUF4Pmyp2PoVH7dZWe2qlt/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUpcsncaNGJhn0vynwFdv9CZ2pPYwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbNtBv8avtvvtBhzEtlt6/9pJ1OwPEYS9cR T1gnFafHm/faFrqF6KuhKKhr68886zwRx/11P/l+2jCrPF2rYkujrswh4FfKQLCL 1Uw0Gw3ROw4pebangGaNwAau+5Ni4hlwFG68/a3OMDpa+y4GrTMlLCKRVF95q7VA x8/ZaCGlPWoAzEd/nscC1hScVhYZk1a4IByLLkeQUjy2/MF18C1r1xvKjPtTKWvM zl4XxV6Vcuttw7b6/qfSxKxlxjkV1IKim0kFIYBmqRZe5UCkHjW4Bt4Zctn+/Pey SgaDIusoJl9BFqROKtdaxg40br2osSqKnRS+stj62I8uaovMmi4= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:24 2026 by rpki-client