This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json) Hash identifier: ukuTY2n4YhMaO6n/oYBUoyi3tuzOI+lOioAXWWn37nQ= Subject key identifier: 3D:13:BD:B1:A7:CB:89:D7:D9:1B:D6:34:5C:1F:3E:22:95:82:7F:3C Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Certificate serial: 74CCF60E1339309E38CC628B3BCBFD4214C5803C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft Manifest number: 02FA Signing time: Sun 25 Jan 2026 14:51:34 +0000 Manifest this update: Sun 25 Jan 2026 14:46:34 +0000 Manifest next update: Wed 28 Jan 2026 23:05:34 +0000 Files and hashes: 1: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: rzWAtYtDbxg0kigfjBSPVkg0ePV0n3PS7k5mMecY+W4=) 2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=) 3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:cc:f6:0e:13:39:30:9e:38:cc:62:8b:3b:cb:fd:42:14:c5:80:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75 Validity Not Before: Jan 25 14:46:34 2026 GMT Not After : Jan 28 23:05:34 2026 GMT Subject: CN=3D13BDB1A7CB89D7D91BD6345C1F3E2295827F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:75:1a:e0:39:ff:bc:1c:4b:0c:cf:df:47: 69:66:50:d6:b9:13:e3:f1:47:40:d2:90:d5:76:32: 14:4d:93:81:0e:b6:c1:18:b6:ea:af:95:48:aa:17: 45:36:7a:d6:ca:b0:ae:f7:be:15:a4:bc:e9:72:5e: 36:9c:17:f6:11:83:eb:c4:c6:e7:07:d7:ac:04:3c: 8f:07:64:be:84:3f:87:30:8f:b6:13:9e:4e:bd:cb: 88:23:0f:13:2a:79:49:0b:ee:bc:6f:c5:33:6c:62: a7:5e:22:bb:94:5e:a1:62:02:68:3d:a0:37:00:9d: 73:91:ef:f7:b6:02:19:7a:20:dc:e5:cf:cc:0d:f6: e9:02:1d:c4:72:bf:ef:f9:80:a9:db:83:83:45:83: e0:22:06:19:52:bf:3e:60:93:d3:f2:da:ba:97:66: f6:c7:b9:fa:b4:55:cf:16:75:0c:2e:90:db:4b:df: 26:2a:97:57:bc:70:7d:dc:96:8c:da:7e:2d:48:31: 91:c9:0d:54:2f:44:4c:da:12:61:3e:fe:fc:a9:11: dd:02:e7:d0:a1:1a:35:76:cf:0c:b3:53:7d:b1:46: 07:90:50:62:d6:11:4a:03:59:31:47:d5:91:33:b8: 18:1e:62:79:7a:7e:22:bb:43:0a:1b:0d:3e:c8:24: a4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:13:BD:B1:A7:CB:89:D7:D9:1B:D6:34:5C:1F:3E:22:95:82:7F:3C X509v3 Authority Key Identifier: keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:71:a7:b9:2a:0e:6b:81:52:6c:18:88:e8:76:4f:83:a7:dd: 89:3e:e9:25:a5:05:1e:05:05:5d:30:4a:bc:ec:c7:af:b3:4a: 3a:bf:51:66:b8:9e:58:01:1b:8c:d1:a2:ed:b1:4d:6a:9b:02: 65:25:57:1c:13:c7:f6:97:c7:5c:a0:24:b3:b5:f8:3c:0b:6e: 63:4a:59:77:27:23:62:02:b7:28:f6:5a:53:33:c5:c7:c5:42: 33:74:aa:4a:39:e6:c9:6d:e8:82:92:b5:25:3b:13:21:ad:6b: 17:64:85:5f:60:eb:a1:c7:0e:97:b4:f8:f2:75:68:a9:46:cd: f8:cf:60:bb:ab:f6:8a:56:cf:f1:2d:29:a5:c6:96:15:64:3c: 57:6c:2c:83:f2:0e:7e:ad:24:79:34:b9:38:d2:6d:5f:cc:2c: a6:ac:be:f7:46:89:8b:ec:e2:d0:09:1a:e7:7b:f7:86:08:e8: 6d:99:19:f1:16:73:eb:02:56:c5:44:28:dd:f3:3f:cc:a8:57: 17:b0:2c:e6:58:b5:de:59:4a:ad:8a:3e:56:97:ff:1f:19:4d: a4:52:0e:d2:11:2b:00:10:d3:7e:6b:e4:f7:6d:b0:73:57:00: b3:65:d9:96:30:95:c2:39:bc:63:2b:f6:e0:e3:35:00:f3:52: 2a:04:00:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMz2DhM5MJ44zGKLO8v9QhTFgDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJB Qjg5Q0M3NTAeFw0yNjAxMjUxNDQ2MzRaFw0yNjAxMjgyMzA1MzRaMDMxMTAvBgNV BAMTKDNEMTNCREIxQTdDQjg5RDdEOTFCRDYzNDVDMUYzRTIyOTU4MjdGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ3Ua4Dn/vBxLDM/fR2lmUNa5 E+PxR0DSkNV2MhRNk4EOtsEYtuqvlUiqF0U2etbKsK73vhWkvOlyXjacF/YRg+vE xucH16wEPI8HZL6EP4cwj7YTnk69y4gjDxMqeUkL7rxvxTNsYqdeIruUXqFiAmg9 oDcAnXOR7/e2Ahl6INzlz8wN9ukCHcRyv+/5gKnbg4NFg+AiBhlSvz5gk9Py2rqX ZvbHufq0Vc8WdQwukNtL3yYql1e8cH3clozafi1IMZHJDVQvREzaEmE+/vypEd0C 59ChGjV2zwyzU32xRgeQUGLWEUoDWTFH1ZEzuBgeYnl6fiK7QwobDT7IJKRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPRO9safLidfZG9Y0XB8+IpWCfzwwHwYDVR0j BBgwFoAUFKOfpUEOpX4NQW4DLXaeUquJzHUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGQ5YTI5Ni04MjI4LTQzODYtOGZlOS05N2FhMzA5MWRlMGQvMC8xNEEzOUZBNTQx MEVBNTdFMEQ0MTZFMDMyRDc2OUU1MkFCODlDQzc1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlFNTJBQjg5 Q0M3NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBkOWEyOTYtODIyOC00Mzg2LThm ZTktOTdhYTMwOTFkZTBkLzAvMTRBMzlGQTU0MTBFQTU3RTBENDE2RTAzMkQ3NjlF NTJBQjg5Q0M3NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtxp7kqDmuBUmwYiOh2T4On3Yk+6SWlBR4F BV0wSrzsx6+zSjq/UWa4nlgBG4zRou2xTWqbAmUlVxwTx/aXx1ygJLO1+DwLbmNK WXcnI2ICtyj2WlMzxcfFQjN0qko55slt6IKStSU7EyGtaxdkhV9g66HHDpe0+PJ1 aKlGzfjPYLur9opWz/EtKaXGlhVkPFdsLIPyDn6tJHk0uTjSbV/MLKasvvdGiYvs 4tAJGud794YI6G2ZGfEWc+sCVsVEKN3zP8yoVxewLOZYtd5ZSq2KPlaX/x8ZTaRS DtIRKwAQ035r5PdtsHNXALNl2ZYwlcI5vGMr9uDjNQDzUioEAEg= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:25 2026 by rpki-client