This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
File:                     14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json)
Hash identifier:          4Rh2+JSz52jdiQIfP8jqw66NITwz57JH7dJCQLVd6vI=
Subject key identifier:   E5:52:97:86:22:CE:83:87:D7:B4:3B:3B:E5:86:76:02:8C:27:C8:5A
Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
Certificate issuer:       /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Certificate serial:       0E64F9C8567E4C0935D9AC505585E704FA588330
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
Manifest number:          025F
Signing time:             Fri 23 Jan 2026 20:02:17 +0000
Manifest this update:     Fri 23 Jan 2026 19:57:17 +0000
Manifest next update:     Tue 27 Jan 2026 08:01:17 +0000
Files and hashes:         1: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=)
                          2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: XdWi6MvDGTdxZmO4hyGjiGF38wEbdXT/bGa2tf+o6Q0=)
                          3: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=)
                          4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl
                          rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:64:f9:c8:56:7e:4c:09:35:d9:ac:50:55:85:e7:04:fa:58:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
        Validity
            Not Before: Jan 23 19:57:17 2026 GMT
            Not After : Jan 27 08:01:17 2026 GMT
        Subject: CN=E552978622CE8387D7B43B3BE58676028C27C85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:29:63:27:46:08:4a:d2:21:43:03:6a:eb:
                    41:eb:56:af:f0:ce:d1:29:11:f8:25:eb:4f:e6:3c:
                    2f:c1:8d:b0:83:ce:b9:81:18:74:40:8e:38:f8:d6:
                    60:d0:b8:81:d6:48:60:26:aa:95:ce:bc:1e:36:aa:
                    f1:b8:48:5a:b1:38:1c:5e:eb:37:75:a3:ab:90:31:
                    a4:1a:a4:88:3a:c5:5f:02:a1:b4:9a:7d:3d:82:d5:
                    f0:6f:45:bd:77:87:c5:ba:ba:68:df:4e:49:5c:ae:
                    b5:e1:78:76:68:d5:57:1e:cf:03:41:13:dc:a3:b1:
                    8d:f6:34:27:a3:5c:8b:bc:d3:f8:27:7f:0d:9f:ca:
                    ad:35:5f:11:a3:8b:7b:54:81:7c:75:70:8a:4f:a4:
                    ef:27:c4:18:f3:a6:d9:f4:f2:03:0d:49:b7:b1:f7:
                    8a:39:6d:c9:cc:07:c7:86:f3:cf:49:a7:d6:8c:cf:
                    a3:62:0a:32:6b:43:15:55:c6:59:17:fa:93:6a:88:
                    7b:4e:4f:00:ae:e1:f6:15:a9:28:9d:7d:94:92:12:
                    b2:1a:58:32:2b:73:fc:87:c2:fe:6f:6f:14:3a:3c:
                    5f:4a:e2:24:32:bc:8d:07:ff:dd:13:20:e5:93:3f:
                    e0:05:e9:58:1b:08:5f:24:23:b6:53:46:c7:bf:fd:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:52:97:86:22:CE:83:87:D7:B4:3B:3B:E5:86:76:02:8C:27:C8:5A
            X509v3 Authority Key Identifier:
                keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:40:65:cc:43:65:54:57:9b:08:25:5d:ad:5d:d6:27:30:89:
         ea:fd:be:5f:12:11:9b:96:e4:d9:0a:01:a4:00:8f:b7:b8:46:
         a7:f2:09:03:5f:47:93:a3:e6:75:11:e8:70:a6:db:7b:d6:74:
         c7:95:64:ee:20:de:3d:3b:cf:bd:3a:19:45:bb:e5:1c:95:74:
         b9:a0:69:d6:20:78:dd:a8:2c:34:e8:16:6c:8e:11:5d:b1:26:
         aa:3b:d5:64:fa:3b:b8:ed:eb:ea:02:ba:08:ad:ef:1f:8a:89:
         bb:7b:06:4d:44:b1:f3:44:70:eb:57:93:2e:6e:73:40:1a:ee:
         16:9b:49:15:7a:b2:83:43:f2:82:59:c2:bf:ee:87:12:89:08:
         16:58:33:3c:68:9e:3a:fc:08:50:82:21:64:b8:28:ef:73:13:
         ed:f9:28:01:73:99:cc:26:d6:1c:38:c7:fb:95:d4:7b:cf:9b:
         e8:24:f6:14:51:f8:02:25:34:65:96:d2:27:80:bb:c8:55:5f:
         d6:2f:02:77:4d:3c:1e:26:24:31:fe:24:85:7f:0b:5b:76:f2:
         22:a4:46:d0:6c:57:9f:dd:47:22:ac:7a:76:e1:a1:82:d2:4a:
         c8:7c:5c:b7:4e:ee:2f:c4:ce:31:e0:29:49:9e:ab:a1:b7:e4:
         89:df:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:33 2026 by rpki-client