This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: 4Rh2+JSz52jdiQIfP8jqw66NITwz57JH7dJCQLVd6vI= Subject key identifier: E5:52:97:86:22:CE:83:87:D7:B4:3B:3B:E5:86:76:02:8C:27:C8:5A Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 0E64F9C8567E4C0935D9AC505585E704FA588330 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 025F Signing time: Fri 23 Jan 2026 20:02:17 +0000 Manifest this update: Fri 23 Jan 2026 19:57:17 +0000 Manifest next update: Tue 27 Jan 2026 08:01:17 +0000 Files and hashes: 1: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: XdWi6MvDGTdxZmO4hyGjiGF38wEbdXT/bGa2tf+o6Q0=) 3: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:64:f9:c8:56:7e:4c:09:35:d9:ac:50:55:85:e7:04:fa:58:83:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Jan 23 19:57:17 2026 GMT Not After : Jan 27 08:01:17 2026 GMT Subject: CN=E552978622CE8387D7B43B3BE58676028C27C85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:29:63:27:46:08:4a:d2:21:43:03:6a:eb: 41:eb:56:af:f0:ce:d1:29:11:f8:25:eb:4f:e6:3c: 2f:c1:8d:b0:83:ce:b9:81:18:74:40:8e:38:f8:d6: 60:d0:b8:81:d6:48:60:26:aa:95:ce:bc:1e:36:aa: f1:b8:48:5a:b1:38:1c:5e:eb:37:75:a3:ab:90:31: a4:1a:a4:88:3a:c5:5f:02:a1:b4:9a:7d:3d:82:d5: f0:6f:45:bd:77:87:c5:ba:ba:68:df:4e:49:5c:ae: b5:e1:78:76:68:d5:57:1e:cf:03:41:13:dc:a3:b1: 8d:f6:34:27:a3:5c:8b:bc:d3:f8:27:7f:0d:9f:ca: ad:35:5f:11:a3:8b:7b:54:81:7c:75:70:8a:4f:a4: ef:27:c4:18:f3:a6:d9:f4:f2:03:0d:49:b7:b1:f7: 8a:39:6d:c9:cc:07:c7:86:f3:cf:49:a7:d6:8c:cf: a3:62:0a:32:6b:43:15:55:c6:59:17:fa:93:6a:88: 7b:4e:4f:00:ae:e1:f6:15:a9:28:9d:7d:94:92:12: b2:1a:58:32:2b:73:fc:87:c2:fe:6f:6f:14:3a:3c: 5f:4a:e2:24:32:bc:8d:07:ff:dd:13:20:e5:93:3f: e0:05:e9:58:1b:08:5f:24:23:b6:53:46:c7:bf:fd: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:52:97:86:22:CE:83:87:D7:B4:3B:3B:E5:86:76:02:8C:27:C8:5A X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:40:65:cc:43:65:54:57:9b:08:25:5d:ad:5d:d6:27:30:89: ea:fd:be:5f:12:11:9b:96:e4:d9:0a:01:a4:00:8f:b7:b8:46: a7:f2:09:03:5f:47:93:a3:e6:75:11:e8:70:a6:db:7b:d6:74: c7:95:64:ee:20:de:3d:3b:cf:bd:3a:19:45:bb:e5:1c:95:74: b9:a0:69:d6:20:78:dd:a8:2c:34:e8:16:6c:8e:11:5d:b1:26: aa:3b:d5:64:fa:3b:b8:ed:eb:ea:02:ba:08:ad:ef:1f:8a:89: bb:7b:06:4d:44:b1:f3:44:70:eb:57:93:2e:6e:73:40:1a:ee: 16:9b:49:15:7a:b2:83:43:f2:82:59:c2:bf:ee:87:12:89:08: 16:58:33:3c:68:9e:3a:fc:08:50:82:21:64:b8:28:ef:73:13: ed:f9:28:01:73:99:cc:26:d6:1c:38:c7:fb:95:d4:7b:cf:9b: e8:24:f6:14:51:f8:02:25:34:65:96:d2:27:80:bb:c8:55:5f: d6:2f:02:77:4d:3c:1e:26:24:31:fe:24:85:7f:0b:5b:76:f2: 22:a4:46:d0:6c:57:9f:dd:47:22:ac:7a:76:e1:a1:82:d2:4a: c8:7c:5c:b7:4e:ee:2f:c4:ce:31:e0:29:49:9e:ab:a1:b7:e4: 89:df:64:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDmT5yFZ+TAk12axQVYXnBPpYgzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNjAxMjMxOTU3MTdaFw0yNjAxMjcwODAxMTdaMDMxMTAvBgNV BAMTKEU1NTI5Nzg2MjJDRTgzODdEN0I0M0IzQkU1ODY3NjAyOEMyN0M4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4iljJ0YIStIhQwNq60HrVq/w ztEpEfgl60/mPC/BjbCDzrmBGHRAjjj41mDQuIHWSGAmqpXOvB42qvG4SFqxOBxe 6zd1o6uQMaQapIg6xV8CobSafT2C1fBvRb13h8W6umjfTklcrrXheHZo1VcezwNB E9yjsY32NCejXIu80/gnfw2fyq01XxGji3tUgXx1cIpPpO8nxBjzptn08gMNSbex 94o5bcnMB8eG889Jp9aMz6NiCjJrQxVVxlkX+pNqiHtOTwCu4fYVqSidfZSSErIa WDIrc/yHwv5vbxQ6PF9K4iQyvI0H/90TIOWTP+AF6VgbCF8kI7ZTRse//VOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VKXhiLOg4fXtDs75YZ2AownyFowHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdAZcxDZVRXmwglXa1d1icwier9vl8SEZuW 5NkKAaQAj7e4RqfyCQNfR5Oj5nUR6HCm23vWdMeVZO4g3j07z706GUW75RyVdLmg adYgeN2oLDToFmyOEV2xJqo71WT6O7jt6+oCugit7x+Kibt7Bk1EsfNEcOtXky5u c0Aa7habSRV6soND8oJZwr/uhxKJCBZYMzxonjr8CFCCIWS4KO9zE+35KAFzmcwm 1hw4x/uV1HvPm+gk9hRR+AIlNGWW0ieAu8hVX9YvAndNPB4mJDH+JIV/C1t28iKk RtBsV5/dRyKsenbhoYLSSsh8XLdO7i/EzjHgKUmeq6G35InfZAE= -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:06 2026 by rpki-client