This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: VwgX5AbI3FMf57VbgvASrBYT3R1fOA50/8DB3VmB2SI= Subject key identifier: 72:17:1B:44:E7:1D:D5:4B:A0:41:99:09:A3:3A:E6:9C:D5:41:09:79 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 7550B8FF6212F09222C8DF8F59A6C84FEC1A9A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03C8 Signing time: Sat 24 Jan 2026 16:11:06 +0000 Manifest this update: Sat 24 Jan 2026 16:06:06 +0000 Manifest next update: Wed 28 Jan 2026 03:16:06 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: Q9gZSH/WR9cFzerT6+dNSlvQOBUGqBusoW3k42rdT1o=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: hAifdy6n3EEv/s/U7m2QFZ7o/goV8EGLrnmjZEec078=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:50:b8:ff:62:12:f0:92:22:c8:df:8f:59:a6:c8:4f:ec:1a:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Jan 24 16:06:06 2026 GMT Not After : Jan 28 03:16:06 2026 GMT Subject: CN=72171B44E71DD54BA0419909A33AE69CD5410979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:2d:ef:34:eb:3e:20:e4:4a:7a:ed:34:c8: 36:56:be:71:3d:29:00:f1:35:7d:95:6f:38:58:2e: 55:6d:f7:cd:a8:28:e9:75:e8:56:2e:eb:49:b1:5f: ef:fb:58:e1:77:fd:a2:cc:88:ee:94:ad:0a:eb:5a: 26:a1:b5:23:74:1e:48:cd:fd:5f:54:50:47:56:44: 5a:87:95:b8:f9:05:0d:bd:6c:f7:da:56:6c:78:27: de:3a:c5:9b:d3:a2:9b:5a:a4:c0:f5:59:2d:d3:b1: dc:68:59:9b:58:9a:2f:58:13:1c:c3:ac:76:6f:28: fe:f2:71:13:c3:22:de:d5:aa:5c:8e:62:2a:81:e7: 50:43:3d:eb:50:59:f4:c6:35:e8:2b:64:a5:37:a0: a9:d0:b0:0c:f8:4d:e4:a5:78:4e:f2:eb:f4:f8:0d: 76:ce:88:6c:60:48:7a:b0:5a:33:8e:be:75:92:a8: 59:0c:16:a9:eb:d0:13:99:4b:15:03:58:f3:f9:04: aa:aa:0a:9a:de:c5:b1:89:17:b3:66:f9:94:c5:88: 39:33:68:8e:01:4c:fa:ac:d2:69:f4:c9:f0:b8:47: 83:b8:f9:63:dc:1c:5e:4f:6d:6e:66:b1:30:76:a5: 05:73:a9:67:aa:9e:e3:3e:3e:e7:8d:b9:dd:ec:e2: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:17:1B:44:E7:1D:D5:4B:A0:41:99:09:A3:3A:E6:9C:D5:41:09:79 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:d4:88:fb:ec:f8:59:dd:08:29:1a:06:97:af:89:36:78:2d: 92:40:bc:9a:f0:e9:21:56:b3:50:b0:63:25:72:54:ca:b4:9f: b0:d4:11:53:4e:ed:f8:5e:e2:a9:26:a7:95:82:4d:28:65:74: 1f:c4:2f:39:c6:af:4b:6a:63:70:5d:c5:10:65:d2:d0:d4:45: cb:7d:26:ff:8e:21:88:62:c7:bd:2f:5f:78:c3:51:77:21:90: bc:1f:5e:ea:68:7d:96:fa:29:af:a6:5b:c0:9f:60:19:f9:fa: 6d:3d:fb:aa:82:57:da:bd:d8:2a:cb:de:77:5a:13:54:32:7e: 56:c0:e9:6f:b7:91:b8:0c:14:79:88:5c:97:26:52:29:f4:8f: 5e:3c:53:49:6d:59:36:51:5d:0a:c3:01:fa:d1:70:32:27:55: d8:26:d7:20:5b:a2:69:99:9e:3d:ff:21:b2:c5:5e:54:a3:04: b3:4a:24:d7:87:f2:17:65:35:8a:f1:2b:4c:42:2b:9c:d0:3e: 76:5d:f2:5c:80:17:fa:24:af:86:93:d4:8f:d3:be:53:30:88: ed:cc:71:d2:9d:b5:c6:c2:c7:f7:08:e8:0e:42:f7:9a:08:52: 47:43:c7:6d:bb:25:af:13:a8:ce:59:62:f0:a8:ea:c6:1e:11: 9d:87:73:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVC4/2IS8JIiyN+PWabIT+wamkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNjAxMjQxNjA2MDZaFw0yNjAxMjgwMzE2MDZaMDMxMTAvBgNV BAMTKDcyMTcxQjQ0RTcxREQ1NEJBMDQxOTkwOUEzM0FFNjlDRDU0MTA5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Ey3vNOs+IORKeu00yDZWvnE9 KQDxNX2VbzhYLlVt982oKOl16FYu60mxX+/7WOF3/aLMiO6UrQrrWiahtSN0HkjN /V9UUEdWRFqHlbj5BQ29bPfaVmx4J946xZvToptapMD1WS3TsdxoWZtYmi9YExzD rHZvKP7ycRPDIt7VqlyOYiqB51BDPetQWfTGNegrZKU3oKnQsAz4TeSleE7y6/T4 DXbOiGxgSHqwWjOOvnWSqFkMFqnr0BOZSxUDWPP5BKqqCprexbGJF7Nm+ZTFiDkz aI4BTPqs0mn0yfC4R4O4+WPcHF5PbW5msTB2pQVzqWeqnuM+PueNud3s4qttAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUchcbROcd1UugQZkJozrmnNVBCXkwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPUiPvs+FndCCkaBpeviTZ4LZJAvJrw6SFW s1CwYyVyVMq0n7DUEVNO7fhe4qkmp5WCTShldB/ELznGr0tqY3BdxRBl0tDURct9 Jv+OIYhix70vX3jDUXchkLwfXupofZb6Ka+mW8CfYBn5+m09+6qCV9q92CrL3nda E1QyflbA6W+3kbgMFHmIXJcmUin0j148U0ltWTZRXQrDAfrRcDInVdgm1yBbommZ nj3/IbLFXlSjBLNKJNeH8hdlNYrxK0xCK5zQPnZd8lyAF/okr4aT1I/TvlMwiO3M cdKdtcbCx/cI6A5C95oIUkdDx227Ja8TqM5ZYvCo6sYeEZ2Hc2Q= -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:53 2026 by rpki-client