This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: bx2yHYiEjpiSlg+9gS1nN28VkQAYpCJv+N4z9QFiKWY= Subject key identifier: D3:4E:16:64:DD:42:98:0F:D3:AB:E2:D1:CF:8C:B4:4A:08:FE:75:C8 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 0E530D3F0A34583E633849744344386F3BB3151F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 027F Signing time: Mon 02 Feb 2026 05:11:57 +0000 Manifest this update: Mon 02 Feb 2026 05:06:56 +0000 Manifest next update: Thu 05 Feb 2026 13:48:56 +0000 Files and hashes: 1: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: +Rgs70yiJ68OVSVJIrZOeGGNDk46B8AKqISTepvhgtE=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 3: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 4: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:53:0d:3f:0a:34:58:3e:63:38:49:74:43:44:38:6f:3b:b3:15:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Feb 2 05:06:56 2026 GMT Not After : Feb 5 13:48:56 2026 GMT Subject: CN=D34E1664DD42980FD3ABE2D1CF8CB44A08FE75C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a0:e1:ed:50:dc:f4:fa:ea:fd:2b:3e:5b:df: f5:d0:ec:a3:b6:34:a2:bd:14:a6:53:7e:9d:80:4d: 2b:2f:42:9a:05:00:46:ee:7f:13:19:38:95:7d:70: 6a:f6:38:02:e1:5e:96:ae:f8:b4:c9:0e:ec:1a:a5: a3:9f:e9:34:2d:01:db:c7:52:07:8d:68:33:3f:e9: 5d:5c:aa:5f:61:6e:b0:99:b2:9c:a0:84:5f:22:f8: 30:81:9d:24:02:d8:d3:a3:e9:19:96:20:66:3f:66: cf:ea:01:7f:80:87:18:a4:2d:3a:d6:3b:58:47:ec: 08:57:74:cb:b9:79:b8:a3:0e:1f:87:47:a9:4b:26: bb:4b:65:3e:59:88:fa:32:d9:c3:d1:71:64:63:ed: 56:81:bb:13:30:22:3a:fa:f1:1b:e8:5b:07:7a:f8: 22:4d:e7:8d:b3:4d:2c:1b:1d:b3:28:59:8c:88:06: 0d:c8:d0:57:91:55:cd:55:ca:3b:80:4c:b6:93:af: c0:76:1e:c9:53:be:d1:3b:c8:f6:44:da:ba:e7:ec: 9e:c7:3e:f2:8e:16:b1:c5:35:1c:ca:f0:8c:fe:46: c6:0e:1f:2a:a0:c9:b5:10:09:bc:1a:ae:70:08:43: 38:20:df:c2:e9:6d:42:06:55:86:07:7a:b3:5f:68: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:16:64:DD:42:98:0F:D3:AB:E2:D1:CF:8C:B4:4A:08:FE:75:C8 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:7d:1f:23:d6:3a:12:0e:95:e7:77:6e:1b:45:20:d5:c0:6c: 5d:9d:f3:4f:28:d1:b3:d9:8e:f6:b6:b8:d4:42:de:70:1b:f2: 4a:11:98:10:b7:b0:17:9e:52:48:7e:05:3e:4a:a2:fe:c5:38: d0:72:dd:00:65:ad:b5:5e:e6:91:f6:89:c3:f4:cf:fb:0b:13: 81:83:cf:c9:e5:80:45:d9:91:bc:82:22:6b:19:8f:dd:5b:32: 22:24:80:55:0f:e9:03:77:a5:b2:dc:d1:1e:c3:3c:aa:6a:90: 7f:2e:6c:fc:f5:4e:d8:d2:90:df:0b:1b:da:58:02:f8:db:b3: 50:94:37:23:54:99:59:28:5b:e9:c2:27:4d:4d:9d:67:a2:f5: f6:40:46:b1:4e:85:44:14:2f:81:1d:68:61:09:a2:46:b5:35: 0f:08:90:43:06:fd:d7:89:7b:b6:91:da:07:5d:3c:7e:16:bc: 48:50:13:ee:16:2b:84:94:84:84:dd:ca:2d:8c:92:f3:a4:bb: ad:f5:da:14:0e:5e:b4:2b:88:96:b7:73:6e:7f:25:6a:5e:13: 8d:dd:b4:48:8c:c1:d3:35:56:49:9a:0e:1b:d2:11:0a:ef:3c: d0:41:19:5d:95:1d:f6:78:01:2a:5f:40:a3:65:e6:ae:69:9c: 25:40:40:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlMNPwo0WD5jOEl0Q0Q4bzuzFR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNjAyMDIwNTA2NTZaFw0yNjAyMDUxMzQ4NTZaMDMxMTAvBgNV BAMTKEQzNEUxNjY0REQ0Mjk4MEZEM0FCRTJEMUNGOENCNDRBMDhGRTc1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPoOHtUNz0+ur9Kz5b3/XQ7KO2 NKK9FKZTfp2ATSsvQpoFAEbufxMZOJV9cGr2OALhXpau+LTJDuwapaOf6TQtAdvH UgeNaDM/6V1cql9hbrCZspyghF8i+DCBnSQC2NOj6RmWIGY/Zs/qAX+AhxikLTrW O1hH7AhXdMu5ebijDh+HR6lLJrtLZT5ZiPoy2cPRcWRj7VaBuxMwIjr68RvoWwd6 +CJN542zTSwbHbMoWYyIBg3I0FeRVc1VyjuATLaTr8B2HslTvtE7yPZE2rrn7J7H PvKOFrHFNRzK8Iz+RsYOHyqgybUQCbwarnAIQzgg38LpbUIGVYYHerNfaPyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU004WZN1CmA/Tq+LRz4y0Sgj+dcgwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx9HyPWOhIOled3bhtFINXAbF2d808o0bPZ jva2uNRC3nAb8koRmBC3sBeeUkh+BT5Kov7FONBy3QBlrbVe5pH2icP0z/sLE4GD z8nlgEXZkbyCImsZj91bMiIkgFUP6QN3pbLc0R7DPKpqkH8ubPz1TtjSkN8LG9pY Avjbs1CUNyNUmVkoW+nCJ01NnWei9fZARrFOhUQUL4EdaGEJoka1NQ8IkEMG/deJ e7aR2gddPH4WvEhQE+4WK4SUhITdyi2MkvOku6312hQOXrQriJa3c25/JWpeE43d tEiMwdM1VkmaDhvSEQrvPNBBGV2VHfZ4ASpfQKNl5q5pnCVAQDE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:24 2026 by rpki-client