This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
File: 14A39FA5410EA57E0D416E032D769E52AB89CC75.mft (raw, json)
Hash identifier: Oxuga/Y0cU4g+RhK+xqLD4R7zBBNYpWvZ/uMwN4wGEo=
Subject key identifier: 3D:92:16:14:39:8D:DB:88:FE:65:D7:CE:F1:30:04:D5:E6:8F:CC:C4
Authority key identifier: 14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
Certificate issuer: /CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Certificate serial: 71DF1B3A50030A063276F10A03E13DBA7B25DCD0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
Manifest number: 02FD
Signing time: Sun 01 Feb 2026 20:41:36 +0000
Manifest this update: Sun 01 Feb 2026 20:36:36 +0000
Manifest next update: Wed 04 Feb 2026 23:57:36 +0000
Files and hashes: 1: 14A39FA5410EA57E0D416E032D769E52AB89CC75.crl (hash: VW9kAugJd7FndESm5+CUytsLu+O74dIkNbZHTUAPfYI=)
2: 3130332e3132322e36342e302f32322d3234203d3e20313338303634.roa (hash: dpkbleFDqkwX+EuMYZZpimYtRlL7Dy5gfGKwOre/oBA=)
3: 323430333a386334303a3a2f33322d3438203d3e20313338303634.roa (hash: rNCEVC57YsG1pLsfroR7lL5bhtvNw6HpUyrSsSif6rU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 23:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:df:1b:3a:50:03:0a:06:32:76:f1:0a:03:e1:3d:ba:7b:25:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14A39FA5410EA57E0D416E032D769E52AB89CC75
Validity
Not Before: Feb 1 20:36:36 2026 GMT
Not After : Feb 4 23:57:36 2026 GMT
Subject: CN=3D921614398DDB88FE65D7CEF13004D5E68FCCC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:13:f2:17:27:0c:02:dc:71:7e:67:9e:fd:
c9:21:14:28:9f:e4:2c:e4:e6:e3:3c:55:02:45:7a:
3b:b1:26:86:09:2e:d2:11:f8:d4:cb:19:dd:df:94:
59:60:c1:ee:67:07:1a:42:97:ae:c6:7d:af:18:74:
e7:a7:2e:5e:8b:cc:58:03:50:c6:7e:75:e0:af:af:
74:8b:33:6c:96:27:ff:ba:7d:49:fd:c6:4b:a1:56:
ac:0f:4d:05:71:d6:78:8d:11:12:46:da:b3:06:22:
e9:76:59:87:fe:2e:9a:c2:ae:91:e8:4b:6b:3c:9a:
f7:24:d6:82:02:86:3b:eb:08:63:66:f8:93:20:73:
cb:d6:a1:33:37:6b:00:ba:8f:88:63:75:30:4a:c1:
f2:db:b9:fc:a7:fb:74:d9:9c:e2:e8:85:bd:60:4c:
11:aa:20:c7:1d:3d:57:18:c5:ed:bb:06:d2:bf:7d:
33:c5:e8:fc:67:67:6b:d8:27:36:10:1f:78:90:c7:
89:9d:03:63:4a:ac:c5:dc:89:ac:5e:37:8f:5f:4f:
16:e7:4d:dc:a1:5c:54:d1:ce:00:78:b6:a1:3a:aa:
3e:f2:26:09:9c:a4:80:c3:28:90:fa:a1:6f:de:6d:
86:78:41:02:33:31:e5:15:df:99:0a:52:53:5b:68:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:16:14:39:8D:DB:88:FE:65:D7:CE:F1:30:04:D5:E6:8F:CC:C4
X509v3 Authority Key Identifier:
keyid:14:A3:9F:A5:41:0E:A5:7E:0D:41:6E:03:2D:76:9E:52:AB:89:CC:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14A39FA5410EA57E0D416E032D769E52AB89CC75.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0d9a296-8228-4386-8fe9-97aa3091de0d/0/14A39FA5410EA57E0D416E032D769E52AB89CC75.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c7:06:a6:05:28:a1:59:e2:a4:5d:01:2a:5a:5a:16:5a:99:
41:95:c9:54:96:2e:85:70:ab:96:b1:aa:c9:58:1d:91:53:a2:
22:86:49:e2:5b:fd:aa:14:c2:cf:85:e9:7c:93:fb:8b:7e:7b:
cf:16:0e:b7:1f:f7:33:90:54:bb:90:5b:24:3a:4d:ed:00:83:
39:e1:b6:38:88:01:22:2a:37:83:a1:c5:a3:f2:57:66:2d:7b:
5a:a6:69:b2:f8:36:e3:7a:67:6e:70:18:d3:25:f5:c8:2c:7b:
92:bc:be:15:42:fc:e0:b3:ae:36:a6:33:88:db:e6:55:65:b2:
a5:e2:bb:e9:3e:ac:b9:04:23:a5:b5:55:89:07:cb:3d:89:89:
a1:cd:f5:22:9f:e2:1d:41:fe:cb:75:e0:63:46:6f:0a:65:ea:
56:41:a7:64:ca:61:36:84:a8:97:0a:56:72:a6:9a:ff:50:2b:
c8:bb:45:a5:70:94:bf:2f:16:25:8b:1c:7e:f0:1f:31:09:5b:
a3:59:9a:7b:a7:8f:a7:8d:27:7a:f4:90:65:01:f1:dd:39:91:
2a:37:20:f2:5d:c9:ca:a7:48:94:cb:e0:75:a6:3d:e6:70:a0:
cf:cd:de:1f:06:f7:69:fb:1e:99:d0:ec:8e:59:1c:60:85:50:
a2:19:b8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:59 2026 by rpki-client