This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
File:                     14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json)
Hash identifier:          5I3+Di5WbzEgijmp6sXZSV/ftm45G+EOIqUfEWpZDfk=
Subject key identifier:   71:85:B4:DB:75:12:B5:80:A4:45:60:10:DD:7C:31:B9:C4:79:DA:7D
Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6
Certificate issuer:       /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
Certificate serial:       18A717771E2F3EAAB47172569CAA3257F6052E27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
Manifest number:          0263
Signing time:             Mon 02 Feb 2026 02:33:16 +0000
Manifest this update:     Mon 02 Feb 2026 02:28:16 +0000
Manifest next update:     Thu 05 Feb 2026 12:15:16 +0000
Files and hashes:         1: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: kf2kepdXhUfEomBl7umRl3ICAZ1g5upIwRlS9LdZmKA=)
                          2: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=)
                          3: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=)
                          4: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl
                          rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Feb 2026 05:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a7:17:77:1e:2f:3e:aa:b4:71:72:56:9c:aa:32:57:f6:05:2e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6
        Validity
            Not Before: Feb  2 02:28:16 2026 GMT
            Not After : Feb  5 12:15:16 2026 GMT
        Subject: CN=7185B4DB7512B580A4456010DD7C31B9C479DA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:3d:27:58:67:00:f7:69:ee:43:3a:53:bb:
                    07:d1:fa:44:a3:8d:63:92:53:91:16:be:76:98:c4:
                    c4:3d:2f:c9:63:46:20:e6:10:c7:71:15:12:22:74:
                    2a:d9:35:3b:e2:5d:db:de:ab:57:8e:fe:53:59:da:
                    e4:39:2f:52:e1:57:c7:47:e6:89:b3:94:dd:d2:3f:
                    f2:d1:50:f1:fe:e0:17:17:e3:24:4b:b1:e8:21:d5:
                    91:43:d3:1c:a2:6b:fc:f7:08:ac:98:42:7f:1f:8e:
                    bc:d5:53:d3:77:20:66:4d:ba:e7:f9:a8:e8:65:95:
                    5f:cd:06:d5:e6:a4:a3:0b:28:d9:29:65:54:79:4b:
                    ca:f1:c2:f5:ee:63:e4:70:72:d3:21:6f:a7:44:28:
                    f5:84:1d:db:46:8d:c5:d9:b2:6a:03:5a:c6:05:f1:
                    84:d3:af:4c:39:cf:6d:24:1a:8a:c1:e5:6a:60:35:
                    88:1d:de:9b:75:a9:d7:52:4f:81:2e:32:a5:c6:c6:
                    ef:a8:ac:e0:a5:26:f8:1a:d3:82:f0:11:02:ef:57:
                    a0:07:25:61:db:0f:3a:e0:8a:d6:27:2f:f2:57:e1:
                    bd:65:d2:0f:9a:d7:cf:31:a4:44:ef:ce:c0:5a:5a:
                    18:6e:fb:ce:9d:e2:bb:f4:8d:d2:2e:8d:bc:08:3f:
                    61:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:85:B4:DB:75:12:B5:80:A4:45:60:10:DD:7C:31:B9:C4:79:DA:7D
            X509v3 Authority Key Identifier:
                keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:90:53:2b:d6:96:83:45:e4:b2:be:47:92:f1:b0:23:b0:9a:
         4f:48:e6:00:e4:ff:e8:6e:2b:3a:84:e0:9f:30:43:31:65:df:
         ef:ab:df:6a:96:52:33:2e:50:f9:30:17:8d:a5:05:10:ef:74:
         e4:6d:89:04:fa:06:09:f3:8c:4a:47:62:be:93:c4:50:42:8e:
         60:8c:44:df:66:05:a0:ea:22:f7:52:88:00:4c:e7:4f:a9:05:
         bd:6a:c4:e8:c9:9b:91:21:e3:49:16:97:b9:7c:3d:e5:5a:4a:
         b3:a3:8d:32:4c:be:ad:70:75:b7:55:19:62:42:21:30:f9:a4:
         8c:15:ee:84:41:4c:95:43:bc:9d:d6:21:13:ac:73:a5:7b:78:
         a9:69:19:ce:42:e4:a5:3f:6d:b0:28:4e:a2:c4:08:4e:36:90:
         c2:1e:90:45:e7:9b:f9:0c:d3:e2:c0:be:fd:12:28:87:8f:30:
         0d:6e:9c:31:4a:73:73:b2:02:f8:3e:78:33:2e:48:c5:3f:3b:
         91:ae:e7:f2:d1:da:3b:d2:62:0f:21:f3:37:a7:28:b1:79:96:
         27:64:0b:0b:ca:3d:ee:db:bc:7f:3a:b4:3b:60:a7:93:4b:07:
         86:bc:26:21:fb:a2:ba:c3:e7:20:0c:33:00:33:a8:a7:74:37:
         36:b7:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:31 2026 by rpki-client