This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: kPOQJrUnR8/5gYz4MYpKAussP71N8dbPCQH26DD059M= Subject key identifier: 4C:FF:38:B0:F0:B7:85:2D:D6:FE:FA:91:0E:84:D0:EE:6D:E1:2F:26 Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 30DB5AB34EE4E0BE63343B0301553DC3E0F7AC37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01D7 Signing time: Sat 31 Jan 2026 19:00:04 +0000 Manifest this update: Sat 31 Jan 2026 18:55:04 +0000 Manifest next update: Wed 04 Feb 2026 04:40:04 +0000 Files and hashes: 1: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: nO1NSzeB5XT9XzKpF7F6P+AZbf5v5+SS/A0zE49DbPg=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: KytWPlgvBp+Y9lhldzynCZwyjYLHBWne8GoOd2IoHZw=) 3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: 84KdwUDQ+0D3+ekB6207g3sjA0I9x+smJE2POztYJcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:40:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:db:5a:b3:4e:e4:e0:be:63:34:3b:03:01:55:3d:c3:e0:f7:ac:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Jan 31 18:55:04 2026 GMT Not After : Feb 4 04:40:04 2026 GMT Subject: CN=4CFF38B0F0B7852DD6FEFA910E84D0EE6DE12F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:50:e4:32:15:ce:07:5c:e1:dd:08:d0:ad: e2:8e:08:a9:78:2f:b5:66:2e:88:f6:2d:24:1b:c0: 53:e1:91:bb:94:d3:93:bc:c1:4a:81:dc:16:2a:9c: 81:72:60:72:84:30:cd:f2:9d:bc:91:31:d8:dd:46: 00:44:4d:e2:26:f6:76:7a:e1:df:98:9e:5c:19:51: 60:45:8e:58:e4:dc:9d:15:99:98:4f:7f:95:8c:da: b6:be:5b:b9:0e:bc:4e:6a:06:c2:d8:49:95:ec:65: 0e:85:bc:8d:2c:63:6f:2a:54:a8:5f:aa:8f:ed:99: a6:47:a7:14:1a:b4:29:16:09:52:16:c0:29:c2:9c: e3:23:0d:b8:80:05:70:21:1e:d6:4c:9c:75:79:b0: 16:b2:35:29:13:b5:bf:6f:02:95:48:18:c3:95:6b: 3d:c2:82:d4:b7:ed:37:46:0e:8f:a1:e8:2b:01:9d: 4b:58:40:18:28:d6:68:3c:ce:a3:54:5d:52:e8:94: c2:e5:1c:c9:a4:e6:d0:ab:27:72:16:50:61:53:ec: a6:f9:70:34:b3:0f:1d:52:1c:c5:77:c6:f9:90:ee: b9:59:7e:e9:d4:4f:19:36:75:00:93:e4:b4:0a:69: af:e2:11:31:96:c3:41:98:d7:63:26:cc:47:62:9d: 3c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FF:38:B0:F0:B7:85:2D:D6:FE:FA:91:0E:84:D0:EE:6D:E1:2F:26 X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:80:b1:46:4a:1a:d6:66:54:a1:00:75:b8:22:5e:f3:8f:b5: 32:12:12:6d:e3:d8:10:91:08:d4:f2:b7:5e:b5:03:62:e9:8d: 3a:a9:6e:13:4a:bb:da:15:a4:24:92:e7:f7:54:34:c9:d5:68: ee:39:dc:65:78:5a:8f:4a:72:1a:5c:1d:8a:cc:52:e5:68:3b: 13:7d:44:bc:60:ec:dc:ca:e4:d0:66:4a:54:21:9e:d7:21:e1: 7d:c4:76:13:24:dc:63:c4:67:cb:c9:72:2b:08:82:ab:4c:fe: b8:12:76:dd:f7:27:ff:66:ae:06:a3:26:d0:93:e4:0f:79:11: a9:d8:e5:00:70:9e:16:b5:7d:28:aa:57:d0:5e:e6:b6:8c:da: ff:62:9a:67:52:a0:d5:8a:ff:b7:d1:4e:53:e9:ee:28:b2:81: aa:b9:49:fc:92:b8:3c:27:fe:f7:10:0e:d2:ea:fd:83:3a:18: 5a:40:c1:4b:75:c9:dc:6a:9f:f2:ce:45:3d:46:45:b1:bc:ed: b4:8d:88:07:ca:3d:ce:cf:e5:af:d4:e0:f5:1d:cf:c0:6c:2f: 5d:45:28:42:6c:bc:18:40:dd:b8:ab:80:8a:6b:eb:c0:be:f5: a4:47:64:5f:1e:1a:aa:9c:a1:a3:10:5f:51:13:1b:38:a1:a6: 27:24:98:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNtas07k4L5jNDsDAVU9w+D3rDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNjAxMzExODU1MDRaFw0yNjAyMDQwNDQwMDRaMDMxMTAvBgNV BAMTKDRDRkYzOEIwRjBCNzg1MkRENkZFRkE5MTBFODREMEVFNkRFMTJGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd6VDkMhXOB1zh3QjQreKOCKl4 L7VmLoj2LSQbwFPhkbuU05O8wUqB3BYqnIFyYHKEMM3ynbyRMdjdRgBETeIm9nZ6 4d+YnlwZUWBFjljk3J0VmZhPf5WM2ra+W7kOvE5qBsLYSZXsZQ6FvI0sY28qVKhf qo/tmaZHpxQatCkWCVIWwCnCnOMjDbiABXAhHtZMnHV5sBayNSkTtb9vApVIGMOV az3CgtS37TdGDo+h6CsBnUtYQBgo1mg8zqNUXVLolMLlHMmk5tCrJ3IWUGFT7Kb5 cDSzDx1SHMV3xvmQ7rlZfunUTxk2dQCT5LQKaa/iETGWw0GY12MmzEdinTy5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTP84sPC3hS3W/vqRDoTQ7m3hLyYwHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeAsUZKGtZmVKEAdbgiXvOPtTISEm3j2BCR CNTyt161A2LpjTqpbhNKu9oVpCSS5/dUNMnVaO453GV4Wo9KchpcHYrMUuVoOxN9 RLxg7NzK5NBmSlQhntch4X3EdhMk3GPEZ8vJcisIgqtM/rgSdt33J/9mrgajJtCT 5A95EanY5QBwnha1fSiqV9Be5raM2v9immdSoNWK/7fRTlPp7iiygaq5SfySuDwn /vcQDtLq/YM6GFpAwUt1ydxqn/LORT1GRbG87bSNiAfKPc7P5a/U4PUdz8BsL11F KEJsvBhA3birgIpr68C+9aRHZF8eGqqcoaMQX1ETGzihpickmLc= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:15 2026 by rpki-client