This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
File: CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft (raw, json)
Hash identifier: /h5q+V+6L7szwDzC/lJHJBM8CfhZ2HyIXe++5gHyX6Q=
Subject key identifier: 59:15:16:B6:78:E8:D5:EC:3C:78:3D:C9:D3:E1:4D:8E:30:91:87:A5
Authority key identifier: CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37
Certificate issuer: /CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637
Certificate serial: 086381CCE1C1FF09D974A37D0D17386251E0719B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
Manifest number: 010D
Signing time: Sat 31 Jan 2026 15:20:47 +0000
Manifest this update: Sat 31 Jan 2026 15:15:47 +0000
Manifest next update: Tue 03 Feb 2026 23:16:47 +0000
Files and hashes: 1: 323030313a6466333a646134303a3a2f34382d3438203d3e20313532373730.roa (hash: u0aVe07udqmDfe58UcBPj9st7rR/OUpFHbWFfIMONno=)
2: CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl (hash: roNVC+9KSWG06dQaWM/GP4mb1JQl8SCHVSWdem+sKfY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl
rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:63:81:cc:e1:c1:ff:09:d9:74:a3:7d:0d:17:38:62:51:e0:71:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE4160CB7000F2DDE9C87291F90D71C10A79E637
Validity
Not Before: Jan 31 15:15:47 2026 GMT
Not After : Feb 3 23:16:47 2026 GMT
Subject: CN=591516B678E8D5EC3C783DC9D3E14D8E309187A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:b8:fc:36:c2:ab:cc:fe:4e:a0:a4:81:d8:
b7:15:dc:c4:df:8c:58:1b:df:1f:ce:86:13:0c:eb:
1f:4d:da:f4:aa:62:9d:ed:90:e6:0a:cf:c5:d8:06:
df:ba:8b:ea:d4:41:b2:52:01:b3:63:a6:c1:9c:fc:
dd:87:2d:c8:4e:15:ac:34:98:f8:8f:99:eb:a8:d0:
a1:2d:1b:e9:ff:ca:7a:f8:74:52:b0:1a:13:77:9b:
4a:c9:f6:73:e8:bb:f5:99:8c:02:26:6b:28:4d:a1:
76:6d:79:ab:77:a6:d6:17:ee:dd:78:f9:f4:8e:75:
10:b2:01:23:6f:80:7d:b8:cc:48:7e:1b:d0:4c:38:
d3:83:6d:3e:87:46:53:f5:32:62:ff:80:cc:4b:55:
71:74:b4:93:d0:c2:0d:25:e0:9e:9d:0b:31:e5:c0:
77:0c:fe:5e:d3:22:c2:49:97:41:cf:62:20:b7:14:
8b:8a:11:3b:1d:65:45:31:f2:58:64:ac:04:f4:2c:
7c:26:67:e6:29:8c:d6:d2:90:1f:fe:3d:21:0d:91:
e9:9f:c8:4e:d2:85:32:71:47:50:e1:e9:f3:f9:9a:
59:1b:3e:3d:7e:ea:3a:ed:13:03:34:b9:22:a5:04:
61:9a:35:12:25:d9:ff:53:a3:68:80:40:a3:3f:ba:
22:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:15:16:B6:78:E8:D5:EC:3C:78:3D:C9:D3:E1:4D:8E:30:91:87:A5
X509v3 Authority Key Identifier:
keyid:CE:41:60:CB:70:00:F2:DD:E9:C8:72:91:F9:0D:71:C1:0A:79:E6:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE4160CB7000F2DDE9C87291F90D71C10A79E637.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/1/CE4160CB7000F2DDE9C87291F90D71C10A79E637.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:c6:13:f6:f7:c8:7e:01:86:86:0d:53:61:ba:b1:25:73:
03:bc:78:13:9a:54:96:80:80:50:7e:c2:dd:37:a7:7f:14:0f:
65:0c:be:3d:89:60:0c:52:f9:89:c7:ba:3a:1e:11:83:3f:a8:
c6:2e:60:9b:6d:32:91:5f:e2:fa:2d:27:3f:3d:cf:74:ac:78:
3f:7e:c9:be:4e:cd:1b:0e:fd:c4:e2:17:a9:52:b2:b1:27:8d:
ef:8f:ca:3c:23:37:d9:26:37:fb:02:2f:5e:58:8c:85:d6:f3:
a1:46:23:7f:fb:6f:6b:97:36:33:c4:10:c6:21:2e:84:f1:fa:
b8:4c:94:47:14:ca:a8:53:19:96:99:95:5b:5d:65:77:45:7c:
aa:2d:09:df:84:dd:48:b3:90:27:62:cd:1c:81:3f:0f:81:6e:
af:04:94:6f:c0:2f:25:02:bc:4f:cc:c1:b3:6a:9c:8a:a0:a7:
ba:63:32:25:e9:d8:4d:e0:7b:eb:5f:ae:eb:23:c2:45:eb:f0:
8e:64:1c:b5:32:d4:a8:4d:5f:f5:93:33:40:0d:4b:fc:0c:9c:
b3:55:98:e1:b6:14:5a:f3:25:3b:0f:e8:c4:ad:b4:60:38:75:
ad:7c:76:23:c4:09:d9:35:11:39:75:ab:7a:12:29:83:9b:c1:
56:ed:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:05:13 2026 by rpki-client