This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: P9EhrO2PAvY3nxoorZFfIi15Uqk83wIdhx0WgVLPKeA= Subject key identifier: C6:2B:18:CD:8F:6D:C2:7D:FF:7A:82:E9:EE:07:D5:7E:9C:78:D0:52 Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 19D3A8D5860B015735474F15545B2C02EA7F7654 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 012B Signing time: Mon 02 Feb 2026 04:02:35 +0000 Manifest this update: Mon 02 Feb 2026 03:57:35 +0000 Manifest next update: Thu 05 Feb 2026 13:26:35 +0000 Files and hashes: 1: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: IrZF4gL+OymZnDAE7sKwtyUwEMIPkORsmUrKebKGSlI=) 2: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: zkuKMztQVpFbP+vk6UzTgul838fsU3IH99wSxRmRYwI=) 3: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: SO5xBVrlUoLYhhClYcL1ic80BzUIAtIXFSuHANOZ2Dc=) 4: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: H9WqLzpvYSuK/B/L3gCrtZiwzcm3LxndpPpvqu0Mgro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d3:a8:d5:86:0b:01:57:35:47:4f:15:54:5b:2c:02:ea:7f:76:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Feb 2 03:57:35 2026 GMT Not After : Feb 5 13:26:35 2026 GMT Subject: CN=C62B18CD8F6DC27DFF7A82E9EE07D57E9C78D052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:03:84:9a:6e:06:f7:00:dc:aa:b0:37:75: 88:e1:53:60:11:c2:44:b5:1d:0c:9b:7c:ae:cc:b2: 9a:b5:2c:bc:e6:5a:ab:fb:e8:53:03:c0:78:47:2a: c9:b2:c9:5f:f2:1f:b8:c4:81:ad:b2:9c:ec:8c:3e: 46:15:a0:34:fe:cc:f7:c6:4c:b8:e6:5f:96:8e:b1: f5:03:ad:3f:fa:33:30:e5:a9:7d:dc:58:69:69:66: e9:33:64:16:14:1a:f7:00:24:0e:4c:7e:df:a7:f2: f2:52:80:37:4f:41:98:43:f9:03:9a:9a:a6:61:b1: 35:9b:fa:4a:56:c8:88:81:73:06:e9:27:f2:cf:23: 74:19:63:4d:83:81:08:d8:79:dc:a9:2b:2c:3a:60: 0c:f2:55:dd:af:b0:19:53:54:85:45:d9:eb:be:65: 7f:b7:58:2c:80:8b:00:c5:53:59:39:20:4e:49:73: 15:23:f0:93:7d:99:92:1d:41:f9:4d:fa:f4:8b:cc: fe:ef:d7:48:8d:9a:5d:28:93:5c:38:82:7e:14:d1: 34:8d:50:23:aa:85:8b:5c:17:18:42:3a:7f:ec:56: a5:ce:5d:67:1b:34:99:d1:53:b4:c5:75:45:15:4e: 33:03:95:01:74:4e:fb:52:bd:3f:57:33:73:07:6c: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:2B:18:CD:8F:6D:C2:7D:FF:7A:82:E9:EE:07:D5:7E:9C:78:D0:52 X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d5:49:a1:e1:15:f1:47:f7:12:22:fb:e4:e7:1c:8b:84:7c: b0:94:7d:17:9f:e3:30:d9:5b:5a:e2:0e:6d:18:0a:6d:7d:00: bc:01:07:5c:00:7d:44:1b:19:08:db:2e:8b:72:9a:2f:e3:aa: 1c:9f:af:40:80:a5:41:0a:6d:ad:a6:2e:98:df:54:b7:d5:1d: b0:5a:99:98:65:56:fc:f3:01:3f:57:29:96:92:78:98:7e:ed: c0:80:ab:00:b6:63:b3:0f:e5:28:f2:a3:8d:6b:6f:1c:ee:de: fb:d2:a1:f5:6c:b3:16:fe:12:99:33:2b:75:8f:1a:33:bd:d3: 24:45:c9:10:ba:da:bb:a0:dd:d6:08:0a:99:21:54:23:0c:97: 70:5a:27:1d:73:e5:78:1a:75:16:aa:4b:af:5e:17:c1:2b:58: f6:65:a7:33:b6:c5:af:5e:ec:67:8f:23:12:c9:aa:c3:80:74: cb:db:d8:5f:b7:db:68:d5:95:c4:61:18:1a:f0:96:54:d3:f7: e0:c4:63:6a:69:a0:ab:db:ea:60:a1:b5:53:f8:bd:8d:a1:4a: 42:2a:db:16:aa:f9:80:9c:f8:c5:aa:e5:1f:28:c7:5e:22:a4: c1:fa:87:e6:9f:49:f8:c8:52:f9:f4:48:9d:45:e0:0d:1e:c7: 5a:bd:83:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdOo1YYLAVc1R08VVFssAup/dlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjAyMDIwMzU3MzVaFw0yNjAyMDUxMzI2MzVaMDMxMTAvBgNV BAMTKEM2MkIxOENEOEY2REMyN0RGRjdBODJFOUVFMDdENTdFOUM3OEQwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfQOEmm4G9wDcqrA3dYjhU2AR wkS1HQybfK7Mspq1LLzmWqv76FMDwHhHKsmyyV/yH7jEga2ynOyMPkYVoDT+zPfG TLjmX5aOsfUDrT/6MzDlqX3cWGlpZukzZBYUGvcAJA5Mft+n8vJSgDdPQZhD+QOa mqZhsTWb+kpWyIiBcwbpJ/LPI3QZY02DgQjYedypKyw6YAzyVd2vsBlTVIVF2eu+ ZX+3WCyAiwDFU1k5IE5JcxUj8JN9mZIdQflN+vSLzP7v10iNml0ok1w4gn4U0TSN UCOqhYtcFxhCOn/sVqXOXWcbNJnRU7TFdUUVTjMDlQF0TvtSvT9XM3MHbLmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxisYzY9twn3/eoLp7gfVfpx40FIwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTVSaHhFfFH9xIi++TnHIuEfLCUfRef4zDZ W1riDm0YCm19ALwBB1wAfUQbGQjbLotymi/jqhyfr0CApUEKba2mLpjfVLfVHbBa mZhlVvzzAT9XKZaSeJh+7cCAqwC2Y7MP5Sjyo41rbxzu3vvSofVssxb+EpkzK3WP GjO90yRFyRC62rug3dYICpkhVCMMl3BaJx1z5XgadRaqS69eF8ErWPZlpzO2xa9e 7GePIxLJqsOAdMvb2F+322jVlcRhGBrwllTT9+DEY2ppoKvb6mChtVP4vY2hSkIq 2xaq+YCc+MWq5R8ox14ipMH6h+afSfjIUvn0SJ1F4A0ex1q9gzE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:56 2026 by rpki-client