This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: 0/JhsdpIYEJzAu4dfmrr8eQjRFkaKb6ttF9gFV+yvfQ= Subject key identifier: 12:27:07:C8:90:59:38:90:8A:82:82:F9:38:A7:C7:91:F8:28:5E:8D Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 5386A4559AA229A93764043C012E5A7D4FF330C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 011A Signing time: Sat 31 Jan 2026 22:20:40 +0000 Manifest this update: Sat 31 Jan 2026 22:15:40 +0000 Manifest next update: Wed 04 Feb 2026 05:42:40 +0000 Files and hashes: 1: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=) 2: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) 3: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: WBPV3TrwZAmVoPC/42aBLC6r4c5g0XtLogacSbHk1eY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 05:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:86:a4:55:9a:a2:29:a9:37:64:04:3c:01:2e:5a:7d:4f:f3:30:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Jan 31 22:15:40 2026 GMT Not After : Feb 4 05:42:40 2026 GMT Subject: CN=122707C8905938908A8282F938A7C791F8285E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:04:4b:87:de:d4:e8:9f:cc:96:7d:d4:91: 48:e8:e3:48:b7:c9:e2:98:5f:9f:c9:87:0c:c3:5b: 01:70:a4:bf:72:f7:ab:ef:70:f5:d2:d4:dd:3f:6c: 94:40:22:89:ed:11:b6:57:a8:de:d3:f0:69:33:72: 8d:88:c6:f4:45:f9:4f:f4:cb:32:d2:5c:4a:35:1c: 35:02:ec:6d:3a:18:b9:32:8f:fd:73:37:db:bd:4a: 34:12:6e:cb:c5:fb:6d:24:00:0f:1b:97:88:e0:9f: 05:3f:f4:48:de:f3:40:9f:84:31:db:1f:72:cc:46: 60:ed:d5:ab:1f:7b:21:6b:0e:57:36:d8:f5:89:8a: 36:1b:e9:c0:7a:71:fa:f8:39:77:f2:11:a0:0e:66: af:7d:5f:8d:f6:45:46:8c:eb:c8:8a:06:3e:11:08: 23:ac:94:ac:81:8f:8c:72:39:d6:00:5a:28:07:86: 18:a0:4c:dd:b2:47:0d:4b:22:f0:f7:5f:0c:25:d8: 50:29:06:65:fd:a9:a9:1e:35:4a:96:4a:d4:34:98: 85:bb:af:8f:60:d0:a9:b7:26:3f:c2:6c:fd:2e:af: 8c:18:cb:bb:ce:23:8c:f4:95:20:1b:3e:2a:85:14: d2:4b:fe:18:d5:38:34:bd:6a:94:99:5f:5c:90:65: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:07:C8:90:59:38:90:8A:82:82:F9:38:A7:C7:91:F8:28:5E:8D X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:76:34:73:0b:35:50:d2:61:40:04:df:4f:41:1f:23:7e:25: cd:44:79:3d:83:06:fc:ae:64:9e:a2:50:53:62:12:42:06:91: ff:ce:a2:7b:2c:0e:ec:88:86:71:fe:89:93:12:2c:00:2a:d8: 80:f4:51:06:42:57:aa:51:39:15:c6:b6:27:d4:69:ee:67:93: 0d:11:f8:9f:b1:f7:92:43:c6:6c:18:b3:38:79:a9:53:f9:72: d5:81:03:87:ff:96:43:5d:25:68:ff:07:d7:c0:2b:5c:e9:04: 13:8f:b8:7e:22:81:f3:53:4a:d9:98:0a:1a:24:f3:2a:25:6a: 36:b2:f4:67:21:a4:7f:40:ce:22:e6:d3:d0:e5:75:95:64:d8: 48:8b:5c:8e:ed:8a:72:d7:b2:c2:9c:d4:16:dd:ab:4d:d6:c8: 6d:c6:c0:48:db:4d:60:0f:43:23:bd:8c:8f:b4:84:81:a0:51: 0e:b7:d4:75:a2:3a:85:d9:50:c5:24:b3:18:5e:dc:68:a6:e1: 67:a9:13:42:b1:05:75:07:dc:84:f7:21:d5:6e:13:75:bd:78: 3e:1f:bd:65:d5:97:18:7c:fe:d5:c7:31:9b:91:67:21:8c:80: f8:df:e8:8b:70:58:b3:3d:2a:21:69:a5:4c:13:d4:72:8c:b0: 5d:ca:7e:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4akVZqiKak3ZAQ8AS5afU/zMMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNjAxMzEyMjE1NDBaFw0yNjAyMDQwNTQyNDBaMDMxMTAvBgNV BAMTKDEyMjcwN0M4OTA1OTM4OTA4QTgyODJGOTM4QTdDNzkxRjgyODVFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVtARLh97U6J/Mln3UkUjo40i3 yeKYX5/JhwzDWwFwpL9y96vvcPXS1N0/bJRAIontEbZXqN7T8Gkzco2IxvRF+U/0 yzLSXEo1HDUC7G06GLkyj/1zN9u9SjQSbsvF+20kAA8bl4jgnwU/9Eje80CfhDHb H3LMRmDt1asfeyFrDlc22PWJijYb6cB6cfr4OXfyEaAOZq99X432RUaM68iKBj4R CCOslKyBj4xyOdYAWigHhhigTN2yRw1LIvD3Xwwl2FApBmX9qakeNUqWStQ0mIW7 r49g0Km3Jj/CbP0ur4wYy7vOI4z0lSAbPiqFFNJL/hjVODS9apSZX1yQZbDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEicHyJBZOJCKgoL5OKfHkfgoXo0wHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ2NHMLNVDSYUAE309BHyN+Jc1EeT2DBvyu ZJ6iUFNiEkIGkf/OonssDuyIhnH+iZMSLAAq2ID0UQZCV6pRORXGtifUae5nkw0R +J+x95JDxmwYszh5qVP5ctWBA4f/lkNdJWj/B9fAK1zpBBOPuH4igfNTStmYChok 8yolajay9GchpH9AziLm09DldZVk2EiLXI7tinLXssKc1Bbdq03WyG3GwEjbTWAP QyO9jI+0hIGgUQ631HWiOoXZUMUksxhe3Gim4WepE0KxBXUH3IT3IdVuE3W9eD4f vWXVlxh8/tXHMZuRZyGMgPjf6ItwWLM9KiFppUwT1HKMsF3KfkQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:41 2026 by rpki-client