This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: Q0u2hiZ4k53320GnQur8zPh7UFTf+Vz0I9QpaR11e/E= Subject key identifier: D4:79:CC:2A:74:B2:48:1F:BF:B9:5E:52:85:32:D6:F6:79:5A:EF:8E Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 32F91B4DD763152EC2C6D07AB66F6DBE83D23FE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: 010A Signing time: Wed 21 Jan 2026 14:42:12 +0000 Manifest this update: Wed 21 Jan 2026 14:37:12 +0000 Manifest next update: Sat 24 Jan 2026 18:28:12 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: wjCozcVfnnGXxI8/BpFZak1RI66xNsWFuwQWcYgCWMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f9:1b:4d:d7:63:15:2e:c2:c6:d0:7a:b6:6f:6d:be:83:d2:3f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Jan 21 14:37:12 2026 GMT Not After : Jan 24 18:28:12 2026 GMT Subject: CN=D479CC2A74B2481FBFB95E528532D6F6795AEF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:fb:d1:df:b3:31:1e:b8:ad:32:9a:28:cc: 18:b8:a7:b1:41:5b:07:19:3b:3d:3f:dd:1b:51:88: 30:e8:82:2d:51:0a:f9:97:b6:89:44:1d:f6:e2:27: 97:49:b5:e1:59:01:0a:18:8c:32:86:0e:92:4d:81: 45:ef:33:21:64:5c:b9:f2:f0:1d:23:6f:d8:ec:a9: bc:64:00:58:87:a1:2e:8f:ef:ab:a6:4a:12:22:1e: 74:c2:54:96:03:7d:eb:6a:d8:72:42:55:1d:97:8a: 13:a6:91:54:72:fe:f3:01:af:db:a1:55:9c:58:8a: 61:5e:f2:26:4c:e2:96:f7:1b:51:f5:bf:96:eb:cb: 77:56:47:78:de:5f:dc:86:62:fd:29:4f:9d:f4:87: 22:83:8c:30:06:a1:39:a2:5f:cd:05:1a:c2:07:e7: 05:f3:5c:76:21:cf:82:18:25:b7:74:ed:43:82:a1: da:29:d0:e6:33:29:c2:38:c7:42:41:a3:57:52:36: 34:2c:15:e0:a9:10:47:e1:19:ae:99:0b:95:d7:26: 3b:f9:b5:44:75:eb:23:5a:17:96:e5:da:9d:75:a1: 95:88:13:4b:f3:bc:0f:49:0c:9a:44:0c:ed:ad:83: c5:53:03:95:a5:11:0b:09:e5:a4:24:02:1c:a4:7c: c7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:CC:2A:74:B2:48:1F:BF:B9:5E:52:85:32:D6:F6:79:5A:EF:8E X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:11:ee:8f:3d:4b:ff:b0:75:54:9d:ec:88:c8:f6:59:9e:44: 5f:06:05:90:5b:21:de:2a:e6:d7:09:6d:b2:d6:37:c3:0a:5e: a0:5d:70:0f:7f:76:6c:5b:c5:e9:fd:87:39:3e:a6:f6:d8:18: bc:19:85:40:8c:4d:da:dd:63:5b:85:73:92:be:d5:f1:7b:30: d9:61:84:6d:7d:3c:a6:fb:85:5d:40:1d:34:96:2c:d0:db:b8: 40:05:30:5d:1c:20:e2:ae:37:f1:03:c7:e2:c2:a7:ad:3c:36: ef:34:6b:c0:9f:d4:b7:bc:0b:65:2f:21:dc:b2:62:26:3d:fa: ec:27:8e:fd:56:7b:2a:48:8c:aa:e7:ad:24:04:6e:c0:d2:52: d6:07:06:49:df:15:4e:87:66:14:9f:a7:a3:fc:48:d5:05:f4: e8:9e:6d:24:39:6a:b1:72:e9:22:ff:90:cd:12:bb:cd:85:05: e4:d3:b4:74:b7:2e:52:53:2c:ba:41:90:6b:1b:4f:98:e7:53: 0b:67:26:9c:45:31:9e:3e:8b:a9:af:24:e5:23:0c:66:56:35: ae:7b:e0:35:73:16:84:ff:07:4b:01:94:1b:17:3f:ba:18:bb: 69:c8:f4:24:6d:b6:06:2a:b8:ec:4f:89:bc:21:33:f2:90:29: c1:e3:6b:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvkbTddjFS7CxtB6tm9tvoPSP+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNjAxMjExNDM3MTJaFw0yNjAxMjQxODI4MTJaMDMxMTAvBgNV BAMTKEQ0NzlDQzJBNzRCMjQ4MUZCRkI5NUU1Mjg1MzJENkY2Nzk1QUVGOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOcPvR37MxHritMpoozBi4p7FB WwcZOz0/3RtRiDDogi1RCvmXtolEHfbiJ5dJteFZAQoYjDKGDpJNgUXvMyFkXLny 8B0jb9jsqbxkAFiHoS6P76umShIiHnTCVJYDfetq2HJCVR2XihOmkVRy/vMBr9uh VZxYimFe8iZM4pb3G1H1v5bry3dWR3jeX9yGYv0pT530hyKDjDAGoTmiX80FGsIH 5wXzXHYhz4IYJbd07UOCodop0OYzKcI4x0JBo1dSNjQsFeCpEEfhGa6ZC5XXJjv5 tUR16yNaF5bl2p11oZWIE0vzvA9JDJpEDO2tg8VTA5WlEQsJ5aQkAhykfMePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1HnMKnSySB+/uV5ShTLW9nla744wHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcR7o89S/+wdVSd7IjI9lmeRF8GBZBbId4q 5tcJbbLWN8MKXqBdcA9/dmxbxen9hzk+pvbYGLwZhUCMTdrdY1uFc5K+1fF7MNlh hG19PKb7hV1AHTSWLNDbuEAFMF0cIOKuN/EDx+LCp608Nu80a8Cf1Le8C2UvIdyy YiY9+uwnjv1WeypIjKrnrSQEbsDSUtYHBknfFU6HZhSfp6P8SNUF9OiebSQ5arFy 6SL/kM0Su82FBeTTtHS3LlJTLLpBkGsbT5jnUwtnJpxFMZ4+i6mvJOUjDGZWNa57 4DVzFoT/B0sBlBsXP7oYu2nI9CRttgYquOxPibwhM/KQKcHja3Q= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:09 2026 by rpki-client