This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft File: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft (raw, json) Hash identifier: xkWnd3sKeuvZ2KjapuN2fCHDRajsyi/2mRFbbcv8d+0= Subject key identifier: 38:18:5C:17:8B:6D:A5:35:5B:00:B5:4A:B6:AC:45:77:45:64:E1:9F Authority key identifier: CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D Certificate issuer: /CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Certificate serial: 59D0FB5B155BEC46FAE202855C05267FF935390B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft Manifest number: 01AF Signing time: Sat 31 Jan 2026 01:02:09 +0000 Manifest this update: Sat 31 Jan 2026 00:57:09 +0000 Manifest next update: Tue 03 Feb 2026 07:56:09 +0000 Files and hashes: 1: CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl (hash: p0WQrZvBBtl3EW17dfM8h2t8m0tNLaWLZHYLJxzJEwg=) 2: 3130332e3135362e35372e302f32342d3234203d3e20313431303833.roa (hash: YU44qqt6xQCwxLXA5jfaKyr8+7F8xFDqnBfx8dtxJPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 07:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d0:fb:5b:15:5b:ec:46:fa:e2:02:85:5c:05:26:7f:f9:35:39:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD4EAC0306D06F2109F2679DC9F52F7DE597590D Validity Not Before: Jan 31 00:57:09 2026 GMT Not After : Feb 3 07:56:09 2026 GMT Subject: CN=38185C178B6DA5355B00B54AB6AC45774564E19F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f6:cc:95:e3:4b:bb:ea:9d:4f:4a:64:cb:6b: bd:55:04:8b:ec:61:ac:18:82:42:ea:32:88:5e:c3: 37:13:52:f6:ce:18:26:f5:59:34:71:ed:34:63:5a: af:16:3e:44:e9:22:2e:0a:a5:ba:3e:54:77:92:ac: 21:5d:0b:a2:52:e9:73:8b:d5:35:65:65:13:c7:83: aa:b1:62:2d:19:41:00:dd:9c:35:43:a6:4e:bd:52: 82:a7:b8:a0:7a:b3:55:74:07:74:fc:7b:dc:12:7f: 04:0e:96:05:0d:30:b9:28:1d:10:7d:5e:d1:c3:5c: e1:67:7f:e1:ba:60:45:f7:7e:99:4c:b3:73:9b:bd: 9c:55:1d:fc:e0:ba:0d:ba:54:75:d9:e4:d7:9c:af: b5:e2:73:a0:08:89:6e:4b:33:df:c5:9f:d5:ca:63: 04:c5:f0:be:01:ba:6c:80:c8:5f:42:dc:78:19:38: aa:a9:3f:82:ac:dc:5e:64:82:a9:78:25:28:e3:7c: ca:fc:77:b4:47:99:3a:06:76:2a:e6:5f:a7:f3:93: 74:fc:55:8b:7b:e8:55:f1:45:61:7e:d3:17:83:a4: d9:24:d0:9a:72:ea:50:e5:67:f7:59:f6:d9:f0:c3: 13:c2:cf:89:d1:4e:74:bb:e4:a5:33:74:57:66:93: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:18:5C:17:8B:6D:A5:35:5B:00:B5:4A:B6:AC:45:77:45:64:E1:9F X509v3 Authority Key Identifier: keyid:CD:4E:AC:03:06:D0:6F:21:09:F2:67:9D:C9:F5:2F:7D:E5:97:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/378bbfd4-67b4-498d-8411-e964c5fe1172/0/CD4EAC0306D06F2109F2679DC9F52F7DE597590D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4c:df:da:5f:79:b9:a3:d5:9c:bb:55:c6:14:cc:45:83:f4: 8a:f5:e0:3e:d6:8f:f9:15:bb:c9:d4:1a:28:64:76:fc:9f:4a: 93:9f:f3:fd:30:d3:7d:d6:ee:16:ea:ed:36:5a:07:05:2d:97: e3:1a:6e:2d:7a:17:3a:62:27:36:79:15:81:cb:6b:bf:4b:89: c6:f0:82:bc:4f:0f:4d:a5:96:82:4e:2d:ff:ee:8d:63:5f:27: aa:62:08:3c:dd:3d:e4:55:d8:f0:60:fc:ad:91:e1:26:d1:d3: 2a:23:06:65:61:4e:3f:44:07:e4:da:cc:40:a2:b3:a3:e8:80: 6c:21:ab:24:b8:73:ed:3a:13:3f:40:ba:3a:80:5e:a7:9a:b2: 81:13:9d:e6:ea:8c:eb:9d:21:1b:6b:c9:f2:33:5f:dd:fc:1f: fb:45:6f:c1:95:c0:95:77:eb:ba:53:45:b8:63:e8:bb:af:93: ea:50:65:eb:69:0c:24:4f:10:5c:7e:7e:63:50:06:a6:40:d2: 1b:b3:56:52:f2:04:86:9b:a4:24:94:00:c7:bf:84:76:6a:ae: ec:b7:7e:ae:c3:22:15:1b:c5:9e:f5:23:ff:1b:3a:95:e8:76: 8c:6b:34:01:d6:49:3c:5c:9b:8e:10:52:3e:b7:66:55:24:7d: c1:05:7e:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdD7WxVb7Eb64gKFXAUmf/k1OQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RF NTk3NTkwRDAeFw0yNjAxMzEwMDU3MDlaFw0yNjAyMDMwNzU2MDlaMDMxMTAvBgNV BAMTKDM4MTg1QzE3OEI2REE1MzU1QjAwQjU0QUI2QUM0NTc3NDU2NEUxOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL9syV40u76p1PSmTLa71VBIvs YawYgkLqMohewzcTUvbOGCb1WTRx7TRjWq8WPkTpIi4Kpbo+VHeSrCFdC6JS6XOL 1TVlZRPHg6qxYi0ZQQDdnDVDpk69UoKnuKB6s1V0B3T8e9wSfwQOlgUNMLkoHRB9 XtHDXOFnf+G6YEX3fplMs3ObvZxVHfzgug26VHXZ5Necr7Xic6AIiW5LM9/Fn9XK YwTF8L4BumyAyF9C3HgZOKqpP4Ks3F5kgql4JSjjfMr8d7RHmToGdirmX6fzk3T8 VYt76FXxRWF+0xeDpNkk0Jpy6lDlZ/dZ9tnwwxPCz4nRTnS75KUzdFdmkxMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBhcF4ttpTVbALVKtqxFd0Vk4Z8wHwYDVR0j BBgwFoAUzU6sAwbQbyEJ8medyfUvfeWXWQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzhiYmZkNC02N2I0LTQ5OGQtODQxMS1lOTY0YzVmZTExNzIvMC9DRDRFQUMwMzA2 RDA2RjIxMDlGMjY3OURDOUY1MkY3REU1OTc1OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJGN0RFNTk3 NTkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc4YmJmZDQtNjdiNC00OThkLTg0 MTEtZTk2NGM1ZmUxMTcyLzAvQ0Q0RUFDMDMwNkQwNkYyMTA5RjI2NzlEQzlGNTJG N0RFNTk3NTkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExM39pfebmj1Zy7VcYUzEWD9Ir14D7Wj/kV u8nUGihkdvyfSpOf8/0w033W7hbq7TZaBwUtl+Mabi16FzpiJzZ5FYHLa79Licbw grxPD02lloJOLf/ujWNfJ6piCDzdPeRV2PBg/K2R4SbR0yojBmVhTj9EB+TazECi s6PogGwhqyS4c+06Ez9AujqAXqeasoETnebqjOudIRtryfIzX938H/tFb8GVwJV3 67pTRbhj6Luvk+pQZetpDCRPEFx+fmNQBqZA0huzVlLyBIabpCSUAMe/hHZqruy3 fq7DIhUbxZ71I/8bOpXodoxrNAHWSTxcm44QUj63ZlUkfcEFfjk= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:17 2026 by rpki-client