This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: LtOe3hBEBRIFkRM5Qvh5D7sJ6s4iOYRZqKW6jpkirvk= Subject key identifier: 72:FD:A3:14:52:83:55:E3:24:39:85:72:61:92:95:6A:39:CD:A3:37 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 5DBA166702350D7BFCE62D05564601305330CBBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01EA Signing time: Sat 31 Jan 2026 03:21:50 +0000 Manifest this update: Sat 31 Jan 2026 03:16:50 +0000 Manifest next update: Tue 03 Feb 2026 08:23:50 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: 1ej8dLkGuo+eppqAXPhW9Qe1Ygka2G7gnTxYVDabu0s=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 08:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ba:16:67:02:35:0d:7b:fc:e6:2d:05:56:46:01:30:53:30:cb:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Jan 31 03:16:50 2026 GMT Not After : Feb 3 08:23:50 2026 GMT Subject: CN=72FDA314528355E3243985726192956A39CDA337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1e:b0:34:65:ca:5e:04:ac:95:d1:36:ea:3c: bd:38:8c:5d:b6:5d:60:2d:4c:eb:96:06:a0:8f:8a: d5:23:d3:82:9e:5f:52:e3:63:f0:bf:82:40:15:aa: af:78:81:85:dd:b0:b9:6b:d1:d7:c5:87:b0:61:b4: 79:3e:63:63:43:33:f4:d9:15:4e:dc:a2:f0:23:95: b6:58:d6:6e:46:79:e4:e9:37:d4:d4:89:0b:13:d9: e9:e1:5c:4d:89:a0:01:f0:3b:cc:a9:b7:92:db:64: f5:b1:d3:dc:18:37:9f:c9:ad:56:5b:87:f3:99:c9: d0:ac:0f:8d:45:d3:a2:3a:5f:f8:66:4f:9d:38:c2: 38:89:20:38:bd:24:ed:e7:87:66:16:8f:d7:6b:29: 75:88:3b:72:30:27:74:49:21:bf:d3:58:a4:6e:99: e9:72:71:59:e8:e2:94:30:7f:74:48:d4:d3:db:9a: d9:be:58:d6:59:3e:b8:fa:6d:e6:5e:8c:52:16:bf: b1:4a:d0:60:b5:28:e0:6c:1b:96:94:91:54:df:0d: 9c:dc:72:f2:96:1a:10:db:8e:5c:61:70:09:4a:b0: f9:6e:0b:68:8e:93:34:36:48:20:af:00:4d:e7:04: 8e:c6:cf:71:d2:7f:dc:6f:ba:51:fb:a6:44:16:fb: 46:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FD:A3:14:52:83:55:E3:24:39:85:72:61:92:95:6A:39:CD:A3:37 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:80:6f:83:32:9b:28:13:5f:b4:c9:0f:74:84:b7:db:2f:5e: f8:58:49:2c:4e:fa:94:05:26:ed:5a:c5:57:9a:3a:d7:f9:f5: f1:e0:56:f7:bf:06:48:d9:a7:25:6f:fe:bd:55:71:e7:b4:22: e3:43:ad:e1:2a:80:53:50:7d:49:59:d1:23:18:d2:80:59:7e: ff:64:d8:98:d3:7d:27:a8:c0:e7:f2:7c:8e:ac:d5:91:b7:c4: cc:c8:90:6e:18:48:ea:2d:df:e2:3d:07:d5:bf:20:c8:49:92: 8d:03:52:e4:19:1a:18:ec:0c:01:4b:ca:9d:0d:e6:ea:3e:37: dc:2e:3c:ff:00:4b:1f:43:b4:2d:4c:55:d8:3a:31:7e:10:96: a0:19:67:48:75:fb:fc:20:c1:01:1e:13:b7:2f:dc:ea:41:3e: 3b:60:45:fc:4c:6c:4c:41:e7:e3:50:ad:67:39:f0:36:ab:22: ca:b6:bc:03:dd:cc:42:dd:91:72:43:77:bc:0d:3a:04:3a:73: 00:33:ab:ef:a3:67:1c:a8:aa:7b:54:3e:b4:b1:d1:c1:9b:ee: 73:95:6e:a5:d5:c9:f4:ae:89:ef:15:04:8b:5f:a6:02:6c:96: 3f:a2:10:5b:3f:c5:42:43:73:6a:39:8b:3a:a7:e9:a6:ec:9c: a0:f3:8e:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXboWZwI1DXv85i0FVkYBMFMwy70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNjAxMzEwMzE2NTBaFw0yNjAyMDMwODIzNTBaMDMxMTAvBgNV BAMTKDcyRkRBMzE0NTI4MzU1RTMyNDM5ODU3MjYxOTI5NTZBMzlDREEzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HrA0ZcpeBKyV0TbqPL04jF22 XWAtTOuWBqCPitUj04KeX1LjY/C/gkAVqq94gYXdsLlr0dfFh7BhtHk+Y2NDM/TZ FU7covAjlbZY1m5GeeTpN9TUiQsT2enhXE2JoAHwO8ypt5LbZPWx09wYN5/JrVZb h/OZydCsD41F06I6X/hmT504wjiJIDi9JO3nh2YWj9drKXWIO3IwJ3RJIb/TWKRu melycVno4pQwf3RI1NPbmtm+WNZZPrj6beZejFIWv7FK0GC1KOBsG5aUkVTfDZzc cvKWGhDbjlxhcAlKsPluC2iOkzQ2SCCvAE3nBI7Gz3HSf9xvulH7pkQW+0afAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcv2jFFKDVeMkOYVyYZKVajnNozcwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+Ab4MymygTX7TJD3SEt9svXvhYSSxO+pQF Ju1axVeaOtf59fHgVve/BkjZpyVv/r1Vcee0IuNDreEqgFNQfUlZ0SMY0oBZfv9k 2JjTfSeowOfyfI6s1ZG3xMzIkG4YSOot3+I9B9W/IMhJko0DUuQZGhjsDAFLyp0N 5uo+N9wuPP8ASx9DtC1MVdg6MX4QlqAZZ0h1+/wgwQEeE7cv3OpBPjtgRfxMbExB 5+NQrWc58DarIsq2vAPdzELdkXJDd7wNOgQ6cwAzq++jZxyoqntUPrSx0cGb7nOV bqXVyfSuie8VBItfpgJslj+iEFs/xUJDc2o5izqn6absnKDzjug= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:51 2026 by rpki-client