This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: UpzsvavKQbVbhJNWP8co9ne3GBfWXX620Wjqlv4iXAQ= Subject key identifier: 8B:3C:5A:E9:7D:DC:26:72:DC:F6:FA:EC:86:71:DC:A7:63:22:F9:C1 Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 385513ABF489D3FA6F1EB5DC9D20CF8B641B70D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0544 Signing time: Sun 01 Feb 2026 21:21:24 +0000 Manifest this update: Sun 01 Feb 2026 21:16:24 +0000 Manifest next update: Thu 05 Feb 2026 09:01:24 +0000 Files and hashes: 1: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: G5ln0yk8rb/BrIth2gPl7ty9Rg9ujXZv21R3GjGHsHQ=) 2: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 3: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:55:13:ab:f4:89:d3:fa:6f:1e:b5:dc:9d:20:cf:8b:64:1b:70:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Feb 1 21:16:24 2026 GMT Not After : Feb 5 09:01:24 2026 GMT Subject: CN=8B3C5AE97DDC2672DCF6FAEC8671DCA76322F9C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:b4:cc:99:06:2d:54:86:68:9d:b8:35:43: a7:28:7c:f1:96:07:a2:fa:bf:c8:a4:37:5d:ab:a4: 8f:90:0f:53:3e:c2:e0:fb:81:cc:cf:bc:0e:23:6f: e9:0f:3c:48:13:1e:0a:9e:17:08:30:53:60:e3:51: 09:d6:56:71:c6:fa:74:dc:c5:5e:da:f7:f7:59:c6: 8c:7b:a6:9e:69:ad:ce:f5:a6:07:8e:08:ec:38:0b: fc:c0:9d:c4:76:d4:b1:84:19:93:48:7a:ba:6a:40: 34:5b:16:47:f6:e7:4e:43:85:94:51:35:92:54:c4: ef:ca:b3:2c:49:7b:99:99:35:a9:f1:53:9f:2d:fb: 22:a5:d7:48:35:de:2b:be:08:1c:96:63:ff:a0:0a: b5:dc:b6:60:31:e9:29:0d:97:28:33:ff:e2:e5:d5: a0:32:16:6d:02:d4:9b:14:72:3e:68:0a:6c:87:71: 0a:1c:b4:5d:10:74:3a:cd:88:db:95:cc:0f:3f:cb: 57:6f:aa:88:44:b1:a1:1a:8d:e2:03:bd:2c:ee:c9: 18:f5:c3:b9:a0:17:f4:3d:da:72:20:e5:9e:ec:f8: 0d:87:2a:1d:38:5b:ee:ae:22:8a:b4:3f:24:19:05: 5c:77:de:44:f4:ff:79:a3:23:da:2b:c6:17:bd:96: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:5A:E9:7D:DC:26:72:DC:F6:FA:EC:86:71:DC:A7:63:22:F9:C1 X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a3:4b:e5:2a:7f:78:cd:71:06:c3:f4:81:2a:a2:e0:66:ee: 21:35:f6:0a:3a:91:50:dd:b6:31:6e:1c:7e:32:8e:d5:73:3e: 81:86:91:2e:0b:53:0f:a1:4b:61:1e:cf:4a:ba:e7:67:c2:e9: 42:96:49:a8:34:e0:4b:e8:f4:41:4e:c0:b6:ef:63:1f:08:30: 61:8b:d6:45:35:af:1a:1d:ac:cd:cd:79:2c:44:04:b3:e6:b7: 9c:b9:7c:a9:9c:8c:52:ff:b2:10:ff:e5:cf:a8:2e:bd:69:4b: 91:92:e8:ac:7b:2c:e5:5f:72:2f:c1:76:2e:72:da:07:a3:54: 4d:80:39:da:f6:19:d9:61:55:44:42:49:54:a4:70:2c:08:d2: 2f:21:aa:7b:f3:68:73:bc:26:e9:3d:7e:4c:b8:08:81:77:06: ea:25:41:fc:7b:c8:10:7d:0d:63:e7:ea:20:cf:4f:75:12:7a: 6a:ca:4e:79:60:91:ac:fb:52:75:a6:a8:0c:f5:ec:da:57:b1: 05:29:c6:f3:b6:f6:be:29:d3:56:f1:ff:e5:09:11:70:b8:88: fe:fb:ad:8c:f7:c8:ca:8c:2c:de:d3:0f:0d:0b:ec:e2:25:9e: 7e:76:09:ec:72:b1:ea:51:a3:bb:07:da:6e:ad:75:c0:21:60: c8:d5:64:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFUTq/SJ0/pvHrXcnSDPi2QbcNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNjAyMDEyMTE2MjRaFw0yNjAyMDUwOTAxMjRaMDMxMTAvBgNV BAMTKDhCM0M1QUU5N0REQzI2NzJEQ0Y2RkFFQzg2NzFEQ0E3NjMyMkY5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxbTMmQYtVIZonbg1Q6cofPGW B6L6v8ikN12rpI+QD1M+wuD7gczPvA4jb+kPPEgTHgqeFwgwU2DjUQnWVnHG+nTc xV7a9/dZxox7pp5prc71pgeOCOw4C/zAncR21LGEGZNIerpqQDRbFkf2505DhZRR NZJUxO/KsyxJe5mZNanxU58t+yKl10g13iu+CByWY/+gCrXctmAx6SkNlygz/+Ll 1aAyFm0C1JsUcj5oCmyHcQoctF0QdDrNiNuVzA8/y1dvqohEsaEajeIDvSzuyRj1 w7mgF/Q92nIg5Z7s+A2HKh04W+6uIoq0PyQZBVx33kT0/3mjI9orxhe9lpBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizxa6X3cJnLc9vrshnHcp2Mi+cEwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6jS+Uqf3jNcQbD9IEqouBm7iE19go6kVDd tjFuHH4yjtVzPoGGkS4LUw+hS2Eez0q652fC6UKWSag04Evo9EFOwLbvYx8IMGGL 1kU1rxodrM3NeSxEBLPmt5y5fKmcjFL/shD/5c+oLr1pS5GS6Kx7LOVfci/Bdi5y 2gejVE2AOdr2GdlhVURCSVSkcCwI0i8hqnvzaHO8Juk9fky4CIF3BuolQfx7yBB9 DWPn6iDPT3USemrKTnlgkaz7UnWmqAz17NpXsQUpxvO29r4p01bx/+UJEXC4iP77 rYz3yMqMLN7TDw0L7OIlnn52CexysepRo7sH2m6tdcAhYMjVZOs= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:20 2026 by rpki-client