This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft (raw, json) Hash identifier: b57YDDEMbOLAQEvcmCV7yM9J847ri3r8614u3e450nY= Subject key identifier: 09:C1:E0:59:57:E6:DA:3A:61:92:92:8C:49:96:0A:06:FB:3F:F1:57 Authority key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Certificate issuer: /CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Certificate serial: 4AED4A2F23F42B6790262A57570F7BC6B4B9C4CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft Manifest number: 015E Signing time: Mon 02 Feb 2026 07:22:02 +0000 Manifest this update: Mon 02 Feb 2026 07:17:02 +0000 Manifest next update: Thu 05 Feb 2026 12:20:02 +0000 Files and hashes: 1: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl (hash: oFc8Kv1/AcLD+uoN2Y/LGQ6DbNL4KdkYitGE+1M0CzM=) 2: 3230322e34372e3138352e302f32342d3234203d3e20313532303332.roa (hash: cziExQNbsC9slbA6+8SWM0R0EDsOLwLtgTBqDttdfO0=) 3: 323430313a353532303a3a2f33322d3332203d3e20313532303332.roa (hash: 17S1NzRw5+8IP/n/zFRvAJ9ydBwiGj1bRmgVr44VYpQ=) 4: 3230322e34372e3138342e302f32342d3234203d3e20313532303332.roa (hash: VplOBLaXlcKJuXzC/kYMwYe44pXvcuZNrI/g2VUmZTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ed:4a:2f:23:f4:2b:67:90:26:2a:57:57:0f:7b:c6:b4:b9:c4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Validity Not Before: Feb 2 07:17:02 2026 GMT Not After : Feb 5 12:20:02 2026 GMT Subject: CN=09C1E05957E6DA3A6192928C49960A06FB3FF157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2a:9c:d6:a4:62:c3:4e:b8:65:5c:f8:45:18: 89:f8:7e:b3:64:b3:43:6e:f9:46:a7:b8:70:c4:dc: 45:d5:c3:91:6d:65:8b:8d:f5:f9:8f:f7:5b:dd:b9: d6:32:f7:af:1f:5b:61:ad:ec:80:55:f3:e0:32:20: c3:d6:51:09:6f:15:49:15:d2:f6:b3:47:80:11:dd: 50:79:93:80:9d:48:c9:dc:92:6b:34:de:cc:9e:b2: f9:08:92:2f:85:f8:e7:bb:c8:54:60:af:73:45:84: 18:b8:0d:12:d7:da:af:e7:69:2b:97:20:a6:97:66: 4b:d0:fe:a1:24:5a:1f:94:90:a6:e4:e0:a9:2a:c8: c8:db:af:71:9a:60:d7:0b:94:5b:58:ca:da:bf:20: 05:e0:ea:12:0a:b0:e2:58:c1:84:39:37:02:1a:63: 96:02:78:07:6a:29:a7:4b:77:8a:98:bf:d2:ca:5a: 15:7d:89:04:f2:14:3c:c5:f9:a7:a0:bb:fd:fd:90: c7:86:eb:99:cb:04:f0:ff:96:a4:3b:83:d7:d6:2f: 4b:02:89:a3:90:1f:4a:d9:d3:f5:1e:fe:b0:77:e3: 59:53:f5:9e:30:b3:36:10:38:d1:03:03:c0:c6:d9: 5c:72:a8:c9:75:96:69:55:6a:d7:ac:c3:6a:e5:18: b7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:E0:59:57:E6:DA:3A:61:92:92:8C:49:96:0A:06:FB:3F:F1:57 X509v3 Authority Key Identifier: keyid:CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:df:d3:1f:10:a7:b3:ed:69:b2:74:f6:8d:b1:14:c8:ef: 7a:fb:f1:65:8b:25:dd:8d:cf:28:eb:ab:19:c0:19:60:9d:1d: b1:a7:76:f8:2a:e0:1c:a6:42:8d:ca:bc:c6:92:21:4c:89:cc: 61:d7:4d:b6:13:75:6b:50:c9:7c:06:f6:c2:53:ab:23:08:31: 7c:b6:fe:a1:e7:f1:40:b5:17:14:2f:4b:bd:43:85:f3:c9:bb: f6:9b:49:e4:96:78:99:a8:8d:e5:0e:18:77:ca:d0:47:51:9e: ae:3c:b1:ae:97:72:b7:d0:51:2a:81:eb:b3:02:f6:6b:17:ae: 17:2f:74:6c:46:77:07:ee:e4:33:96:11:df:b5:4d:62:37:d5: 53:c8:ff:b7:06:9a:13:c1:f7:16:e7:04:f9:c8:3b:8d:59:cf: c5:1d:43:f1:46:fe:c4:40:9b:5e:2b:e3:4f:3f:27:7e:b6:8f: 35:97:ae:02:bf:df:d9:fc:c2:c8:54:55:1a:37:73:a9:9c:e1: a7:a9:9b:d3:d2:c2:02:49:00:70:da:c1:28:bd:df:3e:c5:ed: c7:b2:e2:0b:fc:e7:2c:8c:38:79:68:6c:fa:3d:a3:51:ad:18: 63:81:da:0f:06:61:69:a1:95:8f:1d:ad:bf:23:cc:a9:9b:aa: 6e:14:13:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSu1KLyP0K2eQJipXVw97xrS5xM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlC NEEzN0NFODAeFw0yNjAyMDIwNzE3MDJaFw0yNjAyMDUxMjIwMDJaMDMxMTAvBgNV BAMTKDA5QzFFMDU5NTdFNkRBM0E2MTkyOTI4QzQ5OTYwQTA2RkIzRkYxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwKpzWpGLDTrhlXPhFGIn4frNk s0Nu+UanuHDE3EXVw5FtZYuN9fmP91vdudYy968fW2Gt7IBV8+AyIMPWUQlvFUkV 0vazR4AR3VB5k4CdSMnckms03syesvkIki+F+Oe7yFRgr3NFhBi4DRLX2q/naSuX IKaXZkvQ/qEkWh+UkKbk4KkqyMjbr3GaYNcLlFtYytq/IAXg6hIKsOJYwYQ5NwIa Y5YCeAdqKadLd4qYv9LKWhV9iQTyFDzF+aegu/39kMeG65nLBPD/lqQ7g9fWL0sC iaOQH0rZ0/Ue/rB341lT9Z4wszYQONEDA8DG2VxyqMl1lmlVatesw2rlGLdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcHgWVfm2jphkpKMSZYKBvs/8VcwHwYDVR0j BBgwFoAUzsJkKd8whhWHDB9H6M3k+bSjfOgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMC9DRUMyNjQyOURG MzA4NjE1ODcwQzFGNDdFOENERTRGOUI0QTM3Q0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0RjlCNEEz N0NFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU1ZmRmNmMtMGQwMS00OTJiLTgw MDQtYTQ4ZWU1YTEyNDc0LzAvQ0VDMjY0MjlERjMwODYxNTg3MEMxRjQ3RThDREU0 RjlCNEEzN0NFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuf39MfEKez7WmydPaNsRTI73r78WWLJd2N zyjrqxnAGWCdHbGndvgq4BymQo3KvMaSIUyJzGHXTbYTdWtQyXwG9sJTqyMIMXy2 /qHn8UC1FxQvS71DhfPJu/abSeSWeJmojeUOGHfK0EdRnq48sa6XcrfQUSqB67MC 9msXrhcvdGxGdwfu5DOWEd+1TWI31VPI/7cGmhPB9xbnBPnIO41Zz8UdQ/FG/sRA m14r408/J362jzWXrgK/39n8wshUVRo3c6mc4aepm9PSwgJJAHDawSi93z7F7cey 4gv85yyMOHlobPo9o1GtGGOB2g8GYWmhlY8drb8jzKmbqm4UE/Y= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:09 2026 by rpki-client