This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: 9mLnnZ08QpcXhvHQSo+50CIUJNafTeZhHfxebVnsXg0= Subject key identifier: 15:07:F1:49:8B:54:82:1A:C1:D8:CD:CB:8C:98:0D:A0:3A:77:5A:CE Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 6099C677C3A67B5B90E6C48451E700C670E22544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: C2 Signing time: Sun 01 Feb 2026 15:42:31 +0000 Manifest this update: Sun 01 Feb 2026 15:37:31 +0000 Manifest next update: Wed 04 Feb 2026 22:00:31 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: mVXKx5HJsEZr9sxXOHNR/e8RCqnLDfsZ3qXmRcUAoyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:99:c6:77:c3:a6:7b:5b:90:e6:c4:84:51:e7:00:c6:70:e2:25:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Feb 1 15:37:31 2026 GMT Not After : Feb 4 22:00:31 2026 GMT Subject: CN=1507F1498B54821AC1D8CDCB8C980DA03A775ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:81:e9:46:5d:71:92:ae:98:d1:80:e5:75:5a: 84:b5:42:6b:84:5b:70:ff:9f:d1:11:00:cb:f5:7c: 87:59:40:5d:92:00:30:88:c6:75:bf:46:25:f9:f2: 91:4e:f1:a9:25:10:10:20:31:23:e6:05:03:02:3a: 8a:67:db:b4:d2:84:aa:05:68:0c:6f:d1:82:b2:2f: 29:24:80:a5:91:44:48:ac:f4:58:50:9c:62:ea:07: e4:15:ef:15:90:e9:91:cf:21:60:b1:48:b1:fb:c6: 2d:ee:ae:91:6c:e2:c6:85:30:fe:cc:72:1a:91:81: 84:98:79:c2:d6:cf:6b:e7:dc:e0:0b:5b:45:f6:bf: 0d:40:23:37:28:13:bc:0d:32:9a:d4:40:96:1e:f4: 15:09:9a:dd:5f:0c:da:56:ae:8a:59:96:b0:c8:10: 68:c8:97:6c:8f:a9:3d:df:54:05:8f:0b:3d:eb:2d: cd:b2:2a:15:f1:df:9d:d6:af:ee:e7:80:03:b9:58: 75:a2:3b:45:24:4c:10:64:68:33:cd:7a:c2:23:25: c9:f9:8c:6c:b9:d8:41:e6:40:b7:da:b2:1b:11:2e: f2:37:b7:45:44:26:2b:d9:1a:7e:1d:24:27:da:f5: c0:97:8a:a8:fa:08:6d:4f:67:d0:33:ef:66:a1:0a: 7a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:07:F1:49:8B:54:82:1A:C1:D8:CD:CB:8C:98:0D:A0:3A:77:5A:CE X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d4:8c:48:4d:a8:9d:89:97:ab:6c:83:21:96:17:99:5d:a8: 5c:e3:0c:61:ad:d6:74:86:f4:86:be:58:76:f4:d1:bf:cf:af: 6e:95:ef:76:c4:64:d9:ea:96:65:38:6f:35:1a:d5:9a:6d:67: 7c:d2:e3:82:bb:80:d9:60:e4:c6:0e:7c:ec:6e:55:ad:db:79: 18:78:43:dc:83:59:a5:98:9f:bd:54:ec:ef:cc:44:8a:58:09: bd:c1:a4:2b:7f:3f:83:80:0b:0e:28:20:f0:6d:6d:e2:4e:18: 56:16:1c:2c:59:53:3d:36:42:23:3e:51:39:19:5c:14:ef:eb: 28:c6:6e:b1:5d:04:5e:af:9d:06:ae:30:4b:f4:8e:e4:6a:dd: 6e:23:de:15:83:1e:da:e6:fe:a3:49:7c:42:4d:d3:27:a3:f8: ca:76:cc:37:4f:6a:02:79:4f:d8:94:12:c8:3a:6b:c5:aa:d2: c9:94:0a:e9:e2:70:01:54:c0:5a:d8:e3:ab:c8:fb:6f:53:6f: b0:00:fa:c4:21:e5:f3:34:ab:18:00:28:65:98:bd:da:b9:2b: 92:d2:c8:2d:39:f5:54:70:31:5d:e6:14:db:5d:2a:a0:a6:a4: a1:6e:7d:25:f0:6d:c7:59:b1:6b:55:da:20:c9:40:da:24:97: 3b:fd:33:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJnGd8Ome1uQ5sSEUecAxnDiJUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNjAyMDExNTM3MzFaFw0yNjAyMDQyMjAwMzFaMDMxMTAvBgNV BAMTKDE1MDdGMTQ5OEI1NDgyMUFDMUQ4Q0RDQjhDOTgwREEwM0E3NzVBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNgelGXXGSrpjRgOV1WoS1QmuE W3D/n9ERAMv1fIdZQF2SADCIxnW/RiX58pFO8aklEBAgMSPmBQMCOopn27TShKoF aAxv0YKyLykkgKWRREis9FhQnGLqB+QV7xWQ6ZHPIWCxSLH7xi3urpFs4saFMP7M chqRgYSYecLWz2vn3OALW0X2vw1AIzcoE7wNMprUQJYe9BUJmt1fDNpWropZlrDI EGjIl2yPqT3fVAWPCz3rLc2yKhXx353Wr+7ngAO5WHWiO0UkTBBkaDPNesIjJcn5 jGy52EHmQLfashsRLvI3t0VEJivZGn4dJCfa9cCXiqj6CG1PZ9Az72ahCnplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFQfxSYtUghrB2M3LjJgNoDp3Ws4wHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXUjEhNqJ2Jl6tsgyGWF5ldqFzjDGGt1nSG 9Ia+WHb00b/Pr26V73bEZNnqlmU4bzUa1ZptZ3zS44K7gNlg5MYOfOxuVa3beRh4 Q9yDWaWYn71U7O/MRIpYCb3BpCt/P4OACw4oIPBtbeJOGFYWHCxZUz02QiM+UTkZ XBTv6yjGbrFdBF6vnQauMEv0juRq3W4j3hWDHtrm/qNJfEJN0yej+Mp2zDdPagJ5 T9iUEsg6a8Wq0smUCunicAFUwFrY46vI+29Tb7AA+sQh5fM0qxgAKGWYvdq5K5LS yC059VRwMV3mFNtdKqCmpKFufSXwbcdZsWtV2iDJQNoklzv9M8w= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:33 2026 by rpki-client