This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft
File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json)
Hash identifier: 4x1tzQqWbykS5UrXDK7cPvUX2Khkw1Doq48vrVMfy0M=
Subject key identifier: DC:5D:B7:8D:78:C8:1A:EE:DC:2B:A4:77:ED:E1:D7:69:49:5A:CE:88
Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81
Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781
Certificate serial: 365555AB89AEAA161CDD3CC2A48315B8BE545CF1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft
Manifest number: 0242
Signing time: Mon 02 Feb 2026 08:11:04 +0000
Manifest this update: Mon 02 Feb 2026 08:06:04 +0000
Manifest next update: Thu 05 Feb 2026 13:07:04 +0000
Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: izSmYpxlvbOB91Ddkak5WXWrTkh2qk7QT3XPJcKFG2M=)
2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl
rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:55:55:ab:89:ae:aa:16:1c:dd:3c:c2:a4:83:15:b8:be:54:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781
Validity
Not Before: Feb 2 08:06:04 2026 GMT
Not After : Feb 5 13:07:04 2026 GMT
Subject: CN=DC5DB78D78C81AEEDC2BA477EDE1D769495ACE88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:16:d3:f5:98:a2:b2:fb:53:23:9d:70:11:
2c:1b:8a:fe:1b:f6:a5:87:54:32:d4:88:81:ed:cf:
0f:24:a3:65:1c:32:a2:53:3e:20:a9:36:39:7b:29:
52:6b:4b:bb:da:5e:37:36:e7:2d:65:94:02:e5:63:
fd:df:5a:5e:20:44:57:9c:8e:cb:70:c1:80:dc:ba:
d5:90:fb:34:62:f1:3a:f0:01:4b:66:02:4e:e9:b6:
9e:9a:23:b4:c6:b9:d4:dd:ec:a0:2c:3e:04:e8:b8:
6d:5b:63:8b:a6:37:50:5a:bb:2d:63:05:53:cb:a8:
91:0f:36:2a:26:b9:a0:f8:4a:a7:e5:27:41:4c:ee:
9a:aa:d2:48:49:cd:08:ba:67:29:2b:e7:56:9c:a5:
f5:71:70:e4:46:5f:04:87:0d:24:0b:a9:0c:ba:9c:
8e:32:4f:9d:69:d2:35:53:63:5e:7d:d2:b8:b0:27:
52:ce:cd:dc:4e:50:3c:62:f9:b6:95:54:2c:25:99:
90:b3:85:8d:b1:cb:d7:78:5e:77:43:cb:4b:ff:f8:
ad:f9:89:83:83:c8:58:a2:ff:a3:b6:ef:8e:f7:f0:
90:d4:35:0e:b0:a5:a3:fa:1e:5d:37:7c:54:98:44:
c6:1e:38:e4:19:e1:f9:87:23:58:eb:6a:1e:4e:22:
17:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5D:B7:8D:78:C8:1A:EE:DC:2B:A4:77:ED:E1:D7:69:49:5A:CE:88
X509v3 Authority Key Identifier:
keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e0:5c:61:69:36:00:a3:af:bb:26:db:f3:ff:b9:99:b0:48:
b9:b5:49:71:b0:39:08:71:fc:f1:15:43:7a:96:48:2b:cc:bd:
c2:63:26:d8:6e:ea:05:d0:2f:58:69:93:17:5b:0b:f6:e7:76:
37:0a:5f:e6:de:df:06:b0:77:bd:0b:50:b7:09:1a:f2:6d:4c:
a1:bd:5b:04:2f:af:08:11:18:14:c7:a1:d4:9f:93:aa:c1:43:
59:d1:44:7f:e4:1e:08:dc:6d:9b:89:6b:96:e9:9b:7e:17:1b:
7b:99:f8:7a:a0:7c:1c:90:ac:38:e0:b6:f1:a6:8c:78:9b:6a:
4b:43:0a:6d:d1:b6:59:1b:a4:fc:f1:3b:d1:2e:e6:eb:b0:16:
05:b7:5d:84:bc:b8:c2:bf:cc:db:e0:18:67:31:63:fd:63:ee:
f5:16:5a:ef:b7:f2:42:be:cf:95:0c:0e:aa:8c:fb:2a:b7:0c:
40:e6:c0:38:cf:fa:67:9b:36:0f:97:b9:07:97:d7:79:ea:fe:
3c:7d:0b:a4:9e:7e:64:92:a3:ab:14:f5:7d:ce:15:5a:b6:64:
43:c3:ab:32:26:88:97:1a:bb:1f:d2:80:f4:66:e9:6b:bc:29:
06:47:cc:6a:7b:01:d1:9c:8a:73:aa:f3:3e:57:2a:dc:9c:2c:
0a:46:78:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:49:52 2026 by rpki-client