This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
File: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft (raw, json)
Hash identifier: QszVFMy28WCcM8jX0roe83kDeYRrDaFXweQb4GkfAPY=
Subject key identifier: B0:5B:E8:7E:81:B8:B5:D5:12:D9:36:CA:31:2F:5F:9E:37:B3:4D:98
Authority key identifier: CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
Certificate issuer: /CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Certificate serial: 3C451FEFEFABDA2547C920435E12D46071F0DED6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
Manifest number: 02EE
Signing time: Sat 31 Jan 2026 23:42:10 +0000
Manifest this update: Sat 31 Jan 2026 23:37:10 +0000
Manifest next update: Wed 04 Feb 2026 05:36:10 +0000
Files and hashes: 1: CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl (hash: rWubtVnI5kkpHT0WrjtQ9QHdWHEezWvam2RuIik61dQ=)
2: 3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (hash: 6efplLA336z6gB2hab38h2IOD95e1ThRW5jYojModPw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl
rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:45:1f:ef:ef:ab:da:25:47:c9:20:43:5e:12:d4:60:71:f0:de:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC
Validity
Not Before: Jan 31 23:37:10 2026 GMT
Not After : Feb 4 05:36:10 2026 GMT
Subject: CN=B05BE87E81B8B5D512D936CA312F5F9E37B34D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:06:29:5f:9e:b6:eb:1d:c2:b3:66:bc:ab:20:
36:74:f9:fb:94:0e:dd:f7:9b:7e:f3:47:6c:7e:29:
35:7d:93:82:36:ff:81:97:74:cf:fe:92:ee:b1:01:
74:50:8f:ec:ba:da:17:a3:b1:c6:b0:81:4d:4e:ae:
9b:d5:f6:08:02:3d:7e:73:10:d0:c3:cd:a7:23:d6:
81:10:2a:fc:51:f4:b4:46:8d:31:60:7b:89:1e:95:
27:8f:c7:a0:e6:25:f5:f1:cf:8e:24:7b:3d:b3:bf:
c3:1b:1f:4b:12:ea:e8:fe:20:af:0f:f9:f0:fc:54:
df:1d:f9:a8:02:c9:32:a3:58:b4:eb:93:80:82:76:
65:60:34:d6:4b:5e:cd:e3:ee:1a:4b:c7:5c:14:81:
58:e4:ed:49:a2:78:78:47:99:18:29:68:a9:26:9b:
fa:27:bf:8b:07:52:34:2d:49:6c:12:fe:92:e2:bf:
68:ee:2c:d2:a4:92:ac:53:e6:45:a7:0a:02:7c:c7:
cb:f3:64:71:16:1f:79:7d:fa:92:a7:a7:4f:25:01:
3f:9a:67:b0:a1:1b:19:ae:f2:26:47:b6:15:39:bb:
04:d8:d7:ab:06:93:af:62:de:ba:4b:c6:cf:70:87:
94:89:1a:2e:cb:6f:6c:da:a6:30:2e:f3:c8:be:e1:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5B:E8:7E:81:B8:B5:D5:12:D9:36:CA:31:2F:5F:9E:37:B3:4D:98
X509v3 Authority Key Identifier:
keyid:CE:A3:B5:35:64:D3:F6:15:E6:30:CD:DA:A7:BA:5A:E8:FE:7E:9A:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/CEA3B53564D3F615E630CDDAA7BA5AE8FE7E9AEC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f0:b2:b3:c7:87:ab:79:e5:a3:a4:67:d6:f4:1c:3e:c8:aa:
c0:00:62:4b:2a:fb:81:20:dc:ca:36:af:57:5a:7c:d2:17:e2:
6b:fb:eb:76:1f:dc:79:16:24:6d:b3:b3:c5:17:2a:c6:e9:c5:
87:7b:22:ff:5b:e1:84:48:1e:15:fc:44:18:b6:1f:a6:8d:4a:
77:dc:fa:5f:3d:a7:e0:e1:3d:2d:4e:da:2f:c3:ec:f6:69:32:
64:6e:c9:50:03:54:2e:94:ba:cd:0f:f0:da:c9:d9:b1:3d:8c:
eb:9e:79:01:04:31:ba:d9:1e:d1:7c:67:8c:df:2a:fc:82:28:
ae:60:2f:e9:1a:98:7d:68:19:7d:e7:2d:89:4f:67:18:63:24:
9e:1d:80:18:0d:f1:f7:5d:22:05:52:dc:a4:e0:dc:8a:ec:17:
ad:86:90:2c:86:3f:ba:2e:9b:d2:2f:91:04:c4:c5:99:d1:1c:
d3:72:06:7a:0c:04:b1:90:0b:0d:23:63:4e:71:8b:25:23:77:
4e:b9:55:16:ac:35:da:ff:5a:35:0a:7d:95:db:08:8b:e5:73:
f1:e1:d3:9a:1c:77:9b:85:79:20:92:34:4f:a5:72:7c:10:a0:
26:53:c2:8c:7f:ef:cb:d0:4a:fc:5f:c1:31:f6:16:ac:26:35:
3b:1c:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:48 2026 by rpki-client