This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: FA7I9tqTJEvFSyr9A4X9i7IvlSwUHL/i1s19EJCnemM= Subject key identifier: 0D:C0:26:3B:F9:F9:73:EE:95:7C:E6:5E:66:7F:85:5B:EC:30:B7:35 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 625A84DB863130C6C782F0EB3D6A31E2254BA5B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0545 Signing time: Sun 01 Feb 2026 04:00:56 +0000 Manifest this update: Sun 01 Feb 2026 03:55:56 +0000 Manifest next update: Wed 04 Feb 2026 13:08:56 +0000 Files and hashes: 1: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 2: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: uxR4ogE+vwIWwGaGhPDB3e7z9+kiKcGxPK0eAGnXPBU=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:5a:84:db:86:31:30:c6:c7:82:f0:eb:3d:6a:31:e2:25:4b:a5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Feb 1 03:55:56 2026 GMT Not After : Feb 4 13:08:56 2026 GMT Subject: CN=0DC0263BF9F973EE957CE65E667F855BEC30B735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:3d:c0:b1:61:65:ae:40:49:c6:26:ee:b5: e6:8b:ec:b1:e8:d8:55:05:59:06:5a:bd:33:72:a8: 4a:8f:bb:a1:4b:dc:43:84:2b:d3:0d:71:2b:52:70: da:2f:af:6a:bc:a1:ae:d2:48:23:87:d0:4c:81:92: f9:23:8d:83:63:32:4b:1d:9e:96:d7:a0:be:02:2e: ef:5b:c8:ea:4d:31:bf:40:11:e5:c5:40:d7:e9:28: bf:0c:57:08:26:17:b9:91:0c:b6:ad:a6:74:78:4e: ac:84:bb:75:8f:50:0c:56:f8:a4:e9:b6:ac:b8:4a: 61:e2:fe:c9:f1:58:8f:51:56:cb:ca:e2:3c:00:96: 64:d4:9d:4f:89:a7:da:b1:b1:bd:78:33:49:db:01: 73:7e:2d:49:62:22:4a:7a:e3:5e:9c:56:7c:7c:0c: ae:60:27:80:bd:77:e0:45:68:72:8d:1b:f9:b3:27: 52:45:27:63:a7:73:49:d1:d7:36:85:d5:82:93:2b: 0c:4b:cf:e5:23:f1:4b:69:44:fe:2c:ab:52:18:26: 7b:85:38:13:72:45:fe:36:74:99:33:b1:3c:be:43: dc:0c:54:96:4d:36:13:25:c4:e6:0f:02:c1:2f:7f: c8:47:7f:a0:2d:c9:0d:29:4a:14:a5:e3:c4:12:64: e1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C0:26:3B:F9:F9:73:EE:95:7C:E6:5E:66:7F:85:5B:EC:30:B7:35 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2e:fb:1e:62:09:73:0a:b7:ff:53:20:b6:36:cd:61:06:c5: ab:d3:a4:cd:7b:73:06:50:36:a1:81:e8:6f:49:3f:a2:6d:fe: a4:b9:df:4e:76:ef:32:91:25:65:d5:f2:37:db:a0:ff:9f:17: 45:7f:69:3e:39:ce:dc:88:52:7e:4c:a6:1d:01:7e:31:26:42: 98:e6:8d:be:e3:9f:44:f7:79:35:75:4e:76:0d:85:5b:ca:2d: a4:0f:9c:33:8a:40:3a:e3:de:89:96:f8:73:0a:6c:8d:95:23: 73:aa:36:72:01:f3:60:e7:d9:ce:52:41:bb:4d:4c:6f:4a:15: 7b:8a:aa:9a:92:04:3c:32:35:83:b6:0b:1c:bb:e9:b4:19:8a: 62:ae:c6:a9:bb:45:6f:72:48:54:a6:d4:12:a2:14:7b:d9:13: 55:fe:19:6b:b8:6a:7a:e5:86:97:5c:38:7a:44:38:77:f5:75: e7:94:35:1e:17:f1:ab:a6:b8:af:a3:75:c5:0a:98:08:15:97: 9d:ec:dd:85:a7:07:7f:81:c2:ed:aa:30:69:57:06:ad:07:dc: d8:ed:0f:95:88:b4:44:63:b3:a7:82:68:4e:17:d9:45:8b:e6: 75:fb:1e:89:c3:9b:72:41:39:05:8d:ee:43:fa:88:20:2b:6a: f4:98:cf:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlqE24YxMMbHgvDrPWox4iVLpbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNjAyMDEwMzU1NTZaFw0yNjAyMDQxMzA4NTZaMDMxMTAvBgNV BAMTKDBEQzAyNjNCRjlGOTczRUU5NTdDRTY1RTY2N0Y4NTVCRUMzMEI3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXT3AsWFlrkBJxibuteaL7LHo 2FUFWQZavTNyqEqPu6FL3EOEK9MNcStScNovr2q8oa7SSCOH0EyBkvkjjYNjMksd npbXoL4CLu9byOpNMb9AEeXFQNfpKL8MVwgmF7mRDLatpnR4TqyEu3WPUAxW+KTp tqy4SmHi/snxWI9RVsvK4jwAlmTUnU+Jp9qxsb14M0nbAXN+LUliIkp6416cVnx8 DK5gJ4C9d+BFaHKNG/mzJ1JFJ2Onc0nR1zaF1YKTKwxLz+Uj8UtpRP4sq1IYJnuF OBNyRf42dJkzsTy+Q9wMVJZNNhMlxOYPAsEvf8hHf6AtyQ0pShSl48QSZOEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDcAmO/n5c+6VfOZeZn+FW+wwtzUwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUu+x5iCXMKt/9TILY2zWEGxavTpM17cwZQ NqGB6G9JP6Jt/qS530527zKRJWXV8jfboP+fF0V/aT45ztyIUn5Mph0BfjEmQpjm jb7jn0T3eTV1TnYNhVvKLaQPnDOKQDrj3omW+HMKbI2VI3OqNnIB82Dn2c5SQbtN TG9KFXuKqpqSBDwyNYO2Cxy76bQZimKuxqm7RW9ySFSm1BKiFHvZE1X+GWu4anrl hpdcOHpEOHf1deeUNR4X8aumuK+jdcUKmAgVl53s3YWnB3+Bwu2qMGlXBq0H3Njt D5WItERjs6eCaE4X2UWL5nX7HonDm3JBOQWN7kP6iCAravSYz4U= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:25 2026 by rpki-client