This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: 54An3xB8oajWSbkgZjYi8EHhn9tiSEjU6ILcOjQd8UQ= Subject key identifier: 72:F1:F4:E9:F6:29:DC:0A:B6:CD:84:6A:0E:D7:F0:C6:03:55:65:BA Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 5AD2E33EC8EB036640210BAC4B9F598D46FFE00A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 4E Signing time: Sat 31 Jan 2026 05:21:49 +0000 Manifest this update: Sat 31 Jan 2026 05:16:49 +0000 Manifest next update: Tue 03 Feb 2026 10:09:49 +0000 Files and hashes: 1: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) 2: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: JbCoVAEdmlXJQIvYGIFeR0YGmJWGuk1SUhVpWPNJPjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:09:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d2:e3:3e:c8:eb:03:66:40:21:0b:ac:4b:9f:59:8d:46:ff:e0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Jan 31 05:16:49 2026 GMT Not After : Feb 3 10:09:49 2026 GMT Subject: CN=72F1F4E9F629DC0AB6CD846A0ED7F0C6035565BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:ce:e9:b2:82:c2:9f:81:00:75:59:8e:2d: fe:4f:01:20:79:88:6f:04:4a:bd:59:5e:48:c8:39: f8:c1:12:0a:ee:9b:25:5e:b6:c6:3f:68:a4:62:5c: 6a:8c:ea:e8:95:ef:14:58:cb:de:4a:84:f2:53:85: 9c:c8:a3:32:df:6c:a9:66:0d:bd:b3:ad:25:30:6d: 49:c7:2a:78:8d:f4:b6:51:c8:bc:e5:63:5a:1c:00: 09:10:42:5b:5f:d2:cb:80:4c:23:d4:9d:15:d3:9f: 60:06:c3:9f:56:77:c3:d2:aa:7f:35:02:2d:58:81: fc:38:15:37:59:bd:9c:8b:d9:50:72:33:65:af:c1: 18:90:a1:e8:a2:1a:ea:3b:88:98:85:1c:41:0b:ff: b2:f9:4f:5d:01:9a:41:5d:00:f1:67:8a:fc:23:56: 92:1d:4d:80:1f:91:9f:99:10:f5:6f:6f:2d:fd:4a: b3:13:64:8d:90:08:93:11:79:90:e0:65:80:d1:d7: f2:21:ca:0d:cb:98:e4:33:7c:37:88:5e:e8:7a:1f: 5b:58:a0:35:c1:99:94:9e:b5:21:53:10:1c:3a:1f: 6c:2a:2f:d9:92:a2:89:4a:7f:75:9c:52:55:36:13: 7e:09:0c:93:c3:5c:f6:ad:f7:07:8c:cf:e6:c5:02: 81:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F1:F4:E9:F6:29:DC:0A:B6:CD:84:6A:0E:D7:F0:C6:03:55:65:BA X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:64:1a:e0:5f:91:12:41:fa:39:6d:fa:11:7d:4c:50:36:e8: cb:93:2d:47:fb:64:1b:80:3c:6e:a2:df:51:e5:c1:6c:01:a6: d7:ec:e9:ce:2d:20:20:01:99:ef:db:b6:62:8b:65:b0:48:97: 3d:4b:48:ff:3a:91:6c:8a:4d:63:be:b8:7e:07:3f:18:23:88: 30:2c:fa:1d:dc:d9:07:f7:96:b6:7f:5b:ac:50:6c:7e:bb:70: eb:92:5a:ab:ff:52:95:35:d0:bf:8f:18:a3:33:72:99:f2:53: 85:4d:4c:84:35:d9:91:a0:55:50:af:a5:11:63:e8:f4:c4:99: 9e:8a:a0:cd:12:d5:83:63:11:c5:b3:f3:ff:41:1b:ba:24:0b: 39:70:dc:36:fe:c0:dc:16:60:09:d1:40:ca:99:97:cf:f2:30: 39:0b:76:40:d5:cd:a8:68:5f:c8:31:d2:0d:02:64:3e:3e:af: 72:23:e6:43:6c:a3:61:e3:47:80:51:05:15:7a:4b:f3:40:a0: d5:74:ac:6f:1d:36:6e:32:23:fb:e8:b0:1c:a6:7c:68:62:74: 94:c7:68:d8:24:2e:2e:58:e5:d1:f9:3e:0a:bb:f9:78:4f:1f: e9:65:a2:0a:38:ef:3e:ac:ce:5f:3d:4f:b9:7e:cd:61:85:a5: 9e:6d:c6:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtLjPsjrA2ZAIQusS59ZjUb/4AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNjAxMzEwNTE2NDlaFw0yNjAyMDMxMDA5NDlaMDMxMTAvBgNV BAMTKDcyRjFGNEU5RjYyOURDMEFCNkNEODQ2QTBFRDdGMEM2MDM1NTY1QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeM7psoLCn4EAdVmOLf5PASB5 iG8ESr1ZXkjIOfjBEgrumyVetsY/aKRiXGqM6uiV7xRYy95KhPJThZzIozLfbKlm Db2zrSUwbUnHKniN9LZRyLzlY1ocAAkQQltf0suATCPUnRXTn2AGw59Wd8PSqn81 Ai1Ygfw4FTdZvZyL2VByM2WvwRiQoeiiGuo7iJiFHEEL/7L5T10BmkFdAPFnivwj VpIdTYAfkZ+ZEPVvby39SrMTZI2QCJMReZDgZYDR1/Ihyg3LmOQzfDeIXuh6H1tY oDXBmZSetSFTEBw6H2wqL9mSoolKf3WcUlU2E34JDJPDXPat9weMz+bFAoGhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvH06fYp3Aq2zYRqDtfwxgNVZbowHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1kGuBfkRJB+jlt+hF9TFA26MuTLUf7ZBuA PG6i31HlwWwBptfs6c4tICABme/btmKLZbBIlz1LSP86kWyKTWO+uH4HPxgjiDAs +h3c2Qf3lrZ/W6xQbH67cOuSWqv/UpU10L+PGKMzcpnyU4VNTIQ12ZGgVVCvpRFj 6PTEmZ6KoM0S1YNjEcWz8/9BG7okCzlw3Db+wNwWYAnRQMqZl8/yMDkLdkDVzaho X8gx0g0CZD4+r3Ij5kNso2HjR4BRBRV6S/NAoNV0rG8dNm4yI/vosBymfGhidJTH aNgkLi5Y5dH5Pgq7+XhPH+llogo47z6szl89T7l+zWGFpZ5txuU= -----END CERTIFICATE-----Generated at Mon Feb 2 09:50:42 2026 by rpki-client