This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: 9SM9hU+c7TUWa1jAqtyQt2wIraBtUb+UadBshiy6LxI= Subject key identifier: 90:98:7B:89:41:23:B1:FC:D4:08:66:66:D7:65:E9:EB:AB:DE:A5:90 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 509171E6554F2120D72600BD4507E1642C90BF18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 0207 Signing time: Sat 31 Jan 2026 12:02:17 +0000 Manifest this update: Sat 31 Jan 2026 11:57:17 +0000 Manifest next update: Tue 03 Feb 2026 14:46:17 +0000 Files and hashes: 1: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: 34n9u0rsEpHrt71m7aaVVNYbaIeZtDaHQedY/K9XL4Y=) 2: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 14:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:91:71:e6:55:4f:21:20:d7:26:00:bd:45:07:e1:64:2c:90:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Jan 31 11:57:17 2026 GMT Not After : Feb 3 14:46:17 2026 GMT Subject: CN=90987B894123B1FCD4086666D765E9EBABDEA590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:90:99:fd:ed:16:54:66:79:7a:aa:25:9b:ea: 8b:87:af:3c:a6:ed:71:36:12:a4:dd:f7:ee:18:0c: ed:9b:cd:83:ac:b6:3f:0f:78:1d:c3:6b:69:3f:8b: 6a:f7:fc:82:94:1d:a2:42:76:bb:0b:64:48:88:15: de:d3:9d:c0:02:aa:26:e1:f2:10:f7:86:07:d1:da: c7:87:9a:5f:17:4f:a7:54:3c:b2:d0:81:34:0c:c7: 26:03:0a:d9:f8:7a:b3:2a:30:bf:fe:d8:3c:d0:c7: 5b:9f:41:16:95:5b:3d:d2:f6:83:f8:27:be:ff:88: 39:68:d3:bc:1a:d6:8e:ff:ab:2c:ac:3e:7d:63:6b: 8f:1d:31:43:4b:a5:35:4d:2f:c9:a3:84:8f:75:dd: 31:6d:1f:6e:ac:cb:c6:55:da:45:6f:4a:2a:c3:46: db:6e:e7:44:3c:20:93:b5:c6:1c:71:9d:b0:31:72: b9:d1:df:12:76:87:0b:2e:1b:a8:12:f1:99:b6:36: 45:f2:ab:81:d4:7f:ca:ee:05:9a:42:67:06:21:7e: 6b:4f:cd:02:d1:da:b1:40:1f:dc:01:92:7c:c4:18: 74:3f:a2:d8:e2:b7:bf:bc:dd:59:29:86:30:44:c3: c5:3c:ff:6c:1d:51:6b:35:ca:e7:28:c3:d3:4b:c6: 31:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:98:7B:89:41:23:B1:FC:D4:08:66:66:D7:65:E9:EB:AB:DE:A5:90 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c0:a3:76:f3:af:46:26:05:10:1c:c7:88:b7:33:86:d0:de: 45:35:b0:37:a7:1b:f6:8c:60:18:2c:99:b9:eb:8f:67:77:36: 8e:25:20:b2:6a:d9:7e:22:19:ac:ff:04:81:9d:83:30:ab:5a: f5:44:53:09:0e:35:85:5d:05:69:7c:ca:64:a8:7a:9c:c9:8d: 5e:aa:3a:84:69:f3:5b:56:9c:1c:44:0a:a1:19:61:3c:ef:17: 37:19:db:1d:1a:a1:c5:4a:3f:cc:d1:3e:5a:5f:34:83:af:82: b2:a9:43:c1:4d:62:b1:55:d8:59:9b:7c:d1:18:77:0f:a1:d5: ec:66:fa:b4:c0:d0:a0:d9:49:57:0e:2e:d6:08:60:e0:67:db: 4d:7e:d4:6d:3a:8a:d4:7b:d7:26:d2:f8:6b:97:e9:7c:c6:40: 76:ca:a3:a1:dd:fe:1d:96:34:a3:ed:40:bc:9b:40:b0:5e:83: ed:20:59:b0:11:92:97:d1:e4:fc:ff:07:7e:2a:1c:8f:0d:75: 7b:ca:9e:68:d3:b9:96:91:04:78:f0:32:e9:65:c9:be:17:59: fb:f0:02:5b:31:85:42:59:0d:86:84:d6:00:66:8f:5e:53:d9: 36:6e:99:1c:60:66:2a:03:8c:78:45:22:a9:78:3f:5f:38:e0: 24:d7:9e:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJFx5lVPISDXJgC9RQfhZCyQvxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNjAxMzExMTU3MTdaFw0yNjAyMDMxNDQ2MTdaMDMxMTAvBgNV BAMTKDkwOTg3Qjg5NDEyM0IxRkNENDA4NjY2NkQ3NjVFOUVCQUJERUE1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvkJn97RZUZnl6qiWb6ouHrzym 7XE2EqTd9+4YDO2bzYOstj8PeB3Da2k/i2r3/IKUHaJCdrsLZEiIFd7TncACqibh 8hD3hgfR2seHml8XT6dUPLLQgTQMxyYDCtn4erMqML/+2DzQx1ufQRaVWz3S9oP4 J77/iDlo07wa1o7/qyysPn1ja48dMUNLpTVNL8mjhI913TFtH26sy8ZV2kVvSirD Rttu50Q8IJO1xhxxnbAxcrnR3xJ2hwsuG6gS8Zm2NkXyq4HUf8ruBZpCZwYhfmtP zQLR2rFAH9wBknzEGHQ/otjit7+83VkphjBEw8U8/2wdUWs1yucow9NLxjFPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkJh7iUEjsfzUCGZm12Xp66vepZAwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTAo3bzr0YmBRAcx4i3M4bQ3kU1sDenG/aM YBgsmbnrj2d3No4lILJq2X4iGaz/BIGdgzCrWvVEUwkONYVdBWl8ymSoepzJjV6q OoRp81tWnBxECqEZYTzvFzcZ2x0aocVKP8zRPlpfNIOvgrKpQ8FNYrFV2FmbfNEY dw+h1exm+rTA0KDZSVcOLtYIYOBn201+1G06itR71ybS+GuX6XzGQHbKo6Hd/h2W NKPtQLybQLBeg+0gWbARkpfR5Pz/B34qHI8NdXvKnmjTuZaRBHjwMullyb4XWfvw AlsxhUJZDYaE1gBmj15T2TZumRxgZioDjHhFIql4P1844CTXnuE= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:18 2026 by rpki-client