This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: lYrX12JQcSZxH96JGBz8XDYUcU33I1+8CHaaDcz+448= Subject key identifier: DB:E7:E3:33:C4:BF:08:71:DF:DD:6C:D1:D2:7F:6B:13:EB:CA:53:DB Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 223854E15F6B4BCD6A64C21B922F0202B7441B41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01C1 Signing time: Sun 01 Feb 2026 13:30:44 +0000 Manifest this update: Sun 01 Feb 2026 13:25:44 +0000 Manifest next update: Wed 04 Feb 2026 21:23:44 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: EhGr1jPOoPnqxwXzcMUE0J+x+POWmScfBV1cZw3mJ/U=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:38:54:e1:5f:6b:4b:cd:6a:64:c2:1b:92:2f:02:02:b7:44:1b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Feb 1 13:25:44 2026 GMT Not After : Feb 4 21:23:44 2026 GMT Subject: CN=DBE7E333C4BF0871DFDD6CD1D27F6B13EBCA53DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:39:ee:08:da:bb:40:2f:98:4e:f0:26:4e: 7a:dc:5d:a0:43:7d:6a:41:e6:59:c4:cd:6e:37:ae: e1:7c:2e:14:14:cb:35:f1:09:67:b0:e9:f4:3a:4f: 69:af:37:a5:55:cf:88:80:19:fb:89:25:42:7c:d4: a9:d5:9d:ec:e1:87:3f:44:56:c2:14:b7:e3:27:eb: b4:19:02:6b:18:e0:2b:5d:c4:ce:42:84:5d:df:0f: 31:dd:89:ad:47:da:88:90:ca:57:a2:08:d2:e9:41: 1b:d1:ae:eb:45:47:e6:c0:f5:0b:8a:63:5b:b1:82: 20:7c:cc:4e:c3:2a:6b:10:f6:63:92:b1:63:96:ce: 73:0b:a5:fb:e5:4f:41:e5:c7:3d:c4:84:99:60:74: 5a:c0:dc:b3:4b:ad:b3:76:de:25:dd:f1:30:25:a0: 13:f2:54:36:12:72:9b:df:7b:71:44:38:8d:ca:4f: 4a:bf:b4:84:d2:66:34:73:53:d0:25:25:64:60:3a: c0:51:78:56:9e:82:f2:c2:93:68:c6:3a:f4:4f:09: b0:de:27:a4:26:67:54:49:10:2c:07:11:60:8c:85: 2a:0d:54:85:6a:e7:ce:18:05:6e:6f:cb:a1:e5:04: 78:fe:f9:3b:85:ae:e6:a4:50:04:f1:0a:45:a1:e1: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E7:E3:33:C4:BF:08:71:DF:DD:6C:D1:D2:7F:6B:13:EB:CA:53:DB X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c7:00:b1:1b:bd:5f:56:c8:59:4f:3d:77:2a:91:b8:f8:63: 9d:fa:38:80:5e:28:9f:2e:66:47:31:e4:ac:e3:46:7b:58:61: d3:84:bf:0f:08:81:ac:f8:e1:01:e5:56:9d:ad:ef:ab:f5:00: df:48:9b:20:d8:5b:b0:ad:93:9f:f9:10:ab:3c:bc:b6:e0:cb: b4:08:cf:ff:6b:b2:4a:20:e6:7c:0d:81:c7:e8:37:86:2d:a1: 6c:d9:13:62:17:5e:6f:79:7a:78:6d:9f:5b:8e:21:9c:64:6c: b0:9c:1e:27:85:db:b4:45:84:85:e1:9a:e5:45:91:c4:e8:c0: 22:72:8c:00:1f:f1:7c:64:30:42:1c:eb:fd:4f:7e:a4:84:19: 3e:2e:63:bc:db:9a:2d:72:40:0a:11:02:92:ec:cf:53:57:c7: db:f6:05:57:88:29:32:4c:04:b1:72:3d:82:9c:ed:7b:b3:15: a7:7f:bf:2a:35:58:60:b6:bd:73:85:b4:a7:1c:f2:f0:8d:1c: 5f:d9:63:30:3c:8b:6c:66:a0:1a:8b:68:11:3b:49:be:9e:65: 4e:1c:37:dd:86:bb:5f:ec:88:d5:0f:c5:f6:19:d1:95:39:46: be:74:27:75:6d:9c:26:35:77:60:66:2d:48:d6:e1:6c:74:5c: a2:fc:77:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjhU4V9rS81qZMIbki8CArdEG0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNjAyMDExMzI1NDRaFw0yNjAyMDQyMTIzNDRaMDMxMTAvBgNV BAMTKERCRTdFMzMzQzRCRjA4NzFERkRENkNEMUQyN0Y2QjEzRUJDQTUzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBDnuCNq7QC+YTvAmTnrcXaBD fWpB5lnEzW43ruF8LhQUyzXxCWew6fQ6T2mvN6VVz4iAGfuJJUJ81KnVnezhhz9E VsIUt+Mn67QZAmsY4CtdxM5ChF3fDzHdia1H2oiQyleiCNLpQRvRrutFR+bA9QuK Y1uxgiB8zE7DKmsQ9mOSsWOWznMLpfvlT0Hlxz3EhJlgdFrA3LNLrbN23iXd8TAl oBPyVDYScpvfe3FEOI3KT0q/tITSZjRzU9AlJWRgOsBReFaegvLCk2jGOvRPCbDe J6QmZ1RJECwHEWCMhSoNVIVq584YBW5vy6HlBHj++TuFruakUATxCkWh4a4/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+fjM8S/CHHf3WzR0n9rE+vKU9swHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTHALEbvV9WyFlPPXcqkbj4Y536OIBeKJ8u Zkcx5KzjRntYYdOEvw8Igaz44QHlVp2t76v1AN9ImyDYW7Ctk5/5EKs8vLbgy7QI z/9rskog5nwNgcfoN4YtoWzZE2IXXm95enhtn1uOIZxkbLCcHieF27RFhIXhmuVF kcTowCJyjAAf8XxkMEIc6/1PfqSEGT4uY7zbmi1yQAoRApLsz1NXx9v2BVeIKTJM BLFyPYKc7XuzFad/vyo1WGC2vXOFtKcc8vCNHF/ZYzA8i2xmoBqLaBE7Sb6eZU4c N92Gu1/siNUPxfYZ0ZU5Rr50J3VtnCY1d2BmLUjW4Wx0XKL8dy8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:02 2026 by rpki-client