This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: TWJCSbwvDMFnbyJFuQxLX7ZS+mkhTAycO+dxOL4NRJ8= Subject key identifier: 0C:18:C7:FD:E2:76:B8:DB:1B:8A:FD:8C:D4:35:3E:26:FF:F0:73:77 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 5366111A0F6BE960666EA29432B1D737A9B90FAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 012C Signing time: Sat 31 Jan 2026 05:31:08 +0000 Manifest this update: Sat 31 Jan 2026 05:26:08 +0000 Manifest next update: Tue 03 Feb 2026 12:10:08 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 2: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 3: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: NWUJXaqv5Bqe/KT7bYKgevF8KSxSYHDsXd6ymwuyC1Q=) 4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:66:11:1a:0f:6b:e9:60:66:6e:a2:94:32:b1:d7:37:a9:b9:0f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Jan 31 05:26:08 2026 GMT Not After : Feb 3 12:10:08 2026 GMT Subject: CN=0C18C7FDE276B8DB1B8AFD8CD4353E26FFF07377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:1d:80:12:b0:40:5c:45:48:b1:f0:3e:ec: e4:39:5a:70:7d:78:ea:ca:77:39:fd:9c:82:39:d3: 80:3c:3e:85:39:35:7f:96:2a:5d:ed:7a:32:ca:91: 63:74:19:8d:14:4b:17:7e:35:62:33:55:39:ec:f5: 40:09:31:48:0f:6b:8a:7f:92:19:23:20:0a:c0:15: d3:8a:f7:6f:d3:8f:44:89:b9:86:5a:5b:51:aa:e7: 7f:14:d0:9d:d6:24:fe:a0:61:99:e1:84:7c:27:6b: ff:54:30:b5:ce:da:cd:bf:9b:82:35:6c:a0:f5:f2: 4d:5a:dd:01:c5:1b:f5:53:64:7a:9a:09:c6:80:7b: 73:de:c3:b2:9c:2c:29:64:d6:27:38:1f:64:6a:5f: a5:d9:b6:c7:8c:67:86:d4:b3:1f:83:65:1c:17:5e: 57:8a:cc:b4:c0:2e:09:5d:34:4e:75:9d:0e:c3:42: c9:75:14:a0:4d:52:94:b4:46:95:3e:ea:42:04:81: 27:11:c5:4c:20:73:8c:25:05:67:b1:79:97:be:0e: dd:56:02:dd:7a:30:80:24:fd:a4:94:cb:cb:a4:21: f1:39:5e:ef:e2:f6:24:82:3b:89:04:61:68:e5:26: 13:09:44:95:a7:db:f9:6b:64:f7:92:b2:71:5d:a3: 15:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:C7:FD:E2:76:B8:DB:1B:8A:FD:8C:D4:35:3E:26:FF:F0:73:77 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:56:4b:e4:3f:e4:66:bf:3c:33:8a:47:f1:c2:be:28:0d:1a: a1:cf:09:27:fb:3e:ec:a6:7c:01:e5:7a:f0:02:cd:0b:34:9e: 29:f7:81:c9:bd:96:94:48:b6:45:a8:12:6f:d4:3c:1f:46:59: b3:0e:34:99:7d:67:69:d3:43:50:af:29:51:73:63:82:d0:a1: 9d:1c:fe:3b:80:86:58:f6:c4:a9:24:d2:dd:ee:a5:73:10:71: 24:38:74:4c:69:42:c0:52:9d:29:6c:00:74:65:c8:9a:08:05: 65:84:ab:fc:a9:a2:96:31:5f:95:97:7b:96:35:da:9a:f0:8e: 09:b1:e8:f9:21:0f:6e:c1:f5:fd:ed:b6:36:f8:49:ff:96:43: a1:5c:ea:fc:a6:08:07:5d:4a:e5:55:b9:6e:89:04:c7:e0:e1: 04:05:6e:ff:a9:29:9c:51:29:df:c1:3b:ec:5b:29:e4:51:f9: 6b:20:1d:15:c6:a6:f8:34:fc:41:1d:5e:53:93:a7:77:a4:4c: b2:d6:73:5a:ad:a1:97:52:7c:99:40:9c:d7:73:73:44:c8:61: 50:a5:9a:aa:11:b3:1b:fa:9c:e9:35:a9:d0:51:4b:98:4d:f2: 2a:38:e6:a1:27:e9:16:ff:54:ca:b8:51:78:37:74:a2:98:fd: 18:10:40:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2YRGg9r6WBmbqKUMrHXN6m5D68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNjAxMzEwNTI2MDhaFw0yNjAyMDMxMjEwMDhaMDMxMTAvBgNV BAMTKDBDMThDN0ZERTI3NkI4REIxQjhBRkQ4Q0Q0MzUzRTI2RkZGMDczNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgER2AErBAXEVIsfA+7OQ5WnB9 eOrKdzn9nII504A8PoU5NX+WKl3tejLKkWN0GY0USxd+NWIzVTns9UAJMUgPa4p/ khkjIArAFdOK92/Tj0SJuYZaW1Gq538U0J3WJP6gYZnhhHwna/9UMLXO2s2/m4I1 bKD18k1a3QHFG/VTZHqaCcaAe3Pew7KcLClk1ic4H2RqX6XZtseMZ4bUsx+DZRwX XleKzLTALgldNE51nQ7DQsl1FKBNUpS0RpU+6kIEgScRxUwgc4wlBWexeZe+Dt1W At16MIAk/aSUy8ukIfE5Xu/i9iSCO4kEYWjlJhMJRJWn2/lrZPeSsnFdoxWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBjH/eJ2uNsbiv2M1DU+Jv/wc3cwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhWS+Q/5Ga/PDOKR/HCvigNGqHPCSf7Puym fAHlevACzQs0nin3gcm9lpRItkWoEm/UPB9GWbMONJl9Z2nTQ1CvKVFzY4LQoZ0c /juAhlj2xKkk0t3upXMQcSQ4dExpQsBSnSlsAHRlyJoIBWWEq/ypopYxX5WXe5Y1 2prwjgmx6PkhD27B9f3ttjb4Sf+WQ6Fc6vymCAddSuVVuW6JBMfg4QQFbv+pKZxR Kd/BO+xbKeRR+WsgHRXGpvg0/EEdXlOTp3ekTLLWc1qtoZdSfJlAnNdzc0TIYVCl mqoRsxv6nOk1qdBRS5hN8io45qEn6Rb/VMq4UXg3dKKY/RgQQA4= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:21 2026 by rpki-client