This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
File: CE118685D363E20B6D3B3955972062D9581B9E43.mft (raw, json)
Hash identifier: 8AIgWrFj68xlr2qLqu8JOUwnvn6zD0ajAUCzBt8mf0M=
Subject key identifier: FC:C1:FD:7E:B7:F8:0A:DC:95:E1:9F:68:9F:17:07:55:17:01:5C:30
Authority key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43
Certificate issuer: /CN=CE118685D363E20B6D3B3955972062D9581B9E43
Certificate serial: 7A3F6DB5BEBDDFB0BCEAC9265E0612C644471EF7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
Manifest number: 0220
Signing time: Sat 31 Jan 2026 19:00:49 +0000
Manifest this update: Sat 31 Jan 2026 18:55:49 +0000
Manifest next update: Wed 04 Feb 2026 06:01:49 +0000
Files and hashes: 1: CE118685D363E20B6D3B3955972062D9581B9E43.crl (hash: 2yOln73Yx08hyKDfkE7P9pltJjjcMTYporn5GLhuD24=)
2: 3130332e3232342e3132342e302f32332d3234203d3e20313530313937.roa (hash: NXw6s+JjAkZ3fTUdDSEG0NXOT3+x5+RONGyWOxolXSA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl
rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3f:6d:b5:be:bd:df:b0:bc:ea:c9:26:5e:06:12:c6:44:47:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE118685D363E20B6D3B3955972062D9581B9E43
Validity
Not Before: Jan 31 18:55:49 2026 GMT
Not After : Feb 4 06:01:49 2026 GMT
Subject: CN=FCC1FD7EB7F80ADC95E19F689F17075517015C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:ff:e0:0b:6f:2b:cd:05:b7:2c:6b:ce:e5:
77:de:92:40:05:26:ac:14:e3:16:be:8f:2a:e5:e9:
4d:5f:c9:62:04:63:24:64:44:ef:7d:6f:4e:9a:0a:
03:97:1d:c3:4e:1e:2d:d3:81:c2:c0:3f:bd:62:21:
0e:e9:7c:1d:71:32:09:05:f4:7a:a9:4a:c8:04:23:
b4:78:de:e7:37:84:21:94:0d:6b:a8:c6:3f:2c:12:
92:1d:55:04:26:d9:72:84:1e:b2:4c:2b:b7:11:62:
62:f2:27:06:25:38:a9:25:ec:6c:26:db:21:f8:31:
ac:c4:a7:90:1d:10:25:c2:5f:89:7b:b9:63:f3:28:
6a:d6:a4:83:97:20:c1:c2:b4:96:b5:6e:58:f8:42:
a3:a1:26:e1:ee:61:2f:ab:4b:14:04:18:d7:5f:a7:
ff:62:dc:d4:79:08:5a:55:6d:07:a7:04:d2:f5:4d:
5c:ef:8a:eb:97:61:76:1b:8d:b7:71:76:7c:f3:89:
e0:ab:0c:89:de:d0:28:43:94:57:c1:9a:0b:1e:21:
42:c7:bf:6f:90:68:27:1f:ed:42:4f:fa:d4:b2:4c:
92:bb:93:44:a3:49:f3:93:44:ab:60:b4:b2:8e:c1:
52:bd:b4:3f:58:1d:83:a2:d9:17:46:73:81:a3:00:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:FD:7E:B7:F8:0A:DC:95:E1:9F:68:9F:17:07:55:17:01:5C:30
X509v3 Authority Key Identifier:
keyid:CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7c:2b:84:a7:83:ec:3c:a4:3d:ce:90:64:b6:ef:7a:29:a5:
2f:a3:fc:94:6a:a9:e6:ec:a1:b0:ed:15:aa:b5:28:9a:24:f0:
70:68:d9:63:ff:ab:58:6c:d0:9d:12:c9:64:3f:32:47:2c:44:
7e:c0:3f:67:7b:17:83:39:77:14:7d:90:15:e7:cb:13:97:01:
93:e6:4d:90:bb:6d:fd:1f:e2:17:8d:a1:c3:16:28:b4:b8:47:
ae:db:1a:25:2e:12:77:4c:4b:43:6f:bd:da:06:35:65:65:b8:
24:c2:e1:84:ae:d3:7d:65:9f:7f:3d:82:41:d8:41:b5:10:33:
17:0f:fa:6a:ca:78:2a:89:32:6b:af:e6:e7:4a:26:95:ff:34:
81:e2:c9:46:15:2d:f2:2b:09:d0:02:91:02:8b:8e:d6:77:89:
03:67:52:df:13:3d:d8:28:e6:42:85:d2:80:9a:ed:ca:9a:b3:
ad:7e:df:36:c8:b0:61:ba:33:db:fb:d7:45:8d:09:0e:f5:41:
ce:c7:e8:6e:22:7e:82:a0:71:1a:75:22:4b:ad:3a:95:34:de:
73:97:26:06:0b:71:7e:85:68:1d:98:b3:e4:8b:35:14:eb:25:
ab:92:89:3a:f2:18:13:1a:5d:6b:6a:c6:60:27:60:b0:ea:a3:
73:88:0e:b1
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUej9ttb6937C86skmXgYSxkRHHvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1
ODFCOUU0MzAeFw0yNjAxMzExODU1NDlaFw0yNjAyMDQwNjAxNDlaMDMxMTAvBgNV
BAMTKEZDQzFGRDdFQjdGODBBREM5NUUxOUY2ODlGMTcwNzU1MTcwMTVDMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTkP/gC28rzQW3LGvO5XfekkAF
JqwU4xa+jyrl6U1fyWIEYyRkRO99b06aCgOXHcNOHi3TgcLAP71iIQ7pfB1xMgkF
9HqpSsgEI7R43uc3hCGUDWuoxj8sEpIdVQQm2XKEHrJMK7cRYmLyJwYlOKkl7Gwm
2yH4MazEp5AdECXCX4l7uWPzKGrWpIOXIMHCtJa1blj4QqOhJuHuYS+rSxQEGNdf
p/9i3NR5CFpVbQenBNL1TVzviuuXYXYbjbdxdnzzieCrDIne0ChDlFfBmgseIULH
v2+QaCcf7UJP+tSyTJK7k0SjSfOTRKtgtLKOwVK9tD9YHYOi2RdGc4GjAC65AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/MH9frf4CtyV4Z9onxcHVRcBXDAwHwYDVR0j
BBgwFoAUzhGGhdNj4gttOzlVlyBi2VgbnkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMC9DRTExODY4NUQz
NjNFMjBCNkQzQjM5NTU5NzIwNjJEOTU4MUI5RTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYyRDk1ODFC
OUU0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ4MDhmNjctOWFiYy00NmRkLTk4
MTctYjkzMzkwOTNmODhlLzAvQ0UxMTg2ODVEMzYzRTIwQjZEM0IzOTU1OTcyMDYy
RDk1ODFCOUU0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE98K4Sng+w8pD3OkGS273oppS+j/JRqqebs
obDtFaq1KJok8HBo2WP/q1hs0J0SyWQ/MkcsRH7AP2d7F4M5dxR9kBXnyxOXAZPm
TZC7bf0f4heNocMWKLS4R67bGiUuEndMS0NvvdoGNWVluCTC4YSu031ln389gkHY
QbUQMxcP+mrKeCqJMmuv5udKJpX/NIHiyUYVLfIrCdACkQKLjtZ3iQNnUt8TPdgo
5kKF0oCa7cqas61+3zbIsGG6M9v710WNCQ71Qc7H6G4ifoKgcRp1IkutOpU03nOX
JgYLcX6FaB2Ys+SLNRTrJauSiTryGBMaXWtqxmAnYLDqo3OIDrE=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:51 2026 by rpki-client