This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft (raw, json)
Hash identifier: S9+WDeB6wfpYuta5m0Sdiy1n8rm5lUThd76sDKF53tU=
Subject key identifier: CF:2C:4F:01:2A:19:8F:91:ED:5A:78:C1:12:D0:35:60:70:14:79:89
Authority key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
Certificate issuer: /CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Certificate serial: 5ABFD7C8B3862E7703CF1429C19A60ED727AD734
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
Manifest number: 0544
Signing time: Sun 01 Feb 2026 20:51:12 +0000
Manifest this update: Sun 01 Feb 2026 20:46:12 +0000
Manifest next update: Thu 05 Feb 2026 03:11:12 +0000
Files and hashes: 1: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl (hash: OQrDPLpJLREviWGcF+H50nzBCaPWn5cA20l5M/XQSbc=)
2: 323030313a6466303a666230303a3a2f34382d3438203d3e20313336313035.roa (hash: 7s0HS9eh5N/x2V7R3ZdxFFKiADQU8Rn/3Sm7bshae0c=)
3: 3130332e39312e34342e302f32322d3234203d3e20313336313035.roa (hash: UZgKbBst9wwCtuqtFZDworFQOUindj4psWspzIH8An8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl
rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 03:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:bf:d7:c8:b3:86:2e:77:03:cf:14:29:c1:9a:60:ed:72:7a:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189
Validity
Not Before: Feb 1 20:46:12 2026 GMT
Not After : Feb 5 03:11:12 2026 GMT
Subject: CN=CF2C4F012A198F91ED5A78C112D0356070147989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:76:af:d0:06:b6:df:fa:5c:07:6b:d2:9e:70:
f2:9a:4e:a6:dc:26:88:1b:d1:b4:7b:bc:d6:2d:89:
e0:6f:27:78:10:80:64:60:74:2a:48:74:57:94:8e:
b5:98:bf:97:de:64:a0:05:55:6a:1c:10:dc:3f:72:
68:68:90:38:91:99:93:2c:39:4d:07:ef:5c:d6:15:
79:2b:ee:db:00:9c:38:24:51:17:22:85:3e:95:5c:
56:2f:45:3a:09:3b:50:4a:cf:c2:0b:b8:87:73:f0:
2c:28:b7:bd:6e:cd:3e:49:1d:65:f8:fe:4c:cc:24:
9f:71:44:53:da:04:18:2b:39:f8:02:43:ea:55:86:
50:c9:63:a2:40:b7:05:11:37:3e:fe:4a:7a:f5:e8:
11:da:9c:13:68:75:62:d8:9b:2e:f7:7b:0e:26:39:
89:83:c9:65:7d:44:40:20:b9:14:8a:ba:6c:4a:d0:
2c:af:63:02:39:30:14:10:c8:2b:6b:9e:51:23:71:
1d:7e:c2:d9:23:f5:b3:93:47:26:74:f3:e9:6b:4b:
fc:08:f5:32:4b:60:41:67:c9:69:3f:8a:50:f6:1d:
c6:93:5a:2b:a4:d8:f6:88:31:43:d8:28:63:a9:56:
34:88:eb:2c:fc:e3:9e:46:08:47:ed:fb:b4:ab:c6:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:4F:01:2A:19:8F:91:ED:5A:78:C1:12:D0:35:60:70:14:79:89
X509v3 Authority Key Identifier:
keyid:CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:95:14:59:4b:18:4d:50:f2:01:d2:01:84:5d:a7:c1:49:
4f:7b:88:04:00:bf:ea:76:e4:e4:6f:24:ed:f9:b5:42:a8:10:
9e:7a:f3:eb:cb:3c:12:cb:38:30:b0:d2:35:43:87:c7:b7:67:
07:42:5d:73:cf:7d:d1:5a:b4:a7:e6:8c:d7:9e:00:37:b9:93:
33:d1:42:cd:12:38:e3:53:36:5f:d2:63:9f:1b:8b:e1:95:19:
26:8a:cd:34:26:4b:13:be:35:b5:ee:58:38:18:45:5f:6c:d1:
b1:64:36:8e:15:35:0d:53:af:8e:96:ae:37:17:5d:fb:d9:8f:
27:83:d4:d2:08:6d:04:1d:2c:57:1e:f8:3f:95:bc:57:d0:c6:
c4:44:14:cc:df:82:6a:7a:c5:15:f1:81:20:3f:65:9c:fb:31:
b3:97:5c:41:28:81:ad:f3:e5:fb:e7:0f:fc:be:fb:d8:e5:64:
d4:57:ab:23:14:d5:69:71:be:1c:56:9f:a5:bb:98:72:41:94:
ae:21:96:a2:b1:cb:ef:ef:4c:e8:0f:17:c5:eb:31:d8:4b:2b:
94:36:d4:24:b2:94:8a:51:d0:d1:71:24:2a:bf:2c:7b:42:cd:
4b:da:04:89:cf:af:92:6d:84:d9:ab:1c:2d:9c:6b:c8:b1:c9:
58:6b:d4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:48 2026 by rpki-client