This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: S4oZ4N/6+OKfbP/Ie53uJqj4GiYl9DaEVkXntWiXKl0= Subject key identifier: AF:73:86:F1:3A:3C:2D:DF:7F:E4:92:93:9B:D5:8A:B3:4C:6E:E5:F9 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 5CFB1419D12E92867C5FC9F78E6BFDCF6A529864 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 03CF Signing time: Sun 01 Feb 2026 11:02:33 +0000 Manifest this update: Sun 01 Feb 2026 10:57:33 +0000 Manifest next update: Wed 04 Feb 2026 11:48:33 +0000 Files and hashes: 1: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: 3rFUXtbuW4eWsGnAQRXWPa2T5G8tLKctM7LWy4Bhpvk=) 2: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: 9PEO1cnk72ZzAhEDYye8Mg+LcaLO5g5ARQ0t0waxp8Y=) 3: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: CKy2gQtIBacjD8C67dYMJdlND8CS/j+yiiHq3SKDq4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 11:48:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fb:14:19:d1:2e:92:86:7c:5f:c9:f7:8e:6b:fd:cf:6a:52:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Feb 1 10:57:33 2026 GMT Not After : Feb 4 11:48:33 2026 GMT Subject: CN=AF7386F13A3C2DDF7FE492939BD58AB34C6EE5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:a1:6b:53:6e:d3:bb:68:74:46:06:e8:3a: b7:2f:b4:89:ae:fd:13:e3:b4:d4:b6:7f:61:d5:5b: bc:ff:13:4b:88:8d:e7:9f:ae:99:c0:ef:5f:83:ba: 51:a0:a6:65:84:f0:fe:a1:f2:5b:2d:2c:76:c8:4b: 63:6a:5e:ec:69:4c:6c:90:21:33:77:6e:1d:f6:68: ba:c2:a8:8b:32:f1:f3:10:06:1e:db:3f:7d:20:23: d3:cb:3f:73:54:b0:e4:56:30:33:74:13:73:ca:30: b2:f5:cc:4b:e4:cb:07:fc:0f:7c:d5:14:39:9d:92: 1a:8a:b3:d7:c6:cd:a7:56:d7:24:b3:05:97:fe:97: 8a:2d:9b:33:64:0a:e6:a8:52:63:a0:a5:14:b0:fa: bd:9f:3d:87:b2:89:f2:e7:d3:6d:c3:73:fc:16:21: 1b:3f:c7:1d:bd:eb:d5:e3:d4:15:c2:a3:20:9c:cc: 41:cb:1e:4f:22:f2:98:b9:52:e4:4a:58:8b:b8:2c: 44:85:13:61:43:15:d7:cc:d3:06:af:25:ff:4b:1e: c0:42:87:08:6d:3b:11:70:89:b4:b0:aa:5c:0e:48: b8:ad:98:59:f6:04:98:4b:f1:41:ce:d3:f0:bc:6a: 6b:a5:f6:62:25:e6:f2:3f:75:0f:97:24:1f:64:9a: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:86:F1:3A:3C:2D:DF:7F:E4:92:93:9B:D5:8A:B3:4C:6E:E5:F9 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:04:53:8c:e9:9c:70:6a:fd:ac:b6:a4:90:82:4b:f5:4c:53: fa:a5:66:fd:50:98:7d:a1:d6:a0:a0:f5:b5:97:93:01:f4:6a: 36:ce:62:ee:04:89:00:b9:dd:d0:d0:e4:90:20:69:a4:0a:55: aa:57:62:39:77:0d:85:4a:55:4b:2d:e0:d3:f5:cb:65:6f:be: 64:53:70:1d:e6:05:3d:69:26:c9:6f:90:dc:63:ec:5f:64:e7: 6a:3c:67:c3:22:bc:cb:64:e4:13:ee:c2:75:ac:c9:9f:a2:99: 53:57:3f:ef:73:34:41:3b:4d:0f:ac:d5:ee:df:eb:d2:1b:0d: 5c:c3:d9:5a:e0:b3:a2:87:a3:43:49:33:38:df:7e:5c:d3:1c: a7:0f:d2:50:7c:47:13:25:9c:e0:b6:82:3f:47:5b:70:94:1d: 7d:5e:cc:49:ad:b4:ea:af:e1:36:24:ca:c6:04:04:0c:ae:f8: 5c:d6:98:d7:de:65:d3:52:54:8c:88:4e:fe:b4:3f:2b:47:d2: 21:74:2e:3c:b8:f2:fc:fd:c2:77:6e:1c:43:4d:1a:6c:11:40: db:7f:b1:91:bf:cb:3d:ad:ef:8c:cb:2b:32:27:47:4f:44:f5: fe:1f:fa:df:78:4d:a4:9c:1a:4d:9f:62:b1:e5:9d:bf:ef:af: cc:6f:19:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPsUGdEukoZ8X8n3jmv9z2pSmGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNjAyMDExMDU3MzNaFw0yNjAyMDQxMTQ4MzNaMDMxMTAvBgNV BAMTKEFGNzM4NkYxM0EzQzJEREY3RkU0OTI5MzlCRDU4QUIzNEM2RUU1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaOaFrU27Tu2h0RgboOrcvtImu /RPjtNS2f2HVW7z/E0uIjeefrpnA71+DulGgpmWE8P6h8lstLHbIS2NqXuxpTGyQ ITN3bh32aLrCqIsy8fMQBh7bP30gI9PLP3NUsORWMDN0E3PKMLL1zEvkywf8D3zV FDmdkhqKs9fGzadW1ySzBZf+l4otmzNkCuaoUmOgpRSw+r2fPYeyifLn023Dc/wW IRs/xx2969Xj1BXCoyCczEHLHk8i8pi5UuRKWIu4LESFE2FDFdfM0wavJf9LHsBC hwhtOxFwibSwqlwOSLitmFn2BJhL8UHO0/C8amul9mIl5vI/dQ+XJB9kmp5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr3OG8To8Ld9/5JKTm9WKs0xu5fkwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACEEU4zpnHBq/ay2pJCCS/VMU/qlZv1QmH2h 1qCg9bWXkwH0ajbOYu4EiQC53dDQ5JAgaaQKVapXYjl3DYVKVUst4NP1y2VvvmRT cB3mBT1pJslvkNxj7F9k52o8Z8MivMtk5BPuwnWsyZ+imVNXP+9zNEE7TQ+s1e7f 69IbDVzD2Vrgs6KHo0NJMzjfflzTHKcP0lB8RxMlnOC2gj9HW3CUHX1ezEmttOqv 4TYkysYEBAyu+FzWmNfeZdNSVIyITv60PytH0iF0Ljy48vz9wnduHENNGmwRQNt/ sZG/yz2t74zLKzInR09E9f4f+t94TaScGk2fYrHlnb/vr8xvGRU= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:26 2026 by rpki-client