This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft (raw, json) Hash identifier: 5hdsAw7pwcn3O8PxKmD64SccWEMLKZMjQ90O6lm6jQ0= Subject key identifier: FF:9D:5C:39:44:D5:7A:03:C9:7B:A7:DC:58:7D:5A:22:B2:D4:33:0C Authority key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Certificate issuer: /CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Certificate serial: 5AF9258A7CF734855164800EA990F3599AB421F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft Manifest number: 0127 Signing time: Sat 24 Jan 2026 14:52:22 +0000 Manifest this update: Sat 24 Jan 2026 14:47:22 +0000 Manifest next update: Tue 27 Jan 2026 21:27:22 +0000 Files and hashes: 1: 3130332e3135342e37372e302f32342d3234203d3e20313430343831.roa (hash: A5SwHDOo7iq6Y1gkaeCc0A/1Pj/X9IMjx0F9yKE6Rqs=) 2: 3130332e3135342e37362e302f32332d3233203d3e20313430343831.roa (hash: +r4hk/SZgMTurIzv+fNPFL73b+UlFP07BXG9b2YC2us=) 3: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl (hash: eKPq+EA4c9W1gWfdTmNcNcks7gPofNEgWmSabhUwq8I=) 4: 3130332e3135342e37362e302f32342d3234203d3e20313430343831.roa (hash: AokcwqbiC4agd4vuQFD9ZPFGfzBXJyXcGsAxju/Umd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f9:25:8a:7c:f7:34:85:51:64:80:0e:a9:90:f3:59:9a:b4:21:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Validity Not Before: Jan 24 14:47:22 2026 GMT Not After : Jan 27 21:27:22 2026 GMT Subject: CN=FF9D5C3944D57A03C97BA7DC587D5A22B2D4330C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:4a:a7:ba:c4:9e:f6:cc:20:10:6e:05:4d: b3:30:c4:40:ee:a1:4a:7e:e9:ba:45:b2:94:3d:b9: ce:95:b6:61:92:3b:b9:26:c7:4c:86:92:8d:42:99: d6:b2:c4:ed:3f:a7:9a:16:6c:63:be:96:1c:d6:73: 32:b6:e8:9f:be:45:5e:36:1e:be:60:c5:fd:38:c2: fa:1c:02:14:f8:fa:c7:73:af:24:e2:5b:66:a8:7e: cc:2a:6b:eb:2c:30:c4:60:c5:05:74:b4:f5:a0:8a: 45:d1:96:54:67:08:e5:68:59:97:9c:aa:de:61:76: 60:8f:ba:47:00:58:21:02:b5:25:f9:e8:76:bd:97: 9c:cf:25:a2:84:58:c7:b3:eb:0d:ef:d5:bc:fd:b0: 49:00:60:55:cf:86:69:b8:db:04:ba:96:d4:2b:d8: d3:2c:ba:24:e0:e6:78:89:d8:33:6b:20:3a:04:50: a2:8c:e5:1e:09:b1:e9:22:fa:c6:22:9b:51:73:f3: 5f:89:f0:d2:b4:04:e9:ef:8b:40:d6:1d:61:82:31: ea:72:db:9a:ea:2d:e1:40:b3:aa:f9:9b:6d:88:4a: c1:da:3b:2c:d2:8e:f2:20:52:82:5c:fc:95:d7:9c: 6f:5c:e7:48:23:c6:d2:d9:bf:8a:88:51:f2:72:e7: fe:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9D:5C:39:44:D5:7A:03:C9:7B:A7:DC:58:7D:5A:22:B2:D4:33:0C X509v3 Authority Key Identifier: keyid:CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:57:44:fe:25:de:ab:8e:e4:de:47:39:02:5e:9b:e8:1c:99: a5:23:6d:1a:55:7a:61:8a:97:b7:e7:27:31:dc:20:dc:3d:e1: 17:4e:9f:57:bd:db:53:d7:ca:48:2a:c9:fd:94:99:6f:a1:d4: 99:1a:2e:83:4c:da:b3:8f:9f:b4:e4:c8:e8:7a:ba:94:9f:4d: 8f:fb:0e:18:88:f2:ce:2c:f4:fb:08:75:8a:a2:63:06:54:9c: 55:c1:a4:f9:4d:dd:19:86:e8:b1:ae:54:c3:d7:31:73:83:70: 83:4b:1b:3d:fd:e7:5a:8d:e4:1a:b0:be:be:7c:43:7d:76:c0: f8:a0:4c:7c:36:e2:f3:44:42:55:d0:83:b2:20:40:8e:56:b4: 44:1b:68:b4:f7:74:79:7e:fa:aa:78:81:4f:4a:63:48:22:c5: 60:32:b8:29:fd:7c:01:86:29:68:54:e4:ea:f3:6d:23:59:0f: 88:c1:9e:b0:de:4a:c4:01:8a:15:f1:62:c4:0a:4d:02:d9:1f: a9:78:61:2d:94:d9:eb:d4:79:28:5f:ed:6a:c3:a0:a1:50:22: ce:25:a9:12:9d:f6:8b:e5:74:9c:3d:6a:25:10:a5:3b:44:aa: 46:f0:dc:01:08:cf:6d:dc:9c:60:e6:d9:6c:18:48:f3:54:79: 06:fd:aa:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvklinz3NIVRZIAOqZDzWZq0IfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlC NjVEMTdEMzAeFw0yNjAxMjQxNDQ3MjJaFw0yNjAxMjcyMTI3MjJaMDMxMTAvBgNV BAMTKEZGOUQ1QzM5NDRENTdBMDNDOTdCQTdEQzU4N0Q1QTIyQjJENDMzMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3kqnusSe9swgEG4FTbMwxEDu oUp+6bpFspQ9uc6VtmGSO7kmx0yGko1CmdayxO0/p5oWbGO+lhzWczK26J++RV42 Hr5gxf04wvocAhT4+sdzryTiW2aofswqa+ssMMRgxQV0tPWgikXRllRnCOVoWZec qt5hdmCPukcAWCECtSX56Ha9l5zPJaKEWMez6w3v1bz9sEkAYFXPhmm42wS6ltQr 2NMsuiTg5niJ2DNrIDoEUKKM5R4Jseki+sYim1Fz81+J8NK0BOnvi0DWHWGCMepy 25rqLeFAs6r5m22ISsHaOyzSjvIgUoJc/JXXnG9c50gjxtLZv4qIUfJy5/5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/51cOUTVegPJe6fcWH1aIrLUMwwwHwYDVR0j BBgwFoAUzq5Pd1nuIbplLg+4nQGjCbZdF9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMC9DRUFFNEY3NzU5 RUUyMUJBNjUyRTBGQjg5RDAxQTMwOUI2NUQxN0QzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEzMDlCNjVE MTdEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTYzNWE0NTEtYzMwNC00NWY1LWI3 ZGItNTY4N2UyYjEwODA3LzAvQ0VBRTRGNzc1OUVFMjFCQTY1MkUwRkI4OUQwMUEz MDlCNjVEMTdEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZXRP4l3quO5N5HOQJem+gcmaUjbRpVemGK l7fnJzHcINw94RdOn1e921PXykgqyf2UmW+h1JkaLoNM2rOPn7TkyOh6upSfTY/7 DhiI8s4s9PsIdYqiYwZUnFXBpPlN3RmG6LGuVMPXMXODcINLGz3951qN5Bqwvr58 Q312wPigTHw24vNEQlXQg7IgQI5WtEQbaLT3dHl++qp4gU9KY0gixWAyuCn9fAGG KWhU5OrzbSNZD4jBnrDeSsQBihXxYsQKTQLZH6l4YS2U2evUeShf7WrDoKFQIs4l qRKd9ovldJw9aiUQpTtEqkbw3AEIz23cnGDm2WwYSPNUeQb9qpA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:12 2026 by rpki-client