This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft File: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft (raw, json) Hash identifier: I3/FJkem6fHaZMOwMV2jPQ0SPwW1/mybcaAoVbehl8Q= Subject key identifier: CD:C4:9D:80:3B:5C:A7:95:BB:A9:F7:18:C6:D1:ED:55:89:21:ED:4C Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E Certificate issuer: /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Certificate serial: 2DDAF4D03F9E837BF73F6891018DB49D8D049250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft Manifest number: 01EF Signing time: Sun 25 Jan 2026 04:21:33 +0000 Manifest this update: Sun 25 Jan 2026 04:16:33 +0000 Manifest next update: Wed 28 Jan 2026 10:28:33 +0000 Files and hashes: 1: 9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl (hash: NyYGClEcGPJtJ4KuuKiIrnz0WuEp/2BGSYprWS3hEVI=) 2: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (hash: Xx9TrbaHobThVYmfOd0G2wltK72lp3YblnpiAJFGb1g=) 3: 3130332e3137312e3234342e302f32332d3233203d3e20313431363734.roa (hash: Onu18k9bkI/QpIHEFgXL53rkk7oGwVMpnmchVwvY9Ag=) 4: 3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (hash: ZCncyUtwIpBS65LybNlORs5EBtiNYGD9cKnDOLXWoEY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:da:f4:d0:3f:9e:83:7b:f7:3f:68:91:01:8d:b4:9d:8d:04:92:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E Validity Not Before: Jan 25 04:16:33 2026 GMT Not After : Jan 28 10:28:33 2026 GMT Subject: CN=CDC49D803B5CA795BBA9F718C6D1ED558921ED4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:d6:46:bd:d5:f0:6c:39:db:c3:ba:39:ca: 45:aa:cf:7b:ce:b8:8f:66:bf:8d:c2:8c:d3:40:a8: 9e:71:b5:69:1a:7d:1f:3e:df:f8:33:4c:49:86:ef: 41:ab:bb:fb:7a:74:23:a0:d0:e1:63:c1:61:12:84: c7:9f:88:b6:1d:f1:7a:d4:76:a3:70:e4:e0:13:2d: 1a:ed:ae:22:4d:a2:d3:7a:b0:d9:01:84:df:e6:df: 23:8c:88:93:1a:86:c4:44:c3:fa:cc:5b:73:00:59: b1:06:fc:5e:8e:f3:8d:e2:47:64:66:f5:6e:8c:dc: 9e:88:e2:c2:58:45:af:72:95:c4:82:7d:db:2a:b7: 14:62:f6:86:b3:79:d4:70:f9:24:80:48:98:50:87: 26:e0:ff:cd:bd:7b:24:e4:72:6b:7b:c6:0e:a0:5e: 86:82:f5:6a:16:de:ab:70:04:f7:dc:0d:0f:5b:68: b1:b1:6a:c2:5f:8a:77:c9:7e:a8:39:a5:b2:4f:57: 7d:8c:77:76:ec:2a:09:cf:21:8b:05:57:51:21:60: 89:d9:b8:c8:a2:88:d8:b2:7f:3f:26:6d:6e:ae:f6: 8f:f0:08:22:f4:c7:45:89:92:cb:6a:0b:ac:42:f4: 2c:f7:0b:a3:95:03:b7:68:98:15:ec:91:78:18:81: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:9D:80:3B:5C:A7:95:BB:A9:F7:18:C6:D1:ED:55:89:21:ED:4C X509v3 Authority Key Identifier: keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:21:14:26:8f:16:3c:db:bc:06:06:da:6a:43:8e:07:49:ed: 89:0c:34:d8:68:90:59:18:45:34:10:9f:ce:d0:d1:36:9d:a0: 96:2c:15:e4:d8:3a:9f:62:24:5d:e7:42:c7:f1:68:5f:83:03: 46:6c:69:63:eb:4f:a5:7b:fb:9f:82:23:5a:00:f3:23:10:c1: fc:86:1f:98:25:96:7b:25:7c:25:3f:16:ef:e3:5e:63:a4:70: ba:8f:d2:64:bb:43:c0:2d:48:7b:17:86:2c:c6:7f:20:b0:63: e5:42:ab:82:30:e0:ea:39:9e:73:84:55:7c:1d:87:92:4e:31: c4:23:c0:b7:f5:00:3d:a9:d6:c3:b6:b4:81:98:e8:e9:b4:b9: d3:53:4f:13:36:d9:c6:cd:38:01:4d:10:85:96:cd:3a:18:7b: a3:1b:8e:33:dc:f5:dc:2a:57:25:bb:53:54:53:94:4d:8f:88: a1:98:1f:1c:6c:35:f5:ec:46:25:86:01:8a:0a:b9:2e:04:e0: 6b:07:4a:a9:55:36:52:8f:7e:13:77:2f:a4:af:f4:ab:97:de: 57:38:ac:be:9c:25:fd:9c:ef:8f:8d:ac:e7:f0:75:a4:2f:16: c6:90:08:d7:d7:ea:ba:2f:5e:ed:52:24:1d:4e:8c:0f:2f:96: 98:ce:85:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdr00D+eg3v3P2iRAY20nY0EklAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw REIyRkQ4RTAeFw0yNjAxMjUwNDE2MzNaFw0yNjAxMjgxMDI4MzNaMDMxMTAvBgNV BAMTKENEQzQ5RDgwM0I1Q0E3OTVCQkE5RjcxOEM2RDFFRDU1ODkyMUVENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rtZGvdXwbDnbw7o5ykWqz3vO uI9mv43CjNNAqJ5xtWkafR8+3/gzTEmG70Gru/t6dCOg0OFjwWEShMefiLYd8XrU dqNw5OATLRrtriJNotN6sNkBhN/m3yOMiJMahsREw/rMW3MAWbEG/F6O843iR2Rm 9W6M3J6I4sJYRa9ylcSCfdsqtxRi9oazedRw+SSASJhQhybg/829eyTkcmt7xg6g XoaC9WoW3qtwBPfcDQ9baLGxasJfinfJfqg5pbJPV32Md3bsKgnPIYsFV1EhYInZ uMiiiNiyfz8mbW6u9o/wCCL0x0WJkstqC6xC9Cz3C6OVA7domBXskXgYgfn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcSdgDtcp5W7qfcYxtHtVYkh7UwwHwYDVR0j BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy RkQ4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYzFiYjktNDVmNi00NjY3LWIx OTQtOWE2OWE0YTRkNzU1LzAvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRF MUEwREIyRkQ4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYhFCaPFjzbvAYG2mpDjgdJ7YkMNNhokFkY RTQQn87Q0TadoJYsFeTYOp9iJF3nQsfxaF+DA0ZsaWPrT6V7+5+CI1oA8yMQwfyG H5gllnslfCU/Fu/jXmOkcLqP0mS7Q8AtSHsXhizGfyCwY+VCq4Iw4Oo5nnOEVXwd h5JOMcQjwLf1AD2p1sO2tIGY6Om0udNTTxM22cbNOAFNEIWWzToYe6MbjjPc9dwq VyW7U1RTlE2PiKGYHxxsNfXsRiWGAYoKuS4E4GsHSqlVNlKPfhN3L6Sv9KuX3lc4 rL6cJf2c74+NrOfwdaQvFsaQCNfX6rovXu1SJB1OjA8vlpjOheM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:32 2026 by rpki-client