This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json)
Hash identifier: bM91tbXNuhXCumoWztO5hXdHOOOa57pXbYqb3wZapug=
Subject key identifier: 83:8F:37:F6:C2:A0:86:F2:73:65:96:14:7A:9F:DC:73:74:CA:5D:B2
Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Certificate serial: 7117546C165FB5013B1E0B42EA46DF35FF4F84E0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
Manifest number: 0147
Signing time: Sat 24 Jan 2026 22:00:03 +0000
Manifest this update: Sat 24 Jan 2026 21:55:03 +0000
Manifest next update: Wed 28 Jan 2026 00:13:03 +0000
Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: ts3ljJREsUPUrGX4y82N7DpCZxkUtgIhfhIdJzP+9go=)
2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 00:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:17:54:6c:16:5f:b5:01:3b:1e:0b:42:ea:46:df:35:ff:4f:84:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400
Validity
Not Before: Jan 24 21:55:03 2026 GMT
Not After : Jan 28 00:13:03 2026 GMT
Subject: CN=838F37F6C2A086F2736596147A9FDC7374CA5DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:3a:e4:51:51:b8:1b:96:52:75:d5:ec:a0:
74:85:5f:d9:79:27:f0:47:22:4f:fd:c9:20:49:e1:
6d:eb:87:18:c3:68:d9:d8:1b:b4:f2:41:fc:72:cf:
c9:c7:2c:d6:75:e6:31:07:72:da:bd:b4:e2:90:ee:
8e:16:fe:3a:15:b0:45:fe:bf:1d:7c:a7:47:68:9f:
d2:7d:97:46:2c:59:82:64:8d:6b:52:1c:4b:82:03:
fc:cd:63:fb:10:dc:f9:da:dc:53:87:2e:e6:35:c4:
cf:f6:9b:d7:41:c4:cb:6c:e6:83:fb:da:80:b8:fc:
b7:c9:36:a6:4c:a4:97:fe:7c:ec:c8:1b:a1:06:2e:
02:08:ca:2c:60:28:73:7b:38:25:ef:a6:32:f6:0d:
40:e8:99:00:00:f8:6e:c8:66:d0:36:7b:51:6e:dd:
53:5d:be:c2:27:da:a2:04:97:39:58:c9:d2:77:ae:
1a:7f:3a:1f:8e:09:9d:34:75:b8:0b:20:0c:29:c5:
43:90:ff:e2:00:8f:41:7b:03:b9:21:c3:27:ad:47:
29:fd:f3:3f:25:17:97:31:2a:2a:16:22:56:8f:8b:
44:44:94:d3:a9:9d:ca:74:93:6c:3b:e1:eb:a8:48:
8c:57:8d:43:c9:a4:0d:6b:c4:15:7a:86:37:61:f0:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:8F:37:F6:C2:A0:86:F2:73:65:96:14:7A:9F:DC:73:74:CA:5D:B2
X509v3 Authority Key Identifier:
keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:a2:fb:06:d2:27:5d:54:79:d5:55:d6:96:84:d3:92:d8:72:
75:c0:e2:3f:bb:fa:f4:78:f1:0d:39:ce:af:43:b0:c2:d1:90:
0f:36:76:08:08:8d:d6:55:7b:ba:22:83:f0:22:5d:37:20:d8:
52:9d:3d:07:5e:ac:dd:9a:e4:8c:03:fb:c1:cb:0e:8d:84:fb:
3d:27:82:59:57:9f:ae:83:48:a0:3f:ed:29:e9:33:61:f0:ca:
c8:3d:b8:e8:79:44:63:47:73:0f:cc:f5:1c:78:7d:f7:70:a0:
a1:95:81:bc:bf:38:b1:2e:d9:87:ed:d0:27:42:26:c5:69:98:
93:4f:f8:34:2d:4a:bf:16:8e:18:94:52:85:be:66:42:1a:3c:
17:d3:75:c4:10:eb:e0:3b:d1:72:23:f4:d5:dc:28:ce:69:a8:
2f:36:ed:9c:a6:ce:cd:10:6f:ca:f1:b8:ed:60:fd:43:f1:c6:
53:22:11:ab:1d:07:a2:be:c4:e4:d5:31:f9:d7:a0:10:da:d7:
f7:0a:15:c0:01:ee:60:95:74:6c:19:0c:97:52:66:33:8d:1c:
b7:48:1e:d8:26:72:46:1e:dc:a8:32:32:66:c4:20:9d:4a:da:
7b:47:6d:54:17:1b:09:85:1d:58:dc:f2:7c:b2:0f:52:3c:be:
36:6a:4c:9d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUcRdUbBZftQE7HgtC6kbfNf9PhOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0
NzU3QzQwMDAeFw0yNjAxMjQyMTU1MDNaFw0yNjAxMjgwMDEzMDNaMDMxMTAvBgNV
BAMTKDgzOEYzN0Y2QzJBMDg2RjI3MzY1OTYxNDdBOUZEQzczNzRDQTVEQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSjrkUVG4G5ZSddXsoHSFX9l5
J/BHIk/9ySBJ4W3rhxjDaNnYG7TyQfxyz8nHLNZ15jEHctq9tOKQ7o4W/joVsEX+
vx18p0don9J9l0YsWYJkjWtSHEuCA/zNY/sQ3Pna3FOHLuY1xM/2m9dBxMts5oP7
2oC4/LfJNqZMpJf+fOzIG6EGLgIIyixgKHN7OCXvpjL2DUDomQAA+G7IZtA2e1Fu
3VNdvsIn2qIElzlYydJ3rhp/Oh+OCZ00dbgLIAwpxUOQ/+IAj0F7A7khwyetRyn9
8z8lF5cxKioWIlaPi0RElNOpncp0k2w74euoSIxXjUPJpA1rxBV6hjdh8KbxAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUg4839sKghvJzZZYUep/cc3TKXbIwHwYDVR0j
BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE
NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3
QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3
ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy
ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMyi+wbSJ11UedVV1paE05LYcnXA4j+7+vR4
8Q05zq9DsMLRkA82dggIjdZVe7oig/AiXTcg2FKdPQderN2a5IwD+8HLDo2E+z0n
gllXn66DSKA/7SnpM2Hwysg9uOh5RGNHcw/M9Rx4ffdwoKGVgby/OLEu2Yft0CdC
JsVpmJNP+DQtSr8WjhiUUoW+ZkIaPBfTdcQQ6+A70XIj9NXcKM5pqC827Zymzs0Q
b8rxuO1g/UPxxlMiEasdB6K+xOTVMfnXoBDa1/cKFcAB7mCVdGwZDJdSZjONHLdI
HtgmckYe3KgyMmbEIJ1K2ntHbVQXGwmFHVjc8nyyD1I8vjZqTJ0=
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:33:25 2026 by rpki-client