This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: 2380SpPAQyPiacibUMvWYHe5jXowzSdwZmoZEZthPPI= Subject key identifier: 86:0F:4D:CB:7B:87:FE:61:83:EC:0E:FE:90:0B:69:13:61:2B:0B:35 Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 4D0CDE2C81514DCC896D3B3855AF5812825B1EB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 021F Signing time: Sun 25 Jan 2026 18:02:15 +0000 Manifest this update: Sun 25 Jan 2026 17:57:15 +0000 Manifest next update: Wed 28 Jan 2026 19:03:15 +0000 Files and hashes: 1: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) 2: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: vbO3RF4D2md+E9UMrxJJBEsJiH0RbUQBN6PPwwWeX0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0c:de:2c:81:51:4d:cc:89:6d:3b:38:55:af:58:12:82:5b:1e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Jan 25 17:57:15 2026 GMT Not After : Jan 28 19:03:15 2026 GMT Subject: CN=860F4DCB7B87FE6183EC0EFE900B6913612B0B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ce:7d:78:29:e5:96:f6:27:8b:47:63:d5:d4: dc:b1:ec:6d:fa:06:89:c1:40:34:b0:02:2e:2c:a2: 1b:a3:f4:78:7d:21:be:95:63:dd:65:ff:a5:dd:22: 08:75:5a:3f:be:fe:b1:d0:3e:01:db:d1:35:68:6f: 05:ba:6e:09:0c:09:fd:08:a3:96:fe:80:18:d0:86: bb:b7:32:c4:8a:36:c7:24:09:fd:cd:96:c2:29:bf: 4f:43:fc:53:9b:8e:60:5a:ed:ba:0c:79:57:a8:a0: 90:bf:ff:89:21:52:c5:d4:f6:a3:e6:50:4e:c5:8c: 12:a9:54:1c:7b:18:20:2e:ed:a3:c8:83:00:84:4c: 99:a7:90:e2:7d:7d:ae:a9:f4:29:5c:2a:b5:4a:24: 2f:e9:ab:88:2d:c5:98:04:fa:17:e0:9d:cb:04:f3: 83:6f:14:a4:77:00:50:18:ec:7a:1c:57:a8:cc:15: b3:5f:6a:7b:e5:64:ed:6c:66:3d:12:99:34:00:f9: 9d:ad:a9:9e:b5:69:84:b6:7a:4f:9c:d7:16:52:f9: 42:9f:46:dd:ad:37:cf:61:fc:11:da:b0:c6:93:a8: b1:e8:50:be:c6:29:8f:e2:03:f0:2f:e8:86:a1:33: c4:12:70:c4:3c:77:80:6f:f5:74:18:64:b8:3a:d8: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0F:4D:CB:7B:87:FE:61:83:EC:0E:FE:90:0B:69:13:61:2B:0B:35 X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f7:fe:84:9e:2f:1d:99:81:35:21:d6:d8:bd:b7:41:f6:5d: 68:de:f4:67:a4:d9:c0:f8:71:d1:3f:05:ba:a8:1b:15:e1:d2: a2:4b:0a:de:fe:34:06:00:19:21:ac:73:7c:a2:cd:f8:0c:13: de:6c:e8:1a:28:d7:fc:72:d5:68:86:15:19:51:5a:3e:fd:a0: 87:35:6c:9d:be:3c:20:48:5d:30:85:a2:1d:04:9f:05:44:27: 03:a5:fd:91:69:9e:89:47:7f:9e:b0:da:07:fc:7a:8a:67:62: 1e:06:d9:60:94:00:79:aa:45:15:65:6f:cd:86:37:b1:fd:52: 05:bb:75:3a:92:96:61:30:76:df:6d:c2:cc:73:87:92:f3:0e: 3a:61:11:44:fe:11:84:32:8d:14:a6:2b:52:d6:a7:3d:7e:db: 97:3d:13:dc:f2:83:ed:78:b4:00:a9:92:40:3f:19:d0:cf:da: b1:0f:b7:57:de:6b:22:82:f1:24:9f:d7:02:9a:7f:95:c2:cd: 9f:b0:a4:33:32:b9:c1:2d:51:da:1b:13:af:71:fa:47:3a:1c: ca:81:1f:f4:58:69:7d:aa:b4:73:7e:32:48:7b:c7:82:bf:2e: 4e:2c:85:42:0c:de:93:0c:c0:c2:19:b1:7f:fa:9f:29:d6:3d: 87:6f:9d:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQzeLIFRTcyJbTs4Va9YEoJbHrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNjAxMjUxNzU3MTVaFw0yNjAxMjgxOTAzMTVaMDMxMTAvBgNV BAMTKDg2MEY0RENCN0I4N0ZFNjE4M0VDMEVGRTkwMEI2OTEzNjEyQjBCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzn14KeWW9ieLR2PV1Nyx7G36 BonBQDSwAi4sohuj9Hh9Ib6VY91l/6XdIgh1Wj++/rHQPgHb0TVobwW6bgkMCf0I o5b+gBjQhru3MsSKNsckCf3NlsIpv09D/FObjmBa7boMeVeooJC//4khUsXU9qPm UE7FjBKpVBx7GCAu7aPIgwCETJmnkOJ9fa6p9ClcKrVKJC/pq4gtxZgE+hfgncsE 84NvFKR3AFAY7HocV6jMFbNfanvlZO1sZj0SmTQA+Z2tqZ61aYS2ek+c1xZS+UKf Rt2tN89h/BHasMaTqLHoUL7GKY/iA/Av6IahM8QScMQ8d4Bv9XQYZLg62L8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhg9Ny3uH/mGD7A7+kAtpE2ErCzUwHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX3/oSeLx2ZgTUh1ti9t0H2XWje9Gek2cD4 cdE/BbqoGxXh0qJLCt7+NAYAGSGsc3yizfgME95s6Boo1/xy1WiGFRlRWj79oIc1 bJ2+PCBIXTCFoh0EnwVEJwOl/ZFpnolHf56w2gf8eopnYh4G2WCUAHmqRRVlb82G N7H9UgW7dTqSlmEwdt9twsxzh5LzDjphEUT+EYQyjRSmK1LWpz1+25c9E9zyg+14 tACpkkA/GdDP2rEPt1feayKC8SSf1wKaf5XCzZ+wpDMyucEtUdobE69x+kc6HMqB H/RYaX2qtHN+Mkh7x4K/Lk4shUIM3pMMwMIZsX/6nynWPYdvnQo= -----END CERTIFICATE-----Generated at Sun Jan 25 23:56:38 2026 by rpki-client