This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: Mrm34oAv3LDWkwpzhSSQoaDDVfEVchlIK5ygZkAwru0= Subject key identifier: DF:75:29:3C:3D:8D:C7:54:A6:4C:60:C9:85:6E:34:69:D5:0A:C5:39 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 10C20B60682054742CC2BF1DF563904BB3E442AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 08:42:12 +0000 Manifest this update: Sat 24 Jan 2026 08:37:12 +0000 Manifest next update: Tue 27 Jan 2026 14:31:12 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: t2l9kORu684lKno4ze/GR6Z1cKUOthbKH93lXUvBmGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c2:0b:60:68:20:54:74:2c:c2:bf:1d:f5:63:90:4b:b3:e4:42:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Jan 24 08:37:12 2026 GMT Not After : Jan 27 14:31:12 2026 GMT Subject: CN=DF75293C3D8DC754A64C60C9856E3469D50AC539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:89:0d:58:ac:c4:2d:eb:a0:a1:35:8d:40: df:58:f0:8e:88:1b:47:30:07:89:aa:bf:d4:22:bb: 61:1d:c3:4a:ca:fb:70:29:bc:77:94:8a:5c:a4:9f: 19:9d:e0:ef:46:17:70:73:f9:2f:0b:68:79:be:1a: fd:a5:70:37:48:9d:68:9a:a8:f0:bb:2e:ca:95:86: 9d:70:cf:3a:36:be:4f:de:af:20:72:ba:4b:83:cd: 57:a8:f8:53:9b:9a:53:d7:08:6c:bb:cc:96:26:ea: 9a:4b:c9:75:a8:de:50:1e:9a:80:ae:f7:75:8f:90: c2:1b:ad:6c:02:c5:d4:62:10:8d:94:7e:24:50:e6: a2:74:c0:84:4e:52:f3:da:ad:d8:0b:be:4f:8a:43: 2c:bd:4c:c3:1e:25:b2:5e:40:cb:04:55:b5:ea:4f: d1:e5:be:84:89:19:f3:1d:fe:19:ed:f3:9e:90:8a: 8e:06:fc:c7:b1:d0:44:e6:d5:17:1d:ab:cf:ea:d3: 56:a1:f7:f0:f8:ce:af:3e:b4:21:dc:4f:f5:b6:42: 3c:5b:8a:99:b8:55:c5:47:5d:ec:a9:81:0b:d7:5b: 8f:3d:52:71:86:fe:78:6a:ef:09:3a:96:aa:21:2e: 2d:52:ef:51:8d:3d:de:aa:49:75:07:20:9b:0c:c2: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:29:3C:3D:8D:C7:54:A6:4C:60:C9:85:6E:34:69:D5:0A:C5:39 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:54:e6:f0:93:6a:9a:31:df:bc:73:f1:6c:2b:b7:a7:84:87: df:2e:52:e9:1b:24:b0:a8:8f:b8:d2:3a:05:f1:02:2f:2a:04: 36:77:9a:9e:b6:f5:f4:a1:7e:75:66:d1:b9:4c:08:f3:45:a5: 2b:cc:84:32:88:64:c5:3f:f6:5e:94:92:f2:bf:29:a1:c7:ff: 03:7b:34:40:59:e9:c8:9e:b9:fd:d1:bc:57:6e:07:4f:82:03: 15:58:c2:be:a2:7c:9c:7e:43:c6:72:96:76:da:e0:eb:d7:a9: a0:6e:d9:b7:d3:01:cd:a8:66:86:9d:6f:5d:e4:c7:8a:f3:61: ef:7c:5d:60:9d:54:cf:c7:77:a5:6a:74:55:2b:b8:b9:dd:eb: 51:55:f1:02:96:34:f1:99:1e:7a:26:66:9a:b7:b2:ec:33:cb: 11:26:05:80:7f:4b:a9:8f:e6:9a:f1:77:a6:c1:cb:4c:2f:fd: 73:31:fb:68:a4:cb:dd:5f:68:e9:9f:38:27:f2:43:dc:b0:b5: 5c:78:39:de:7a:22:6b:76:92:5d:53:59:94:3a:c7:71:78:93: 54:41:59:30:37:ee:c1:98:d0:50:7b:ca:16:16:6f:9f:57:7c: 29:b8:7b:bd:c9:b4:d1:cf:e1:25:ae:73:79:f9:43:c3:53:3c: b2:34:86:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEMILYGggVHQswr8d9WOQS7PkQq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNjAxMjQwODM3MTJaFw0yNjAxMjcxNDMxMTJaMDMxMTAvBgNV BAMTKERGNzUyOTNDM0Q4REM3NTRBNjRDNjBDOTg1NkUzNDY5RDUwQUM1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79IkNWKzELeugoTWNQN9Y8I6I G0cwB4mqv9Qiu2Edw0rK+3ApvHeUilyknxmd4O9GF3Bz+S8LaHm+Gv2lcDdInWia qPC7LsqVhp1wzzo2vk/eryByukuDzVeo+FObmlPXCGy7zJYm6ppLyXWo3lAemoCu 93WPkMIbrWwCxdRiEI2UfiRQ5qJ0wIROUvPardgLvk+KQyy9TMMeJbJeQMsEVbXq T9HlvoSJGfMd/hnt856Qio4G/Mex0ETm1Rcdq8/q01ah9/D4zq8+tCHcT/W2Qjxb ipm4VcVHXeypgQvXW489UnGG/nhq7wk6lqohLi1S71GNPd6qSXUHIJsMwvarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU33UpPD2Nx1SmTGDJhW40adUKxTkwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJU5vCTapox37xz8Wwrt6eEh98uUukbJLCo j7jSOgXxAi8qBDZ3mp629fShfnVm0blMCPNFpSvMhDKIZMU/9l6UkvK/KaHH/wN7 NEBZ6cieuf3RvFduB0+CAxVYwr6ifJx+Q8Zylnba4OvXqaBu2bfTAc2oZoadb13k x4rzYe98XWCdVM/Hd6VqdFUruLnd61FV8QKWNPGZHnomZpq3suwzyxEmBYB/S6mP 5prxd6bBy0wv/XMx+2iky91faOmfOCfyQ9ywtVx4Od56Imt2kl1TWZQ6x3F4k1RB WTA37sGY0FB7yhYWb59XfCm4e73JtNHP4SWuc3n5Q8NTPLI0hh4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:38 2026 by rpki-client