This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft File: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft (raw, json) Hash identifier: uk1UHuiQjn6pjW8NbLRXQB4V/KeXGpg8bR1tT5VK+Ls= Subject key identifier: C7:87:09:A4:64:BC:AF:7B:BE:B0:9E:1B:53:DC:8C:7C:04:46:19:B0 Authority key identifier: CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A Certificate issuer: /CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Certificate serial: 0C72C78DE8A8A4C2CAD006CB5217F978A48B9F1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft Manifest number: 01E7 Signing time: Sat 24 Jan 2026 00:21:51 +0000 Manifest this update: Sat 24 Jan 2026 00:16:51 +0000 Manifest next update: Tue 27 Jan 2026 09:48:51 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: QJsx8t/jy2szp1HmLXfAbg7UbUXdGC8z/gTpNC266lo=) 2: CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl (hash: 8DBJcEAyjB5ZlALv1dNRLjhzuhel4UI8iHWpQziLYSM=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: g7r/RVB4oSYAg9bJf585oALndM8Pi1RvbkwVKzFMHo8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:72:c7:8d:e8:a8:a4:c2:ca:d0:06:cb:52:17:f9:78:a4:8b:9f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A Validity Not Before: Jan 24 00:16:51 2026 GMT Not After : Jan 27 09:48:51 2026 GMT Subject: CN=C78709A464BCAF7BBEB09E1B53DC8C7C044619B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:db:9e:d0:62:90:ef:e1:1d:a4:69:c2:81: c3:13:87:55:b5:4e:a9:5a:22:07:f8:44:66:d8:fd: 71:ff:a9:3b:21:0d:a1:12:89:78:54:64:a5:ad:28: 99:eb:3d:18:d7:34:e2:ec:9a:1b:f5:e7:04:00:a1: 20:b6:1a:86:db:0e:e9:53:b4:f3:3a:fd:1d:57:39: 83:c9:17:68:61:36:e1:fd:91:0b:85:fd:d0:99:11: f1:b3:d0:31:88:5e:08:3f:d5:e5:a3:cb:00:ff:b4: 6e:aa:2d:f6:fa:c3:10:d9:35:d3:59:bf:b5:9f:e8: 4b:c4:bb:a5:23:2f:2a:4f:09:0b:17:3a:68:ca:3c: 29:ea:9a:fe:24:34:97:4c:45:dc:4f:08:7f:d7:d5: 77:8d:c3:4e:57:74:c2:bb:26:64:64:c5:e9:7a:b8: d3:6c:66:73:9f:75:9e:f4:40:6e:ac:cf:02:1f:1f: b9:3a:e2:84:83:22:14:00:ac:0e:d6:85:db:8c:14: f3:f2:5f:57:83:00:4b:5f:03:f8:60:90:49:6d:01: 54:27:35:bf:c9:f5:b3:16:23:d0:b3:f9:a0:fb:b6: 32:54:3f:bf:27:87:79:ec:8a:18:37:84:64:e2:56: 0f:a8:28:21:ca:2d:7a:18:41:97:64:06:16:a1:e1: e8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:87:09:A4:64:BC:AF:7B:BE:B0:9E:1B:53:DC:8C:7C:04:46:19:B0 X509v3 Authority Key Identifier: keyid:CB:B5:E8:D8:79:96:C4:89:7C:9F:5D:C0:CB:32:86:4F:4F:0C:5A:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/CBB5E8D87996C4897C9F5DC0CB32864F4F0C5A7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ea:0b:3b:6f:22:2d:6f:29:60:69:4c:2e:63:e5:ca:3f:cd: e9:f7:ba:25:15:18:a6:c2:ef:e2:bd:14:cf:da:4b:a8:40:b4: 89:4b:d3:de:80:51:f6:a6:61:83:aa:c5:a0:6a:58:ff:66:57: 7c:31:86:27:73:7b:9b:93:55:ba:b1:d3:67:c4:58:c3:67:72: a6:fa:9d:58:a4:73:6f:8e:84:67:0b:c6:df:94:68:17:9b:73: a9:9c:0d:d1:da:5d:d4:b4:d0:c7:a0:8b:54:58:10:5f:f4:5c: a5:6c:36:c2:ff:86:f8:d1:ac:62:fb:cf:67:16:a2:a0:1d:32: 8c:48:ed:8e:e4:54:f5:89:08:6a:24:de:fc:18:5e:c5:ae:fe: dc:0a:8f:33:69:af:24:dc:44:be:30:dd:2c:1e:6f:94:48:74: 7b:aa:8a:13:ba:d2:e4:fd:fe:55:81:ab:be:fe:2a:36:ef:54: 3e:8b:b1:db:ce:17:ff:c2:97:0a:db:3d:45:06:68:e4:4c:ec: 4b:5e:c6:26:5c:26:50:ef:be:2c:54:eb:a4:da:61:6d:9d:0b: 6c:1e:96:10:8e:58:3e:ed:e7:6c:12:72:42:7e:4c:5b:86:b2: 8c:1d:f4:09:35:1c:17:5d:ec:f2:f2:86:cc:5b:2e:e1:a3:4e: c5:56:c8:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHLHjeiopMLK0AbLUhf5eKSLnxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0 RjBDNUE3QTAeFw0yNjAxMjQwMDE2NTFaFw0yNjAxMjcwOTQ4NTFaMDMxMTAvBgNV BAMTKEM3ODcwOUE0NjRCQ0FGN0JCRUIwOUUxQjUzREM4QzdDMDQ0NjE5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMtue0GKQ7+EdpGnCgcMTh1W1 TqlaIgf4RGbY/XH/qTshDaESiXhUZKWtKJnrPRjXNOLsmhv15wQAoSC2GobbDulT tPM6/R1XOYPJF2hhNuH9kQuF/dCZEfGz0DGIXgg/1eWjywD/tG6qLfb6wxDZNdNZ v7Wf6EvEu6UjLypPCQsXOmjKPCnqmv4kNJdMRdxPCH/X1XeNw05XdMK7JmRkxel6 uNNsZnOfdZ70QG6szwIfH7k64oSDIhQArA7WhduMFPPyX1eDAEtfA/hgkEltAVQn Nb/J9bMWI9Cz+aD7tjJUP78nh3nsihg3hGTiVg+oKCHKLXoYQZdkBhah4ei9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx4cJpGS8r3u+sJ4bU9yMfARGGbAwHwYDVR0j BBgwFoAUy7Xo2HmWxIl8n13AyzKGT08MWnowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 N2Y2ZTU3Yi00YzI2LTQ0MmItOGFmYy0wMzI5ZWVkYWZiNzIvMC9DQkI1RThEODc5 OTZDNDg5N0M5RjVEQzBDQjMyODY0RjRGMEM1QTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2NEY0RjBD NUE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvQ0JCNUU4RDg3OTk2QzQ4OTdDOUY1REMwQ0IzMjg2 NEY0RjBDNUE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzqCztvIi1vKWBpTC5j5co/zen3uiUVGKbC 7+K9FM/aS6hAtIlL096AUfamYYOqxaBqWP9mV3wxhidze5uTVbqx02fEWMNncqb6 nVikc2+OhGcLxt+UaBebc6mcDdHaXdS00Megi1RYEF/0XKVsNsL/hvjRrGL7z2cW oqAdMoxI7Y7kVPWJCGok3vwYXsWu/twKjzNpryTcRL4w3Sweb5RIdHuqihO60uT9 /lWBq77+KjbvVD6LsdvOF//ClwrbPUUGaORM7EtexiZcJlDvvixU66TaYW2dC2we lhCOWD7t52wSckJ+TFuGsowd9Ak1HBdd7PLyhsxbLuGjTsVWyDc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:06:07 2026 by rpki-client