This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft File: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft (raw, json) Hash identifier: XWp7jG0SroOZRS0PGDP/jet+EZnYtL01040UFpup8cg= Subject key identifier: 84:4A:AC:44:FD:88:10:E7:31:98:12:4A:1E:95:AD:B7:4D:64:66:BC Authority key identifier: CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 Certificate issuer: /CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Certificate serial: 1734AD4B0C82FC70FDF2A466D5D4893624BB9643 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft Manifest number: 0540 Signing time: Sat 24 Jan 2026 07:41:21 +0000 Manifest this update: Sat 24 Jan 2026 07:36:21 +0000 Manifest next update: Tue 27 Jan 2026 10:50:21 +0000 Files and hashes: 1: 323430343a3630303a3a2f33322d3438203d3e2034383333.roa (hash: W+3oudDGVZWtPTgLUpXVQqGay+DBQ/RLjB5FNHueSRc=) 2: 3230322e3134392e3132382e302f31392d3234203d3e2034383333.roa (hash: GlWUtSBkPZfVhJyvyIrXhbA2GkDfMaWv4thV636jVK8=) 3: CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl (hash: cby0nsDDj+5s9EPiVs2+nlPl3wRUeLOY8imu+rDhHCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:34:ad:4b:0c:82:fc:70:fd:f2:a4:66:d5:d4:89:36:24:bb:96:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9 Validity Not Before: Jan 24 07:36:21 2026 GMT Not After : Jan 27 10:50:21 2026 GMT Subject: CN=844AAC44FD8810E73198124A1E95ADB74D6466BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:be:7a:8d:33:12:8f:f3:0a:98:c0:36:9e:ae: 34:68:61:36:a5:91:7a:05:90:19:16:af:bd:fc:f1: 7f:a2:23:6d:06:8f:f0:06:13:0c:58:fb:4b:58:64: d3:f8:35:e4:6c:d6:1c:09:9f:f7:87:e4:6e:2d:5e: 1e:c2:61:8d:18:ea:02:c4:cf:50:d2:9a:47:fd:41: a3:a7:fb:d5:c3:50:ee:5e:c4:bd:fb:8e:6f:f7:da: 8d:b3:a2:38:0c:91:9f:5b:f2:7b:b4:22:98:c8:4d: d9:66:58:51:ec:dd:78:ff:c3:df:9a:6a:22:29:6d: 2a:46:cd:d0:fb:43:b7:48:83:30:38:90:0f:b3:2e: 2a:18:ef:81:f4:18:db:f8:9f:7e:73:53:6a:37:55: c8:7a:1c:7f:10:10:a1:1f:b3:90:8f:b2:0b:58:a6: 99:18:55:94:d1:20:9d:6d:30:dc:56:21:d4:72:3c: 48:6c:0b:a2:50:e0:01:f3:60:85:4f:4b:e9:20:d7: fe:a4:bc:b3:5b:07:d5:a6:bc:61:e7:c4:96:aa:3b: 84:46:98:fc:78:1a:0d:d2:52:fa:58:fa:37:d7:89: 58:39:57:3d:ac:1e:f3:f7:d3:d6:55:5a:cd:7f:e7: 0c:66:f6:69:81:b6:02:e9:48:94:a2:d8:43:4a:51: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4A:AC:44:FD:88:10:E7:31:98:12:4A:1E:95:AD:B7:4D:64:66:BC X509v3 Authority Key Identifier: keyid:CD:68:1E:40:6D:2E:CD:8A:CA:28:E4:F0:7B:9A:FA:9D:F6:48:C4:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66c1f51a-8645-4eb1-a2ff-e27c24c8e0c8/0/CD681E406D2ECD8ACA28E4F07B9AFA9DF648C4E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2d:e6:20:8d:06:3e:6a:95:05:52:f5:83:19:ae:f5:06:a9: 23:98:23:6c:c0:42:c7:9f:a3:54:9a:72:c8:ad:0a:91:d3:8e: ff:fa:83:89:58:32:78:13:c2:d0:68:92:23:26:90:f0:d7:08: dc:53:b3:c7:a0:a8:ed:65:e2:ca:b9:bc:3a:7f:48:0d:9f:70: 14:eb:a9:b8:e7:66:4c:cd:36:5a:86:d3:81:97:f6:0e:3f:16: 0c:79:9c:40:a8:5d:44:d9:1b:d7:99:d9:45:61:18:7e:c9:4c: df:b9:73:aa:b2:2b:c2:c0:8f:52:8a:9e:c1:04:a8:4b:25:31: 20:2a:f1:e4:44:ca:7a:04:2f:0f:20:d1:b4:7f:bb:fa:b0:68: 96:42:29:ff:0f:60:98:ca:9a:d2:b6:a6:fd:33:8d:48:59:5a: 93:7e:3f:7b:3e:9f:4a:1d:b7:da:95:04:da:7a:ab:1f:5b:7b: 12:3a:3b:39:de:fb:96:7c:e1:1b:55:1d:38:14:c6:81:53:41: aa:46:11:41:d9:ad:34:0c:fa:72:44:6a:b9:84:3b:65:af:28: 92:63:8d:ba:af:c0:03:bb:ee:2d:b2:c4:39:f2:61:02:80:1e: 48:0a:11:e8:77:33:9c:8c:bc:e6:23:1c:df:1e:18:13:c1:95: 2f:09:bf:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzStSwyC/HD98qRm1dSJNiS7lkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURG NjQ4QzRFOTAeFw0yNjAxMjQwNzM2MjFaFw0yNjAxMjcxMDUwMjFaMDMxMTAvBgNV BAMTKDg0NEFBQzQ0RkQ4ODEwRTczMTk4MTI0QTFFOTVBREI3NEQ2NDY2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1vnqNMxKP8wqYwDaerjRoYTal kXoFkBkWr7388X+iI20Gj/AGEwxY+0tYZNP4NeRs1hwJn/eH5G4tXh7CYY0Y6gLE z1DSmkf9QaOn+9XDUO5exL37jm/32o2zojgMkZ9b8nu0IpjITdlmWFHs3Xj/w9+a aiIpbSpGzdD7Q7dIgzA4kA+zLioY74H0GNv4n35zU2o3Vch6HH8QEKEfs5CPsgtY ppkYVZTRIJ1tMNxWIdRyPEhsC6JQ4AHzYIVPS+kg1/6kvLNbB9WmvGHnxJaqO4RG mPx4Gg3SUvpY+jfXiVg5Vz2sHvP309ZVWs1/5wxm9mmBtgLpSJSi2ENKUVvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEqsRP2IEOcxmBJKHpWtt01kZrwwHwYDVR0j BBgwFoAUzWgeQG0uzYrKKOTwe5r6nfZIxOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmMxZjUxYS04NjQ1LTRlYjEtYTJmZi1lMjdjMjRjOGUwYzgvMC9DRDY4MUU0MDZE MkVDRDhBQ0EyOEU0RjA3QjlBRkE5REY2NDhDNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZBOURGNjQ4 QzRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZjMWY1MWEtODY0NS00ZWIxLWEy ZmYtZTI3YzI0YzhlMGM4LzAvQ0Q2ODFFNDA2RDJFQ0Q4QUNBMjhFNEYwN0I5QUZB OURGNjQ4QzRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwt5iCNBj5qlQVS9YMZrvUGqSOYI2zAQsef o1SacsitCpHTjv/6g4lYMngTwtBokiMmkPDXCNxTs8egqO1l4sq5vDp/SA2fcBTr qbjnZkzNNlqG04GX9g4/Fgx5nECoXUTZG9eZ2UVhGH7JTN+5c6qyK8LAj1KKnsEE qEslMSAq8eREynoELw8g0bR/u/qwaJZCKf8PYJjKmtK2pv0zjUhZWpN+P3s+n0od t9qVBNp6qx9bexI6Ozne+5Z84RtVHTgUxoFTQapGEUHZrTQM+nJEarmEO2WvKJJj jbqvwAO77i2yxDnyYQKAHkgKEeh3M5yMvOYjHN8eGBPBlS8Jvxg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:03 2026 by rpki-client