This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: S+hu2mwXrFxkC3MUSd0jVJ3FycTS/S5zaoVCGKXXDMg= Subject key identifier: 3F:27:C8:1C:EA:59:5D:89:C9:9E:F1:71:3B:A2:DF:84:40:07:64:16 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 2CB3D91204EAD25DACF563580A743B2742444649 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: BE Signing time: Sat 24 Jan 2026 01:32:30 +0000 Manifest this update: Sat 24 Jan 2026 01:27:30 +0000 Manifest next update: Tue 27 Jan 2026 06:39:30 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: GRPkC4t8E9PqW76Sl5+D/oxp1IGDY892GHensnnZJys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b3:d9:12:04:ea:d2:5d:ac:f5:63:58:0a:74:3b:27:42:44:46:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Jan 24 01:27:30 2026 GMT Not After : Jan 27 06:39:30 2026 GMT Subject: CN=3F27C81CEA595D89C99EF1713BA2DF8440076416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:15:d4:1b:11:c0:54:96:40:c3:91:d5:ba: 07:dc:32:11:99:dd:f5:fd:58:a6:29:24:6f:2d:7d: 61:b9:4d:b0:84:d4:7c:03:4b:12:ed:36:d1:44:b0: 84:3a:23:c0:9e:a3:cd:44:28:1d:6d:b6:d4:74:70: 64:09:74:42:d2:e9:69:38:0b:35:36:9e:03:7d:af: 0c:d8:80:a5:10:52:cf:32:8a:c5:4e:a3:2b:c7:19: 59:ed:9d:e5:08:66:aa:8c:52:f8:79:ca:06:11:58: 85:24:42:29:20:d8:d4:67:a2:93:99:eb:2a:62:5c: 39:9b:d6:fe:7b:df:d5:ec:a3:b7:ea:22:a0:2f:26: b8:49:0b:43:1e:aa:55:b8:3e:bc:29:5e:cc:13:c3: c0:69:36:b2:45:cf:f1:bd:2d:c7:a6:0a:b0:1a:02: 68:7a:61:2b:82:66:11:67:e4:73:35:59:be:45:19: 9e:ed:55:cf:ec:e3:ce:bf:ce:f9:c0:0f:3b:60:8a: 9f:ca:17:2d:bf:60:6d:c0:90:aa:a7:77:14:01:89: 49:b5:36:d3:72:f4:77:8b:da:64:bf:93:80:e6:f9: 77:f5:1b:4c:64:e6:a4:cd:be:d4:5c:b4:e9:02:90: 86:4b:db:4f:b0:e7:aa:84:eb:33:87:d0:6f:36:0c: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:27:C8:1C:EA:59:5D:89:C9:9E:F1:71:3B:A2:DF:84:40:07:64:16 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f9:65:07:fc:8c:e5:52:e9:30:0b:ba:ae:53:41:b7:66:e5: 2e:b8:7a:6b:65:ed:fd:e6:9e:35:7e:fe:2d:b7:4b:52:66:a2: e2:22:d9:cc:42:26:78:02:b7:9c:63:33:b6:a3:e3:14:2d:e4: 62:db:5b:1a:22:04:ed:e3:bd:31:cb:c1:41:96:28:34:50:4b: 09:53:7c:ad:4a:9b:54:07:b0:09:a9:1c:41:07:ef:8d:dc:f6: 94:f5:b4:fb:b6:f8:d4:eb:b0:6c:71:1e:82:95:54:03:84:2a: 22:4d:7a:2f:37:ef:5c:00:7f:6f:ae:49:b4:da:a7:5b:9e:cd: 3f:84:bf:a5:2a:05:f5:d7:fe:4a:7a:0f:e7:ef:44:67:72:ee: 89:97:12:c5:9c:70:19:3a:6d:84:b0:7e:b4:33:e1:72:24:3b: ad:89:3b:e3:65:c8:87:e9:a5:86:61:7f:aa:18:87:6e:1d:5e: f2:f1:a8:7f:cc:58:06:9a:0d:a2:65:04:35:ee:82:16:1b:17: 07:bc:f6:08:1d:14:56:7f:79:0c:a6:cd:bc:15:0c:57:7e:c3: 8b:6f:23:41:66:94:ea:b0:00:f5:10:42:a8:b8:c7:00:40:bb: a0:8e:ad:77:2f:e9:6d:dc:8e:1b:c0:e6:71:56:ca:ce:8b:cd: 48:c0:ea:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLPZEgTq0l2s9WNYCnQ7J0JERkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNjAxMjQwMTI3MzBaFw0yNjAxMjcwNjM5MzBaMDMxMTAvBgNV BAMTKDNGMjdDODFDRUE1OTVEODlDOTlFRjE3MTNCQTJERjg0NDAwNzY0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuxXUGxHAVJZAw5HVugfcMhGZ 3fX9WKYpJG8tfWG5TbCE1HwDSxLtNtFEsIQ6I8Ceo81EKB1tttR0cGQJdELS6Wk4 CzU2ngN9rwzYgKUQUs8yisVOoyvHGVntneUIZqqMUvh5ygYRWIUkQikg2NRnopOZ 6ypiXDmb1v5739Xso7fqIqAvJrhJC0MeqlW4PrwpXswTw8BpNrJFz/G9LcemCrAa Amh6YSuCZhFn5HM1Wb5FGZ7tVc/s486/zvnADztgip/KFy2/YG3AkKqndxQBiUm1 NtNy9HeL2mS/k4Dm+Xf1G0xk5qTNvtRctOkCkIZL20+w56qE6zOH0G82DEffAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPyfIHOpZXYnJnvFxO6LfhEAHZBYwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADP5ZQf8jOVS6TALuq5TQbdm5S64emtl7f3m njV+/i23S1JmouIi2cxCJngCt5xjM7aj4xQt5GLbWxoiBO3jvTHLwUGWKDRQSwlT fK1Km1QHsAmpHEEH743c9pT1tPu2+NTrsGxxHoKVVAOEKiJNei8371wAf2+uSbTa p1uezT+Ev6UqBfXX/kp6D+fvRGdy7omXEsWccBk6bYSwfrQz4XIkO62JO+NlyIfp pYZhf6oYh24dXvLxqH/MWAaaDaJlBDXughYbFwe89ggdFFZ/eQymzbwVDFd+w4tv I0FmlOqwAPUQQqi4xwBAu6COrXcv6W3cjhvA5nFWys6LzUjA6nM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:20 2026 by rpki-client