This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: J9IVY0Hf6zIAhYQxuQF76Z0LJMYepKMMWe3mT3DsIM8= Subject key identifier: 8C:22:EA:2B:E0:08:12:6E:C8:CD:A1:C6:C5:BD:97:C1:81:E4:AE:CE Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 34A38682F776A2C88E172B5F8D5420058ACECF6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0158 Signing time: Fri 23 Jan 2026 14:51:24 +0000 Manifest this update: Fri 23 Jan 2026 14:46:24 +0000 Manifest next update: Mon 26 Jan 2026 23:25:24 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: w1KcuA90EFzOxc5x9jHDFxk9Isn5xc26wIdqItCOPA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a3:86:82:f7:76:a2:c8:8e:17:2b:5f:8d:54:20:05:8a:ce:cf:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Jan 23 14:46:24 2026 GMT Not After : Jan 26 23:25:24 2026 GMT Subject: CN=8C22EA2BE008126EC8CDA1C6C5BD97C181E4AECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:52:4f:12:b7:26:d0:5f:0c:c7:df:d0:ec: b7:f5:b3:6d:39:56:ac:94:c1:7e:f2:d6:6b:b4:58: 01:27:0f:ee:bb:28:63:1a:83:e6:7c:4e:68:f2:84: 3e:f2:35:44:53:86:08:9e:ce:68:75:89:1f:9b:cb: 7d:2f:50:dc:78:1e:ca:a5:70:bb:33:01:3e:76:d7: 2e:f6:c8:9e:5c:53:05:4b:ef:36:53:3d:b7:9b:fc: 77:ae:3a:a4:2d:40:98:a8:23:e8:bd:59:9f:7b:1b: 1c:79:71:34:9b:ca:d4:f8:c1:96:18:4f:3a:98:a7: f3:6d:09:32:bc:30:a5:d2:3e:b2:d3:ee:95:db:82: 2a:dd:fb:a3:eb:56:c9:54:7f:bf:20:fd:e6:b2:6e: 8c:5b:d4:8b:6f:2f:cc:e3:75:46:bc:99:ab:6a:97: 88:10:56:9b:3f:bf:9f:c3:1a:d1:f8:04:c8:b2:b0: 4d:b3:b7:48:17:d6:a0:34:f0:73:a1:ec:63:0c:40: 5d:e8:3f:06:c2:7f:08:b7:bc:a7:6f:1f:f7:10:e4: ce:b9:78:80:4c:96:00:d9:ce:fd:f8:2a:1c:82:a2: 29:99:cc:5d:ea:b1:bb:d0:75:7a:c9:7f:f7:2d:03: 6d:f7:87:84:87:dc:6e:94:4c:be:b1:7b:c0:40:6b: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:22:EA:2B:E0:08:12:6E:C8:CD:A1:C6:C5:BD:97:C1:81:E4:AE:CE X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:ff:44:04:40:a2:1f:e2:fe:5f:37:be:90:e3:32:6d:73: d0:51:4c:d1:52:4a:11:01:93:d4:57:d5:7d:71:49:38:59:a2: 1c:45:fa:b9:02:5b:c9:5e:a6:78:48:70:c8:4e:63:8c:b5:cf: 18:85:4d:27:36:c8:64:b1:c8:3a:2b:cf:37:45:1e:01:8e:ab: b3:98:df:90:d8:a3:93:f4:6a:20:82:78:78:16:bb:99:e6:c0: e6:98:f4:0d:37:fe:9a:fe:ee:eb:21:a7:89:f4:53:0c:40:ae: 9b:8b:08:fe:63:7a:fa:e6:62:e3:ea:ec:9a:57:d8:f3:b5:51: 6d:9f:58:8e:a7:ce:6b:f0:c1:67:6d:f1:81:0e:e0:3c:96:23: c8:11:80:93:95:55:1c:b8:3f:49:35:8e:76:b0:8c:17:48:87: 4a:0e:4b:72:9a:0a:bf:08:30:94:28:90:11:44:0f:c8:a7:0a: 16:24:ee:7e:e3:31:c2:e7:8e:dd:1a:00:6a:43:d5:0a:a5:36: 4a:38:49:13:ca:fc:84:3c:b5:7a:93:a3:8d:8a:a1:19:af:e0: 8c:d3:e5:89:1b:c8:ca:c0:e3:a4:63:9b:d0:7f:a9:ec:47:6b: 2d:73:8f:e0:ad:09:d9:21:61:92:5c:6d:ee:6f:27:91:b1:8b: c1:85:b6:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKOGgvd2osiOFytfjVQgBYrOz2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNjAxMjMxNDQ2MjRaFw0yNjAxMjYyMzI1MjRaMDMxMTAvBgNV BAMTKDhDMjJFQTJCRTAwODEyNkVDOENEQTFDNkM1QkQ5N0MxODFFNEFFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGUlJPErcm0F8Mx9/Q7Lf1s205 VqyUwX7y1mu0WAEnD+67KGMag+Z8TmjyhD7yNURThgiezmh1iR+by30vUNx4Hsql cLszAT521y72yJ5cUwVL7zZTPbeb/HeuOqQtQJioI+i9WZ97Gxx5cTSbytT4wZYY TzqYp/NtCTK8MKXSPrLT7pXbgird+6PrVslUf78g/eayboxb1ItvL8zjdUa8matq l4gQVps/v5/DGtH4BMiysE2zt0gX1qA08HOh7GMMQF3oPwbCfwi3vKdvH/cQ5M65 eIBMlgDZzv34KhyCoimZzF3qsbvQdXrJf/ctA233h4SH3G6UTL6xe8BAayrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjCLqK+AIEm7IzaHGxb2XwYHkrs4wHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuZ/0QEQKIf4v5fN76Q4zJtc9BRTNFSShEB k9RX1X1xSThZohxF+rkCW8lepnhIcMhOY4y1zxiFTSc2yGSxyDorzzdFHgGOq7OY 35DYo5P0aiCCeHgWu5nmwOaY9A03/pr+7ushp4n0UwxArpuLCP5jevrmYuPq7JpX 2PO1UW2fWI6nzmvwwWdt8YEO4DyWI8gRgJOVVRy4P0k1jnawjBdIh0oOS3KaCr8I MJQokBFED8inChYk7n7jMcLnjt0aAGpD1QqlNko4SRPK/IQ8tXqTo42KoRmv4IzT 5YkbyMrA46Rjm9B/qexHay1zj+CtCdkhYZJcbe5vJ5Gxi8GFtpQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:46:14 2026 by rpki-client