This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft File: CEE21891B6F5736FAA7D9BED383243F3DF381781.mft (raw, json) Hash identifier: ZR6YRfceG6fU8Jyg91dcOyiC9PIZyWCxs30Voj4Mzok= Subject key identifier: 26:22:0F:F2:70:37:00:E9:1E:49:50:2B:90:73:0E:30:05:05:C8:FD Authority key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Certificate issuer: /CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Certificate serial: 09283D344A6EF9A45A1B12CA254BD1D6B1DB6243 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft Manifest number: 023E Signing time: Sat 24 Jan 2026 04:31:05 +0000 Manifest this update: Sat 24 Jan 2026 04:26:05 +0000 Manifest next update: Tue 27 Jan 2026 16:00:05 +0000 Files and hashes: 1: CEE21891B6F5736FAA7D9BED383243F3DF381781.crl (hash: jPmcuWuHvAgc7vZ7yE5eJnunxTtkWDc4lvYrEKrms/I=) 2: 3130332e3136382e3138362e302f32332d3234203d3e20313432333232.roa (hash: sTGZYy3CTMFJomz4zEUnzYGiqSK7Zjj2cxfNkca5o6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:28:3d:34:4a:6e:f9:a4:5a:1b:12:ca:25:4b:d1:d6:b1:db:62:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Validity Not Before: Jan 24 04:26:05 2026 GMT Not After : Jan 27 16:00:05 2026 GMT Subject: CN=26220FF2703700E91E49502B90730E300505C8FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9f:e8:fc:19:b6:53:d6:54:68:32:c1:08:e3: 65:62:5e:ba:80:44:cb:e8:68:d4:df:9e:ce:20:58: 3f:37:0b:74:a6:cb:bf:f2:fb:96:1f:91:48:77:73: 53:35:93:47:59:76:bb:7c:9d:62:52:89:4d:c8:1b: a7:23:15:a5:85:0c:32:cb:31:97:93:61:46:25:f6: 84:6e:81:0b:fa:ef:8d:f6:b0:ec:2a:b7:6a:f4:51: 7b:3e:35:d2:d0:73:2c:ae:ac:d3:2d:a3:55:90:d6: 22:88:5f:41:70:a6:8a:a3:83:d8:a7:5a:5c:19:40: 04:7a:ec:bc:3e:a5:1a:ca:fc:27:6d:1f:3e:84:1b: 9d:f6:8d:a8:4a:02:53:40:06:5b:1e:1b:5d:73:36: fa:e9:7c:b0:56:48:f5:10:59:0e:c4:42:ff:8c:cc: 02:f2:90:74:82:20:25:4e:8c:8f:69:82:3a:19:94: f8:2f:74:62:d1:42:51:4b:38:22:6e:59:9a:d0:7e: f0:c3:d1:79:d8:46:1d:5e:2f:67:28:0e:d3:7e:32: 45:3f:8e:4f:34:25:9c:d8:59:d4:61:9a:77:0f:de: bf:f0:e9:da:36:ca:29:bc:19:d5:85:b7:eb:d4:87: 04:0f:7f:45:fd:5e:0c:2c:47:ce:1a:a3:1e:d0:64: 4c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:0F:F2:70:37:00:E9:1E:49:50:2B:90:73:0E:30:05:05:C8:FD X509v3 Authority Key Identifier: keyid:CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8e:98:d4:c3:c1:30:45:06:a2:85:6a:6e:d1:e4:78:c8:bf: 81:45:75:e6:8f:61:c8:f4:dd:ca:03:c2:b5:e6:c3:63:0d:98: 61:ef:94:44:92:ca:8b:a9:ed:8e:1f:20:dd:6e:90:e8:69:7e: 16:16:bf:6e:61:e6:c3:60:a1:02:a1:33:7f:27:7c:6f:4e:71: a3:e1:24:61:98:7b:3a:a7:2a:1c:80:28:dd:9e:33:fd:23:e4: 87:3d:26:e6:6a:67:7e:37:9b:84:cd:1c:e5:b8:57:e7:a9:fa: 7f:32:a8:ad:69:fe:5c:c3:3e:6c:d1:68:6c:4b:55:84:e5:28: 67:e0:83:04:b9:51:70:94:67:11:f5:e5:1b:7d:b8:36:bb:af: 08:45:9c:78:78:9f:e3:1a:1f:39:1c:fc:1b:02:9e:12:38:c0: 4a:34:c7:8e:ec:c9:df:cf:2e:7b:0b:f8:c4:d4:a3:a2:14:ba: bb:7a:c9:8c:48:84:e1:bc:ab:20:d1:e3:b9:dd:ea:1b:68:4e: d4:d2:66:f0:a1:55:dd:b1:79:54:ee:86:0c:3b:9b:67:c2:84: 51:76:9e:28:87:c1:a7:b1:1b:94:97:0e:f8:a8:fd:24:57:4a: 18:1c:98:20:9b:a4:53:fa:7a:b3:35:7a:06:9d:09:b0:8d:02: 11:9f:2a:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSg9NEpu+aRaGxLKJUvR1rHbYkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNE RjM4MTc4MTAeFw0yNjAxMjQwNDI2MDVaFw0yNjAxMjcxNjAwMDVaMDMxMTAvBgNV BAMTKDI2MjIwRkYyNzAzNzAwRTkxRTQ5NTAyQjkwNzMwRTMwMDUwNUM4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDen+j8GbZT1lRoMsEI42ViXrqA RMvoaNTfns4gWD83C3Smy7/y+5YfkUh3c1M1k0dZdrt8nWJSiU3IG6cjFaWFDDLL MZeTYUYl9oRugQv67432sOwqt2r0UXs+NdLQcyyurNMto1WQ1iKIX0Fwpoqjg9in WlwZQAR67Lw+pRrK/CdtHz6EG532jahKAlNABlseG11zNvrpfLBWSPUQWQ7EQv+M zALykHSCICVOjI9pgjoZlPgvdGLRQlFLOCJuWZrQfvDD0XnYRh1eL2coDtN+MkU/ jk80JZzYWdRhmncP3r/w6do2yim8GdWFt+vUhwQPf0X9XgwsR84aox7QZExlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJiIP8nA3AOkeSVArkHMOMAUFyP0wHwYDVR0j BBgwFoAUzuIYkbb1c2+qfZvtODJD8984F4EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMC9DRUUyMTg5MUI2 RjU3MzZGQUE3RDlCRUQzODMyNDNGM0RGMzgxNzgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQzRjNERjM4 MTc4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFmMDAzMWUtMmE5ZS00N2NhLTky ODMtNDBlOTI3ZTM1OTkzLzAvQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5QkVEMzgzMjQz RjNERjM4MTc4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6OmNTDwTBFBqKFam7R5HjIv4FFdeaPYcj0 3coDwrXmw2MNmGHvlESSyoup7Y4fIN1ukOhpfhYWv25h5sNgoQKhM38nfG9OcaPh JGGYezqnKhyAKN2eM/0j5Ic9JuZqZ343m4TNHOW4V+ep+n8yqK1p/lzDPmzRaGxL VYTlKGfggwS5UXCUZxH15Rt9uDa7rwhFnHh4n+MaHzkc/BsCnhI4wEo0x47syd/P LnsL+MTUo6IUurt6yYxIhOG8qyDR47nd6htoTtTSZvChVd2xeVTuhgw7m2fChFF2 niiHwaexG5SXDvio/SRXShgcmCCbpFP6erM1egadCbCNAhGfKvg= -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:57 2026 by rpki-client