This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft File: CEEE0277998C75D36A98EC102AD67573C8C514E9.mft (raw, json) Hash identifier: PQRLlLQl1Sdhz4CfBMAlQrFWTQW+Ppq4JQNVfOBi3oU= Subject key identifier: B1:47:7F:F1:5E:92:7B:B0:B3:8C:CA:B2:2B:4D:25:8A:A8:AC:9D:1B Authority key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Certificate issuer: /CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Certificate serial: 2FEE099D43C9A93BF2CC698EB3D8A541B58A9F6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft Manifest number: 02C1 Signing time: Fri 23 Jan 2026 20:51:41 +0000 Manifest this update: Fri 23 Jan 2026 20:46:41 +0000 Manifest next update: Tue 27 Jan 2026 01:22:41 +0000 Files and hashes: 1: CEEE0277998C75D36A98EC102AD67573C8C514E9.crl (hash: hx5kI1kwg9P6k1Lxa5vQKVWor+t9oh0f+85Sc97ePIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ee:09:9d:43:c9:a9:3b:f2:cc:69:8e:b3:d8:a5:41:b5:8a:9f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Validity Not Before: Jan 23 20:46:41 2026 GMT Not After : Jan 27 01:22:41 2026 GMT Subject: CN=B1477FF15E927BB0B38CCAB22B4D258AA8AC9D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:55:f6:9d:80:4d:d0:b9:1e:d9:17:6e:ef: e4:fd:75:c4:a1:ca:15:3c:e9:c0:3c:e6:fa:f6:6f: 6e:64:a3:78:0a:cb:e4:c9:d1:f6:66:76:25:36:0c: 1e:fd:54:4a:40:af:81:75:08:e2:99:00:0f:f5:ef: 00:30:5d:8d:60:b2:a9:5a:fb:f7:d9:c4:b2:9a:8a: aa:c5:a8:1d:49:84:20:62:79:35:82:23:31:05:d7: 25:fe:d1:0d:17:86:7b:97:7f:09:b1:9b:e8:ad:7d: ba:54:ef:75:58:e2:bc:9b:71:2d:52:fa:9b:7c:1c: df:c8:46:2e:c7:62:64:58:a6:9b:0a:bb:c0:d3:50: 7b:ec:cf:46:1c:a0:ad:33:d5:64:ac:c8:c5:97:b4: 8e:a9:ca:0e:7e:1b:bf:0e:04:8c:2b:80:98:45:73: c0:c1:0f:af:1a:fe:36:3c:7a:7b:7c:22:15:34:3c: 10:bd:4f:91:49:65:ed:ec:a7:17:0f:8f:7d:34:9f: 74:85:be:f7:6f:f9:e5:38:e2:25:91:81:f4:28:d2: 89:19:17:1e:59:48:87:8d:ad:1d:21:c2:48:88:10: 0f:ec:d4:69:0c:9a:5f:32:4e:22:c4:66:6d:39:6d: d1:76:2d:30:9a:86:b9:3d:e9:1c:4e:09:21:03:97: ff:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:47:7F:F1:5E:92:7B:B0:B3:8C:CA:B2:2B:4D:25:8A:A8:AC:9D:1B X509v3 Authority Key Identifier: keyid:CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:0b:a8:8e:6e:b0:1d:48:42:eb:9c:98:60:31:03:b5:02:b4: 06:01:95:bb:78:ce:8e:a3:1a:ea:27:21:13:da:16:ce:5d:93: 47:d9:19:46:4b:cd:bf:10:30:59:f4:d1:e4:0d:87:19:05:e1: a2:0c:1b:30:2b:c9:96:7a:56:97:8f:a3:99:b2:c7:96:d8:db: 78:14:c7:de:c0:2c:4a:f9:26:93:3f:58:6c:ea:41:fc:37:bc: 8c:26:3f:54:49:c9:f9:1b:f3:3f:6a:28:a7:1f:9b:be:9c:63: ca:ab:5f:2b:18:1b:8d:cd:de:15:9a:2d:50:10:bd:a6:b8:5f: 65:4a:90:f3:a3:b7:b3:7a:80:3f:0a:8e:be:21:db:b5:df:3b: 35:1e:d4:c6:7d:40:07:f3:5e:bf:ed:23:29:9c:b2:0c:5f:8c: 78:9a:4a:f2:3b:07:3e:25:8d:0a:a8:bc:18:78:3a:d3:7a:70: 69:72:7c:ba:7f:9f:77:cc:bf:58:61:50:cc:41:18:ef:67:3a: de:de:fa:dc:98:45:5f:4a:49:e3:70:30:43:b3:b9:ac:1f:fb: 3d:39:85:89:fe:a0:4b:cb:72:6d:a0:0b:98:f5:fc:61:a6:9e: b7:6d:02:01:1f:6c:fb:b9:ba:1e:64:6c:26:3d:3b:1c:9d:92: 45:96:d8:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+4JnUPJqTvyzGmOs9ilQbWKn20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzND OEM1MTRFOTAeFw0yNjAxMjMyMDQ2NDFaFw0yNjAxMjcwMTIyNDFaMDMxMTAvBgNV BAMTKEIxNDc3RkYxNUU5MjdCQjBCMzhDQ0FCMjJCNEQyNThBQThBQzlEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBxFX2nYBN0Lke2Rdu7+T9dcSh yhU86cA85vr2b25ko3gKy+TJ0fZmdiU2DB79VEpAr4F1COKZAA/17wAwXY1gsqla +/fZxLKaiqrFqB1JhCBieTWCIzEF1yX+0Q0XhnuXfwmxm+itfbpU73VY4rybcS1S +pt8HN/IRi7HYmRYppsKu8DTUHvsz0YcoK0z1WSsyMWXtI6pyg5+G78OBIwrgJhF c8DBD68a/jY8ent8IhU0PBC9T5FJZe3spxcPj300n3SFvvdv+eU44iWRgfQo0okZ Fx5ZSIeNrR0hwkiIEA/s1GkMml8yTiLEZm05bdF2LTCahrk96RxOCSEDl/95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUd/8V6Se7CzjMqyK00liqisnRswHwYDVR0j BBgwFoAUzu4Cd5mMddNqmOwQKtZ1c8jFFOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMC9DRUVFMDI3Nzk5 OEM3NUQzNkE5OEVDMTAyQUQ2NzU3M0M4QzUxNEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1NzNDOEM1 MTRFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVhM2IxMDYtOGVmMC00NWJmLWIy NzctYTI3OTQ3ZTQ1OTFiLzAvQ0VFRTAyNzc5OThDNzVEMzZBOThFQzEwMkFENjc1 NzNDOEM1MTRFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4LqI5usB1IQuucmGAxA7UCtAYBlbt4zo6j GuonIRPaFs5dk0fZGUZLzb8QMFn00eQNhxkF4aIMGzAryZZ6VpePo5myx5bY23gU x97ALEr5JpM/WGzqQfw3vIwmP1RJyfkb8z9qKKcfm76cY8qrXysYG43N3hWaLVAQ vaa4X2VKkPOjt7N6gD8Kjr4h27XfOzUe1MZ9QAfzXr/tIymcsgxfjHiaSvI7Bz4l jQqovBh4OtN6cGlyfLp/n3fMv1hhUMxBGO9nOt7e+tyYRV9KSeNwMEOzuawf+z05 hYn+oEvLcm2gC5j1/GGmnrdtAgEfbPu5uh5kbCY9OxydkkWW2I8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:48 2026 by rpki-client