This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: PL4cBih6K6ZqrmMCDL7Oy+IEantbPL7ArxOY436MnPU= Subject key identifier: 65:F3:AE:1A:06:17:47:E5:51:2C:BD:28:BF:56:DE:38:89:DD:51:0E Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 46FD2633BDB061B9E87470CA5E47093EC29D3258 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0388 Signing time: Sun 25 Jan 2026 02:52:31 +0000 Manifest this update: Sun 25 Jan 2026 02:47:31 +0000 Manifest next update: Wed 28 Jan 2026 03:46:31 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 3uqdFp14AQ5XUmziFbVVJRtf2b6Li2uQUHrcdMqickI=) 2: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 3: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:fd:26:33:bd:b0:61:b9:e8:74:70:ca:5e:47:09:3e:c2:9d:32:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Jan 25 02:47:31 2026 GMT Not After : Jan 28 03:46:31 2026 GMT Subject: CN=65F3AE1A061747E5512CBD28BF56DE3889DD510E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:17:ef:60:9e:f7:3c:2e:f3:91:22:e0:88: ce:c5:6d:a2:92:c2:1b:b8:00:83:e5:92:c8:6a:a5: a3:22:97:45:32:68:f1:41:ea:71:f4:c2:19:52:17: c4:83:d3:28:73:42:ac:01:0d:75:75:1f:a5:68:4f: 16:90:1d:4b:50:52:84:8d:dc:8b:ce:3a:cd:6f:32: 5d:eb:d4:c8:df:70:13:e0:fd:fd:da:64:72:0f:02: 94:09:b3:aa:fb:bb:27:94:e7:e9:2e:99:2d:47:5d: f9:eb:38:f6:96:ab:83:91:50:08:7c:f0:14:0e:d9: f4:16:a1:08:c0:04:ad:43:c4:9a:7b:7b:39:98:40: 5e:b4:d2:01:69:1b:d9:fb:64:95:57:37:6c:dd:58: 6d:fc:b2:0c:96:db:1d:dc:b8:7e:a0:3d:ab:e5:00: db:c2:08:fc:70:0c:2c:4e:c6:7a:e3:4c:bf:21:77: d7:45:1c:b4:c0:fb:dd:d8:de:36:cb:18:95:dc:11: cd:c8:ab:96:2c:0f:f9:b9:d5:2e:92:74:ea:2d:56: 76:d0:a9:2b:87:80:37:d2:0f:fb:88:d2:a0:fb:78: 74:17:7c:10:6e:26:50:c0:c8:da:0f:b4:3c:8b:7d: 07:63:c1:ba:93:64:a8:a5:ae:92:57:a4:f7:42:23: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F3:AE:1A:06:17:47:E5:51:2C:BD:28:BF:56:DE:38:89:DD:51:0E X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:a4:f1:12:c5:a7:5a:54:e7:97:65:e9:ca:af:09:3f:92:63: 9d:4f:09:b3:5b:7d:b7:5e:74:30:54:5a:a0:de:c5:86:3b:ad: e5:e9:57:9b:49:7d:50:30:9f:75:57:cf:a8:4d:28:d8:7d:d7: d3:09:3a:fd:20:8a:5a:e2:49:82:3d:24:e2:7e:33:a8:1c:dd: 12:7a:a1:fd:d0:6e:4d:83:6e:94:1a:66:f1:21:4e:fc:be:a7: 18:36:4a:26:54:96:68:e5:93:e6:65:42:96:cd:4e:8c:0b:ea: cf:e5:b5:fa:6e:c3:1d:bf:43:ff:42:36:10:68:11:c4:d5:06: b6:51:b5:14:c3:bf:44:74:28:f5:f8:d3:98:2c:88:55:b7:79: b3:50:ca:a7:b1:50:1c:66:0b:38:1a:5f:b2:fc:d7:fb:fc:09: 75:0d:54:e1:ab:3d:c6:92:ec:98:c6:4e:c1:7e:c5:aa:73:01: 0d:ce:ee:57:c4:09:d0:71:7e:9d:e3:18:f9:13:76:23:4f:4a: f1:d5:f0:8d:3a:90:d7:09:ca:65:42:f8:79:5a:9c:49:08:48: 82:fb:b6:96:29:86:36:f5:32:52:61:38:f6:ef:63:58:31:06: 12:30:06:c9:6e:f5:b9:94:94:f1:df:e4:95:8d:df:77:20:66: 0d:c9:e4:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURv0mM72wYbnodHDKXkcJPsKdMlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNjAxMjUwMjQ3MzFaFw0yNjAxMjgwMzQ2MzFaMDMxMTAvBgNV BAMTKDY1RjNBRTFBMDYxNzQ3RTU1MTJDQkQyOEJGNTZERTM4ODlERDUxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8xfvYJ73PC7zkSLgiM7FbaKS whu4AIPlkshqpaMil0UyaPFB6nH0whlSF8SD0yhzQqwBDXV1H6VoTxaQHUtQUoSN 3IvOOs1vMl3r1MjfcBPg/f3aZHIPApQJs6r7uyeU5+kumS1HXfnrOPaWq4ORUAh8 8BQO2fQWoQjABK1DxJp7ezmYQF600gFpG9n7ZJVXN2zdWG38sgyW2x3cuH6gPavl ANvCCPxwDCxOxnrjTL8hd9dFHLTA+93Y3jbLGJXcEc3Iq5YsD/m51S6SdOotVnbQ qSuHgDfSD/uI0qD7eHQXfBBuJlDAyNoPtDyLfQdjwbqTZKilrpJXpPdCI7ZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfOuGgYXR+VRLL0ov1beOIndUQ4wHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMyk8RLFp1pU55dl6cqvCT+SY51PCbNbfbde dDBUWqDexYY7reXpV5tJfVAwn3VXz6hNKNh919MJOv0gilriSYI9JOJ+M6gc3RJ6 of3Qbk2DbpQaZvEhTvy+pxg2SiZUlmjlk+ZlQpbNTowL6s/ltfpuwx2/Q/9CNhBo EcTVBrZRtRTDv0R0KPX405gsiFW3ebNQyqexUBxmCzgaX7L81/v8CXUNVOGrPcaS 7JjGTsF+xapzAQ3O7lfECdBxfp3jGPkTdiNPSvHV8I06kNcJymVC+HlanEkISIL7 tpYphjb1MlJhOPbvY1gxBhIwBslu9bmUlPHf5JWN33cgZg3J5I8= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:55 2026 by rpki-client