This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: L6P9YJGXplr3TmiROT/3KHxw98N0OjCETduS//9HdFg= Subject key identifier: 11:61:B8:3D:13:24:F7:85:29:F3:A3:D2:E4:7F:BD:B5:AB:88:DC:26 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 10DD099669218C584E27278E2FAA5B830066655D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 0373 Signing time: Fri 23 Jan 2026 10:32:04 +0000 Manifest this update: Fri 23 Jan 2026 10:27:04 +0000 Manifest next update: Mon 26 Jan 2026 21:02:04 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: YTxmDsNEtv8ETpTfSFEMg9O7VQYEqyZqag2xp+dNQu4=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 21:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:dd:09:96:69:21:8c:58:4e:27:27:8e:2f:aa:5b:83:00:66:65:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Jan 23 10:27:04 2026 GMT Not After : Jan 26 21:02:04 2026 GMT Subject: CN=1161B83D1324F78529F3A3D2E47FBDB5AB88DC26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:6c:51:26:d6:49:f3:34:13:d2:57:2d:db: 96:d0:97:4b:7d:dd:8a:ac:63:e7:1f:db:15:38:c1: ab:3b:33:12:ae:23:c2:13:c2:81:71:a7:6c:a1:90: f6:d9:7c:99:0d:8f:e5:2d:6f:34:0e:a0:77:18:9e: 7b:9e:9f:b6:3d:8d:95:50:59:e9:2a:1e:cd:7b:1b: 06:f0:a1:60:5a:14:a8:68:e1:8c:81:e0:84:a7:3d: c3:ff:dc:18:4d:fa:69:f2:2a:dc:1a:00:f2:f1:1b: dd:9f:ac:2e:02:8a:5e:11:c6:a3:02:a4:91:2a:7c: 6d:fc:52:1a:59:2b:28:d6:ca:65:9c:b4:ce:27:3e: 92:76:0e:d1:b9:99:0d:ae:48:89:48:70:51:9b:0c: 0c:33:37:1b:6d:c3:9f:ab:4f:92:c2:7f:6b:a3:68: 15:4c:77:30:9d:10:95:e9:14:e3:32:a2:b5:12:2a: e9:51:e4:49:5d:a3:94:eb:e3:f7:a9:a9:0e:d1:21: 0b:c7:37:ed:17:a8:6e:d8:c8:c5:d4:b1:1c:42:db: 2f:8f:be:6c:85:f3:2c:3b:3a:a7:68:b4:f3:78:07: 87:9b:5c:c2:ea:2f:cd:97:3a:f5:d3:0e:71:48:a2: 46:4d:a6:e7:ee:5d:b2:3d:7b:98:9a:66:37:ec:8a: 5f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:61:B8:3D:13:24:F7:85:29:F3:A3:D2:E4:7F:BD:B5:AB:88:DC:26 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:69:a0:da:03:0e:c3:99:b7:56:bf:0e:7b:05:c1:e6:e2:82: b5:ff:6a:9a:62:f9:7a:fd:13:c3:f8:16:8c:19:a3:52:63:ec: a8:36:ef:1b:20:7f:30:d5:5c:8d:ae:fd:45:de:0b:db:f4:1b: 81:47:94:7a:0c:54:e3:3a:03:49:7e:b7:6e:7c:f6:44:9d:6e: 83:a4:8e:aa:26:2c:37:b0:9f:ad:c4:1c:73:b4:1b:63:36:38: 97:1c:9e:92:a0:bc:b9:d3:9f:1f:a3:65:2b:83:36:ed:08:82: 4d:bb:a8:61:3c:6d:01:e9:43:88:de:5f:78:d6:b2:7e:d2:6a: 31:70:b8:f2:6e:ab:b6:55:48:37:25:7b:71:c3:09:f9:f9:b0: 75:01:0e:62:03:cc:01:df:27:11:63:2b:e7:1c:66:f6:72:a4: b5:b3:cd:81:df:34:bc:c7:e8:51:c8:f2:e0:e6:ea:56:0f:f2: a4:90:3e:b5:4a:5f:b0:5f:b1:0a:cf:65:2e:62:06:f6:a0:13: d4:7b:e0:02:aa:19:d4:c9:bb:5e:db:d7:63:3c:64:fb:55:5b: d2:23:c1:75:c1:05:81:0b:a5:b1:57:52:68:e3:f7:11:5c:f3: a0:79:46:a7:b8:55:6e:3e:34:73:bf:00:ad:6c:81:04:ed:9e: 28:59:41:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEN0JlmkhjFhOJyeOL6pbgwBmZV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNjAxMjMxMDI3MDRaFw0yNjAxMjYyMTAyMDRaMDMxMTAvBgNV BAMTKDExNjFCODNEMTMyNEY3ODUyOUYzQTNEMkU0N0ZCREI1QUI4OERDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeWxRJtZJ8zQT0lct25bQl0t9 3YqsY+cf2xU4was7MxKuI8ITwoFxp2yhkPbZfJkNj+UtbzQOoHcYnnuen7Y9jZVQ WekqHs17GwbwoWBaFKho4YyB4ISnPcP/3BhN+mnyKtwaAPLxG92frC4Cil4RxqMC pJEqfG38UhpZKyjWymWctM4nPpJ2DtG5mQ2uSIlIcFGbDAwzNxttw5+rT5LCf2uj aBVMdzCdEJXpFOMyorUSKulR5Eldo5Tr4/epqQ7RIQvHN+0XqG7YyMXUsRxC2y+P vmyF8yw7OqdotPN4B4ebXMLqL82XOvXTDnFIokZNpufuXbI9e5iaZjfsil9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEWG4PRMk94Up86PS5H+9tauI3CYwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZpoNoDDsOZt1a/DnsFwebigrX/appi+Xr9 E8P4FowZo1Jj7Kg27xsgfzDVXI2u/UXeC9v0G4FHlHoMVOM6A0l+t2589kSdboOk jqomLDewn63EHHO0G2M2OJccnpKgvLnTnx+jZSuDNu0Igk27qGE8bQHpQ4jeX3jW sn7SajFwuPJuq7ZVSDcle3HDCfn5sHUBDmIDzAHfJxFjK+ccZvZypLWzzYHfNLzH 6FHI8uDm6lYP8qSQPrVKX7BfsQrPZS5iBvagE9R74AKqGdTJu17b12M8ZPtVW9Ij wXXBBYELpbFXUmjj9xFc86B5Rqe4VW4+NHO/AK1sgQTtnihZQWo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:44:28 2026 by rpki-client