This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft File: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft (raw, json) Hash identifier: D0i7itEZZuTmFq2uCn8hxY6eyEATL0Sha3I+7Zl2Uo0= Subject key identifier: 9D:EB:15:AB:C5:BC:09:D7:5F:71:68:41:A4:68:1B:A7:FD:49:97:23 Authority key identifier: CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 Certificate issuer: /CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Certificate serial: 7395B3D456129553DDD6DEEC351D63E56E2BE68F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft Manifest number: 0542 Signing time: Sun 25 Jan 2026 03:50:57 +0000 Manifest this update: Sun 25 Jan 2026 03:45:57 +0000 Manifest next update: Wed 28 Jan 2026 12:53:57 +0000 Files and hashes: 1: CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl (hash: r+T3NcjBXn2a5Gu9Hz+l2+Az1Gr6fiRUrdbixhizSjE=) 2: 323030313a6466343a6630303a3a2f34382d3438203d3e203535363931.roa (hash: e63YtFc38q9Y3dJcmDjIpL3Gn24BOS6camkXts2Jt7o=) 3: 3230332e372e3137312e302f32342d3234203d3e203535363931.roa (hash: hb0XwjAFF2YkElsrW+ICY5ENMHpZu8XC9NzDgrrCks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:95:b3:d4:56:12:95:53:dd:d6:de:ec:35:1d:63:e5:6e:2b:e6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE826E79683ED6E5CE61FEA244B6B79133E98EE3 Validity Not Before: Jan 25 03:45:57 2026 GMT Not After : Jan 28 12:53:57 2026 GMT Subject: CN=9DEB15ABC5BC09D75F716841A4681BA7FD499723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:68:06:13:bf:46:06:f3:8b:ae:78:a5:94: 4f:98:dc:a0:96:0f:89:95:2c:14:1c:50:49:41:b0: fd:f9:a0:9e:6c:9c:54:36:b6:f1:ba:29:ad:cb:3f: 4b:1f:28:14:2a:79:f3:eb:8c:7b:03:3c:4b:5e:5e: c7:f1:f8:34:a5:89:31:30:9b:b5:8d:4c:00:c4:c9: 0c:23:f3:b3:9f:9f:e9:db:2d:d2:92:c6:81:6c:d4: 60:98:82:b0:c8:4c:e7:02:4e:6e:4d:ff:36:9d:cf: a4:2b:12:4e:c9:8a:46:d6:29:ff:89:03:c7:fb:6f: 45:fa:a7:1a:95:00:b0:93:72:67:43:1c:b4:0a:5f: 7e:c2:5e:ab:47:dd:44:09:46:58:80:09:80:e1:fc: 6e:6a:a8:d6:20:7d:55:56:8f:7c:a9:cc:ea:f6:1b: 5b:ae:81:9d:89:e6:8a:a4:00:76:ed:f5:f3:1e:ee: 46:bf:f5:84:cb:b4:50:21:27:a1:c8:c8:12:e6:ba: 6c:4a:70:78:1a:09:87:dc:59:ac:89:31:e4:4a:f0: 2a:e5:2b:01:29:20:4d:dd:ed:3d:a6:3e:7a:d7:96: 49:a7:9d:e4:0a:70:52:dd:26:6f:1b:ff:7f:7d:68: 17:b6:82:51:65:3a:c6:d0:41:bf:8f:bf:9d:e6:a3: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EB:15:AB:C5:BC:09:D7:5F:71:68:41:A4:68:1B:A7:FD:49:97:23 X509v3 Authority Key Identifier: keyid:CE:82:6E:79:68:3E:D6:E5:CE:61:FE:A2:44:B6:B7:91:33:E9:8E:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c00ae0f1-b8c0-452f-8e89-1dfc3f594d4c/0/CE826E79683ED6E5CE61FEA244B6B79133E98EE3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:38:af:c4:61:c0:7e:51:d1:ca:7b:30:fb:10:e0:3c:92:98: 1e:56:d5:e2:9f:c6:ca:cc:77:51:18:99:ec:9f:98:ae:c9:04: aa:26:86:36:4f:8a:88:6b:28:26:ff:4e:bf:c5:20:7e:0a:c1: 44:56:d8:c1:07:c4:c1:e1:3b:7c:52:eb:12:d4:a2:f3:3e:a9: 23:e0:25:86:8e:f3:97:9d:8c:87:4c:a5:d8:5a:94:ce:65:06: 1f:8c:97:e0:e2:0a:96:c8:65:fa:e7:5e:40:bb:6d:de:14:4b: d5:6b:4c:81:01:4b:51:b9:3d:ce:73:0c:f0:40:79:c0:5b:0b: 92:e4:7a:8c:c5:c4:53:e1:fa:f2:79:bc:cf:ba:89:bd:8d:05: f1:fc:26:07:d9:9e:f1:4a:f6:de:e6:a5:38:52:2c:3b:0d:f8: 72:2b:fb:8e:a3:19:2b:76:9d:9d:bd:d9:a2:93:e2:5b:e6:d5: e2:78:ec:5f:07:6b:37:7c:07:8b:e8:e8:87:52:86:0e:cc:e4: dc:be:86:67:25:f2:2c:c8:af:20:53:36:b3:24:b2:f1:08:7a: f7:e2:2e:ff:0e:46:16:77:f7:63:00:30:22:9a:16:e3:d9:91: 24:98:f6:b8:84:96:71:aa:b4:8e:df:e8:b8:bb:47:cb:df:61: cd:7b:1b:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5Wz1FYSlVPd1t7sNR1j5W4r5o8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEz M0U5OEVFMzAeFw0yNjAxMjUwMzQ1NTdaFw0yNjAxMjgxMjUzNTdaMDMxMTAvBgNV BAMTKDlERUIxNUFCQzVCQzA5RDc1RjcxNjg0MUE0NjgxQkE3RkQ0OTk3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCakmgGE79GBvOLrnillE+Y3KCW D4mVLBQcUElBsP35oJ5snFQ2tvG6Ka3LP0sfKBQqefPrjHsDPEteXsfx+DSliTEw m7WNTADEyQwj87Ofn+nbLdKSxoFs1GCYgrDITOcCTm5N/zadz6QrEk7JikbWKf+J A8f7b0X6pxqVALCTcmdDHLQKX37CXqtH3UQJRliACYDh/G5qqNYgfVVWj3ypzOr2 G1uugZ2J5oqkAHbt9fMe7ka/9YTLtFAhJ6HIyBLmumxKcHgaCYfcWayJMeRK8Crl KwEpIE3d7T2mPnrXlkmnneQKcFLdJm8b/399aBe2glFlOsbQQb+Pv53moxOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnesVq8W8CddfcWhBpGgbp/1JlyMwHwYDVR0j BBgwFoAUzoJueWg+1uXOYf6iRLa3kTPpjuMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDBhZTBmMS1iOGMwLTQ1MmYtOGU4OS0xZGZjM2Y1OTRkNGMvMC9DRTgyNkU3OTY4 M0VENkU1Q0U2MUZFQTI0NEI2Qjc5MTMzRTk4RUUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3OTEzM0U5 OEVFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzAwYWUwZjEtYjhjMC00NTJmLThl ODktMWRmYzNmNTk0ZDRjLzAvQ0U4MjZFNzk2ODNFRDZFNUNFNjFGRUEyNDRCNkI3 OTEzM0U5OEVFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg4r8RhwH5R0cp7MPsQ4DySmB5W1eKfxsrM d1EYmeyfmK7JBKomhjZPiohrKCb/Tr/FIH4KwURW2MEHxMHhO3xS6xLUovM+qSPg JYaO85edjIdMpdhalM5lBh+Ml+DiCpbIZfrnXkC7bd4US9VrTIEBS1G5Pc5zDPBA ecBbC5LkeozFxFPh+vJ5vM+6ib2NBfH8JgfZnvFK9t7mpThSLDsN+HIr+46jGSt2 nZ292aKT4lvm1eJ47F8Hazd8B4vo6IdShg7M5Ny+hmcl8izIryBTNrMksvEIevfi Lv8ORhZ392MAMCKaFuPZkSSY9riElnGqtI7f6Li7R8vfYc17G0g= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:19 2026 by rpki-client