This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft (raw, json) Hash identifier: qJa6brBvf6gsRHJsovbgjsbPWFcNng0ASpj0aM33XKo= Subject key identifier: 23:E7:DB:19:CF:03:E2:93:F3:09:9E:45:2C:13:37:36:5B:16:F7:32 Authority key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Certificate issuer: /CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Certificate serial: 704B62E71F3CBF2F9A9617F754DB785FB68BF634 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft Manifest number: 4B Signing time: Sat 24 Jan 2026 09:21:50 +0000 Manifest this update: Sat 24 Jan 2026 09:16:50 +0000 Manifest next update: Tue 27 Jan 2026 14:43:50 +0000 Files and hashes: 1: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl (hash: GJHBZhytzQtiDMShIkb94kYreZGBgNeGxM/ZoEK/sLE=) 2: 3130332e3137392e3138302e302f32342d3234203d3e20313439333435.roa (hash: 9Q3I81vfimJR2eOE3uBt/l1OU+u3ttXpoOc8s4Hxxs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4b:62:e7:1f:3c:bf:2f:9a:96:17:f7:54:db:78:5f:b6:8b:f6:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Validity Not Before: Jan 24 09:16:50 2026 GMT Not After : Jan 27 14:43:50 2026 GMT Subject: CN=23E7DB19CF03E293F3099E452C1337365B16F732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:e0:8a:05:c7:16:da:cd:d6:81:c0:0e:75: de:5e:d8:28:d7:67:87:22:31:1c:8b:c6:e3:c3:db: 92:f7:8d:5c:86:ca:83:17:13:61:46:2e:c1:62:fb: c8:fb:ae:13:f9:bf:40:44:21:84:6e:dd:59:bc:05: 8d:88:ef:b2:03:7e:5f:2f:ea:c8:24:99:7c:57:7a: fb:95:cf:4f:f7:b5:a5:ab:9e:f8:1b:87:bf:50:ef: 09:ed:93:d1:c2:4c:11:8d:03:9c:6f:8d:8c:7c:54: 1b:7a:3f:06:cb:65:0a:eb:7f:d7:72:39:28:0f:88: 82:8f:07:d6:6d:3d:a0:9c:0c:3d:de:d4:fc:24:29: 61:b7:b2:80:0d:87:9d:f3:29:ec:d4:d7:1a:68:40: b4:b8:83:3e:04:06:85:87:ab:a8:68:26:4c:20:83: d7:04:58:b9:61:2c:6c:6d:d4:5b:f0:b7:29:cc:5e: c4:53:96:c0:db:90:13:b1:c7:8d:c2:73:61:67:60: 27:e2:af:f6:69:18:30:2a:8a:51:0e:02:32:9e:13: b0:72:f4:62:e3:84:d0:a5:a6:04:b1:a4:ff:7f:3d: 4c:ed:55:4d:56:41:0f:ff:f7:d3:a1:14:7e:58:a5: 32:89:3b:73:17:1c:25:20:7f:da:a6:94:b2:69:92: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:DB:19:CF:03:E2:93:F3:09:9E:45:2C:13:37:36:5B:16:F7:32 X509v3 Authority Key Identifier: keyid:CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ee:0c:03:67:58:dd:65:18:e3:e0:77:f9:d9:d5:d1:aa:ca: 64:fc:5f:61:5c:84:b0:6b:7b:13:72:97:87:f3:98:0f:d0:99: cc:41:8a:91:01:f0:3a:5b:44:83:da:8b:84:c7:c9:17:e3:b1: 39:94:ff:5c:16:be:5b:f6:9a:a3:f3:2e:6a:0a:5e:ad:a3:d1: 1e:ae:b0:c0:0b:ab:45:91:d8:1b:41:a1:52:27:6a:0f:9f:86: a6:32:1e:22:e8:0d:22:20:f3:77:15:64:99:75:65:2e:7e:09: 29:d1:5d:17:02:2f:4c:88:ed:7c:92:6f:91:ea:e9:04:db:76: 6f:7f:96:c8:bb:4b:1e:91:78:eb:1a:fb:5c:90:11:83:66:d1: 97:22:fb:ee:96:7f:8f:64:ad:a7:ad:2d:2d:e2:ee:e9:f6:e0: cf:2c:00:76:9e:a8:ee:29:01:4a:cd:ed:13:81:5e:09:c1:1d: d0:1b:b2:49:3e:f8:43:94:9f:10:31:15:ad:a8:4a:64:e5:97: 42:54:a2:cb:48:38:71:3b:d0:ca:80:47:6e:03:5a:39:cc:4c: ef:f5:92:ce:fa:db:23:b8:d6:94:91:e7:b8:24:06:47:5f:d9: 59:8b:f9:cc:ea:0b:8a:8e:0c:d7:e5:85:ee:24:29:b0:ba:b2: c7:c6:10:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEti5x88vy+alhf3VNt4X7aL9jQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4 QTcyOUZDQzAeFw0yNjAxMjQwOTE2NTBaFw0yNjAxMjcxNDQzNTBaMDMxMTAvBgNV BAMTKDIzRTdEQjE5Q0YwM0UyOTNGMzA5OUU0NTJDMTMzNzM2NUIxNkY3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhuCKBccW2s3WgcAOdd5e2CjX Z4ciMRyLxuPD25L3jVyGyoMXE2FGLsFi+8j7rhP5v0BEIYRu3Vm8BY2I77IDfl8v 6sgkmXxXevuVz0/3taWrnvgbh79Q7wntk9HCTBGNA5xvjYx8VBt6PwbLZQrrf9dy OSgPiIKPB9ZtPaCcDD3e1PwkKWG3soANh53zKezU1xpoQLS4gz4EBoWHq6hoJkwg g9cEWLlhLGxt1FvwtynMXsRTlsDbkBOxx43Cc2FnYCfir/ZpGDAqilEOAjKeE7By 9GLjhNClpgSxpP9/PUztVU1WQQ//99OhFH5YpTKJO3MXHCUgf9qmlLJpkiC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+fbGc8D4pPzCZ5FLBM3NlsW9zIwHwYDVR0j BBgwFoAUzuG1vp+MMMpxDBt+sibDZIpyn8wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMC9DRUUxQjVCRTlG OEMzMENBNzEwQzFCN0VCMjI2QzM2NDhBNzI5RkNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMzNjQ4QTcy OUZDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY5M2ZjOGYtYWZjYy00ZGVmLTgw NmYtZjQ0NDkzZDA3YTNmLzAvQ0VFMUI1QkU5RjhDMzBDQTcxMEMxQjdFQjIyNkMz NjQ4QTcyOUZDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXuDANnWN1lGOPgd/nZ1dGqymT8X2FchLBr exNyl4fzmA/QmcxBipEB8DpbRIPai4THyRfjsTmU/1wWvlv2mqPzLmoKXq2j0R6u sMALq0WR2BtBoVInag+fhqYyHiLoDSIg83cVZJl1ZS5+CSnRXRcCL0yI7XySb5Hq 6QTbdm9/lsi7Sx6ReOsa+1yQEYNm0Zci++6Wf49kraetLS3i7un24M8sAHaeqO4p AUrN7ROBXgnBHdAbskk++EOUnxAxFa2oSmTll0JUostIOHE70MqAR24DWjnMTO/1 ks762yO41pSR57gkBkdf2VmL+czqC4qODNflhe4kKbC6ssfGEJQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:24 2026 by rpki-client