This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft File: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft (raw, json) Hash identifier: oCl/w6dAyMkbBucnHSaEzwf8TKHYsGqhZsfWh73+U+4= Subject key identifier: 87:CF:48:13:E0:B7:7B:48:4B:3E:77:12:24:62:8D:AF:0B:95:02:74 Authority key identifier: CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 Certificate issuer: /CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Certificate serial: 24005F6BC27792F04BCDC06180C123D27DC5ECF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft Manifest number: 0112 Signing time: Sat 24 Jan 2026 04:40:58 +0000 Manifest this update: Sat 24 Jan 2026 04:35:58 +0000 Manifest next update: Tue 27 Jan 2026 08:53:58 +0000 Files and hashes: 1: CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl (hash: xKBhaWt9OkQxic97YCoVTyn+lFJFkb+LUXojHy51ZWw=) 2: 3135372e31302e3232322e302f32332d3234203d3e20313431383938.roa (hash: GMU+CWZ37DvQvoDo6BkkC4G2UgM09X3lRKvxQBg5EIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:00:5f:6b:c2:77:92:f0:4b:cd:c0:61:80:c1:23:d2:7d:c5:ec:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEB4F9AE3476630AAF22F4CD42CE606BB4444140 Validity Not Before: Jan 24 04:35:58 2026 GMT Not After : Jan 27 08:53:58 2026 GMT Subject: CN=87CF4813E0B77B484B3E771224628DAF0B950274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:83:f9:da:8c:20:ae:c4:15:56:31:62:17:4e: 9d:70:77:f1:92:18:e6:87:de:f5:c7:72:32:2c:c2: a0:0d:95:73:58:7f:57:d8:57:91:05:fc:5c:16:91: e0:d8:66:78:72:24:f2:12:99:6c:f2:8d:af:eb:8e: d0:13:0b:4e:08:c3:a8:13:cd:41:86:0f:62:15:38: 63:6c:85:16:38:76:33:20:f6:44:7e:0b:08:21:d3: 87:82:f1:07:67:0b:6f:40:04:0b:f0:f1:06:eb:85: b4:66:0a:eb:cd:e5:03:2f:b5:99:16:d1:f5:e4:4f: 0d:52:1a:39:55:49:0d:a3:92:4e:81:35:f2:37:f8: 75:bf:87:11:0b:3f:ed:ef:b5:4c:b4:4d:2f:3d:b2: a7:e2:f3:76:5e:42:6c:ec:bf:3e:f0:be:e8:1a:ba: c0:48:2f:50:07:0c:4e:d0:12:d2:ff:60:1f:f4:1d: 86:f2:36:21:7c:90:86:af:2b:dd:3c:b6:14:3c:79: 6f:97:6a:1e:2e:39:13:1c:5a:bf:95:24:9b:fe:79: 60:a3:e0:9a:b9:8a:8c:80:01:66:51:1c:81:fd:c5: e1:2f:eb:9e:8d:d4:51:5f:0e:58:47:8a:b9:bb:62: c3:ab:45:bf:d0:48:5f:3d:a7:65:bf:b4:25:a3:77: 8a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CF:48:13:E0:B7:7B:48:4B:3E:77:12:24:62:8D:AF:0B:95:02:74 X509v3 Authority Key Identifier: keyid:CE:B4:F9:AE:34:76:63:0A:AF:22:F4:CD:42:CE:60:6B:B4:44:41:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca376a6e-3eca-4f73-8d15-d1ddee91ff98/0/CEB4F9AE3476630AAF22F4CD42CE606BB4444140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:02:e2:2d:4e:e9:49:f8:ce:d9:cb:07:6a:b1:56:11:fa:89: 2d:8b:39:3d:0a:97:99:ba:41:70:ac:a7:4e:44:62:b4:61:f0: 05:4c:a3:5c:8a:3d:d7:93:4f:c5:7c:40:8e:fa:47:11:e7:b2: 20:62:e6:bf:b3:57:e4:f4:d3:5f:0b:f6:d6:b3:35:18:66:e1: 87:e4:82:d0:ca:54:1d:33:f8:bf:8f:b4:a1:a4:a4:b9:f8:cc: c6:c2:23:f0:9a:a9:0e:7d:04:a2:c8:33:96:b8:c4:6c:67:94: 77:d6:46:1d:b5:b5:96:6f:ba:80:eb:0d:12:ae:75:84:6e:5c: 94:ec:19:b4:56:85:e7:73:93:68:0c:ff:1b:d1:40:74:11:0b: 21:b6:1f:2a:cc:b1:61:38:b2:d6:a2:de:e5:c0:3f:6c:dc:95: 2a:ae:a1:e3:cb:f5:bf:2a:b4:b5:77:ce:38:e3:bf:8f:96:c9: 45:ea:58:92:48:f2:86:43:45:ed:d5:fd:9a:16:ca:9d:20:ed: 95:a5:1f:e3:95:79:ff:c5:77:c4:4c:d0:0f:d8:87:bd:11:c4: 2d:80:5f:4a:80:09:a9:6a:9e:d3:bd:67:47:59:d0:b9:eb:c2: 50:04:f4:b4:e2:40:89:dc:e8:d4:44:46:a2:a8:90:55:21:96: 88:61:34:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJABfa8J3kvBLzcBhgMEj0n3F7PAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJC NDQ0NDE0MDAeFw0yNjAxMjQwNDM1NThaFw0yNjAxMjcwODUzNThaMDMxMTAvBgNV BAMTKDg3Q0Y0ODEzRTBCNzdCNDg0QjNFNzcxMjI0NjI4REFGMEI5NTAyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6g/najCCuxBVWMWIXTp1wd/GS GOaH3vXHcjIswqANlXNYf1fYV5EF/FwWkeDYZnhyJPISmWzyja/rjtATC04Iw6gT zUGGD2IVOGNshRY4djMg9kR+Cwgh04eC8QdnC29ABAvw8QbrhbRmCuvN5QMvtZkW 0fXkTw1SGjlVSQ2jkk6BNfI3+HW/hxELP+3vtUy0TS89sqfi83ZeQmzsvz7wvuga usBIL1AHDE7QEtL/YB/0HYbyNiF8kIavK908thQ8eW+Xah4uORMcWr+VJJv+eWCj 4Jq5ioyAAWZRHIH9xeEv656N1FFfDlhHirm7YsOrRb/QSF89p2W/tCWjd4pbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh89IE+C3e0hLPncSJGKNrwuVAnQwHwYDVR0j BBgwFoAUzrT5rjR2YwqvIvTNQs5ga7REQUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTM3NmE2ZS0zZWNhLTRmNzMtOGQxNS1kMWRkZWU5MWZmOTgvMC9DRUI0RjlBRTM0 NzY2MzBBQUYyMkY0Q0Q0MkNFNjA2QkI0NDQ0MTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYwNkJCNDQ0 NDE0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2EzNzZhNmUtM2VjYS00ZjczLThk MTUtZDFkZGVlOTFmZjk4LzAvQ0VCNEY5QUUzNDc2NjMwQUFGMjJGNENENDJDRTYw NkJCNDQ0NDE0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcC4i1O6Un4ztnLB2qxVhH6iS2LOT0Kl5m6 QXCsp05EYrRh8AVMo1yKPdeTT8V8QI76RxHnsiBi5r+zV+T0018L9tazNRhm4Yfk gtDKVB0z+L+PtKGkpLn4zMbCI/CaqQ59BKLIM5a4xGxnlHfWRh21tZZvuoDrDRKu dYRuXJTsGbRWhedzk2gM/xvRQHQRCyG2HyrMsWE4stai3uXAP2zclSquoePL9b8q tLV3zjjjv4+WyUXqWJJI8oZDRe3V/ZoWyp0g7ZWlH+OVef/Fd8RM0A/Yh70RxC2A X0qACalqntO9Z0dZ0LnrwlAE9LTiQInc6NRERqKokFUhlohhNMQ= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:07 2026 by rpki-client