This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: NQTvh+FlBLLyPiT3rX8ynNEYZS8ZgmqBSOtR1jgDmHQ= Subject key identifier: 67:C5:E9:0C:ED:9E:77:1E:09:0C:A3:E0:D2:2F:7E:DD:E2:34:FE:36 Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 70F070C761774A9EBA7B8BCB9D680EE4764BDBCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 0204 Signing time: Sun 25 Jan 2026 00:42:17 +0000 Manifest this update: Sun 25 Jan 2026 00:37:17 +0000 Manifest next update: Wed 28 Jan 2026 01:06:17 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: Imksp46DJc5lWGUvSeQSEG9S1ZZNZK/SWp6RnIRqnAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f0:70:c7:61:77:4a:9e:ba:7b:8b:cb:9d:68:0e:e4:76:4b:db:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Jan 25 00:37:17 2026 GMT Not After : Jan 28 01:06:17 2026 GMT Subject: CN=67C5E90CED9E771E090CA3E0D22F7EDDE234FE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:aa:24:65:12:66:69:8f:b9:bb:a7:9b:86: d0:1b:0c:6a:c2:f4:e5:f9:f4:4a:1f:2c:c7:20:42: c8:26:3f:dc:7a:22:14:c2:f5:98:96:cb:e5:7e:9a: f0:28:8f:a7:57:c8:71:9e:72:be:52:01:79:ed:4d: d2:ea:99:80:fe:d8:05:0e:16:18:29:42:f0:9a:86: d4:94:5c:fc:57:0c:e1:41:ca:da:21:64:1d:38:f8: 74:ee:04:a1:47:ab:c6:f1:24:ee:18:19:48:fb:fd: 7e:f7:9b:22:b8:c6:c7:23:8d:a4:ed:34:91:eb:cd: d7:e8:89:70:88:39:98:f7:a3:45:b0:58:9b:16:8a: be:fa:8a:b5:85:ee:77:9a:12:1f:da:12:db:7e:ef: 36:20:f7:29:b6:53:42:01:d1:ce:e4:42:ba:95:83: 58:55:9e:c8:5e:83:b2:07:c9:09:7e:7f:fa:da:5b: c0:94:b2:d2:61:81:65:1e:b2:f0:57:87:99:c1:35: c6:39:d3:7a:ee:d3:f5:63:db:f8:38:e5:7a:68:56: 6d:dd:fd:36:ab:57:fb:c0:7a:08:aa:d4:20:4f:96: 92:b1:39:a2:68:e9:db:4e:9b:66:8f:09:e7:2d:df: 6b:f9:e4:0a:e5:b7:ac:43:5c:61:40:1b:4c:3b:42: 38:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C5:E9:0C:ED:9E:77:1E:09:0C:A3:E0:D2:2F:7E:DD:E2:34:FE:36 X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:55:64:ed:38:3b:5e:e8:13:16:13:5d:49:f8:b8:ef:bb:47: 36:60:9f:2f:dc:74:91:db:7a:17:74:9a:df:46:92:f9:c0:59: 3b:c9:a8:8a:fa:01:c0:57:2b:bb:c9:a1:9a:e6:9c:53:d3:dc: 98:89:29:a4:2f:b7:b6:3f:f4:80:08:d4:ce:0a:c0:28:66:8c: e5:d8:3b:6d:e4:71:81:d3:2a:64:d6:3e:2d:85:a3:87:78:30: 17:0d:2d:07:6e:da:d6:10:09:67:e1:82:8d:d9:ca:ff:d5:da: 60:d7:d0:5e:48:90:39:5a:8d:cb:0b:75:03:7c:d2:03:65:6c: 06:3c:36:f3:cb:43:09:b8:36:f7:55:85:34:33:e1:01:96:43: 91:72:a1:5c:49:32:f5:f6:dc:6f:b8:e1:32:1e:08:ac:51:a1: 31:4a:c0:37:9b:f4:8c:0b:0b:72:cd:19:f4:01:3d:d1:e9:26: cc:a1:18:77:61:70:bb:c7:49:83:52:5e:e1:b9:5d:c5:81:88: fe:dc:bc:98:cc:3a:dd:28:5f:7a:17:dd:7b:78:15:6d:2a:05: e0:51:13:a6:59:bb:6e:1d:73:cf:63:5b:a7:69:ce:41:ec:bc: 50:4f:7b:23:a3:9c:70:aa:ca:5a:ec:a7:fb:41:7f:92:fb:bc: 2d:16:07:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPBwx2F3Sp66e4vLnWgO5HZL28swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNjAxMjUwMDM3MTdaFw0yNjAxMjgwMTA2MTdaMDMxMTAvBgNV BAMTKDY3QzVFOTBDRUQ5RTc3MUUwOTBDQTNFMEQyMkY3RURERTIzNEZFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC926okZRJmaY+5u6ebhtAbDGrC 9OX59EofLMcgQsgmP9x6IhTC9ZiWy+V+mvAoj6dXyHGecr5SAXntTdLqmYD+2AUO FhgpQvCahtSUXPxXDOFBytohZB04+HTuBKFHq8bxJO4YGUj7/X73myK4xscjjaTt NJHrzdfoiXCIOZj3o0WwWJsWir76irWF7neaEh/aEtt+7zYg9ym2U0IB0c7kQrqV g1hVnsheg7IHyQl+f/raW8CUstJhgWUesvBXh5nBNcY503ru0/Vj2/g45XpoVm3d /TarV/vAegiq1CBPlpKxOaJo6dtOm2aPCect32v55Arlt6xDXGFAG0w7QjinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ8XpDO2edx4JDKPg0i9+3eI0/jYwHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRVZO04O17oExYTXUn4uO+7RzZgny/cdJHb ehd0mt9GkvnAWTvJqIr6AcBXK7vJoZrmnFPT3JiJKaQvt7Y/9IAI1M4KwChmjOXY O23kcYHTKmTWPi2Fo4d4MBcNLQdu2tYQCWfhgo3Zyv/V2mDX0F5IkDlajcsLdQN8 0gNlbAY8NvPLQwm4NvdVhTQz4QGWQ5FyoVxJMvX23G+44TIeCKxRoTFKwDeb9IwL C3LNGfQBPdHpJsyhGHdhcLvHSYNSXuG5XcWBiP7cvJjMOt0oX3oX3Xt4FW0qBeBR E6ZZu24dc89jW6dpzkHsvFBPeyOjnHCqylrsp/tBf5L7vC0WB1E= -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:57 2026 by rpki-client