This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft File: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft (raw, json) Hash identifier: dXhOz6dmRPuQP35w+R/WZ8PVPMUcMxIhNlzjyDzZa1k= Subject key identifier: DC:8D:44:8D:2F:1B:80:5D:F1:53:D3:AB:38:2D:77:59:30:20:53:F7 Authority key identifier: 1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 Certificate issuer: /CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Certificate serial: 5DF8546E58B6C257167D5E52C275C817C01636C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft Manifest number: 0129 Signing time: Sat 24 Jan 2026 09:01:06 +0000 Manifest this update: Sat 24 Jan 2026 08:56:06 +0000 Manifest next update: Tue 27 Jan 2026 20:30:06 +0000 Files and hashes: 1: 3130332e3231362e3130362e302f32332d3234203d3e20313531353834.roa (hash: PsGNbQknHKYWMYALOGdIVfSDiE+9DHHpxngcorbZrwE=) 2: 3130332e3231362e3130372e302f32342d3234203d3e20313531353834.roa (hash: n6WP2Hnagc6Y7K4SMOP4ZErxdEpr/wuDMkEC9l7Yuzo=) 3: 1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl (hash: xvNaQ6CDUNagx9nvKg+xOnE1t2zaTo5WmVEtuJygebQ=) 4: 3130332e3231362e3130362e302f32342d3234203d3e20313531353834.roa (hash: K9AJVznOmX2phVWzq5QR73X9/93QctDHVy8caQvBqGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f8:54:6e:58:b6:c2:57:16:7d:5e:52:c2:75:c8:17:c0:16:36:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5 Validity Not Before: Jan 24 08:56:06 2026 GMT Not After : Jan 27 20:30:06 2026 GMT Subject: CN=DC8D448D2F1B805DF153D3AB382D7759302053F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:8b:cd:39:eb:0d:ac:3d:8f:3e:42:93:04: 46:85:c5:62:d3:05:1c:c7:69:02:29:3c:99:b5:8c: 86:52:de:c4:c6:02:4b:39:4f:77:c3:69:e1:83:94: 56:70:40:c1:a1:d7:f6:68:ab:cb:f9:22:73:2b:3b: 74:99:25:a6:92:dd:1a:b8:89:70:9e:74:bb:53:c8: 60:ef:a5:75:80:7b:b4:df:13:81:30:15:49:6b:6d: 18:2e:eb:8e:70:39:2e:7b:33:85:1d:b4:f7:40:70: bb:56:6b:54:b2:94:10:47:c0:a0:df:be:66:3e:d8: 44:b7:d9:87:35:b1:50:65:06:20:6e:3c:75:fe:11: ca:8a:7f:02:0c:70:56:a0:91:39:9c:69:d2:07:80: 57:56:48:49:a1:71:22:d1:b8:30:36:44:3f:ca:12: cd:41:5d:db:22:d6:dd:5e:7a:02:94:24:70:4c:af: 18:7b:2d:04:93:21:df:0d:9b:3e:a7:85:f3:3c:74: 6d:7d:18:cd:6f:54:6c:78:17:f4:9d:4c:39:72:a5: be:87:33:56:61:5c:1f:fd:11:3a:8f:46:c1:3d:c9: d2:02:ea:57:db:33:2f:ae:c4:75:ec:e4:9c:43:6d: b1:21:70:e5:19:44:88:21:67:d8:3b:a8:34:c9:ec: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8D:44:8D:2F:1B:80:5D:F1:53:D3:AB:38:2D:77:59:30:20:53:F7 X509v3 Authority Key Identifier: keyid:1C:EE:2E:2E:FC:E3:07:A6:8E:4B:F3:59:C6:EA:FF:9E:91:93:03:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfef3890-445d-4b23-8fb3-b3018a799ece/0/1CEE2E2EFCE307A68E4BF359C6EAFF9E919303A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9c:8a:10:47:e6:c8:8b:a3:ed:38:1c:c7:0e:d4:0f:d3:7d: 16:90:c9:9b:61:74:a0:4f:45:06:18:83:fd:77:7a:fc:09:63: 4d:3f:ca:94:4a:96:13:c9:d2:11:32:5b:a0:4e:74:bc:ed:ee: 42:b5:21:39:e2:b3:7d:7e:34:1f:60:16:0c:e6:93:50:ec:da: db:38:44:9f:68:de:b7:52:e5:38:11:15:f6:fb:73:84:be:ba: 99:96:0c:3e:f9:7e:9b:7a:73:d4:4d:ea:34:2d:c8:02:43:49: b0:ac:59:6d:44:4b:81:aa:84:c1:af:d3:99:46:38:e1:01:b6: cd:bb:bb:97:66:bc:e6:c5:31:f4:7f:61:78:74:a6:a2:3e:03: 53:14:01:87:36:80:19:12:ee:dd:2e:00:18:ac:4c:c7:06:4f: 14:81:82:d1:d8:24:1b:c5:71:25:58:45:73:0f:fe:a3:d2:d3: de:fb:aa:07:64:fe:b9:77:56:a3:0a:5f:3c:72:5a:2e:ac:84: 4f:9b:2b:f4:bd:2e:98:cf:4f:e2:c4:94:71:68:9b:79:b5:16: a7:5e:d2:70:20:1b:f6:33:54:2e:fa:70:40:fc:6d:23:78:d1: 9f:5e:3f:bd:6b:47:78:fa:45:3f:32:7b:da:e4:ca:54:9b:50: 35:cf:d5:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfhUbli2wlcWfV5SwnXIF8AWNsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5 MTkzMDNBNTAeFw0yNjAxMjQwODU2MDZaFw0yNjAxMjcyMDMwMDZaMDMxMTAvBgNV BAMTKERDOEQ0NDhEMkYxQjgwNURGMTUzRDNBQjM4MkQ3NzU5MzAyMDUzRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFIvNOesNrD2PPkKTBEaFxWLT BRzHaQIpPJm1jIZS3sTGAks5T3fDaeGDlFZwQMGh1/Zoq8v5InMrO3SZJaaS3Rq4 iXCedLtTyGDvpXWAe7TfE4EwFUlrbRgu645wOS57M4UdtPdAcLtWa1SylBBHwKDf vmY+2ES32Yc1sVBlBiBuPHX+EcqKfwIMcFagkTmcadIHgFdWSEmhcSLRuDA2RD/K Es1BXdsi1t1eegKUJHBMrxh7LQSTId8Nmz6nhfM8dG19GM1vVGx4F/SdTDlypb6H M1ZhXB/9ETqPRsE9ydIC6lfbMy+uxHXs5JxDbbEhcOUZRIghZ9g7qDTJ7GprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3I1EjS8bgF3xU9OrOC13WTAgU/cwHwYDVR0j BBgwFoAUHO4uLvzjB6aOS/NZxur/npGTA6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVmMzg5MC00NDVkLTRiMjMtOGZiMy1iMzAxOGE3OTllY2UvMC8xQ0VFMkUyRUZD RTMwN0E2OEU0QkYzNTlDNkVBRkY5RTkxOTMwM0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZGOUU5MTkz MDNBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZjM4OTAtNDQ1ZC00YjIzLThm YjMtYjMwMThhNzk5ZWNlLzAvMUNFRTJFMkVGQ0UzMDdBNjhFNEJGMzU5QzZFQUZG OUU5MTkzMDNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHecihBH5siLo+04HMcO1A/TfRaQyZthdKBP RQYYg/13evwJY00/ypRKlhPJ0hEyW6BOdLzt7kK1ITnis31+NB9gFgzmk1Ds2ts4 RJ9o3rdS5TgRFfb7c4S+upmWDD75fpt6c9RN6jQtyAJDSbCsWW1ES4GqhMGv05lG OOEBts27u5dmvObFMfR/YXh0pqI+A1MUAYc2gBkS7t0uABisTMcGTxSBgtHYJBvF cSVYRXMP/qPS0977qgdk/rl3VqMKXzxyWi6shE+bK/S9LpjPT+LElHFom3m1Fqde 0nAgG/YzVC76cED8bSN40Z9eP71rR3j6RT8ye9rkylSbUDXP1YQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:05:04 2026 by rpki-client