This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft (raw, json) Hash identifier: J0NwpP91o7AVIzForZgWOLekxipFwBFeqw3/2KsP8qU= Subject key identifier: 0D:A7:54:55:D2:A7:09:1C:79:D2:77:0D:34:00:6C:3A:62:C4:5E:5A Authority key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Certificate issuer: /CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Certificate serial: 603527A18009BF4BFF2EAE6CBB435273CA608DF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft Manifest number: 0214 Signing time: Thu 01 Jan 2026 07:32:20 +0000 Manifest this update: Thu 01 Jan 2026 07:27:20 +0000 Manifest next update: Sun 04 Jan 2026 14:31:20 +0000 Files and hashes: 1: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl (hash: p7N+8GETAhgtSZjQe8+YCaPB4N2IfPcAIJJiFQ/n41w=) 2: 3130332e31332e362e302f32332d3234203d3e2034383030.roa (hash: 7P2X6jYt817DAYqz9flBx8Kr9qEevb9h4/3qXC748Qg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 14:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:35:27:a1:80:09:bf:4b:ff:2e:ae:6c:bb:43:52:73:ca:60:8d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Validity Not Before: Jan 1 07:27:20 2026 GMT Not After : Jan 4 14:31:20 2026 GMT Subject: CN=0DA75455D2A7091C79D2770D34006C3A62C45E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:37:5e:17:9b:62:d3:ba:78:43:64:b6:86: 93:20:d1:27:96:5d:f0:f9:2b:20:d1:5c:d1:7a:88: d1:12:65:59:fa:f0:9e:a8:48:2d:a6:00:bc:d1:d8: 81:05:fd:72:05:62:ca:0f:d8:02:fc:d8:4d:f0:4b: 92:1f:c1:d8:95:7f:41:d3:0b:bd:0b:c3:bd:98:11: e2:70:0a:d1:6a:07:fd:15:a9:1b:62:16:35:14:33: 0a:56:27:51:65:95:9b:f6:38:51:2e:f8:7e:4d:c6: 43:45:81:a2:94:0e:97:59:d6:51:66:48:42:cd:ef: 5c:f0:bc:e0:05:3c:38:03:b7:fa:c3:c3:a9:e9:17: 59:b7:84:2b:07:29:32:73:76:5b:62:a6:e6:49:0b: 87:07:2c:97:e5:d5:5c:45:ac:48:16:a4:f8:82:9d: fd:0e:0c:06:b4:24:39:0c:ad:b3:a4:89:c0:b9:ca: fc:b3:23:2a:6d:3f:01:85:bc:f4:37:81:d1:51:fc: 9a:6f:ec:97:df:42:56:38:53:8f:8f:ca:7c:e2:75: 3a:87:90:1e:57:66:a6:97:06:0e:a4:0a:2b:e1:72: f5:ad:d9:a3:28:be:e8:04:fa:27:e7:bb:35:80:12: 24:19:6b:66:8d:a6:6a:f8:18:45:69:93:f9:7b:4e: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A7:54:55:D2:A7:09:1C:79:D2:77:0D:34:00:6C:3A:62:C4:5E:5A X509v3 Authority Key Identifier: keyid:0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5a:a8:90:6b:b0:0d:dd:fb:36:dc:bd:b3:ed:1e:72:64:a7: 6f:1b:3c:ca:19:46:6d:8e:4d:39:13:01:d7:2d:25:cb:14:a9: 7d:46:0e:ff:f6:79:44:3a:57:f6:9e:1f:af:7a:28:f6:72:00: 1e:28:cc:c9:49:22:e6:f7:a1:97:a4:70:4c:6b:5c:f9:45:96: 91:a2:2a:4b:fe:a0:e1:55:a5:9b:1f:72:6c:7d:e1:f1:3d:92: b9:10:6b:14:9c:78:75:69:62:69:12:4a:92:e2:71:86:f2:05: 6e:c6:98:51:2a:b2:ea:30:c9:f0:b5:1f:98:33:5e:02:fb:cd: f0:be:aa:ed:e4:41:3a:2e:d4:60:91:54:82:ba:b5:98:c7:49: 8e:2a:9e:c4:88:fc:b2:9d:6b:ed:64:5b:23:01:ff:ce:4f:b5: 91:f9:60:ad:8e:49:d5:ba:ba:20:b2:1e:00:d0:22:6f:41:63: 8a:38:cf:24:8d:c2:71:cd:35:3a:21:2b:66:89:15:4b:e3:a0: d8:85:7d:77:73:02:ca:2d:b6:27:db:74:a4:57:c6:75:f5:91: 22:95:b0:a0:8e:ac:f9:d7:bb:82:b3:1c:bc:70:8b:3d:8d:18: 8f:63:64:0f:b1:90:ec:06:aa:23:c0:e7:23:11:b2:36:47:e1: e2:3a:ee:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDUnoYAJv0v/Lq5su0NSc8pgjfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdF MEIwQURDQjAeFw0yNjAxMDEwNzI3MjBaFw0yNjAxMDQxNDMxMjBaMDMxMTAvBgNV BAMTKDBEQTc1NDU1RDJBNzA5MUM3OUQyNzcwRDM0MDA2QzNBNjJDNDVFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXjdeF5ti07p4Q2S2hpMg0SeW XfD5KyDRXNF6iNESZVn68J6oSC2mALzR2IEF/XIFYsoP2AL82E3wS5IfwdiVf0HT C70Lw72YEeJwCtFqB/0VqRtiFjUUMwpWJ1FllZv2OFEu+H5NxkNFgaKUDpdZ1lFm SELN71zwvOAFPDgDt/rDw6npF1m3hCsHKTJzdltipuZJC4cHLJfl1VxFrEgWpPiC nf0ODAa0JDkMrbOkicC5yvyzIyptPwGFvPQ3gdFR/Jpv7JffQlY4U4+PynzidTqH kB5XZqaXBg6kCivhcvWt2aMovugE+ifnuzWAEiQZa2aNpmr4GEVpk/l7Tkq3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDadUVdKnCRx50ncNNABsOmLEXlowHwYDVR0j BBgwFoAUDNRE4MCNkuMrBUv39Hg6J+CwrcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMC8wQ0Q0NDRFMEMw OEQ5MkUzMkIwNTRCRjdGNDc4M0EyN0UwQjBBRENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNBMjdFMEIw QURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY1MDZlNzItOGI4Ny00NzAxLWEz NjAtYWViZTI1ODQ4ZjcxLzAvMENENDQ0RTBDMDhEOTJFMzJCMDU0QkY3RjQ3ODNB MjdFMEIwQURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRaqJBrsA3d+zbcvbPtHnJkp28bPMoZRm2O TTkTAdctJcsUqX1GDv/2eUQ6V/aeH696KPZyAB4ozMlJIub3oZekcExrXPlFlpGi Kkv+oOFVpZsfcmx94fE9krkQaxSceHVpYmkSSpLicYbyBW7GmFEqsuowyfC1H5gz XgL7zfC+qu3kQTou1GCRVIK6tZjHSY4qnsSI/LKda+1kWyMB/85PtZH5YK2OSdW6 uiCyHgDQIm9BY4o4zySNwnHNNTohK2aJFUvjoNiFfXdzAsottifbdKRXxnX1kSKV sKCOrPnXu4KzHLxwiz2NGI9jZA+xkOwGqiPA5yMRsjZH4eI67r4= -----END CERTIFICATE-----Generated at Fri Jan 2 17:10:36 2026 by rpki-client