This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: EcCDgDXm0JWfGUQq+7R68DdEK3E1NvSFSTu8V0npGIE= Subject key identifier: D5:A5:4C:C7:DA:04:FA:E3:FD:1D:CB:DB:DD:40:93:2E:AB:58:82:2B Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 43D0941BEB9C1BC3171E4B53F06CF8AC79DB2E1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 01B0 Signing time: Sun 25 Jan 2026 15:42:09 +0000 Manifest this update: Sun 25 Jan 2026 15:37:09 +0000 Manifest next update: Wed 28 Jan 2026 21:39:09 +0000 Files and hashes: 1: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) 2: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) 3: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 4: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: /zBGfV38aHstCieQ7UTAMc8TlFZ03utEvMHdqB+z0UE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d0:94:1b:eb:9c:1b:c3:17:1e:4b:53:f0:6c:f8:ac:79:db:2e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: Jan 25 15:37:09 2026 GMT Not After : Jan 28 21:39:09 2026 GMT Subject: CN=D5A54CC7DA04FAE3FD1DCBDBDD40932EAB58822B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:3d:56:cd:5b:9e:27:2e:bc:d4:44:8a:27: b8:91:aa:6a:d6:2b:08:70:0d:9a:51:5f:b0:2e:fa: eb:9f:9e:8d:63:8e:ed:10:66:7b:ec:5b:76:a1:b5: 10:74:e3:88:2f:d7:e2:9b:04:ce:4a:16:6c:66:ff: 8e:64:72:e8:94:73:fc:c2:70:6e:68:6f:52:68:3e: 5f:05:ac:95:b0:a8:40:41:f7:0a:37:6d:b0:f4:03: ee:bd:5c:62:5c:2c:54:58:10:54:fa:16:97:b5:45: 0f:50:17:63:84:91:f9:8b:c5:6c:a3:87:5d:24:d7: 0a:05:f1:a2:8e:39:34:3c:ee:45:68:de:b4:7c:f9: 68:96:d3:cb:d8:69:c6:9e:e9:34:77:6d:cf:30:5e: ba:ee:22:a4:bc:14:33:58:8d:b7:d2:95:df:79:9d: d0:4e:9b:df:01:07:a9:1e:e9:be:12:cc:69:4b:fb: 1f:16:a6:8f:09:1f:ff:da:61:28:65:8b:22:2b:23: a8:75:3d:aa:10:ed:ad:c8:84:e5:86:f0:95:e6:43: 4d:63:64:20:65:6e:b0:4f:e9:ea:6f:7a:76:88:3b: 42:54:d0:c0:23:b4:26:55:fd:f5:14:13:11:bb:4d: 80:dd:74:2e:f3:12:2c:8f:49:37:d0:dd:b3:f9:41: 84:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A5:4C:C7:DA:04:FA:E3:FD:1D:CB:DB:DD:40:93:2E:AB:58:82:2B X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:15:f4:5e:55:b0:fa:38:4a:2b:ae:74:14:2e:a9:dc:90:40: 96:d9:ae:09:f5:f4:22:e4:1c:1e:d5:88:4a:7d:81:cd:de:6c: d5:c6:a5:05:a5:fe:8f:55:bc:a4:9d:cf:0a:81:db:2f:53:fa: 18:cf:07:d9:05:ef:af:72:73:4f:34:43:16:d5:79:a9:91:41: bc:38:19:23:fc:f9:90:08:c9:82:77:7c:7a:f1:09:39:87:ce: 1d:2b:3b:02:5f:94:ad:c4:b5:3f:e5:a1:c9:21:1d:44:d7:be: 7f:d8:ec:9c:71:8b:5f:fc:38:08:58:25:a4:c1:80:45:25:c3: bd:f9:39:6e:ec:b6:fe:45:f7:fd:3e:02:ae:6f:dd:65:bc:56: d3:f0:51:1b:55:33:64:7d:0c:8b:c5:fd:29:80:08:13:20:b2: 12:6c:f0:09:5b:67:34:98:49:bf:06:41:21:f7:0f:c6:1c:03: 88:35:aa:38:c7:79:a2:2d:4b:7f:32:6e:54:93:9f:26:c9:c2: d4:1e:40:0c:d8:04:98:dc:d8:6c:b4:7e:e3:ed:94:5e:ec:8f: a0:e5:6a:96:36:c6:9e:03:20:48:ea:25:f7:38:cc:71:36:b8: 73:71:a6:e9:3d:6e:80:52:b8:7f:a8:1b:a5:78:2b:39:5b:0b: 75:72:89:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ9CUG+ucG8MXHktT8Gz4rHnbLhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNjAxMjUxNTM3MDlaFw0yNjAxMjgyMTM5MDlaMDMxMTAvBgNV BAMTKEQ1QTU0Q0M3REEwNEZBRTNGRDFEQ0JEQkRENDA5MzJFQUI1ODgyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Oz1WzVueJy681ESKJ7iRqmrW KwhwDZpRX7Au+uufno1jju0QZnvsW3ahtRB044gv1+KbBM5KFmxm/45kcuiUc/zC cG5ob1JoPl8FrJWwqEBB9wo3bbD0A+69XGJcLFRYEFT6Fpe1RQ9QF2OEkfmLxWyj h10k1woF8aKOOTQ87kVo3rR8+WiW08vYacae6TR3bc8wXrruIqS8FDNYjbfSld95 ndBOm98BB6ke6b4SzGlL+x8Wpo8JH//aYShliyIrI6h1PaoQ7a3IhOWG8JXmQ01j ZCBlbrBP6epvenaIO0JU0MAjtCZV/fUUExG7TYDddC7zEiyPSTfQ3bP5QYRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1aVMx9oE+uP9Hcvb3UCTLqtYgiswHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcV9F5VsPo4SiuudBQuqdyQQJbZrgn19CLk HB7ViEp9gc3ebNXGpQWl/o9VvKSdzwqB2y9T+hjPB9kF769yc080QxbVeamRQbw4 GSP8+ZAIyYJ3fHrxCTmHzh0rOwJflK3EtT/lockhHUTXvn/Y7Jxxi1/8OAhYJaTB gEUlw735OW7stv5F9/0+Aq5v3WW8VtPwURtVM2R9DIvF/SmACBMgshJs8AlbZzSY Sb8GQSH3D8YcA4g1qjjHeaItS38yblSTnybJwtQeQAzYBJjc2Gy0fuPtlF7sj6Dl apY2xp4DIEjqJfc4zHE2uHNxpuk9boBSuH+oG6V4KzlbC3Vyifk= -----END CERTIFICATE-----Generated at Mon Jan 26 02:30:54 2026 by rpki-client