This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft File: 5F22D2084F774B68D9DE9763397B5657A96F36CE.mft (raw, json) Hash identifier: 41C+zCypaeQLjREqXkR0VmWpQd2T1gbiMpOczVqRYJw= Subject key identifier: 08:ED:05:85:3E:F1:0F:BA:21:23:52:A2:88:6F:BD:B3:D2:EC:2D:AC Authority key identifier: 5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE Certificate issuer: /CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Certificate serial: 7196A92C0F29F47DADFB974D6048D93DD586E288 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft Manifest number: 36 Signing time: Fri 23 Jan 2026 21:21:06 +0000 Manifest this update: Fri 23 Jan 2026 21:16:06 +0000 Manifest next update: Tue 27 Jan 2026 00:39:06 +0000 Files and hashes: 1: 5F22D2084F774B68D9DE9763397B5657A96F36CE.crl (hash: 0j8pb0OhUx4+mc3HONi74q+DnzaWMfnKmxLXTr049mo=) 2: 3130332e3235332e3131322e302f32322d3234203d3e20313332363431.roa (hash: PjhwIz9l+vRy5TLqiXRBoCVwL6OIIOTNL//mqDM3w9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:39:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:96:a9:2c:0f:29:f4:7d:ad:fb:97:4d:60:48:d9:3d:d5:86:e2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F22D2084F774B68D9DE9763397B5657A96F36CE Validity Not Before: Jan 23 21:16:06 2026 GMT Not After : Jan 27 00:39:06 2026 GMT Subject: CN=08ED05853EF10FBA212352A2886FBDB3D2EC2DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:84:c6:f3:bf:4c:72:5d:d3:23:8b:2b:0c:16: dc:2d:81:31:88:6f:fd:a5:bb:f9:69:8b:ac:9c:63: e6:43:6e:ef:e7:9d:74:70:49:f4:87:c6:09:9b:4b: 83:8f:dd:d8:20:90:6a:bf:fe:0e:8c:32:4f:87:f2: cf:26:67:3e:03:80:67:99:ff:0a:a3:17:af:53:6a: 9c:51:f2:38:90:b6:d9:87:3d:2c:79:43:83:43:1e: d9:79:25:da:9d:4b:01:72:9c:95:1f:0a:65:7c:42: da:22:65:33:71:97:c8:cf:12:8f:35:81:25:3c:50: 66:a1:89:39:88:77:c7:7c:07:47:c5:a6:bf:b1:fb: dd:c5:f4:06:95:c2:69:96:f0:4f:3f:ef:67:93:ff: 39:3a:ab:02:72:b1:92:49:97:7e:44:21:1f:b1:7c: f0:ac:78:16:64:05:d3:6b:68:f0:b7:cc:d1:89:c8: 45:54:ea:7e:8f:76:a5:56:21:7f:aa:98:f3:ea:8a: 2f:93:0b:5f:05:a7:93:e0:98:c0:da:0f:fd:8a:61: 82:d4:16:c8:d0:2d:9a:42:41:ad:de:67:1b:b9:53: c2:dd:25:67:5f:96:06:c6:f2:84:ab:d2:43:e5:11: 81:e6:44:84:38:60:37:08:1f:e1:74:79:b7:56:d1: 8d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:05:85:3E:F1:0F:BA:21:23:52:A2:88:6F:BD:B3:D2:EC:2D:AC X509v3 Authority Key Identifier: keyid:5F:22:D2:08:4F:77:4B:68:D9:DE:97:63:39:7B:56:57:A9:6F:36:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F22D2084F774B68D9DE9763397B5657A96F36CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ab1a790-dced-464a-895d-9035a0cc5f2f/0/5F22D2084F774B68D9DE9763397B5657A96F36CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fa:96:3b:60:d1:4b:34:af:91:13:7e:76:bf:94:3e:17:b7: 68:0f:fc:71:19:ba:e4:54:04:a4:19:7b:b6:ac:77:2e:c9:8a: 26:58:28:66:55:4d:cf:ff:e0:06:58:3b:a0:ca:69:99:39:1e: e0:58:7c:6b:46:0f:b7:8e:de:1f:db:f8:58:11:2c:4a:5c:69: 75:7d:12:88:7d:e4:98:ba:67:7f:bc:3d:3d:af:ed:2a:c2:56: 80:1c:74:ab:05:ec:0a:8b:43:4a:87:8f:72:87:2f:db:98:d3: 72:11:27:b9:8d:e6:6d:30:e7:33:f6:71:cb:8a:63:cf:7d:1e: ec:f3:48:9d:4e:07:18:fa:c2:8c:9c:bb:0b:85:ee:a8:4d:c6: f4:ed:a8:7e:9d:51:de:b5:fd:23:6e:f2:a0:14:c6:15:0e:53: 38:34:d7:fe:06:bc:c2:b0:8c:e1:e0:56:4b:85:30:5d:17:25: 50:54:bb:66:8f:75:92:f8:b3:dc:e3:dc:a6:c0:67:04:fd:3a: 31:fc:87:fc:99:ed:05:74:b7:89:72:48:b7:41:ef:6a:03:53: aa:cd:9f:66:4b:09:6d:92:cf:06:5f:1b:1e:2c:f9:eb:3f:ea: 52:8b:3b:14:f3:d5:25:59:9b:7c:f1:5c:0b:a3:d9:eb:26:9e: 12:b0:8e:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZapLA8p9H2t+5dNYEjZPdWG4ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdB OTZGMzZDRTAeFw0yNjAxMjMyMTE2MDZaFw0yNjAxMjcwMDM5MDZaMDMxMTAvBgNV BAMTKDA4RUQwNTg1M0VGMTBGQkEyMTIzNTJBMjg4NkZCREIzRDJFQzJEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhMbzv0xyXdMjiysMFtwtgTGI b/2lu/lpi6ycY+ZDbu/nnXRwSfSHxgmbS4OP3dggkGq//g6MMk+H8s8mZz4DgGeZ /wqjF69TapxR8jiQttmHPSx5Q4NDHtl5JdqdSwFynJUfCmV8QtoiZTNxl8jPEo81 gSU8UGahiTmId8d8B0fFpr+x+93F9AaVwmmW8E8/72eT/zk6qwJysZJJl35EIR+x fPCseBZkBdNraPC3zNGJyEVU6n6PdqVWIX+qmPPqii+TC18Fp5PgmMDaD/2KYYLU FsjQLZpCQa3eZxu5U8LdJWdflgbG8oSr0kPlEYHmRIQ4YDcIH+F0ebdW0Y1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCO0FhT7xD7ohI1KiiG+9s9LsLawwHwYDVR0j BBgwFoAUXyLSCE93S2jZ3pdjOXtWV6lvNs4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWIxYTc5MC1kY2VkLTQ2NGEtODk1ZC05MDM1YTBjYzVmMmYvMC81RjIyRDIwODRG Nzc0QjY4RDlERTk3NjMzOTdCNTY1N0E5NkYzNkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2NTdBOTZG MzZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FiMWE3OTAtZGNlZC00NjRhLTg5 NWQtOTAzNWEwY2M1ZjJmLzAvNUYyMkQyMDg0Rjc3NEI2OEQ5REU5NzYzMzk3QjU2 NTdBOTZGMzZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD6ljtg0Us0r5ETfna/lD4Xt2gP/HEZuuRU BKQZe7asdy7JiiZYKGZVTc//4AZYO6DKaZk5HuBYfGtGD7eO3h/b+FgRLEpcaXV9 Eoh95Ji6Z3+8PT2v7SrCVoAcdKsF7AqLQ0qHj3KHL9uY03IRJ7mN5m0w5zP2ccuK Y899HuzzSJ1OBxj6woycuwuF7qhNxvTtqH6dUd61/SNu8qAUxhUOUzg01/4GvMKw jOHgVkuFMF0XJVBUu2aPdZL4s9zj3KbAZwT9OjH8h/yZ7QV0t4lySLdB72oDU6rN n2ZLCW2SzwZfGx4s+es/6lKLOxTz1SVZm3zxXAuj2esmnhKwjgM= -----END CERTIFICATE-----Generated at Sun Jan 25 19:03:41 2026 by rpki-client