This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: WyZP+Hm12ilgwBSBFop+HOVc5ttvOL1nZ49o3p/ubF4= Subject key identifier: 56:7D:6F:1E:AB:68:70:B2:62:CD:14:EE:2D:12:B7:85:D9:FF:F7:4B Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 0AA4461DDE155072F804FA2B52829B882C6CFF49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 0216 Signing time: Sat 24 Jan 2026 06:30:48 +0000 Manifest this update: Sat 24 Jan 2026 06:25:48 +0000 Manifest next update: Tue 27 Jan 2026 08:28:48 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) 2: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: lgYdc3+V+2yKL9Odq3z3y3DsQlKk9AKB1i2TimWtAGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a4:46:1d:de:15:50:72:f8:04:fa:2b:52:82:9b:88:2c:6c:ff:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Jan 24 06:25:48 2026 GMT Not After : Jan 27 08:28:48 2026 GMT Subject: CN=567D6F1EAB6870B262CD14EE2D12B785D9FFF74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2d:f4:23:d6:ee:20:ea:53:2e:28:c9:8e:a7: af:17:c2:4f:c6:0d:c4:2c:03:48:63:43:37:8a:9e: bf:8e:80:be:40:6c:58:e7:2d:85:2d:59:8a:07:22: 31:38:21:f4:59:f1:39:16:ac:fe:b4:34:ba:12:fb: 56:11:aa:05:46:96:8e:4f:16:15:c5:50:58:57:c9: 7b:8e:e3:a0:04:f4:6c:6e:dd:95:af:e6:1c:d7:ee: fb:a4:36:42:a3:c2:0b:56:e4:11:9f:cc:6f:4f:a1: 90:7a:99:81:fd:51:c3:9a:bd:4c:19:07:18:07:9a: 3c:86:03:08:cb:ef:02:e4:04:d2:bf:92:8f:9b:51: 05:2d:9a:a7:3b:e2:36:29:3f:b6:94:40:90:ec:20: d7:7b:46:16:ab:00:93:96:cb:eb:af:ed:45:07:07: 2c:69:12:10:56:b5:4e:c8:7f:af:0b:65:ae:3b:9e: eb:bc:cc:e6:35:8c:18:68:66:5b:d6:77:b9:6d:20: 6f:d4:99:3e:6f:77:1b:50:be:02:a8:f0:cf:3c:25: 7e:00:c5:35:a2:73:44:bd:0b:9e:e1:83:77:91:5b: bc:77:e0:1f:fc:cb:44:83:87:b3:bf:2f:d9:03:9a: c5:e7:95:ae:51:3c:fd:f3:48:49:8b:3a:38:15:b6: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7D:6F:1E:AB:68:70:B2:62:CD:14:EE:2D:12:B7:85:D9:FF:F7:4B X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:0c:94:6f:1b:6b:c7:45:dc:af:3f:a6:09:3f:3d:ea:7b:b6: 63:b6:b4:ae:8e:38:87:cf:d6:bf:b2:84:05:a4:62:71:63:65: 1f:64:ce:02:e4:a9:26:62:f9:4e:6d:8f:3f:98:9e:db:44:5e: 79:0e:1b:49:e8:da:d5:b2:32:e7:d0:d2:26:5d:2d:cf:42:fd: a2:3b:2f:25:58:87:98:68:a5:60:7d:25:41:fc:be:07:ad:98: 04:81:65:11:da:2a:e6:ce:ac:6c:6a:70:b7:bd:46:53:26:44: f9:98:6e:02:47:cf:b9:3e:9b:b2:66:8e:03:b5:d3:c9:2a:e3: 47:1d:76:12:fd:65:bb:47:87:0d:c2:c1:c0:80:27:0c:d7:f3: da:0a:66:fc:a7:c7:f0:f0:86:35:df:3b:0b:c3:47:fb:6e:95: da:a8:34:34:5a:d9:73:4e:91:0a:d7:58:00:6a:67:19:20:99: 7f:cb:cb:1b:01:b2:99:b1:01:e5:33:fe:64:d4:34:71:3a:96: 83:ae:82:48:9d:b7:e6:a2:64:88:dc:5b:f8:0b:24:5a:7e:b5: 35:c5:4a:75:4b:90:43:32:75:71:26:06:16:72:a9:d0:24:9c: c7:df:99:8f:a3:9f:b5:a7:61:ef:e0:89:f1:7c:a1:dc:f5:f3: 6c:c7:af:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqRGHd4VUHL4BPorUoKbiCxs/0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNjAxMjQwNjI1NDhaFw0yNjAxMjcwODI4NDhaMDMxMTAvBgNV BAMTKDU2N0Q2RjFFQUI2ODcwQjI2MkNEMTRFRTJEMTJCNzg1RDlGRkY3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuLfQj1u4g6lMuKMmOp68Xwk/G DcQsA0hjQzeKnr+OgL5AbFjnLYUtWYoHIjE4IfRZ8TkWrP60NLoS+1YRqgVGlo5P FhXFUFhXyXuO46AE9Gxu3ZWv5hzX7vukNkKjwgtW5BGfzG9PoZB6mYH9UcOavUwZ BxgHmjyGAwjL7wLkBNK/ko+bUQUtmqc74jYpP7aUQJDsINd7RharAJOWy+uv7UUH ByxpEhBWtU7If68LZa47nuu8zOY1jBhoZlvWd7ltIG/UmT5vdxtQvgKo8M88JX4A xTWic0S9C57hg3eRW7x34B/8y0SDh7O/L9kDmsXnla5RPP3zSEmLOjgVtvfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVn1vHqtocLJizRTuLRK3hdn/90swHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcMlG8ba8dF3K8/pgk/Pep7tmO2tK6OOIfP 1r+yhAWkYnFjZR9kzgLkqSZi+U5tjz+YnttEXnkOG0no2tWyMufQ0iZdLc9C/aI7 LyVYh5hopWB9JUH8vgetmASBZRHaKubOrGxqcLe9RlMmRPmYbgJHz7k+m7JmjgO1 08kq40cddhL9ZbtHhw3CwcCAJwzX89oKZvynx/DwhjXfOwvDR/tuldqoNDRa2XNO kQrXWABqZxkgmX/LyxsBspmxAeUz/mTUNHE6loOugkidt+aiZIjcW/gLJFp+tTXF SnVLkEMydXEmBhZyqdAknMffmY+jn7WnYe/gifF8odz182zHr3s= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:36 2026 by rpki-client