This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft File: 56D494F5201C70B3C8FD0630664898D57A51A86F.mft (raw, json) Hash identifier: uEOBOeY/8OekiLgFnp49rfm+XDpLQPz229CLE71CxAQ= Subject key identifier: C5:A9:E0:E2:5F:37:03:A3:DB:48:BB:6A:95:33:A7:FE:49:22:71:E8 Authority key identifier: 56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F Certificate issuer: /CN=56D494F5201C70B3C8FD0630664898D57A51A86F Certificate serial: 1158AF7718587A3834F70924B6B8FA00C976B1B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft Manifest number: 72 Signing time: Sat 24 Jan 2026 10:51:06 +0000 Manifest this update: Sat 24 Jan 2026 10:46:06 +0000 Manifest next update: Tue 27 Jan 2026 16:47:06 +0000 Files and hashes: 1: 3130332e3233362e3133302e302f32332d3233203d3e20313531353435.roa (hash: NT8HD6L58UENSZIrvJ7kAsnU0xI/LlrvnmHZkgvxcbo=) 2: 3130332e3233362e3133302e302f32342d3234203d3e20313531353435.roa (hash: GVdqWRcuOnkA2VgxGew3ZoC+Kiaj3ZJ2ZKo75rljh74=) 3: 56D494F5201C70B3C8FD0630664898D57A51A86F.crl (hash: TnnPSws10Cqozgs4mFZof6z4CD+TvwHtXPqFjwAKc1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:58:af:77:18:58:7a:38:34:f7:09:24:b6:b8:fa:00:c9:76:b1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D494F5201C70B3C8FD0630664898D57A51A86F Validity Not Before: Jan 24 10:46:06 2026 GMT Not After : Jan 27 16:47:06 2026 GMT Subject: CN=C5A9E0E25F3703A3DB48BB6A9533A7FE492271E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:37:e9:2b:fd:07:40:17:bc:66:fe:5e:26: d1:58:46:4f:42:de:ff:6b:ae:e6:3d:2c:d4:fb:50: 3a:50:00:14:ea:c0:17:e8:12:a6:da:bd:3e:d5:7f: c6:ee:45:36:ce:46:fb:ee:9c:6d:24:67:65:ec:58: 63:40:90:a4:4f:c7:09:8b:88:47:54:b0:4f:76:00: f5:e6:f4:17:89:ca:5b:d5:6a:60:fc:1c:91:bc:d8: 70:b1:b4:6b:54:1c:27:5c:cb:0f:0f:a1:c3:b7:0d: eb:7b:27:95:87:a5:f0:77:df:06:7b:16:5f:c3:9a: 4e:4e:ff:1e:c3:15:6a:cf:4e:34:57:e8:96:f7:8f: 6b:a6:e0:d0:46:cb:d6:9b:c7:2b:b5:14:6f:e0:7b: e1:08:26:19:80:11:a4:cb:76:c6:f9:08:b3:4a:29: f1:43:51:32:11:14:14:60:08:12:44:56:fd:1c:3a: 54:5e:8e:52:b3:31:65:f1:a5:6c:75:8a:65:22:4c: 14:03:3d:3f:9a:84:c6:4e:9b:a7:0c:d5:b4:f2:34: d4:6f:c2:ce:c5:bb:14:f7:2d:35:29:5c:45:44:0b: 7f:56:95:12:8c:f9:3f:14:2c:d0:8d:1e:b5:6e:d3: 55:b5:e2:84:ef:84:71:75:79:fb:26:5d:06:c3:97: b7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:E0:E2:5F:37:03:A3:DB:48:BB:6A:95:33:A7:FE:49:22:71:E8 X509v3 Authority Key Identifier: keyid:56:D4:94:F5:20:1C:70:B3:C8:FD:06:30:66:48:98:D5:7A:51:A8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/56D494F5201C70B3C8FD0630664898D57A51A86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d5af22c-7e3e-40b5-ac50-637772a95c21/0/56D494F5201C70B3C8FD0630664898D57A51A86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ea:77:5f:28:74:5b:4b:77:6d:3a:9e:ba:3a:42:46:be:33: 72:35:f9:ad:f8:55:bc:78:ac:1b:8b:4b:83:88:e4:d9:18:ef: 06:ef:a1:00:54:e0:43:66:9e:5e:da:5d:eb:72:83:a8:06:3d: 57:e7:e9:5d:de:a3:0a:dd:90:ca:11:19:e7:a6:81:1f:f1:f5: 12:a2:9f:c6:a3:78:5e:b9:7c:3e:be:27:9a:04:e9:b2:94:9c: b5:bc:c7:7c:88:d9:c2:d8:33:a4:a4:12:28:a8:ea:20:d6:27: 5f:36:2f:8f:29:d7:aa:2c:d5:02:15:b7:82:0f:90:06:27:0a: 8e:f2:29:1c:56:9f:ac:f1:8d:33:dd:f3:26:b1:87:c3:fb:1c: e9:04:3b:a4:a5:2c:05:6e:da:da:a0:da:22:a1:5b:a6:f0:a8: 07:36:38:6a:58:b5:35:bd:0c:51:d6:3a:5a:89:54:fc:fe:0c: 75:e7:31:15:4e:fc:35:6a:1b:4f:a2:42:4c:a3:97:0c:63:03: b2:7e:85:ba:0d:f2:11:f2:da:04:4a:83:bd:13:99:e2:64:47: 55:57:32:0d:03:62:86:89:06:f3:b1:8d:b0:02:eb:03:f5:e1: 90:61:1e:89:15:2a:11:2f:d0:9e:55:05:16:c0:78:ec:b6:32: 59:02:01:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVivdxhYejg09wkktrj6AMl2sbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3 QTUxQTg2RjAeFw0yNjAxMjQxMDQ2MDZaFw0yNjAxMjcxNjQ3MDZaMDMxMTAvBgNV BAMTKEM1QTlFMEUyNUYzNzAzQTNEQjQ4QkI2QTk1MzNBN0ZFNDkyMjcxRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jzfpK/0HQBe8Zv5eJtFYRk9C 3v9rruY9LNT7UDpQABTqwBfoEqbavT7Vf8buRTbORvvunG0kZ2XsWGNAkKRPxwmL iEdUsE92APXm9BeJylvVamD8HJG82HCxtGtUHCdcyw8PocO3Det7J5WHpfB33wZ7 Fl/Dmk5O/x7DFWrPTjRX6Jb3j2um4NBGy9abxyu1FG/ge+EIJhmAEaTLdsb5CLNK KfFDUTIRFBRgCBJEVv0cOlRejlKzMWXxpWx1imUiTBQDPT+ahMZOm6cM1bTyNNRv ws7FuxT3LTUpXEVEC39WlRKM+T8ULNCNHrVu01W14oTvhHF1efsmXQbDl7flAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxang4l83A6PbSLtqlTOn/kkicegwHwYDVR0j BBgwFoAUVtSU9SAccLPI/QYwZkiY1XpRqG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDVhZjIyYy03ZTNlLTQwYjUtYWM1MC02Mzc3NzJhOTVjMjEvMC81NkQ0OTRGNTIw MUM3MEIzQzhGRDA2MzA2NjQ4OThENTdBNTFBODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4RDU3QTUx QTg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ1YWYyMmMtN2UzZS00MGI1LWFj NTAtNjM3NzcyYTk1YzIxLzAvNTZENDk0RjUyMDFDNzBCM0M4RkQwNjMwNjY0ODk4 RDU3QTUxQTg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDqd18odFtLd206nro6Qka+M3I1+a34Vbx4 rBuLS4OI5NkY7wbvoQBU4ENmnl7aXetyg6gGPVfn6V3eowrdkMoRGeemgR/x9RKi n8ajeF65fD6+J5oE6bKUnLW8x3yI2cLYM6SkEiio6iDWJ182L48p16os1QIVt4IP kAYnCo7yKRxWn6zxjTPd8yaxh8P7HOkEO6SlLAVu2tqg2iKhW6bwqAc2OGpYtTW9 DFHWOlqJVPz+DHXnMRVO/DVqG0+iQkyjlwxjA7J+hboN8hHy2gRKg70TmeJkR1VX Mg0DYoaJBvOxjbAC6wP14ZBhHokVKhEv0J5VBRbAeOy2MlkCAcE= -----END CERTIFICATE-----Generated at Sun Jan 25 20:21:22 2026 by rpki-client