This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: 8s7CMsxcseBFYI2lpWz1yszJWSoG5bZ5ZIwss5HD+1E= Subject key identifier: A0:0D:D2:7C:3C:9D:47:48:32:10:F2:2F:75:C2:67:67:55:38:81:DF Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 439B73178A0ECF8591EAD579F4F820D79CA9E3F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 0121 Signing time: Sat 24 Jan 2026 07:11:43 +0000 Manifest this update: Sat 24 Jan 2026 07:06:43 +0000 Manifest next update: Tue 27 Jan 2026 18:57:43 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: RS3eAbZhJ1IYhovprBnSXTP+LqmCBcsM0mgFmbziH+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:9b:73:17:8a:0e:cf:85:91:ea:d5:79:f4:f8:20:d7:9c:a9:e3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Jan 24 07:06:43 2026 GMT Not After : Jan 27 18:57:43 2026 GMT Subject: CN=A00DD27C3C9D47483210F22F75C26767553881DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6a:c1:93:f5:91:bc:36:e6:88:b8:b7:a9:15: 17:18:8a:6e:15:3c:d1:04:d8:3d:2d:82:b2:4f:04: e9:8c:53:2d:3e:d4:f6:06:90:02:b7:57:b6:1a:67: 78:19:a9:42:85:b9:1d:28:c3:8a:63:c9:85:5d:7f: 5d:5e:44:d9:69:11:54:18:11:2d:8a:78:b6:35:02: 68:9e:d5:dd:87:2a:13:bb:0b:f1:da:6a:c6:e6:61: 31:f8:a3:39:2e:05:3c:14:6f:02:33:46:75:26:a8: 55:7b:e2:43:f4:86:59:c6:dd:2a:d0:f8:6a:41:db: a2:db:87:23:53:f5:d4:d2:c4:29:11:09:6e:6c:8e: d2:9b:49:85:b9:c0:7b:65:0d:7a:a2:9b:47:91:cd: 0e:2a:e4:60:ae:40:81:9b:b7:4c:93:8c:71:cb:49: 5c:16:14:d5:27:55:26:8f:d3:c3:8d:aa:32:7d:97: f2:99:bf:b3:d5:de:82:30:af:7a:b9:63:e9:03:80: bb:08:b3:6e:ea:ea:7b:42:a3:21:6e:e4:30:c2:b3: b5:fa:f1:25:bd:1e:89:dd:b1:31:bf:f0:5e:de:ee: 5d:f1:e3:80:bf:14:e3:4c:f0:d4:69:6b:b7:99:4d: 86:91:0e:7b:be:68:fb:ed:fd:81:be:b0:4e:f5:84: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0D:D2:7C:3C:9D:47:48:32:10:F2:2F:75:C2:67:67:55:38:81:DF X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d6:ae:4b:28:08:48:43:ee:44:b0:be:b0:d0:9e:69:98:11: 4f:d3:3a:ce:f6:26:d3:fd:cd:32:a6:07:e7:9a:d4:16:ac:b1: 7f:6f:af:9b:57:1f:47:77:3a:5f:7b:3a:e1:44:ab:44:01:c7: c3:ed:e2:d1:19:31:1d:7f:3c:30:80:1e:39:41:5e:17:bd:ff: 57:d4:58:8b:55:04:5d:2e:23:b1:b8:8a:2d:81:1f:b6:e5:fa: ef:33:a1:3a:cc:31:21:a2:34:80:ba:14:d5:7e:1d:9d:81:1a: d1:96:59:ca:e1:85:63:11:30:a7:58:42:09:0f:d8:a5:cc:b1: 26:d2:cf:8c:e6:e9:d6:b3:ae:41:f9:3e:16:00:9d:92:02:aa: bd:40:c5:e3:5a:3e:72:25:60:1e:37:e0:d7:8f:f8:27:3b:84: 8e:be:68:0d:ae:66:c2:fe:23:82:8a:fc:62:24:c9:4b:71:63: 4c:ce:98:5f:d1:da:c2:06:1f:50:df:29:01:e5:2d:fa:64:d9: a0:4f:0e:04:b6:d1:40:6a:9a:1c:26:4c:7a:df:25:2b:0b:56: a6:7b:2c:c4:7a:d8:f2:c0:9e:6e:3c:d3:5a:e0:1a:ee:70:60: fa:f3:9e:28:17:45:98:43:37:1d:0c:7e:d7:b5:69:21:e1:5d: 57:9c:8f:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5tzF4oOz4WR6tV59Pgg15yp4/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNjAxMjQwNzA2NDNaFw0yNjAxMjcxODU3NDNaMDMxMTAvBgNV BAMTKEEwMEREMjdDM0M5RDQ3NDgzMjEwRjIyRjc1QzI2NzY3NTUzODgxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYasGT9ZG8NuaIuLepFRcYim4V PNEE2D0tgrJPBOmMUy0+1PYGkAK3V7YaZ3gZqUKFuR0ow4pjyYVdf11eRNlpEVQY ES2KeLY1Amie1d2HKhO7C/HaasbmYTH4ozkuBTwUbwIzRnUmqFV74kP0hlnG3SrQ +GpB26LbhyNT9dTSxCkRCW5sjtKbSYW5wHtlDXqim0eRzQ4q5GCuQIGbt0yTjHHL SVwWFNUnVSaP08ONqjJ9l/KZv7PV3oIwr3q5Y+kDgLsIs27q6ntCoyFu5DDCs7X6 8SW9HondsTG/8F7e7l3x44C/FONM8NRpa7eZTYaRDnu+aPvt/YG+sE71hOC7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoA3SfDydR0gyEPIvdcJnZ1U4gd8wHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInWrksoCEhD7kSwvrDQnmmYEU/TOs72JtP9 zTKmB+ea1BassX9vr5tXH0d3Ol97OuFEq0QBx8Pt4tEZMR1/PDCAHjlBXhe9/1fU WItVBF0uI7G4ii2BH7bl+u8zoTrMMSGiNIC6FNV+HZ2BGtGWWcrhhWMRMKdYQgkP 2KXMsSbSz4zm6dazrkH5PhYAnZICqr1AxeNaPnIlYB434NeP+Cc7hI6+aA2uZsL+ I4KK/GIkyUtxY0zOmF/R2sIGH1DfKQHlLfpk2aBPDgS20UBqmhwmTHrfJSsLVqZ7 LMR62PLAnm4801rgGu5wYPrznigXRZhDNx0Mfte1aSHhXVecj0U= -----END CERTIFICATE-----Generated at Sun Jan 25 20:24:58 2026 by rpki-client