This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.mft (raw, json) Hash identifier: gGWehySiug+hItbZcpQnAUAynWRiDaXTIRErWrJ1UeU= Subject key identifier: 32:DF:41:9A:78:CA:37:A2:01:CD:56:A3:AA:D8:95:5C:9B:FB:08:52 Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Certificate issuer: /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Certificate serial: 5A2B288A104E6F0D786253DBC304660FE6A6C1BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft Manifest number: 03D7 Signing time: Sat 24 Jan 2026 21:52:33 +0000 Manifest this update: Sat 24 Jan 2026 21:47:33 +0000 Manifest next update: Wed 28 Jan 2026 03:55:33 +0000 Files and hashes: 1: 3130332e3135302e36312e302f32342d3234203d3e20313430333839.roa (hash: PlY/JnUtAv2FxS5Soe3wZCn6MzuK/JWnFyPZQrX/fuQ=) 2: 3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (hash: 4ZQwGn11qHNiVrKpaqE6sqxjVoPVYCbt4H6xntr7VWc=) 3: 323030313a6466333a356238303a3a2f34382d3438203d3e20313430333839.roa (hash: 2Fp4Lwy8mON7FVeMJE/4PvZDu17XhYrM2gPfMF99PL4=) 4: 5C413D56294D9D20E64978B7296A9DA893C32CAB.crl (hash: O047Hgq9ejwFjZlt+HPCPkzxcu7Jkkq6D520HtJsaJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:2b:28:8a:10:4e:6f:0d:78:62:53:db:c3:04:66:0f:e6:a6:c1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Validity Not Before: Jan 24 21:47:33 2026 GMT Not After : Jan 28 03:55:33 2026 GMT Subject: CN=32DF419A78CA37A201CD56A3AAD8955C9BFB0852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:92:8a:d0:f2:3f:67:d0:28:e2:dd:47:72:9f: a5:65:66:8a:54:df:91:fa:9b:33:01:37:db:84:f5: 72:e1:15:a7:63:94:8e:a9:c7:6a:96:5d:53:d6:e0: e7:65:99:13:68:8c:43:40:cc:5d:f4:89:8e:53:c7: dc:04:45:47:9a:86:0c:b6:17:c3:18:09:b0:f1:e0: e0:42:1e:bd:39:ba:a3:93:ab:ad:63:4c:61:c2:04: 25:2e:1e:22:38:e6:15:32:7c:1c:5e:e1:9e:88:69: 36:d4:a9:cc:97:0b:f9:89:65:6f:39:05:25:d2:f7: db:cb:08:83:d8:88:2a:ef:eb:a9:e9:34:62:97:19: f8:47:55:ef:0c:89:2d:1f:d9:c0:a3:07:1e:fc:9b: b4:da:2a:06:8f:bb:22:92:81:6e:17:0c:35:aa:db: 34:09:8b:e3:45:e3:5c:c7:7a:06:49:37:a4:f7:3a: 0a:9b:eb:37:d9:00:0d:5e:9c:f7:b5:4c:9a:01:8c: ab:4e:b0:3a:ea:f6:5b:66:ff:77:dd:13:26:d6:b4: 1a:9a:0a:46:f5:76:89:c2:60:7a:16:1e:50:9f:90: 32:68:f5:a7:44:e4:42:34:15:38:a5:3b:e9:9f:00: 8d:18:1d:1d:f9:c8:cb:5c:1d:0a:b6:ec:73:f3:19: 09:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:41:9A:78:CA:37:A2:01:CD:56:A3:AA:D8:95:5C:9B:FB:08:52 X509v3 Authority Key Identifier: keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cf:13:cd:57:11:da:cc:3d:14:a8:1a:55:38:26:47:3a:5c: e2:f6:45:54:b6:1f:92:b6:9f:f0:7c:47:63:bb:da:bf:70:0d: 62:8c:89:bc:c8:55:87:39:83:b5:4d:91:92:5d:c1:db:aa:a5: 79:91:23:1b:bd:82:65:7d:e6:94:4b:99:f1:51:c4:2d:6e:a5: 9f:1a:62:9c:92:ab:da:d4:65:59:f5:83:d8:c3:b5:2a:ed:73: 6e:a5:a2:62:03:5a:d4:2e:46:dd:a1:ba:91:30:c9:24:05:ed: c6:bf:5f:27:c3:c8:b4:2b:3f:bb:e8:ee:87:47:c0:a4:07:c2: f5:e6:10:21:bb:93:89:e7:5e:86:89:24:25:e3:bf:5c:e2:15: 16:cb:73:56:b9:60:b9:4b:1f:24:fd:a9:c7:b2:9b:88:e4:4b: b7:0c:c8:fd:81:17:6e:1c:43:dc:a3:1e:c9:92:c0:97:d3:ed: 46:d1:16:2a:53:c2:44:b2:dd:be:e2:99:b9:79:1d:83:d2:21: 06:85:08:91:50:2c:b5:ee:e5:e0:36:54:de:49:d8:f3:f6:38: 06:61:f2:1c:37:21:20:b6:50:c0:f4:1f:c1:26:60:6e:f2:cd: 22:ae:d0:b2:aa:a5:dc:97:4f:51:11:1b:16:c2:b9:92:30:65: 8c:f9:53:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWisoihBObw14YlPbwwRmD+amwb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5 M0MzMkNBQjAeFw0yNjAxMjQyMTQ3MzNaFw0yNjAxMjgwMzU1MzNaMDMxMTAvBgNV BAMTKDMyREY0MTlBNzhDQTM3QTIwMUNENTZBM0FBRDg5NTVDOUJGQjA4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckorQ8j9n0Cji3Udyn6VlZopU 35H6mzMBN9uE9XLhFadjlI6px2qWXVPW4OdlmRNojENAzF30iY5Tx9wERUeahgy2 F8MYCbDx4OBCHr05uqOTq61jTGHCBCUuHiI45hUyfBxe4Z6IaTbUqcyXC/mJZW85 BSXS99vLCIPYiCrv66npNGKXGfhHVe8MiS0f2cCjBx78m7TaKgaPuyKSgW4XDDWq 2zQJi+NF41zHegZJN6T3Ogqb6zfZAA1enPe1TJoBjKtOsDrq9ltm/3fdEybWtBqa Ckb1donCYHoWHlCfkDJo9adE5EI0FTilO+mfAI0YHR35yMtcHQq27HPzGQk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMt9BmnjKN6IBzVajqtiVXJv7CFIwHwYDVR0j BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5 NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2IzZWFiYjQtNGRiMy00MzczLWEz NDgtZmIxZWQ3MDU1NjUxLzAvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlE QTg5M0MzMkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvPE81XEdrMPRSoGlU4Jkc6XOL2RVS2H5K2 n/B8R2O72r9wDWKMibzIVYc5g7VNkZJdwduqpXmRIxu9gmV95pRLmfFRxC1upZ8a YpySq9rUZVn1g9jDtSrtc26lomIDWtQuRt2hupEwySQF7ca/XyfDyLQrP7vo7odH wKQHwvXmECG7k4nnXoaJJCXjv1ziFRbLc1a5YLlLHyT9qceym4jkS7cMyP2BF24c Q9yjHsmSwJfT7UbRFipTwkSy3b7imbl5HYPSIQaFCJFQLLXu5eA2VN5J2PP2OAZh 8hw3ISC2UMD0H8EmYG7yzSKu0LKqpdyXT1ERGxbCuZIwZYz5U2M= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:08 2026 by rpki-client