This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: mqHfUe5cyLJ+Qzrrv3D4/c9QKTRAQCiDMbvvtuFdk4A= Subject key identifier: 84:F2:4A:C3:47:11:53:DB:64:3F:2A:ED:4B:97:5A:97:C2:0B:35:5F Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 02EC449935DC5A2D91EB60D75054B49714975BCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 0259 Signing time: Sun 25 Jan 2026 00:11:38 +0000 Manifest this update: Sun 25 Jan 2026 00:06:38 +0000 Manifest next update: Wed 28 Jan 2026 01:05:38 +0000 Files and hashes: 1: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) 2: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: sDFlYVJFf1LUFDboygEYCpj9Ck42LpW/fWYTcG+5vDo=) 3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ec:44:99:35:dc:5a:2d:91:eb:60:d7:50:54:b4:97:14:97:5b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Jan 25 00:06:38 2026 GMT Not After : Jan 28 01:05:38 2026 GMT Subject: CN=84F24AC3471153DB643F2AED4B975A97C20B355F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:27:0a:a6:4a:15:91:dd:e7:a5:6a:c2:c4:1a: 58:a5:09:4c:ba:86:8f:be:42:cc:49:04:f2:f1:a9: 09:bc:eb:a8:f9:f9:64:d2:cc:81:ea:0a:10:b5:53: 76:5e:73:d7:97:c5:4d:aa:ef:13:83:67:57:01:09: fc:f7:90:61:2a:3b:28:05:e6:63:e3:7a:b0:d1:ad: f9:f6:ed:bf:e9:f9:e3:bd:97:73:f9:79:db:7f:9b: ff:d2:e8:2f:c3:fa:e1:cc:7b:02:2c:6b:9b:ef:f1: 02:21:e6:6d:88:d3:87:d8:e7:d1:a6:47:55:fd:62: 51:a5:ca:98:7d:89:34:19:f1:65:b0:8c:68:cf:f4: bb:25:f7:12:e5:29:35:08:4f:ec:a0:7c:97:af:e1: b4:7b:cc:fa:93:dd:58:3a:1f:ac:38:e8:0c:e4:a4: ff:ef:6f:34:40:55:da:1c:c9:f2:68:0b:31:e9:5c: 45:a6:8e:11:33:f7:ed:25:da:dd:35:0f:3b:2f:ea: 7d:d9:c3:cd:6c:ed:89:04:18:a7:e7:0c:d7:ed:85: 13:4d:aa:43:1a:26:20:f7:45:88:54:0a:d7:85:f2: 3f:0d:08:bf:56:7c:99:40:5b:e9:45:a2:f1:fe:dd: 6f:4d:99:36:60:50:1b:4c:ae:a9:22:21:33:68:e0: 6c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F2:4A:C3:47:11:53:DB:64:3F:2A:ED:4B:97:5A:97:C2:0B:35:5F X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:73:f0:9e:43:08:4e:30:9f:83:f5:df:e1:3e:63:c8:01:a5: 3d:96:be:c6:53:b5:18:fc:7f:bc:17:99:5a:5a:4f:2c:17:c8: 06:d8:96:64:87:17:68:ca:3a:87:95:d1:05:49:ec:fc:f5:38: 61:69:fd:67:a7:44:ce:4f:03:98:f9:a0:1d:b1:32:51:2e:10: 78:56:36:db:10:c1:09:59:6a:36:72:6b:e2:7b:67:03:f0:16: f2:73:63:96:12:2b:9c:b2:b0:6c:be:05:9c:5e:c9:93:37:e5: 33:48:bb:f6:d3:5e:c6:b4:cc:51:25:1e:04:39:5d:ad:ab:f4: ce:c3:4f:e7:d5:c0:c7:7f:87:29:6a:34:df:c0:af:9e:88:4a: 9a:95:a6:22:36:bc:92:07:1d:89:37:a9:9e:fd:b0:0d:2d:33: 91:ff:b9:8d:cb:7d:1a:b0:dd:a8:6c:ab:e3:b3:4a:e7:34:1f: be:d9:0b:14:aa:15:e9:63:68:8f:d7:ce:7f:8f:41:f7:2e:6b: 6f:fa:60:87:0b:e5:b5:a2:a6:c0:15:9b:6a:f9:a0:3c:0d:d4: 43:2b:51:82:52:f9:51:5c:9b:52:c1:99:86:7a:b4:1e:b6:fb: c0:f3:34:22:5c:28:39:55:ef:83:23:3c:ea:ab:0e:3b:eb:56: 2f:76:19:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuxEmTXcWi2R62DXUFS0lxSXW88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNjAxMjUwMDA2MzhaFw0yNjAxMjgwMTA1MzhaMDMxMTAvBgNV BAMTKDg0RjI0QUMzNDcxMTUzREI2NDNGMkFFRDRCOTc1QTk3QzIwQjM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeJwqmShWR3eelasLEGlilCUy6 ho++QsxJBPLxqQm866j5+WTSzIHqChC1U3Zec9eXxU2q7xODZ1cBCfz3kGEqOygF 5mPjerDRrfn27b/p+eO9l3P5edt/m//S6C/D+uHMewIsa5vv8QIh5m2I04fY59Gm R1X9YlGlyph9iTQZ8WWwjGjP9Lsl9xLlKTUIT+ygfJev4bR7zPqT3Vg6H6w46Azk pP/vbzRAVdocyfJoCzHpXEWmjhEz9+0l2t01Dzsv6n3Zw81s7YkEGKfnDNfthRNN qkMaJiD3RYhUCteF8j8NCL9WfJlAW+lFovH+3W9NmTZgUBtMrqkiITNo4GwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhPJKw0cRU9tkPyrtS5dal8ILNV8wHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtz8J5DCE4wn4P13+E+Y8gBpT2WvsZTtRj8 f7wXmVpaTywXyAbYlmSHF2jKOoeV0QVJ7Pz1OGFp/WenRM5PA5j5oB2xMlEuEHhW NtsQwQlZajZya+J7ZwPwFvJzY5YSK5yysGy+BZxeyZM35TNIu/bTXsa0zFElHgQ5 Xa2r9M7DT+fVwMd/hylqNN/Ar56ISpqVpiI2vJIHHYk3qZ79sA0tM5H/uY3LfRqw 3ahsq+OzSuc0H77ZCxSqFeljaI/Xzn+PQfcua2/6YIcL5bWipsAVm2r5oDwN1EMr UYJS+VFcm1LBmYZ6tB62+8DzNCJcKDlV74MjPOqrDjvrVi92GcM= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:43 2026 by rpki-client