This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: Ak2QpareAr6V6nkBK554RpmClUEdRMOL6Mfp1BtPbnI= Subject key identifier: 72:EA:07:A9:CC:EA:B4:D5:C9:64:58:0F:F0:81:E4:9F:20:1F:27:6A Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 14FFD03EE99C09828CC15A358B0B3E079624C632 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 028E Signing time: Sat 24 Jan 2026 01:51:59 +0000 Manifest this update: Sat 24 Jan 2026 01:46:59 +0000 Manifest next update: Tue 27 Jan 2026 04:24:59 +0000 Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: BBX3B7NJqJ5U+V7hb6lRk5ZZ29Z5BeTJWJeT0TkgalY=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 04:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ff:d0:3e:e9:9c:09:82:8c:c1:5a:35:8b:0b:3e:07:96:24:c6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: Jan 24 01:46:59 2026 GMT Not After : Jan 27 04:24:59 2026 GMT Subject: CN=72EA07A9CCEAB4D5C964580FF081E49F201F276A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:26:2a:45:c0:e8:f0:48:c3:3c:06:36:eb: 88:b2:9a:92:22:45:04:1c:ff:e7:6b:59:d4:e2:76: f2:57:db:34:8e:a2:be:71:4b:b3:f2:e2:fc:13:e1: 12:4a:d5:9f:16:63:46:b4:2b:0b:3c:c2:a7:9f:4f: b2:9e:9b:61:20:c8:23:4d:88:f3:9f:41:cc:e4:06: b6:93:cc:dc:7a:0b:40:da:0e:68:34:e1:dc:eb:71: 5b:58:af:cd:3e:35:bf:ae:94:26:5f:29:35:20:49: fa:35:07:58:96:fc:3b:22:9f:0f:fa:66:7b:a7:ea: ce:3d:1e:dd:ed:ed:0d:91:b3:bd:de:67:d8:41:09: 30:8e:23:bc:05:0a:98:dc:89:72:cf:a1:be:ee:fe: 46:71:5d:5e:88:d1:2e:ac:35:c4:17:ac:5c:9b:48: 00:2e:43:09:c8:ee:bf:57:6f:7d:3e:81:07:74:fe: 5c:a7:1c:3f:ee:bd:d9:f2:65:b3:c6:8b:a6:da:49: ae:f3:44:f2:4b:85:8c:20:36:b6:2d:30:a2:cb:29: e9:e5:20:a2:68:7f:6e:7b:0c:df:39:8c:0c:c8:7e: 8c:ce:22:25:6f:60:6d:d2:85:bb:9b:88:fd:87:93: 3f:bc:09:c7:95:a9:cf:29:b4:b8:81:fc:f6:30:06: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EA:07:A9:CC:EA:B4:D5:C9:64:58:0F:F0:81:E4:9F:20:1F:27:6A X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:67:9e:b9:23:c6:5d:44:7c:3b:9c:7e:73:82:33:69:b7:2d: d2:c3:61:c0:dc:c6:cb:c1:28:d3:cc:ba:94:cd:af:99:b1:da: 2e:a1:fb:55:e9:77:42:b6:3b:6b:f3:81:98:45:63:fd:5b:b8: 50:51:0d:a1:64:ad:11:bc:a7:93:71:c5:ca:6d:15:7b:b8:61: b6:b8:26:20:af:28:a2:8c:62:10:56:77:c4:20:20:6d:f6:4a: d9:f2:c7:1d:1b:ef:57:67:95:6f:64:2d:ee:ea:10:ba:61:30: d5:88:57:4d:95:20:92:bb:6d:91:2b:00:e9:34:9c:02:aa:ee: 1a:58:04:5c:49:a3:d8:56:78:86:cf:f2:02:be:f8:34:e3:f5: d0:56:14:b8:ec:86:9a:e3:ce:9b:ec:3d:48:2c:c0:45:64:b9: 7e:4c:ba:b0:6f:55:91:60:c5:c0:43:4c:06:68:e9:8f:70:a8: d7:48:b1:96:53:d4:7e:cc:2d:3a:c9:62:a6:5a:1e:62:50:27: 60:13:80:15:69:30:18:42:46:55:e8:83:6a:e1:48:76:a9:af: d2:b3:26:f5:a8:18:00:7a:5a:ac:49:4e:cd:70:e2:ae:79:71: 86:ff:54:1f:ca:e3:71:77:02:21:66:a8:d1:92:94:64:2e:64: 8d:f6:22:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFP/QPumcCYKMwVo1iws+B5YkxjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNjAxMjQwMTQ2NTlaFw0yNjAxMjcwNDI0NTlaMDMxMTAvBgNV BAMTKDcyRUEwN0E5Q0NFQUI0RDVDOTY0NTgwRkYwODFFNDlGMjAxRjI3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4iYqRcDo8EjDPAY264iympIi RQQc/+drWdTidvJX2zSOor5xS7Py4vwT4RJK1Z8WY0a0Kws8wqefT7Kem2EgyCNN iPOfQczkBraTzNx6C0DaDmg04dzrcVtYr80+Nb+ulCZfKTUgSfo1B1iW/Dsinw/6 Znun6s49Ht3t7Q2Rs73eZ9hBCTCOI7wFCpjciXLPob7u/kZxXV6I0S6sNcQXrFyb SAAuQwnI7r9Xb30+gQd0/lynHD/uvdnyZbPGi6baSa7zRPJLhYwgNrYtMKLLKenl IKJof257DN85jAzIfozOIiVvYG3ShbubiP2Hkz+8CceVqc8ptLiB/PYwBsh3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcuoHqczqtNXJZFgP8IHknyAfJ2owHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFnnrkjxl1EfDucfnOCM2m3LdLDYcDcxsvB KNPMupTNr5mx2i6h+1Xpd0K2O2vzgZhFY/1buFBRDaFkrRG8p5NxxcptFXu4Yba4 JiCvKKKMYhBWd8QgIG32Stnyxx0b71dnlW9kLe7qELphMNWIV02VIJK7bZErAOk0 nAKq7hpYBFxJo9hWeIbP8gK++DTj9dBWFLjshprjzpvsPUgswEVkuX5MurBvVZFg xcBDTAZo6Y9wqNdIsZZT1H7MLTrJYqZaHmJQJ2ATgBVpMBhCRlXog2rhSHapr9Kz JvWoGAB6WqxJTs1w4q55cYb/VB/K43F3AiFmqNGSlGQuZI32Ioo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:05 2026 by rpki-client