This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft File: 5AE57F3F97F40888F93913350A218863E705CD34.mft (raw, json) Hash identifier: sMkz8MIoUmEZGbfCkbJnPiTV4l7ejpMG/MDK17HjjgI= Subject key identifier: 51:35:63:58:B5:B9:8B:CE:F8:66:5B:E6:C0:9B:EF:E6:88:1F:EA:62 Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 Certificate issuer: /CN=5AE57F3F97F40888F93913350A218863E705CD34 Certificate serial: 4B1BC145C7E684F17BEADDFBBE1975D05FC5100B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft Manifest number: 027E Signing time: Sat 24 Jan 2026 17:01:33 +0000 Manifest this update: Sat 24 Jan 2026 16:56:33 +0000 Manifest next update: Tue 27 Jan 2026 18:13:33 +0000 Files and hashes: 1: 5AE57F3F97F40888F93913350A218863E705CD34.crl (hash: qaEMWGbpOrrLpZrU2dmOIinZMuVt8WswTI8hJZ9vcAI=) 2: 3130332e3138332e31302e302f32342d3234203d3e20313339393637.roa (hash: YGbtlM42GpeXJWwNS5HnaEAi9mnZKsNiOe/sp7sIMh8=) 3: 3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (hash: Aeu4h6nFmtclcSAntQ1D1feUfbui+nbdSHb/VFJyfM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1b:c1:45:c7:e6:84:f1:7b:ea:dd:fb:be:19:75:d0:5f:c5:10:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34 Validity Not Before: Jan 24 16:56:33 2026 GMT Not After : Jan 27 18:13:33 2026 GMT Subject: CN=51356358B5B98BCEF8665BE6C09BEFE6881FEA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:82:1e:91:93:07:aa:47:7a:39:bb:cc:94: a1:6c:06:77:00:48:66:bc:a3:59:67:c9:07:a7:cf: 2a:30:a3:c5:82:0e:9b:b3:6a:a3:81:11:09:53:9f: 40:fa:0b:ce:de:65:5b:fe:ae:68:8d:c1:d8:cf:de: bc:4c:80:b0:75:39:50:0c:53:3a:2d:b4:27:c2:f7: c4:06:97:09:b1:c1:e9:9c:ce:f2:c4:8a:d4:53:fb: ff:e1:31:a8:ba:90:6c:79:f4:e4:2e:fa:e2:0d:ec: 07:3c:f7:f8:8a:10:e7:b2:c3:0c:2a:75:bd:69:e7: cf:8c:72:2a:58:e9:69:77:00:25:28:90:6a:fe:2c: 5c:cd:9f:5b:8d:b3:73:80:ea:08:cf:82:95:98:a5: 68:c2:b4:8c:7b:c6:71:8d:d7:b1:91:aa:08:9a:12: b9:95:09:01:c9:ba:e8:ab:a1:bb:64:23:7c:ed:81: 27:5b:fb:60:6d:ae:3e:e0:ff:b4:fc:bc:8f:3a:fa: 0c:e2:40:75:7e:d3:9a:d6:4b:c4:7a:75:2c:dd:60: 88:69:3a:c0:f3:f1:0b:bb:53:9c:63:95:98:59:d5: 24:65:34:f0:90:e1:d9:40:fd:e9:93:83:a2:d0:ff: 21:a1:48:10:17:b9:aa:6a:2b:cf:a0:5d:64:7b:60: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:35:63:58:B5:B9:8B:CE:F8:66:5B:E6:C0:9B:EF:E6:88:1F:EA:62 X509v3 Authority Key Identifier: keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e2:dc:73:5e:77:86:4a:e8:86:1c:3c:0a:a5:9c:24:ad:15: 3e:fc:da:44:be:c3:ed:59:a4:6e:e0:2a:69:39:bd:ce:7c:ca: 09:c7:76:83:b6:75:4b:20:7a:63:fe:4c:94:73:da:18:3f:73: 87:ac:11:a7:0e:6a:60:88:d3:f1:ae:0b:cd:96:9f:2f:4b:09: 54:4b:85:75:7e:49:9d:0c:c5:dc:4e:b9:6c:41:88:c4:e1:9c: 56:9b:ac:6d:a4:7d:f0:03:32:af:fa:94:99:cc:c3:39:bd:74: 7b:94:8d:98:f6:76:8d:5e:12:c5:04:36:11:57:c5:d5:1b:3e: d7:fd:c4:38:44:2a:15:08:01:b1:18:e9:35:5e:cd:17:e6:61: c9:fa:23:42:8d:42:f7:4e:f6:a2:25:80:97:5f:c3:0a:9e:a9: 40:61:ec:d0:c1:9d:a1:3e:3e:99:fe:5b:ad:a5:fe:2a:58:15: 56:ed:91:4a:1f:f3:75:94:7f:9b:69:90:28:c7:f6:49:94:d3: ee:1f:90:31:a7:cc:6b:f2:bd:aa:7e:0f:54:a8:8c:1e:85:ed: 81:f8:c1:d5:80:1f:95:08:e8:5b:30:5f:ca:ca:a4:0b:fa:f0: 60:93:05:a0:7e:8f:2e:fa:6d:ad:98:12:eb:04:a5:29:f2:a1: f1:b4:97:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxvBRcfmhPF76t37vhl10F/FEAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF NzA1Q0QzNDAeFw0yNjAxMjQxNjU2MzNaFw0yNjAxMjcxODEzMzNaMDMxMTAvBgNV BAMTKDUxMzU2MzU4QjVCOThCQ0VGODY2NUJFNkMwOUJFRkU2ODgxRkVBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRoIekZMHqkd6ObvMlKFsBncA SGa8o1lnyQenzyowo8WCDpuzaqOBEQlTn0D6C87eZVv+rmiNwdjP3rxMgLB1OVAM UzottCfC98QGlwmxwemczvLEitRT+//hMai6kGx59OQu+uIN7Ac89/iKEOeywwwq db1p58+McipY6Wl3ACUokGr+LFzNn1uNs3OA6gjPgpWYpWjCtIx7xnGN17GRqgia ErmVCQHJuuirobtkI3ztgSdb+2Btrj7g/7T8vI86+gziQHV+05rWS8R6dSzdYIhp OsDz8Qu7U5xjlZhZ1SRlNPCQ4dlA/emTg6LQ/yGhSBAXuapqK8+gXWR7YAdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTVjWLW5i874ZlvmwJvv5ogf6mIwHwYDVR0j BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3 RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1 Q0QzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ4Y2RmNWEtYjlhNy00NDY5LWE2 NTMtYzlmZjJhMDAzNzczLzAvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4 NjNFNzA1Q0QzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDi3HNed4ZK6IYcPAqlnCStFT782kS+w+1Z pG7gKmk5vc58ygnHdoO2dUsgemP+TJRz2hg/c4esEacOamCI0/GuC82Wny9LCVRL hXV+SZ0MxdxOuWxBiMThnFabrG2kffADMq/6lJnMwzm9dHuUjZj2do1eEsUENhFX xdUbPtf9xDhEKhUIAbEY6TVezRfmYcn6I0KNQvdO9qIlgJdfwwqeqUBh7NDBnaE+ Ppn+W62l/ipYFVbtkUof83WUf5tpkCjH9kmU0+4fkDGnzGvyvap+D1SojB6F7YH4 wdWAH5UI6FswX8rKpAv68GCTBaB+jy76ba2YEusEpSnyofG0lxk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:37 2026 by rpki-client