This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: gK12VM3sfJNc+8vhPz79zFoDGY6kokjxpb/kP8rV6JQ= Subject key identifier: 32:FD:F3:51:A3:F8:D7:39:75:34:08:3F:31:62:CF:61:9B:F9:C3:70 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 7F76276B0082DF849A3EA322D6A5927CBDFDC1F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 026E Signing time: Sat 24 Jan 2026 02:42:29 +0000 Manifest this update: Sat 24 Jan 2026 02:37:29 +0000 Manifest next update: Tue 27 Jan 2026 07:13:29 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 2: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 3: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) 4: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: V56VmrZqlcqfcBKGjCeh3YJkSlLEONBKNAPr1+ivq8c=) 5: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 6: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:76:27:6b:00:82:df:84:9a:3e:a3:22:d6:a5:92:7c:bd:fd:c1:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Jan 24 02:37:29 2026 GMT Not After : Jan 27 07:13:29 2026 GMT Subject: CN=32FDF351A3F8D7397534083F3162CF619BF9C370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:5b:e5:57:d5:c2:8f:ec:91:47:b6:16:88: 85:22:d7:48:d8:c0:45:b9:e0:a6:c1:90:21:55:21: f1:ba:71:9c:31:36:ba:ee:41:c4:0f:b0:05:71:a0: 9a:68:37:53:c1:de:c8:cd:76:9a:7b:47:d3:dc:7d: 40:ce:fe:ef:e8:15:26:a8:61:cc:97:8c:99:34:33: b5:a2:96:b1:b7:21:ee:dc:13:7d:d3:d4:c9:b3:11: 7e:56:19:4d:6f:ab:69:4d:93:fa:57:1c:f6:23:fe: 50:f9:71:3b:ec:d3:04:3c:f0:80:50:2e:ea:16:93: 54:c3:1c:e8:62:d6:8c:ad:00:9e:e3:fb:6c:db:d6: 17:c2:de:5a:26:4d:12:11:86:35:0e:93:3d:0f:57: 0a:59:d3:d2:71:cc:8f:3f:40:57:c1:5d:63:ae:3c: 8d:39:ba:46:8a:0a:73:34:a7:46:3f:88:68:86:81: c4:03:7c:2f:3f:35:c6:ce:d3:93:90:ed:49:3c:64: 36:8e:5e:74:27:6e:f2:fc:dd:57:0e:31:ef:43:61: 27:79:f9:81:a7:2d:f9:f5:13:aa:97:41:f5:6b:71: 74:48:06:d6:61:64:14:0e:9e:78:c9:f0:14:17:e5: 03:57:51:91:c8:96:cc:e5:02:bb:76:fe:e4:42:57: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:F3:51:A3:F8:D7:39:75:34:08:3F:31:62:CF:61:9B:F9:C3:70 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:86:08:a0:3c:ea:02:41:3a:76:d3:d7:f9:91:2c:fb:e1:24: df:fb:3d:29:95:cb:61:5a:d2:61:f8:a6:24:f4:74:a1:bc:cd: 07:81:2e:5d:d6:8f:cf:5d:2a:31:80:66:e8:3f:47:f5:ac:ef: d5:4a:84:95:a5:d5:78:a7:97:a6:c0:0c:d3:9b:df:51:35:b6: c1:2c:f6:a4:86:6e:6a:b8:d8:79:79:2b:aa:dd:b7:39:21:34: 9b:bc:99:21:25:7a:0b:1b:99:92:bb:30:05:d3:8a:47:38:5d: a7:13:da:b0:26:11:0a:58:c7:3e:2c:46:75:ae:87:8a:ce:6a: 80:03:c8:e3:50:4f:1f:a0:11:57:78:51:79:17:6f:46:99:d8: bc:02:86:b1:fa:01:6c:0f:fb:29:20:9a:99:49:74:26:52:b3: 92:3a:67:47:a7:6f:ef:fa:d4:f7:de:a7:03:27:5c:c6:0c:4b: 7a:90:82:ca:41:7b:92:fc:b0:a7:89:91:8f:d6:58:13:eb:26: 60:a9:3f:24:db:29:c9:eb:58:c4:c7:91:6f:72:b1:90:df:6a: 8b:c7:05:50:91:0c:df:d7:84:fc:71:33:1e:92:a5:29:89:da: 5a:bf:99:13:1e:f3:a8:f9:98:47:5b:9c:86:1c:2b:49:fe:34: 1f:24:f0:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf3YnawCC34SaPqMi1qWSfL39wfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNjAxMjQwMjM3MjlaFw0yNjAxMjcwNzEzMjlaMDMxMTAvBgNV BAMTKDMyRkRGMzUxQTNGOEQ3Mzk3NTM0MDgzRjMxNjJDRjYxOUJGOUMzNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhlvlV9XCj+yRR7YWiIUi10jY wEW54KbBkCFVIfG6cZwxNrruQcQPsAVxoJpoN1PB3sjNdpp7R9PcfUDO/u/oFSao YcyXjJk0M7WilrG3Ie7cE33T1MmzEX5WGU1vq2lNk/pXHPYj/lD5cTvs0wQ88IBQ LuoWk1TDHOhi1oytAJ7j+2zb1hfC3lomTRIRhjUOkz0PVwpZ09JxzI8/QFfBXWOu PI05ukaKCnM0p0Y/iGiGgcQDfC8/NcbO05OQ7Uk8ZDaOXnQnbvL83VcOMe9DYSd5 +YGnLfn1E6qXQfVrcXRIBtZhZBQOnnjJ8BQX5QNXUZHIlszlArt2/uRCVy6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMv3zUaP41zl1NAg/MWLPYZv5w3AwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6GCKA86gJBOnbT1/mRLPvhJN/7PSmVy2Fa 0mH4piT0dKG8zQeBLl3Wj89dKjGAZug/R/Ws79VKhJWl1Xinl6bADNOb31E1tsEs 9qSGbmq42Hl5K6rdtzkhNJu8mSElegsbmZK7MAXTikc4XacT2rAmEQpYxz4sRnWu h4rOaoADyONQTx+gEVd4UXkXb0aZ2LwChrH6AWwP+ykgmplJdCZSs5I6Z0enb+/6 1PfepwMnXMYMS3qQgspBe5L8sKeJkY/WWBPrJmCpPyTbKcnrWMTHkW9ysZDfaovH BVCRDN/XhPxxMx6SpSmJ2lq/mRMe86j5mEdbnIYcK0n+NB8k8AQ= -----END CERTIFICATE-----Generated at Sun Jan 25 23:08:26 2026 by rpki-client