This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.mft (raw, json) Hash identifier: 07do/bNaqXUn460PPDCALlEaWb329LaOU4qMe+rdFVM= Subject key identifier: 3B:FC:A3:32:0C:34:67:C7:C9:BB:B8:FA:2A:B9:BB:FF:CA:18:B8:95 Authority key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Certificate issuer: /CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Certificate serial: 55D1861AB7AFCA0B34DA7FE2895E6AFAACF5FE81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft Manifest number: 04FF Signing time: Sat 24 Jan 2026 05:00:50 +0000 Manifest this update: Sat 24 Jan 2026 04:55:50 +0000 Manifest next update: Tue 27 Jan 2026 13:35:50 +0000 Files and hashes: 1: 3130332e31302e39362e302f32322d3234203d3e203138313033.roa (hash: Nh5W/QyNw1TBkrXlduer6Su77QtA37Kqc35mOSl9RrM=) 2: 3230332e3132382e36342e302f31392d3234203d3e203138313033.roa (hash: s7VSPqD5oiLwDB/oYr/1xD8uJ4/fL3Fk5/v33teavRk=) 3: 5E8D1116F8C66182B65521C899B56E89DDB84C57.crl (hash: VgCBLlAh8big5cFgZTGgTA2Q+JXmBJgJDGuUV/DIxo4=) 4: 34332e3234382e32342e302f32322d3234203d3e203138313033.roa (hash: RgeUIHscM2Mr9tXUcr4QUTfcftnTlsp6MIokq2QekbI=) 5: 3130332e32332e3234302e302f32322d3234203d3e203138313033.roa (hash: p8gVCnY66Os0DqkzQCJfTN/fhC+u5g4F7liSBfJAUxg=) 6: 3230332e3230312e35302e302f32332d3234203d3e203138313033.roa (hash: 0P4/KgKZcqup91feF2ZQ2rwCC9K7mFefhTwIQ1GZnuc=) 7: 323430313a316230303a3a2f33322d3438203d3e203138313033.roa (hash: w+rn3hr3SMqGHiqqz9FiRvR/Sg9nolhzcrhUpRbqWiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:d1:86:1a:b7:af:ca:0b:34:da:7f:e2:89:5e:6a:fa:ac:f5:fe:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Validity Not Before: Jan 24 04:55:50 2026 GMT Not After : Jan 27 13:35:50 2026 GMT Subject: CN=3BFCA3320C3467C7C9BBB8FA2AB9BBFFCA18B895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:4f:09:ae:ab:62:dc:1f:81:59:18:a4:ff: ee:68:f6:b9:8c:6f:60:1e:bf:de:2d:b1:b3:b8:63: a7:fd:47:31:48:90:9c:7e:1c:a0:bb:d6:d3:9d:ff: d2:96:d3:06:bb:a7:8b:e9:13:56:c4:25:7a:ae:4f: 7b:dd:f3:04:1c:14:1e:bf:fa:04:c8:dc:1c:7f:57: 1f:87:5a:97:c1:79:71:c2:6c:6a:37:3a:96:70:0b: 3c:7f:1b:53:8d:58:2b:48:ce:30:02:99:f8:5a:7f: ea:54:36:91:7d:ac:90:29:b7:45:20:5a:d6:0b:38: fa:9e:5b:7b:5c:72:7d:02:e6:5f:e0:b6:ef:29:d0: 35:02:69:cc:a8:89:80:bb:cc:93:5a:b7:a0:f2:85: fb:0c:08:c3:57:07:cb:97:89:bc:1f:7f:20:bb:e9: 68:4d:51:63:cd:0c:b5:6a:c9:9f:66:11:c7:23:ad: d2:b4:23:7f:9a:67:84:f0:dc:26:35:43:c7:05:2e: 78:0b:fe:b8:09:2b:9a:26:8d:1a:78:fd:b9:8f:b0: c4:2a:8e:1e:a0:fe:bc:3d:4c:ba:0e:45:43:f4:27: ec:a0:d0:80:92:96:16:34:3e:7a:69:2a:d7:8b:1e: 64:07:06:1f:3b:4b:fa:a8:12:52:87:18:91:73:97: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FC:A3:32:0C:34:67:C7:C9:BB:B8:FA:2A:B9:BB:FF:CA:18:B8:95 X509v3 Authority Key Identifier: keyid:5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ca:88:75:e3:61:82:43:16:86:ce:7d:e8:a6:b6:1e:fb:31: 08:77:be:4f:2f:e2:e6:e3:99:1b:f2:13:52:06:24:00:5a:8f: 99:b7:55:7c:54:91:c4:9f:11:48:3b:73:44:55:4d:76:ac:5c: 31:17:1d:4a:c7:92:4f:46:51:28:0e:eb:04:dd:44:83:31:47: 2d:50:bd:34:bf:37:09:8c:2d:08:0a:b4:80:f9:9d:4e:cb:d8: ae:fe:a1:31:dd:1b:80:67:a3:1e:fc:d1:c2:04:d2:2e:9a:aa: d4:d6:a3:08:40:fc:20:6a:d6:d0:9a:45:f7:58:60:4f:be:6f: 65:82:de:82:e8:f5:65:d8:ab:7d:a4:c3:b6:c7:4c:65:58:c7: 1c:bf:b6:55:40:7f:e1:e1:a1:56:7c:39:5d:48:ac:62:7d:80: 3e:4a:13:e6:bb:b7:53:65:fc:70:f6:95:08:82:3a:51:a7:56: 0a:89:ba:ab:60:70:fe:3c:71:b0:b4:1d:ce:4b:c6:76:37:3e: 24:7c:e2:3b:5e:ec:a2:db:2c:68:85:65:50:5b:70:f9:d9:0e: 9e:cb:26:79:3c:6b:5b:75:f4:88:17:ee:23:18:d0:76:6e:fb: f6:ac:f6:b3:46:c6:2d:0b:48:bf:76:8e:b0:1c:7b:70:41:fc: 8b:53:75:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVdGGGrevygs02n/iiV5q+qz1/oEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlE REI4NEM1NzAeFw0yNjAxMjQwNDU1NTBaFw0yNjAxMjcxMzM1NTBaMDMxMTAvBgNV BAMTKDNCRkNBMzMyMEMzNDY3QzdDOUJCQjhGQTJBQjlCQkZGQ0ExOEI4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9U8Jrqti3B+BWRik/+5o9rmM b2Aev94tsbO4Y6f9RzFIkJx+HKC71tOd/9KW0wa7p4vpE1bEJXquT3vd8wQcFB6/ +gTI3Bx/Vx+HWpfBeXHCbGo3OpZwCzx/G1ONWCtIzjACmfhaf+pUNpF9rJApt0Ug WtYLOPqeW3tccn0C5l/gtu8p0DUCacyoiYC7zJNat6DyhfsMCMNXB8uXibwffyC7 6WhNUWPNDLVqyZ9mEccjrdK0I3+aZ4Tw3CY1Q8cFLngL/rgJK5omjRp4/bmPsMQq jh6g/rw9TLoORUP0J+yg0ICSlhY0PnppKteLHmQHBh87S/qoElKHGJFzl2FtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/yjMgw0Z8fJu7j6Krm7/8oYuJUwHwYDVR0j BBgwFoAUXo0RFvjGYYK2VSHImbVuid24TFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMC81RThEMTExNkY4 QzY2MTgyQjY1NTIxQzg5OUI1NkU4OUREQjg0QzU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZFODlEREI4 NEM1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjE5OWMxYWYtZDljNy00ZmZkLWJh MDMtYTNlMWNkZDhhZWUwLzAvNUU4RDExMTZGOEM2NjE4MkI2NTUyMUM4OTlCNTZF ODlEREI4NEM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3KiHXjYYJDFobOfeimth77MQh3vk8v4ubj mRvyE1IGJABaj5m3VXxUkcSfEUg7c0RVTXasXDEXHUrHkk9GUSgO6wTdRIMxRy1Q vTS/NwmMLQgKtID5nU7L2K7+oTHdG4Bnox780cIE0i6aqtTWowhA/CBq1tCaRfdY YE++b2WC3oLo9WXYq32kw7bHTGVYxxy/tlVAf+HhoVZ8OV1IrGJ9gD5KE+a7t1Nl /HD2lQiCOlGnVgqJuqtgcP48cbC0Hc5LxnY3PiR84jte7KLbLGiFZVBbcPnZDp7L Jnk8a1t19IgX7iMY0HZu+/as9rNGxi0LSL92jrAce3BB/ItTdcg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:28 2026 by rpki-client