This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: DNFSWzFEAcvXZHCAhf6fxe5XJlsWnd+WZE0evRBQVy4= Subject key identifier: 6F:FF:FC:2E:B1:73:47:64:8B:3D:64:C0:D7:4F:29:DC:2D:E3:6F:23 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 43604E7748C42CC6E051EA064668CB1844C7B330 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 0202 Signing time: Sat 24 Jan 2026 17:01:08 +0000 Manifest this update: Sat 24 Jan 2026 16:56:08 +0000 Manifest next update: Wed 28 Jan 2026 01:28:08 +0000 Files and hashes: 1: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: DAORdu+NgwjFfipkadCSQGFtMfVoAq9ryR86FIlGlbQ=) 2: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) 4: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:60:4e:77:48:c4:2c:c6:e0:51:ea:06:46:68:cb:18:44:c7:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jan 24 16:56:08 2026 GMT Not After : Jan 28 01:28:08 2026 GMT Subject: CN=6FFFFC2EB17347648B3D64C0D74F29DC2DE36F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:db:2b:c4:d7:fd:90:a0:ef:13:79:52:9d: fe:9e:d5:26:1a:79:79:89:43:1b:e5:19:8f:29:5d: d4:94:26:82:f9:1e:f1:73:1c:81:d1:63:ca:f5:30: 82:9d:7d:ed:be:7c:f5:50:84:10:02:09:08:84:84: bf:18:8e:79:ee:96:7a:3d:86:62:30:09:ac:32:3d: 2d:f9:9f:49:a8:5a:de:a3:d6:5b:cd:11:da:3b:11: 1b:1b:fb:38:ea:74:9b:a5:76:aa:60:7a:c2:12:81: 23:30:e9:e5:24:3e:b6:8f:09:2a:6d:97:19:82:4a: 4b:a7:63:85:35:0f:2b:34:3c:e9:89:f0:d8:14:a8: cc:d7:db:01:64:30:e9:37:bb:77:00:ca:cf:5e:36: 60:67:00:4f:c5:0a:da:b2:fd:9a:d8:f1:08:bb:ff: 3c:95:8c:e4:8c:53:3e:f5:9f:81:35:43:c5:24:f4: 36:52:6c:e7:48:3f:95:82:f5:49:8b:a2:85:2f:29: 8a:ae:d3:b2:57:b7:ac:e7:71:58:db:75:e7:ef:e2: b2:10:7f:a6:0d:20:b3:78:0f:81:3b:6c:d4:1c:b4: 85:22:c1:c7:cd:49:40:05:05:fe:4d:0b:17:ab:1d: a1:c2:12:7f:5a:c1:dd:98:e5:27:33:b7:23:18:4e: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FF:FC:2E:B1:73:47:64:8B:3D:64:C0:D7:4F:29:DC:2D:E3:6F:23 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d0:2e:af:24:d7:e7:e1:d6:91:b3:ad:0f:8d:7c:cc:0f:dd: 05:28:b0:1f:9b:3b:de:87:b9:36:53:32:1f:7e:ca:58:65:aa: b3:fe:8f:22:2e:bd:08:85:6f:3e:85:7a:9b:ab:14:d6:37:29: 4c:94:2a:b4:6d:53:2f:46:b2:45:bd:2c:d8:ca:e8:fc:7f:c5: 63:2a:ed:24:2f:4b:81:c7:34:8c:74:a8:43:cd:6d:20:a5:db: 0f:e8:4f:93:a6:39:c6:a9:72:9a:f2:ad:b3:75:a4:84:f7:08: 6e:2e:b9:b1:ef:26:f7:96:67:4c:d0:44:fd:3e:3d:51:cd:b0: 9e:8f:fd:d1:be:51:c1:4a:07:5d:5a:d2:29:7c:7a:03:97:7d: cc:b1:31:5f:32:c9:5c:c6:21:6d:78:5e:80:cc:71:63:2e:e8: e8:21:c6:fd:0f:30:c2:c3:3b:d5:98:2a:e4:cb:d2:86:6c:40: f4:5c:4c:6f:fb:b5:d4:a8:66:35:45:48:80:2b:05:af:6f:9e: fb:a4:34:e4:6b:86:8d:2f:6e:11:db:ea:2d:4f:92:76:d2:dd: e1:36:71:55:74:16:0f:48:d4:62:93:95:80:53:8b:ca:9d:ed: 56:34:99:68:27:2f:7c:c9:50:a3:75:24:dd:76:96:7e:c7:14: 3f:d2:0e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2BOd0jELMbgUeoGRmjLGETHszAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNjAxMjQxNjU2MDhaFw0yNjAxMjgwMTI4MDhaMDMxMTAvBgNV BAMTKDZGRkZGQzJFQjE3MzQ3NjQ4QjNENjRDMEQ3NEYyOURDMkRFMzZGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOztsrxNf9kKDvE3lSnf6e1SYa eXmJQxvlGY8pXdSUJoL5HvFzHIHRY8r1MIKdfe2+fPVQhBACCQiEhL8Yjnnulno9 hmIwCawyPS35n0moWt6j1lvNEdo7ERsb+zjqdJuldqpgesISgSMw6eUkPraPCSpt lxmCSkunY4U1Dys0POmJ8NgUqMzX2wFkMOk3u3cAys9eNmBnAE/FCtqy/ZrY8Qi7 /zyVjOSMUz71n4E1Q8Uk9DZSbOdIP5WC9UmLooUvKYqu07JXt6zncVjbdefv4rIQ f6YNILN4D4E7bNQctIUiwcfNSUAFBf5NCxerHaHCEn9awd2Y5ScztyMYTnn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb//8LrFzR2SLPWTA108p3C3jbyMwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnQLq8k1+fh1pGzrQ+NfMwP3QUosB+bO96H uTZTMh9+ylhlqrP+jyIuvQiFbz6FepurFNY3KUyUKrRtUy9GskW9LNjK6Px/xWMq 7SQvS4HHNIx0qEPNbSCl2w/oT5OmOcapcpryrbN1pIT3CG4uubHvJveWZ0zQRP0+ PVHNsJ6P/dG+UcFKB11a0il8egOXfcyxMV8yyVzGIW14XoDMcWMu6Oghxv0PMMLD O9WYKuTL0oZsQPRcTG/7tdSoZjVFSIArBa9vnvukNORrho0vbhHb6i1PknbS3eE2 cVV0Fg9I1GKTlYBTi8qd7VY0mWgnL3zJUKN1JN12ln7HFD/SDvA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:49 2026 by rpki-client