This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: k3ZWoNdLxEOxXFeXD9LVEA1qS/z4eb7c1/2NzTk3E1Y= Subject key identifier: AE:EB:6F:72:F7:10:3C:B6:8D:AE:C4:53:AA:90:65:C1:19:C7:A2:BF Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 34372C10371F0FE6F352FF7558A15CD5C4A7E956 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 0428 Signing time: Fri 23 Jan 2026 17:02:08 +0000 Manifest this update: Fri 23 Jan 2026 16:57:08 +0000 Manifest next update: Mon 26 Jan 2026 18:53:08 +0000 Files and hashes: 1: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: SHQg902NihVeryeBy+SP01ds4Ru/+9hYfBGgSyiCEBo=) 2: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 18:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:37:2c:10:37:1f:0f:e6:f3:52:ff:75:58:a1:5c:d5:c4:a7:e9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Jan 23 16:57:08 2026 GMT Not After : Jan 26 18:53:08 2026 GMT Subject: CN=AEEB6F72F7103CB68DAEC453AA9065C119C7A2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:18:37:d2:48:e1:ef:87:f3:35:84:8c:4b:e5: db:a8:7e:71:2e:c0:38:8a:e4:a4:61:91:18:27:09: 1c:63:61:5b:31:42:5e:e1:1e:cc:5c:04:bb:db:e1: fd:38:cd:ae:4c:77:f7:4b:9f:d9:5d:7d:ea:ab:16: 85:52:31:09:b1:36:d1:e9:f0:bf:ce:da:64:ef:46: e4:e3:61:37:30:aa:f6:75:67:6d:c7:65:f4:60:7b: 7f:73:a9:a5:4a:f8:71:24:42:8a:77:27:22:4e:14: 8d:f7:39:77:45:f5:a2:ca:35:a7:e3:0e:62:ae:47: 15:3a:af:dc:18:b9:98:cc:55:e7:65:b9:88:1c:15: a6:c5:68:0e:fc:05:d3:a8:c2:11:34:c1:c1:60:12: 2b:93:a1:d6:0d:f9:74:2c:ef:67:22:fd:70:7f:95: c6:aa:b8:86:11:32:46:f9:4b:03:2a:d1:19:55:25: 2a:ad:b9:62:a9:48:78:57:17:72:5e:20:cf:5f:6f: 61:aa:a4:fa:fe:ea:05:fd:89:6a:60:f2:ed:83:a1: 23:23:9d:81:53:95:d7:05:ae:6c:53:61:88:1f:e4: 97:78:70:db:ab:9a:ad:5f:94:ea:c1:f7:c6:35:48: a3:9a:86:a8:e5:91:94:81:cc:34:95:f5:69:63:09: ec:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EB:6F:72:F7:10:3C:B6:8D:AE:C4:53:AA:90:65:C1:19:C7:A2:BF X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:ef:bd:20:e3:8e:2c:0b:2d:b6:24:82:55:4f:d4:b9:24:74: 10:2a:45:09:39:ad:e4:55:b1:e8:5d:07:9a:f8:77:b1:0b:74: a6:20:8b:3c:fb:90:cd:73:5e:25:ca:eb:3c:79:d6:b8:f8:44: 3f:d3:b3:ad:69:ca:55:bb:84:32:c8:42:48:79:58:d1:04:2a: f6:87:56:1c:56:2b:99:c7:00:05:b2:3a:82:e5:fd:0b:36:ff: e0:00:5d:c4:91:b0:cb:06:c1:97:07:3a:9f:00:74:af:86:c1: d5:8b:89:1b:22:fb:fa:a7:0a:5c:19:12:75:ae:db:ff:e8:b7: 1c:22:38:82:aa:eb:d7:91:6f:5f:51:ca:c9:c3:61:80:f6:33: f6:5a:2a:e9:47:35:8d:8c:9e:00:75:57:f9:3d:88:52:ed:54: d0:60:54:9a:4d:8e:d1:ed:36:42:d1:5e:59:a6:74:e3:5f:fd: e9:3d:9d:78:8c:e2:21:ea:11:69:59:89:bf:4e:d4:7d:65:41: 62:10:67:09:39:5c:a7:50:31:41:58:c8:59:74:6c:35:bd:75: fc:40:6c:76:a5:1e:a3:5f:e4:c9:6e:99:f1:fa:19:c4:c8:f3: 75:f7:97:fe:fd:f4:61:b4:95:62:f3:80:f3:ab:24:de:e3:4a: 25:fe:05:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNDcsEDcfD+bzUv91WKFc1cSn6VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNjAxMjMxNjU3MDhaFw0yNjAxMjYxODUzMDhaMDMxMTAvBgNV BAMTKEFFRUI2RjcyRjcxMDNDQjY4REFFQzQ1M0FBOTA2NUMxMTlDN0EyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyGDfSSOHvh/M1hIxL5duofnEu wDiK5KRhkRgnCRxjYVsxQl7hHsxcBLvb4f04za5Md/dLn9ldfeqrFoVSMQmxNtHp 8L/O2mTvRuTjYTcwqvZ1Z23HZfRge39zqaVK+HEkQop3JyJOFI33OXdF9aLKNafj DmKuRxU6r9wYuZjMVedluYgcFabFaA78BdOowhE0wcFgEiuTodYN+XQs72ci/XB/ lcaquIYRMkb5SwMq0RlVJSqtuWKpSHhXF3JeIM9fb2GqpPr+6gX9iWpg8u2DoSMj nYFTldcFrmxTYYgf5Jd4cNurmq1flOrB98Y1SKOahqjlkZSBzDSV9WljCezTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrutvcvcQPLaNrsRTqpBlwRnHor8wHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEvvvSDjjiwLLbYkglVP1LkkdBAqRQk5reRV sehdB5r4d7ELdKYgizz7kM1zXiXK6zx51rj4RD/Ts61pylW7hDLIQkh5WNEEKvaH VhxWK5nHAAWyOoLl/Qs2/+AAXcSRsMsGwZcHOp8AdK+GwdWLiRsi+/qnClwZEnWu 2//otxwiOIKq69eRb19RysnDYYD2M/ZaKulHNY2MngB1V/k9iFLtVNBgVJpNjtHt NkLRXlmmdONf/ek9nXiM4iHqEWlZib9O1H1lQWIQZwk5XKdQMUFYyFl0bDW9dfxA bHalHqNf5MlumfH6GcTI83X3l/799GG0lWLzgPOrJN7jSiX+BTQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:26 2026 by rpki-client