This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft File: 5DFC46925E2D4B3FB044F284111222A8B4C78392.mft (raw, json) Hash identifier: 9m9h49u0Lipg5EgmRRNtQuDJe6lkkwILn2UD9Km0ymk= Subject key identifier: 98:9B:F9:5B:55:DB:C4:61:03:C8:43:5D:D2:24:9E:FC:8B:24:3B:C8 Authority key identifier: 5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 Certificate issuer: /CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Certificate serial: 09E1C903C1AAB3C36F4B7AE98618D5F8B95CC6A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft Manifest number: 01E8 Signing time: Fri 23 Jan 2026 05:31:08 +0000 Manifest this update: Fri 23 Jan 2026 05:26:08 +0000 Manifest next update: Mon 26 Jan 2026 16:15:08 +0000 Files and hashes: 1: 5DFC46925E2D4B3FB044F284111222A8B4C78392.crl (hash: //7u4wgIGLfFEnXyBiaqdU9bcgP95g0xZ1ra/SSaof0=) 2: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: r4lFs0TNiF7PlJS0PWYOEttBGGT47VYExK2RXJ6gyEo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 16:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e1:c9:03:c1:aa:b3:c3:6f:4b:7a:e9:86:18:d5:f8:b9:5c:c6:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DFC46925E2D4B3FB044F284111222A8B4C78392 Validity Not Before: Jan 23 05:26:08 2026 GMT Not After : Jan 26 16:15:08 2026 GMT Subject: CN=989BF95B55DBC46103C8435DD2249EFC8B243BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:df:99:5b:cc:b5:3e:6d:35:02:28:a6:a1: 38:ad:77:5d:4c:14:d2:cc:1f:00:46:f3:de:da:2d: bb:72:68:04:8c:99:9b:e2:1f:87:5f:37:56:04:e1: 7c:68:7a:6b:5b:dc:a9:97:78:6b:95:45:9a:3f:71: ef:e0:8a:ea:89:5d:2b:e6:47:ed:f4:3e:e2:d3:28: 45:c4:02:e8:08:c4:d3:f4:4c:9e:79:56:1b:bc:45: c4:ea:98:d7:ce:36:17:fe:d8:6f:25:6d:9d:ff:cb: 78:da:99:87:14:dd:28:11:34:a4:2a:f4:71:41:cd: 4f:86:62:27:3b:47:a2:b4:c1:9a:a1:0f:7b:33:1d: 0f:b6:67:b4:17:a5:88:3c:33:c1:fc:d9:57:d5:94: 2d:5f:b0:dd:fa:81:37:e1:53:be:94:6e:6d:a4:dc: 1c:f5:16:ff:26:08:8c:33:94:a8:a3:9a:5e:a0:c4: e6:a1:15:a7:c3:de:cd:3d:cb:c2:ff:48:5e:ec:53: cb:63:e2:de:10:3c:13:55:b9:65:3f:e4:26:d6:a9: d0:01:59:30:c4:1d:68:6d:02:19:b9:fe:ff:05:3c: 55:f1:6f:da:b5:c2:28:54:5d:d2:a3:7f:ae:1f:60: 53:32:6c:84:1e:ce:28:1c:5e:32:60:7b:a4:5c:2c: 89:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9B:F9:5B:55:DB:C4:61:03:C8:43:5D:D2:24:9E:FC:8B:24:3B:C8 X509v3 Authority Key Identifier: keyid:5D:FC:46:92:5E:2D:4B:3F:B0:44:F2:84:11:12:22:A8:B4:C7:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DFC46925E2D4B3FB044F284111222A8B4C78392.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/5DFC46925E2D4B3FB044F284111222A8B4C78392.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d7:72:04:69:d1:f5:b2:2b:54:8c:9d:9d:80:5c:5d:86:6a: f0:4e:c3:54:be:6d:8e:7a:4f:47:c1:ef:4a:1f:08:60:1c:63: 3e:28:19:77:17:8f:80:ee:04:1d:cb:8e:58:42:4d:d1:84:9d: 8f:ec:c2:db:0e:48:bc:8f:f1:a5:c0:10:41:34:f7:e8:98:42: b0:a3:a8:78:17:72:26:e5:39:38:d4:a1:0d:90:2f:1a:c8:00: f3:9a:cb:bc:af:46:1d:fa:59:31:d1:3b:98:9e:d0:b3:ed:ff: 49:5c:dc:63:81:87:bc:75:24:30:30:78:48:28:78:83:2f:cb: b2:c1:0e:3e:33:6d:25:31:9b:5d:1c:e9:2f:a8:35:f7:7a:c2: 26:37:47:66:57:cf:e0:56:16:ce:87:d6:6b:71:cc:0f:6e:ba: 9c:68:03:02:09:0d:0c:ff:19:1f:43:42:d0:3a:fb:b7:8c:f7: fe:39:4c:b2:c5:5e:78:64:56:a1:8e:0c:7b:ab:c2:8a:c5:57: a1:08:a1:39:e9:3e:8b:3b:cc:59:15:1a:0c:a7:2a:9a:86:b6: 40:78:64:bc:55:f1:58:e7:54:f4:04:5d:5e:73:5c:f3:3b:96: 6a:d5:ba:97:a7:fe:fd:25:07:bb:77:4b:ac:27:73:04:39:e0: d1:55:98:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeHJA8Gqs8NvS3rphhjV+LlcxqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThC NEM3ODM5MjAeFw0yNjAxMjMwNTI2MDhaFw0yNjAxMjYxNjE1MDhaMDMxMTAvBgNV BAMTKDk4OUJGOTVCNTVEQkM0NjEwM0M4NDM1REQyMjQ5RUZDOEIyNDNCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLd+ZW8y1Pm01AiimoTitd11M FNLMHwBG897aLbtyaASMmZviH4dfN1YE4Xxoemtb3KmXeGuVRZo/ce/giuqJXSvm R+30PuLTKEXEAugIxNP0TJ55Vhu8RcTqmNfONhf+2G8lbZ3/y3jamYcU3SgRNKQq 9HFBzU+GYic7R6K0wZqhD3szHQ+2Z7QXpYg8M8H82VfVlC1fsN36gTfhU76Ubm2k 3Bz1Fv8mCIwzlKijml6gxOahFafD3s09y8L/SF7sU8tj4t4QPBNVuWU/5CbWqdAB WTDEHWhtAhm5/v8FPFXxb9q1wihUXdKjf64fYFMybIQezigcXjJge6RcLIn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmJv5W1XbxGEDyENd0iSe/IskO8gwHwYDVR0j BBgwFoAUXfxGkl4tSz+wRPKEERIiqLTHg5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzAxYjI3Ny1jODBjLTQ1ZDUtODA4OS1hOWVmYTM0MDU0MmEvMC81REZDNDY5MjVF MkQ0QjNGQjA0NEYyODQxMTEyMjJBOEI0Qzc4MzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIyQThCNEM3 ODM5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvNURGQzQ2OTI1RTJENEIzRkIwNDRGMjg0MTExMjIy QThCNEM3ODM5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTXcgRp0fWyK1SMnZ2AXF2GavBOw1S+bY56 T0fB70ofCGAcYz4oGXcXj4DuBB3LjlhCTdGEnY/swtsOSLyP8aXAEEE09+iYQrCj qHgXciblOTjUoQ2QLxrIAPOay7yvRh36WTHRO5ie0LPt/0lc3GOBh7x1JDAweEgo eIMvy7LBDj4zbSUxm10c6S+oNfd6wiY3R2ZXz+BWFs6H1mtxzA9uupxoAwIJDQz/ GR9DQtA6+7eM9/45TLLFXnhkVqGODHurworFV6EIoTnpPos7zFkVGgynKpqGtkB4 ZLxV8VjnVPQEXV5zXPM7lmrVupen/v0lB7t3S6wncwQ54NFVmLo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:47 2026 by rpki-client