This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: h/LeA654Q8anZwwbiw9qiHRxMzrDCnFhwdW4W81tUO0= Subject key identifier: F2:49:85:2B:88:CE:F2:22:E6:CA:5A:B9:99:50:FB:BC:62:3D:9E:33 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 025347944E31F282397409C172CC46D6E279F3BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 038B Signing time: Sun 25 Jan 2026 02:42:11 +0000 Manifest this update: Sun 25 Jan 2026 02:37:11 +0000 Manifest next update: Wed 28 Jan 2026 12:44:11 +0000 Files and hashes: 1: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) 2: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: FmpL4KSPhTCs34DOv8SOSd1TUzjHznzDd3BIbXaV2PA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:53:47:94:4e:31:f2:82:39:74:09:c1:72:cc:46:d6:e2:79:f3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: Jan 25 02:37:11 2026 GMT Not After : Jan 28 12:44:11 2026 GMT Subject: CN=F249852B88CEF222E6CA5AB99950FBBC623D9E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:42:09:2f:c9:45:dd:44:58:cc:53:2e:5f: e6:f1:17:3b:68:db:0a:cc:9f:f2:44:ac:1a:6b:9a: 18:df:a1:66:2d:5d:4f:dc:d4:02:62:1d:0f:a4:af: 10:6b:ef:40:9f:e3:6b:59:a5:50:b6:1f:d7:76:cc: 50:93:e3:d6:27:12:1b:42:cc:a8:2a:d9:f3:97:9a: ae:81:8e:c9:ab:4f:e5:8e:65:f3:78:a5:b6:fa:d6: 83:ba:b4:b4:8c:6c:fb:cd:c0:e8:5b:c2:77:4c:e9: 09:ed:24:eb:b3:eb:a2:01:f4:be:04:b3:25:d1:14: 74:1b:5f:ff:c7:d1:23:db:d4:91:79:f0:5b:14:e4: af:5a:ae:c5:6b:b8:a3:e6:ef:24:3e:29:67:ca:ae: f4:28:c7:03:58:31:66:d0:bf:e1:22:8d:0e:be:f9: e1:68:0b:8a:73:09:30:f3:13:fe:89:8f:4c:8e:90: 02:4e:a2:bb:1f:41:54:1a:d4:86:eb:80:fa:5e:b4: c0:1c:f8:a9:25:c5:6e:83:57:bb:98:9f:00:18:43: 97:1b:f9:69:b3:ff:29:1c:4f:95:37:7b:f3:05:85: 81:f0:a8:8e:2e:0b:b8:aa:6d:77:d5:b0:23:d4:9f: fc:e6:da:82:8e:4d:d8:8a:89:bc:ea:c1:b0:91:18: 07:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:49:85:2B:88:CE:F2:22:E6:CA:5A:B9:99:50:FB:BC:62:3D:9E:33 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:48:c1:1c:a5:6b:ea:eb:4a:c3:58:db:7e:15:b1:ee:7a:64: 15:d8:14:8c:81:37:09:fe:05:ea:e1:2c:74:e2:61:71:4f:a7: 82:a8:4d:ab:59:cc:54:26:f5:16:03:01:15:6c:ea:02:43:79: fd:d4:79:bf:11:e7:8b:ff:05:17:64:74:13:5a:eb:8d:88:57: 26:22:61:63:80:2d:31:77:76:07:0e:a5:e3:25:ee:7f:70:b3: 06:3c:d4:71:e9:ff:da:1a:66:a7:98:f0:4c:77:12:f5:a6:8e: ef:1a:b1:2c:8a:55:78:a0:b9:df:cc:28:7d:f1:08:ff:75:c1: 30:de:1c:49:84:0e:fc:ac:c7:83:39:f6:57:f9:6e:de:19:ad: 05:ab:9d:40:d1:d8:38:9b:2a:89:d8:ca:db:ad:f3:1b:f7:ea: ef:ef:4f:1e:22:f5:4f:1f:28:1c:ed:52:91:2b:ec:91:46:01: 01:eb:9f:1e:b4:1f:6c:23:d5:a7:61:4e:b7:37:22:80:31:63: ee:c0:8e:12:fa:23:5c:d5:78:28:fa:8e:69:1a:97:a7:b7:69: d6:ec:f3:86:78:96:e6:cb:b6:9a:f9:90:27:46:ec:93:05:fb: 6c:a9:f2:5f:69:6f:d9:31:4f:09:4b:d3:0f:33:b5:64:51:c8: 91:c3:23:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlNHlE4x8oI5dAnBcsxG1uJ5870wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNjAxMjUwMjM3MTFaFw0yNjAxMjgxMjQ0MTFaMDMxMTAvBgNV BAMTKEYyNDk4NTJCODhDRUYyMjJFNkNBNUFCOTk5NTBGQkJDNjIzRDlFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQo0IJL8lF3URYzFMuX+bxFzto 2wrMn/JErBprmhjfoWYtXU/c1AJiHQ+krxBr70Cf42tZpVC2H9d2zFCT49YnEhtC zKgq2fOXmq6BjsmrT+WOZfN4pbb61oO6tLSMbPvNwOhbwndM6QntJOuz66IB9L4E syXRFHQbX//H0SPb1JF58FsU5K9arsVruKPm7yQ+KWfKrvQoxwNYMWbQv+EijQ6+ +eFoC4pzCTDzE/6Jj0yOkAJOorsfQVQa1IbrgPpetMAc+KklxW6DV7uYnwAYQ5cb +Wmz/ykcT5U3e/MFhYHwqI4uC7iqbXfVsCPUn/zm2oKOTdiKibzqwbCRGAf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8kmFK4jO8iLmylq5mVD7vGI9njMwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhIwRyla+rrSsNY234Vse56ZBXYFIyBNwn+ BerhLHTiYXFPp4KoTatZzFQm9RYDARVs6gJDef3Ueb8R54v/BRdkdBNa642IVyYi YWOALTF3dgcOpeMl7n9wswY81HHp/9oaZqeY8Ex3EvWmju8asSyKVXigud/MKH3x CP91wTDeHEmEDvysx4M59lf5bt4ZrQWrnUDR2DibKonYytut8xv36u/vTx4i9U8f KBztUpEr7JFGAQHrnx60H2wj1adhTrc3IoAxY+7AjhL6I1zVeCj6jmkal6e3adbs 84Z4lubLtpr5kCdG7JMF+2yp8l9pb9kxTwlL0w8ztWRRyJHDI5E= -----END CERTIFICATE-----Generated at Sun Jan 25 20:11:11 2026 by rpki-client