This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: M+XiyLF5oGuWGvnoHPnCTl4qJKkUWKH39mRrT4olvJc= Subject key identifier: 50:54:F9:94:20:B0:BF:4A:4B:8B:41:68:B7:11:5F:23:99:8D:18:24 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 21E5F8C26B8A8DF072823D4E84624B5229A058C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0159 Signing time: Sat 24 Jan 2026 00:50:41 +0000 Manifest this update: Sat 24 Jan 2026 00:45:41 +0000 Manifest next update: Tue 27 Jan 2026 09:43:41 +0000 Files and hashes: 1: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 2: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: +qKK/pNC7ZqO3ViHtFmbCXCZHIqmS2gKoHhkUfOovhI=) 3: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) 4: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:f8:c2:6b:8a:8d:f0:72:82:3d:4e:84:62:4b:52:29:a0:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Jan 24 00:45:41 2026 GMT Not After : Jan 27 09:43:41 2026 GMT Subject: CN=5054F99420B0BF4A4B8B4168B7115F23998D1824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d9:41:02:38:2e:d3:6c:00:5f:4e:7f:55:91: c5:98:33:e5:be:08:d7:8d:15:84:69:a5:49:09:26: 9f:8a:fa:73:19:40:19:57:3d:29:93:47:1b:e1:b2: 7b:99:96:ef:12:4b:9a:7a:52:db:50:7d:5f:80:a6: f4:ae:1b:d8:c9:a6:59:6e:74:47:08:f5:b0:1e:85: dd:7e:96:53:43:30:ef:76:fc:3b:d0:35:a3:f2:34: 1d:32:eb:85:5e:84:be:44:44:32:da:69:4c:28:35: 62:74:25:71:33:b8:8a:2a:f2:9b:ab:9e:cb:2a:da: f1:f4:bb:11:e2:2c:62:e4:e3:39:3e:8f:0d:22:1b: d2:0e:6e:a3:24:40:e5:a4:3d:7b:89:6e:aa:bf:64: c4:1c:bd:55:09:f4:c7:2e:1f:54:35:13:a5:48:f3: cf:4d:fa:46:e9:46:8c:cc:a1:ba:c9:83:99:3a:b8: 66:46:fd:e9:e4:56:bb:01:e4:b2:2b:5f:b5:37:63: d9:dc:85:e0:4b:68:f1:ac:07:d4:f5:01:51:52:ef: 61:92:86:f1:a3:ad:c1:38:37:b5:29:ee:b2:0c:94: 03:d4:8b:e6:8f:9f:6e:07:d4:04:c5:3c:73:dd:7e: bb:af:aa:fd:28:46:e2:03:65:6b:f6:96:5b:6f:e5: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:54:F9:94:20:B0:BF:4A:4B:8B:41:68:B7:11:5F:23:99:8D:18:24 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0d:dc:05:7d:c4:5a:b8:39:5f:a3:e7:7f:41:a2:ed:31:28: 53:2e:78:e2:ff:49:a3:72:ff:87:36:74:ce:bc:81:81:e9:74: 0a:2d:e8:08:a2:53:b6:57:21:3d:10:46:f5:3c:10:59:65:5b: 3a:70:d5:56:40:be:85:58:ba:00:c1:f3:01:0b:bc:98:cc:9f: 8c:87:20:60:9d:ce:6e:85:75:b2:1d:28:70:e1:d0:c5:a2:d0: 98:5a:3e:82:24:70:07:56:a9:9e:7d:b8:0f:0a:8b:a3:64:a0: 19:14:34:f9:b6:70:aa:c0:92:37:08:8d:22:86:6d:01:55:96: fe:43:c3:a5:ed:d5:61:b8:4c:df:3f:f3:ce:5d:02:e9:f4:4e: bc:a1:93:0d:17:c1:f9:d3:d2:19:1b:85:51:b3:e2:f9:3a:e3: 64:c9:d3:b9:9c:42:dc:c4:43:99:57:9c:42:0f:2a:fc:2a:8e: 14:a1:33:99:9e:32:ed:c5:51:65:53:9a:9f:28:61:3c:9e:97: c2:f2:f1:e0:9b:6c:72:7a:ee:56:93:c1:5b:53:98:b6:df:75: f0:5f:fb:df:be:8d:25:42:26:6e:d5:18:7a:91:99:12:e4:b6: c1:a0:b2:55:ed:7e:d8:a9:aa:8e:fc:a0:aa:6f:d5:72:59:1e: 5b:01:29:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIeX4wmuKjfBygj1OhGJLUimgWMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjAxMjQwMDQ1NDFaFw0yNjAxMjcwOTQzNDFaMDMxMTAvBgNV BAMTKDUwNTRGOTk0MjBCMEJGNEE0QjhCNDE2OEI3MTE1RjIzOTk4RDE4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2UECOC7TbABfTn9VkcWYM+W+ CNeNFYRppUkJJp+K+nMZQBlXPSmTRxvhsnuZlu8SS5p6UttQfV+ApvSuG9jJpllu dEcI9bAehd1+llNDMO92/DvQNaPyNB0y64VehL5ERDLaaUwoNWJ0JXEzuIoq8pur nssq2vH0uxHiLGLk4zk+jw0iG9IObqMkQOWkPXuJbqq/ZMQcvVUJ9McuH1Q1E6VI 889N+kbpRozMobrJg5k6uGZG/enkVrsB5LIrX7U3Y9ncheBLaPGsB9T1AVFS72GS hvGjrcE4N7Up7rIMlAPUi+aPn24H1ATFPHPdfruvqv0oRuIDZWv2lltv5b5jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUFT5lCCwv0pLi0FotxFfI5mNGCQwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEN3AV9xFq4OV+j539Bou0xKFMueOL/SaNy /4c2dM68gYHpdAot6AiiU7ZXIT0QRvU8EFllWzpw1VZAvoVYugDB8wELvJjMn4yH IGCdzm6FdbIdKHDh0MWi0JhaPoIkcAdWqZ59uA8Ki6NkoBkUNPm2cKrAkjcIjSKG bQFVlv5Dw6Xt1WG4TN8/885dAun0Tryhkw0XwfnT0hkbhVGz4vk642TJ07mcQtzE Q5lXnEIPKvwqjhShM5meMu3FUWVTmp8oYTyel8Ly8eCbbHJ67laTwVtTmLbfdfBf +9++jSVCJm7VGHqRmRLktsGgslXtftipqo78oKpv1XJZHlsBKS4= -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:18 2026 by rpki-client