This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft File: 5C7240CA135C93835F95A8E1F3526942D3214EC2.mft (raw, json) Hash identifier: 6SImoB0/MweQ6A+rK0PQOc6NdclcRBytN1ZNDDagaUI= Subject key identifier: F0:F5:CF:47:14:D6:94:9B:BE:8A:11:23:07:C2:6F:D8:D0:C1:BC:12 Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 Certificate issuer: /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Certificate serial: 49D0084E552D36E51B92CE59EFC03ED829E74F42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft Manifest number: 024E Signing time: Sun 01 Feb 2026 00:11:38 +0000 Manifest this update: Sun 01 Feb 2026 00:06:38 +0000 Manifest next update: Wed 04 Feb 2026 10:07:38 +0000 Files and hashes: 1: 3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (hash: jBjxNJ+007Quwhm8JkgTbciN359d/zYXuYTKIMisTrU=) 2: 3130332e3139302e34362e302f32332d3233203d3e2039333431.roa (hash: WvXqqkpLSakilobbbh3oi/iYc3pt0ZdEradB47daqG8=) 3: 5C7240CA135C93835F95A8E1F3526942D3214EC2.crl (hash: /9Zv0PI4u12w7GnrZOugTilNOIN5NMeZgAz+vQyrgXA=) 4: 3130332e3139302e34372e302f32342d3234203d3e2039333431.roa (hash: rr9ymmJLTXtCYmg7wZwMhNNVHwxbRfZ339GatX+MBVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d0:08:4e:55:2d:36:e5:1b:92:ce:59:ef:c0:3e:d8:29:e7:4f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2 Validity Not Before: Feb 1 00:06:38 2026 GMT Not After : Feb 4 10:07:38 2026 GMT Subject: CN=F0F5CF4714D6949BBE8A112307C26FD8D0C1BC12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:97:ac:a1:42:c8:f0:a0:e6:65:84:a8:6c:86: de:ad:f1:53:3c:03:0d:cb:d6:36:7b:ec:7b:5f:11: 59:c9:0e:68:07:ad:bd:e8:5e:36:01:67:72:70:ad: d5:73:35:6f:fb:e5:c4:08:36:f2:ca:80:49:57:3e: 39:13:0f:f4:1c:0b:41:cf:b0:10:5b:c7:89:bf:f9: ff:06:0a:a3:8c:d9:9e:db:c5:d9:d0:39:d5:d7:36: 2c:0b:89:b5:0b:15:67:b4:cb:97:a3:13:52:9d:e5: 13:66:af:c4:f4:31:71:8b:11:ee:17:65:c6:ed:ab: ac:36:45:c2:97:8b:0d:d6:10:48:4d:11:91:29:60: 51:16:84:41:fa:bb:eb:60:39:ad:dd:64:58:95:33: 14:1f:bf:fc:30:34:7f:9e:c4:32:15:b6:5e:03:91: e4:7d:bc:1f:bf:f2:a9:b8:04:de:20:73:d8:10:62: ef:c9:5f:a6:d2:65:9b:62:a1:a7:35:56:3c:da:81: 71:a1:29:f2:2d:11:ef:09:11:4f:0d:1e:32:5d:76: 37:cb:62:e8:4d:76:48:27:d4:b7:7a:ae:d9:81:a4: 50:55:1b:a1:65:bb:87:ec:4d:47:7f:19:93:50:ea: e7:c5:67:2e:09:26:88:bc:5d:82:45:96:31:c5:2e: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F5:CF:47:14:D6:94:9B:BE:8A:11:23:07:C2:6F:D8:D0:C1:BC:12 X509v3 Authority Key Identifier: keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e2:e2:ca:76:9c:bc:a7:29:eb:9b:7c:8b:cf:b5:36:b2:b9: a0:49:7d:66:c1:01:7b:07:bc:b6:56:c8:be:e5:22:c4:07:0a: b2:a1:fd:b7:dc:0d:ca:f8:00:8c:d0:19:e1:ea:92:83:37:e9: 62:56:e9:b6:5c:c4:ce:eb:e6:58:31:96:ac:56:95:b0:b4:97: 47:0b:e0:52:38:81:82:d3:b2:0b:d4:4c:a4:e7:11:a2:6a:5f: 7a:c2:72:42:40:1a:7f:71:5f:ac:b2:d9:b9:18:77:37:f7:c9: ed:f5:d1:49:b1:f1:52:67:4e:78:34:0a:a5:95:8e:cb:91:1c: fc:d4:4d:ab:45:0b:b7:e2:98:db:1d:12:a6:d8:2e:d0:09:a7: ef:06:16:a7:b0:66:d6:22:cf:b0:a0:a2:d7:df:c6:39:d6:25: a7:8c:7c:eb:58:4c:be:f0:a0:78:06:f6:cb:18:01:04:4d:2f: e2:d2:46:d3:b0:3e:7b:a9:3f:07:2d:18:cc:ef:96:8e:2c:70: 91:65:93:f1:81:0d:c2:94:c5:56:40:c9:e0:9a:bf:7c:29:ee: c4:0e:44:55:ed:58:05:81:27:00:56:76:72:45:69:58:a3:be: ab:cb:20:c0:15:1e:4c:de:39:5b:2f:5b:02:b3:56:36:c0:44: 77:23:02:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdAITlUtNuUbks5Z78A+2CnnT0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJE MzIxNEVDMjAeFw0yNjAyMDEwMDA2MzhaFw0yNjAyMDQxMDA3MzhaMDMxMTAvBgNV BAMTKEYwRjVDRjQ3MTRENjk0OUJCRThBMTEyMzA3QzI2RkQ4RDBDMUJDMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNl6yhQsjwoOZlhKhsht6t8VM8 Aw3L1jZ77HtfEVnJDmgHrb3oXjYBZ3JwrdVzNW/75cQINvLKgElXPjkTD/QcC0HP sBBbx4m/+f8GCqOM2Z7bxdnQOdXXNiwLibULFWe0y5ejE1Kd5RNmr8T0MXGLEe4X Zcbtq6w2RcKXiw3WEEhNEZEpYFEWhEH6u+tgOa3dZFiVMxQfv/wwNH+exDIVtl4D keR9vB+/8qm4BN4gc9gQYu/JX6bSZZtioac1VjzagXGhKfItEe8JEU8NHjJddjfL YuhNdkgn1Ld6rtmBpFBVG6Flu4fsTUd/GZNQ6ufFZy4JJoi8XYJFljHFLlNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PXPRxTWlJu+ihEjB8Jv2NDBvBIwHwYDVR0j BBgwFoAUXHJAyhNck4Nflajh81JpQtMhTsIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjFmOTk5Yi1hYmNlLTRmYTktOGU3OS05M2I5YzVlNDU0ZTEvMC81QzcyNDBDQTEz NUM5MzgzNUY5NUE4RTFGMzUyNjk0MkQzMjE0RUMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5NDJEMzIx NEVDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDIxZjk5OWItYWJjZS00ZmE5LThl NzktOTNiOWM1ZTQ1NGUxLzAvNUM3MjQwQ0ExMzVDOTM4MzVGOTVBOEUxRjM1MjY5 NDJEMzIxNEVDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/i4sp2nLynKeubfIvPtTayuaBJfWbBAXsH vLZWyL7lIsQHCrKh/bfcDcr4AIzQGeHqkoM36WJW6bZcxM7r5lgxlqxWlbC0l0cL 4FI4gYLTsgvUTKTnEaJqX3rCckJAGn9xX6yy2bkYdzf3ye310Umx8VJnTng0CqWV jsuRHPzUTatFC7fimNsdEqbYLtAJp+8GFqewZtYiz7CgotffxjnWJaeMfOtYTL7w oHgG9ssYAQRNL+LSRtOwPnupPwctGMzvlo4scJFlk/GBDcKUxVZAyeCav3wp7sQO RFXtWAWBJwBWdnJFaVijvqvLIMAVHkzeOVsvWwKzVjbARHcjAkA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:06 2026 by rpki-client