This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft File: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft (raw, json) Hash identifier: dNdzkMJaenVQ/F3K2mq4IaiEfesbXI5hZAFcDAp3/Ks= Subject key identifier: 18:C5:B4:06:E9:64:B6:ED:14:EE:30:BE:34:54:09:36:02:29:84:43 Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F Certificate issuer: /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Certificate serial: 033629D51B1B5DCC12BE021149C6057145DD6F6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft Manifest number: 037F Signing time: Sat 31 Jan 2026 21:00:41 +0000 Manifest this update: Sat 31 Jan 2026 20:55:41 +0000 Manifest next update: Wed 04 Feb 2026 02:55:41 +0000 Files and hashes: 1: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: UdMMuDzVeoO8FHRaQDUzSG3siVMxaIJM4SzGz06W/gA=) 2: 5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl (hash: 4kIHuWI6w9W8cA9xyMTATdm4Ify1NZc82N5aBpRNAus=) 3: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: MsMpPPcpIZuSudoMMepNN+ZazUOetlA5JvcEYSzR82g=) 4: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: AdQ+JO/REhdDwDAu63+KE7Cs+bTRN78/P47D5a5DoZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:36:29:d5:1b:1b:5d:cc:12:be:02:11:49:c6:05:71:45:dd:6f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F Validity Not Before: Jan 31 20:55:41 2026 GMT Not After : Feb 4 02:55:41 2026 GMT Subject: CN=18C5B406E964B6ED14EE30BE3454093602298443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:3b:d8:e6:56:d1:fd:22:99:b7:89:8c:80: a4:95:fe:38:47:6f:3e:c2:85:fe:19:96:d6:51:1c: d6:88:a2:9d:3a:21:70:35:3e:c1:e1:62:37:9d:6f: 1b:84:48:f3:ff:8f:d2:85:d0:39:a7:38:dd:2f:49: 4d:82:05:76:ac:04:a8:8b:e4:22:0c:0a:16:29:fa: 97:0b:11:f5:92:b5:70:3d:a6:dd:4d:4b:6d:2f:6d: 9a:7d:01:5f:d4:12:3c:07:a6:ec:e6:c2:59:9d:26: 3d:cc:09:fc:34:44:3f:c9:29:6c:ad:79:bf:82:50: 45:46:1b:5a:e5:00:ce:f3:cd:e1:75:21:78:af:69: 6e:8f:4f:f4:0a:69:1d:95:92:bd:e3:a9:66:8f:e2: 3a:ed:d5:91:1e:87:01:82:ad:da:25:af:9e:38:bc: 81:fd:6e:eb:9e:18:45:a2:25:c2:26:ac:9c:ba:15: 7f:29:65:3d:ab:c3:eb:da:48:aa:37:ef:a2:36:09: 8a:31:b5:69:54:a7:ea:a8:4b:8e:01:ad:3a:1a:6f: f0:80:0c:51:52:81:86:57:ab:f2:29:3e:36:86:5b: 46:02:5a:7b:28:99:e6:ef:65:1a:3c:88:34:81:e5: ab:1a:73:9b:43:25:90:ab:3a:94:38:dd:5a:9e:0b: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C5:B4:06:E9:64:B6:ED:14:EE:30:BE:34:54:09:36:02:29:84:43 X509v3 Authority Key Identifier: keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:59:e2:0e:9f:05:98:4b:5f:7b:d3:05:d9:05:67:36:5d:c5: b8:36:8c:8e:87:80:db:de:30:db:4b:82:55:a4:d7:a2:f2:69: b7:c0:03:6b:38:5f:22:55:37:e3:36:58:98:e0:13:fc:55:f9: e0:cf:c2:02:41:51:4e:e1:12:9f:cb:72:57:c8:e7:a1:ef:59: 8c:15:0a:2c:30:15:5f:b2:65:37:af:b2:8c:2e:21:f2:11:a7: a7:b9:ea:b7:d4:14:27:f1:bf:97:70:81:a4:17:11:1f:6f:5f: 00:6a:eb:62:4c:d8:4d:e4:66:d2:19:fe:9c:cf:1f:3d:88:91: d5:7d:5a:19:60:af:1d:6d:41:b5:dc:09:72:dc:b2:b8:3f:1a: 5c:57:46:2d:b9:31:15:dc:25:77:80:ac:9f:d1:5a:1e:43:55: b9:d4:ef:5f:ae:f7:cb:cc:3a:10:91:37:a7:4a:85:da:b7:ac: df:fe:2a:20:fc:80:d9:7e:fa:a7:80:d2:34:41:16:ed:39:c4: e1:01:2f:18:0a:5a:99:c0:f3:31:ac:01:12:5c:25:ec:13:ac: ee:24:b9:b9:1f:7d:86:f9:63:43:f8:71:5d:d0:00:5a:92:f8: e3:9c:2f:8b:06:af:39:ca:46:a3:99:9f:41:4b:62:19:41:39: a0:e1:0f:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAzYp1RsbXcwSvgIRScYFcUXdb28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My RTZCM0Q4RjAeFw0yNjAxMzEyMDU1NDFaFw0yNjAyMDQwMjU1NDFaMDMxMTAvBgNV BAMTKDE4QzVCNDA2RTk2NEI2RUQxNEVFMzBCRTM0NTQwOTM2MDIyOTg0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzzvY5lbR/SKZt4mMgKSV/jhH bz7Chf4ZltZRHNaIop06IXA1PsHhYjedbxuESPP/j9KF0DmnON0vSU2CBXasBKiL 5CIMChYp+pcLEfWStXA9pt1NS20vbZp9AV/UEjwHpuzmwlmdJj3MCfw0RD/JKWyt eb+CUEVGG1rlAM7zzeF1IXivaW6PT/QKaR2Vkr3jqWaP4jrt1ZEehwGCrdolr544 vIH9buueGEWiJcImrJy6FX8pZT2rw+vaSKo376I2CYoxtWlUp+qoS44BrToab/CA DFFSgYZXq/IpPjaGW0YCWnsomebvZRo8iDSB5asac5tDJZCrOpQ43VqeC88hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMW0Bulktu0U7jC+NFQJNgIphEMwHwYDVR0j BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0 NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC M0Q4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4ODQ0MmItYzQ4ZS00YmEwLThh ZDctNThlMTI2M2M2ZGM3LzAvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJC Q0MyRTZCM0Q4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJZ4g6fBZhLX3vTBdkFZzZdxbg2jI6HgNve MNtLglWk16LyabfAA2s4XyJVN+M2WJjgE/xV+eDPwgJBUU7hEp/LclfI56HvWYwV CiwwFV+yZTevsowuIfIRp6e56rfUFCfxv5dwgaQXER9vXwBq62JM2E3kZtIZ/pzP Hz2IkdV9Whlgrx1tQbXcCXLcsrg/GlxXRi25MRXcJXeArJ/RWh5DVbnU71+u98vM OhCRN6dKhdq3rN/+KiD8gNl++qeA0jRBFu05xOEBLxgKWpnA8zGsARJcJewTrO4k ubkffYb5Y0P4cV3QAFqS+OOcL4sGrznKRqOZn0FLYhlBOaDhDyc= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:11 2026 by rpki-client