This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json)
Hash identifier: lMvXOthdN33cNKPKuc/wFGQtG85rSZki0gdBfqjBf6o=
Subject key identifier: E5:90:68:A9:6D:87:D3:F0:61:77:7D:38:A6:EE:04:E3:C9:34:E3:F1
Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92
Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
Certificate serial: 6B874CD15E4F39A18413C3DDED7CFF677147BF7F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
Manifest number: 01EB
Signing time: Fri 30 Jan 2026 22:20:41 +0000
Manifest this update: Fri 30 Jan 2026 22:15:41 +0000
Manifest next update: Tue 03 Feb 2026 08:44:41 +0000
Files and hashes: 1: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: aKQ7b6IgfG2jb742DBP3SCZPhjUuYRxWP5tSn9ucpw0=)
2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: jOayWyAgZCsvj+hLghVgXXEurXODkcmj5Sfa+RC7w5g=)
3: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: DZ9aFZwF9ggTsXgvyFo7pS14fMoFuaypTJy0+7wDw/w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl
rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 08:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:87:4c:d1:5e:4f:39:a1:84:13:c3:dd:ed:7c:ff:67:71:47:bf:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792
Validity
Not Before: Jan 30 22:15:41 2026 GMT
Not After : Feb 3 08:44:41 2026 GMT
Subject: CN=E59068A96D87D3F061777D38A6EE04E3C934E3F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:c9:bb:0e:85:4e:50:00:f0:8b:b5:6d:14:
1d:81:b5:8d:fb:d5:0a:a0:39:d4:9c:19:90:03:52:
58:0c:2a:f9:3e:48:18:70:8c:95:15:3c:13:65:77:
b1:d5:d8:a6:8c:ec:31:04:16:eb:46:31:66:fd:99:
7b:81:c7:a0:4a:a0:f5:36:d7:b9:76:20:89:d2:7a:
df:fc:7a:76:16:38:98:9a:5a:88:0e:28:b3:7b:8b:
da:d6:ff:7d:14:80:97:60:eb:3d:84:da:13:31:ae:
66:d3:18:66:40:94:09:09:e4:5d:dc:56:16:96:f8:
ca:87:a2:48:7a:4a:5c:30:8b:8c:27:cd:4b:ed:b6:
b9:e6:3a:4d:b0:94:b4:59:f6:61:39:42:86:13:fc:
c6:0c:b0:85:ca:ba:b6:d0:26:7a:ce:47:07:e1:e4:
7c:3d:38:87:42:5e:b6:f0:a5:01:47:60:e0:b2:8c:
36:00:6c:ac:ce:28:8d:d9:b3:2c:3e:04:6a:c4:c1:
1a:a8:2e:ed:c3:5e:46:5d:74:c4:e3:de:e7:e7:49:
b9:6d:e1:d4:b3:83:9d:75:85:43:6f:ca:37:22:4f:
f2:17:d9:78:9d:86:33:2f:27:c9:5e:ab:40:b1:3a:
65:02:60:35:61:69:c8:c0:19:26:2e:ef:3d:a3:d9:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:68:A9:6D:87:D3:F0:61:77:7D:38:A6:EE:04:E3:C9:34:E3:F1
X509v3 Authority Key Identifier:
keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d8:88:97:c5:c9:ef:9b:2c:9d:46:f5:9a:33:db:be:d6:b8:
3e:25:99:1a:c2:96:9a:0d:aa:fa:73:09:8e:5c:8a:aa:ee:a1:
2f:37:30:6e:09:74:00:5f:38:ad:c9:b8:5c:ce:b4:a7:e4:a5:
00:ea:10:01:bb:c0:b6:98:70:9f:fb:e0:23:c3:8f:5e:63:e7:
ae:1e:e6:c5:2b:06:06:ba:c8:4a:49:10:98:55:1f:3f:5e:75:
c8:b3:06:dc:d7:b0:1b:6e:1c:ad:64:5f:40:be:14:48:18:2a:
5a:77:3e:45:f8:22:f6:af:81:4a:8f:23:43:77:ff:44:91:c2:
62:c5:80:05:84:f8:52:2d:3b:d0:76:76:1f:79:3d:5b:85:e0:
04:00:b4:45:73:3d:dd:34:c5:f3:d2:66:df:83:9a:38:72:d9:
85:8e:35:8e:54:c2:e6:41:43:dd:c7:20:d5:ac:7b:a4:29:4d:
0b:dc:db:99:9e:6e:af:6b:d3:98:6f:0a:5b:3f:69:38:bc:b9:
e8:34:13:1a:3e:50:36:5f:25:fd:53:b2:b6:45:09:b0:9c:a4:
29:29:02:a5:14:15:9b:0e:cd:ba:50:ed:8e:ba:ec:b1:d0:c7:
d4:76:b2:c2:12:9b:25:2d:44:de:b8:17:52:6f:4c:3c:16:69:
f7:9e:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:06 2026 by rpki-client