This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: BdxtfabS0lTNrd1YQxfMxOXFgC+3Im9kWL14Bg1Ul6A= Subject key identifier: BF:B7:51:95:1F:A9:33:7F:42:77:25:A2:D9:62:6E:04:84:4B:70:6B Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 53C59D56D51D01B9479E71BD29E6699429B3D8D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: 011F Signing time: Mon 19 Jan 2026 14:11:51 +0000 Manifest this update: Mon 19 Jan 2026 14:06:51 +0000 Manifest next update: Thu 22 Jan 2026 20:38:51 +0000 Files and hashes: 1: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) 2: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: 3RyJG38fv7DEWLdrLAt51YQad0zNz9wjR1XKRVjH7MQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 20:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c5:9d:56:d5:1d:01:b9:47:9e:71:bd:29:e6:69:94:29:b3:d8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: Jan 19 14:06:51 2026 GMT Not After : Jan 22 20:38:51 2026 GMT Subject: CN=BFB751951FA9337F427725A2D9626E04844B706B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:f1:19:e2:d1:c6:65:28:aa:8f:29:d5:93: 08:1b:15:3c:8c:07:f3:8c:49:6d:f0:56:89:d7:59: a6:27:42:cc:90:d2:c3:6e:5d:1b:ae:12:7a:1e:58: f4:e4:10:d5:78:61:01:7c:68:5f:3b:ab:65:3b:3c: 05:64:dd:0f:7c:2d:3e:98:fb:e2:0a:6e:f6:06:2b: 81:a1:91:94:0d:e1:b4:b9:c7:d5:bf:9b:ce:26:a5: 6f:d8:21:ae:1e:bd:ea:d7:11:0e:0c:6c:f5:c7:7b: 6b:0d:3f:70:87:18:2e:9f:0b:f2:79:5d:80:4a:8f: c0:2b:1b:87:ca:af:7a:70:cd:17:4c:64:95:7d:80: 04:e9:ff:bd:01:7e:b6:7f:96:10:88:83:71:bd:aa: 55:de:27:29:4c:dd:c9:da:19:65:0b:61:2c:78:0b: cd:d3:6e:e5:c5:d2:72:29:8c:18:9a:bd:9a:60:6a: 14:98:15:98:73:3c:84:c3:84:68:db:73:ce:a7:a8: 7e:f7:f1:b4:c5:62:05:1e:ed:b9:17:45:9f:ba:b0: d4:8f:3c:ec:7e:ad:19:92:1f:6a:c0:e0:75:3b:7d: 57:8d:9f:e9:ed:62:22:79:73:5f:fc:56:79:7d:3e: fd:ff:4c:2b:2f:69:3f:7a:04:f7:42:33:99:78:de: a8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B7:51:95:1F:A9:33:7F:42:77:25:A2:D9:62:6E:04:84:4B:70:6B X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:cb:d1:c5:c6:54:31:a0:17:07:ee:70:c2:99:cc:6b:62:c6: 4b:88:72:ee:b6:c1:c1:26:ac:e2:bd:06:c1:4c:d0:ff:9b:59: 17:74:41:9d:c8:ea:6a:c8:d9:e3:b1:46:a4:20:49:4a:42:c2: 6c:27:f1:05:dc:f0:72:7b:01:ff:f6:35:3a:64:cc:c6:6c:36: 15:6d:51:d1:90:6a:c3:3c:d3:db:0b:a7:eb:2a:eb:3c:b5:a4: 9c:a0:23:bf:02:8e:1f:0a:a6:b8:51:bf:3c:80:4c:c9:21:e0: 82:01:66:d9:23:b6:d7:a1:ba:90:2d:2b:6a:7a:62:f6:d0:2d: 04:7a:00:99:40:07:ae:c7:bb:1a:0a:98:45:79:d3:2b:79:89: 90:78:46:c5:82:75:a7:95:e3:73:27:9e:8a:eb:46:95:9f:08: 96:7e:64:7c:2b:23:35:c6:89:4e:84:d4:1f:c8:4c:2e:d7:30: 51:4d:e1:44:4f:7a:b1:99:e5:26:65:06:79:91:f4:f9:e3:91: 79:6f:7d:a8:9b:ca:08:73:bb:8e:f7:61:37:dc:98:0c:de:0d: cb:c5:be:92:88:9c:2b:8b:8d:a2:64:83:b4:ad:0d:96:ed:c8: df:c9:d9:fa:b5:be:f1:70:d2:aa:f2:2e:82:87:5b:be:d1:ca: 1f:70:33:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8WdVtUdAblHnnG9KeZplCmz2NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNjAxMTkxNDA2NTFaFw0yNjAxMjIyMDM4NTFaMDMxMTAvBgNV BAMTKEJGQjc1MTk1MUZBOTMzN0Y0Mjc3MjVBMkQ5NjI2RTA0ODQ0QjcwNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSs/EZ4tHGZSiqjynVkwgbFTyM B/OMSW3wVonXWaYnQsyQ0sNuXRuuEnoeWPTkENV4YQF8aF87q2U7PAVk3Q98LT6Y ++IKbvYGK4GhkZQN4bS5x9W/m84mpW/YIa4everXEQ4MbPXHe2sNP3CHGC6fC/J5 XYBKj8ArG4fKr3pwzRdMZJV9gATp/70BfrZ/lhCIg3G9qlXeJylM3cnaGWULYSx4 C83TbuXF0nIpjBiavZpgahSYFZhzPITDhGjbc86nqH738bTFYgUe7bkXRZ+6sNSP POx+rRmSH2rA4HU7fVeNn+ntYiJ5c1/8Vnl9Pv3/TCsvaT96BPdCM5l43qgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv7dRlR+pM39CdyWi2WJuBIRLcGswHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfL0cXGVDGgFwfucMKZzGtixkuIcu62wcEm rOK9BsFM0P+bWRd0QZ3I6mrI2eOxRqQgSUpCwmwn8QXc8HJ7Af/2NTpkzMZsNhVt UdGQasM809sLp+sq6zy1pJygI78Cjh8KprhRvzyATMkh4IIBZtkjttehupAtK2p6 YvbQLQR6AJlAB67HuxoKmEV50yt5iZB4RsWCdaeV43MnnorrRpWfCJZ+ZHwrIzXG iU6E1B/ITC7XMFFN4URPerGZ5SZlBnmR9PnjkXlvfaibyghzu473YTfcmAzeDcvF vpKInCuLjaJkg7StDZbtyN/J2fq1vvFw0qryLoKHW77Ryh9wM0Q= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:53 2026 by rpki-client