This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: 3oookGS6CSEdke7qme34hHVJLQKI2niYjt6h3K8hWoY= Subject key identifier: 67:80:F8:74:BB:26:76:AB:D2:62:A1:39:9E:AD:85:66:58:A9:9A:35 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 4222C1651DF4B3A211B2EC179FC85ED6A3B7C874 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 0245 Signing time: Sun 01 Feb 2026 19:51:19 +0000 Manifest this update: Sun 01 Feb 2026 19:46:19 +0000 Manifest next update: Thu 05 Feb 2026 07:49:19 +0000 Files and hashes: 1: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=) 2: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: Ml9/cqc0KylJnpNYNEMsfPFJebVB6CdySLMEzIjIbes=) 3: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:c1:65:1d:f4:b3:a2:11:b2:ec:17:9f:c8:5e:d6:a3:b7:c8:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: Feb 1 19:46:19 2026 GMT Not After : Feb 5 07:49:19 2026 GMT Subject: CN=6780F874BB2676ABD262A1399EAD856658A99A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:ae:2f:4d:f2:52:65:af:86:6c:41:fc:cb: 42:39:ba:94:e8:d0:eb:32:a2:eb:71:30:75:37:cd: ee:4f:1e:8c:dc:b8:3b:07:84:19:a2:7e:9b:29:1b: af:0e:36:15:2f:ff:a2:6f:de:fa:37:a4:5e:e3:54: a7:63:6c:33:87:08:6d:7b:87:a0:2f:a1:27:a8:58: 95:b8:f5:a8:0e:e3:e5:58:47:e0:16:16:11:c8:7f: 7a:6b:4a:51:fd:17:47:75:a5:b2:0b:47:d2:96:d7: 4a:34:9b:d1:bd:5a:93:42:43:41:21:37:f9:58:00: 41:c2:1b:2b:51:b3:b8:62:a5:19:6e:06:fd:4c:e3: f2:7a:03:9f:0e:91:dd:20:c3:72:39:19:da:eb:06: 27:dc:13:e5:60:a9:c2:a1:fe:da:2e:69:00:cc:06: 80:65:27:26:47:ff:58:8c:2c:0b:91:1e:5c:ff:da: c9:ae:37:3b:fe:97:2d:ad:8f:4a:b3:40:1b:8f:d3: c9:d4:7d:63:f6:12:a1:76:9c:97:48:6b:80:37:2c: 6d:7e:37:c4:81:9c:87:c8:83:49:33:42:6d:74:aa: 71:be:3d:e0:21:cc:5f:24:36:b7:0e:67:95:2d:0f: 4f:21:ee:bf:90:7d:e3:39:b1:66:f7:27:12:6f:9f: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:F8:74:BB:26:76:AB:D2:62:A1:39:9E:AD:85:66:58:A9:9A:35 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0c:01:3c:f9:c2:95:e8:59:97:da:90:ca:72:f1:fb:52:35: f7:3f:65:cf:8c:40:b8:b7:ec:22:e1:d0:bf:32:63:b0:f1:32: a3:b8:32:10:41:68:0d:9b:bc:e9:c3:7e:bf:e7:a9:69:df:a6: 3f:48:39:42:3e:fd:12:5f:8d:bb:77:5c:b8:08:23:28:03:11: f8:8f:ed:3c:65:df:77:45:9c:d1:df:81:f8:5d:c8:93:9f:3a: 34:5d:3b:75:c7:e6:f6:b8:ea:a0:ae:a2:7b:19:d6:66:92:49: 92:1b:2e:7c:d5:6a:9a:9b:54:b3:03:b6:65:e8:8f:e2:29:ad: 63:9d:5d:29:2b:38:c2:0e:5b:78:80:4a:7c:60:0c:27:75:ef: 0d:31:30:ce:47:ab:6c:0c:e8:f5:66:0a:0a:d0:6c:7c:d4:97: 09:c0:dc:90:f2:76:07:04:a4:ce:70:c6:a9:fb:67:9b:d7:86: 24:fb:c9:38:5c:c0:b7:a9:f8:22:16:6d:7f:07:38:59:57:26: 14:6a:ce:69:b5:92:cf:1c:18:06:34:0b:1b:dd:d9:70:fc:02: 5d:18:f1:73:0e:ab:b6:6f:a5:e4:ed:dd:39:42:05:cf:3f:73: e8:15:99:1f:74:6e:96:db:fc:24:00:22:63:40:1b:c1:a7:13: bf:a9:10:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiLBZR30s6IRsuwXn8he1qO3yHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNjAyMDExOTQ2MTlaFw0yNjAyMDUwNzQ5MTlaMDMxMTAvBgNV BAMTKDY3ODBGODc0QkIyNjc2QUJEMjYyQTEzOTlFQUQ4NTY2NThBOTlBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqq4vTfJSZa+GbEH8y0I5upTo 0OsyoutxMHU3ze5PHozcuDsHhBmifpspG68ONhUv/6Jv3vo3pF7jVKdjbDOHCG17 h6AvoSeoWJW49agO4+VYR+AWFhHIf3prSlH9F0d1pbILR9KW10o0m9G9WpNCQ0Eh N/lYAEHCGytRs7hipRluBv1M4/J6A58Okd0gw3I5GdrrBifcE+VgqcKh/touaQDM BoBlJyZH/1iMLAuRHlz/2smuNzv+ly2tj0qzQBuP08nUfWP2EqF2nJdIa4A3LG1+ N8SBnIfIg0kzQm10qnG+PeAhzF8kNrcOZ5UtD08h7r+QfeM5sWb3JxJvn8QPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4D4dLsmdqvSYqE5nq2FZlipmjUwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcMATz5wpXoWZfakMpy8ftSNfc/Zc+MQLi3 7CLh0L8yY7DxMqO4MhBBaA2bvOnDfr/nqWnfpj9IOUI+/RJfjbt3XLgIIygDEfiP 7Txl33dFnNHfgfhdyJOfOjRdO3XH5va46qCuonsZ1maSSZIbLnzVapqbVLMDtmXo j+IprWOdXSkrOMIOW3iASnxgDCd17w0xMM5Hq2wM6PVmCgrQbHzUlwnA3JDydgcE pM5wxqn7Z5vXhiT7yThcwLep+CIWbX8HOFlXJhRqzmm1ks8cGAY0Cxvd2XD8Al0Y 8XMOq7ZvpeTt3TlCBc8/c+gVmR90bpbb/CQAImNAG8GnE7+pEK8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:28 2026 by rpki-client