This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft File: 5234A428BC63559E2511B3EFFB085B82B195A8ED.mft (raw, json) Hash identifier: sqX4Y186Gb+NoSMn74Hez1DvL/mcift+K9AbIF+1eAI= Subject key identifier: DF:0C:53:69:E8:33:44:4F:E7:34:56:7B:05:EB:1A:A1:73:DB:21:B4 Authority key identifier: 52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED Certificate issuer: /CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Certificate serial: 20C9811F5996AC647A537EA12DD4CC4897DDBF26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft Manifest number: 8F Signing time: Sun 01 Feb 2026 19:02:14 +0000 Manifest this update: Sun 01 Feb 2026 18:57:14 +0000 Manifest next update: Wed 04 Feb 2026 21:20:14 +0000 Files and hashes: 1: 3130332e31372e37372e302f32342d3234203d3e20313331373831.roa (hash: 4y750PE+WZPEuQKdgW2BVnFEcTQLxauJA4sENyjZR2o=) 2: 5234A428BC63559E2511B3EFFB085B82B195A8ED.crl (hash: pyvYWKzn/9hbJ1Op5SHur9KYfpy2P+u1sm+JrdB80EA=) 3: 3130332e31372e37362e302f32342d3234203d3e20313331373831.roa (hash: rB8zcfhigYxp6rZG5kgxX6r/oJS8xphHw/YAzK8Sodw=) 4: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: 3jZR/32xfuAKeJQ/xf5TVwB85F6YIOYekaTwsoIa1SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c9:81:1f:59:96:ac:64:7a:53:7e:a1:2d:d4:cc:48:97:dd:bf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5234A428BC63559E2511B3EFFB085B82B195A8ED Validity Not Before: Feb 1 18:57:14 2026 GMT Not After : Feb 4 21:20:14 2026 GMT Subject: CN=DF0C5369E833444FE734567B05EB1AA173DB21B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:a2:4f:f5:5e:19:45:ce:e3:53:23:ba:5b: a1:6c:3c:0d:3b:dd:b8:ed:b6:f4:24:a7:86:ad:24: 1f:bf:7f:f1:7b:80:03:7c:14:70:ec:f7:80:b5:a0: 4d:53:63:a1:eb:b5:f3:8b:52:7d:bb:21:b8:6d:53: 74:0b:f4:0a:4b:37:6c:54:54:4d:98:29:fd:af:de: aa:7b:9f:9c:97:86:e8:4b:17:6a:23:61:55:8a:c2: 42:49:71:df:c2:d3:3b:d9:55:3f:2e:4f:8d:90:d3: 51:2d:aa:8d:9b:4f:c0:a9:0a:ca:74:87:cf:62:54: c6:37:64:d3:b0:46:9f:32:c2:03:21:9b:f9:af:1c: d4:30:8f:cd:8e:b6:dd:50:ed:6f:f3:55:11:c2:69: e6:71:46:b4:78:87:95:b0:5f:13:fa:a4:98:d3:11: 05:1a:9b:39:8d:2a:98:cf:e9:05:5e:aa:e6:18:39: 70:ec:c5:80:86:5d:ef:49:69:b8:c1:de:ac:98:7a: 01:be:99:fc:83:9a:65:d9:38:dc:c1:81:b0:6e:54: 84:14:62:02:53:3c:70:1f:59:21:89:14:2e:b3:cd: 98:ba:4f:01:5c:ac:18:38:bf:b5:26:b2:93:f7:aa: 47:25:92:ab:c8:87:61:7b:c1:34:c9:6c:44:a8:d1: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:0C:53:69:E8:33:44:4F:E7:34:56:7B:05:EB:1A:A1:73:DB:21:B4 X509v3 Authority Key Identifier: keyid:52:34:A4:28:BC:63:55:9E:25:11:B3:EF:FB:08:5B:82:B1:95:A8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5234A428BC63559E2511B3EFFB085B82B195A8ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a071514-e4de-4ace-a0df-f7c4ab8074a5/0/5234A428BC63559E2511B3EFFB085B82B195A8ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d5:23:bc:51:1d:8c:fc:99:55:f6:ad:c7:f2:f5:e3:2b:a6: 1c:38:ab:39:e1:d3:db:cf:b2:05:b1:11:a6:42:1e:fd:50:c4: 6d:60:ca:a9:2c:96:ae:92:5c:c6:e6:93:6d:5e:4c:b0:a9:46: b4:8a:49:4b:f2:43:0b:54:4d:a2:1c:95:b8:10:4e:15:bf:cc: 21:63:11:cc:69:2e:65:fb:02:5d:65:79:6c:43:7d:76:de:df: be:a3:ca:1c:d3:d1:92:2b:8f:8d:80:cb:b9:d7:7e:a2:92:02: e3:d5:1a:e4:f5:df:b9:c0:3e:af:56:99:3a:26:0d:5a:14:28: d1:7c:a0:47:cc:75:df:58:b4:3e:58:35:b5:bc:0a:31:25:1a: f2:87:be:a0:ad:a6:35:c6:66:32:bc:92:ca:af:b2:bc:f0:b5: e2:44:8b:6f:25:49:1b:83:80:06:1e:e5:9e:6a:b0:e0:c9:11: 0c:ac:df:37:e1:fd:55:e0:12:b4:f9:ad:97:5d:65:0d:80:ac: 71:9e:c6:69:ef:b3:72:30:29:74:ab:19:82:39:f4:b6:d9:f2: a5:55:9b:4a:15:3a:97:a1:89:3e:48:bf:fc:57:6e:e1:67:35: 68:41:f9:32:9b:ab:e3:08:50:f9:11:e0:e8:08:03:b5:e0:39: 1f:8b:0d:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMmBH1mWrGR6U36hLdTMSJfdvyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJC MTk1QThFRDAeFw0yNjAyMDExODU3MTRaFw0yNjAyMDQyMTIwMTRaMDMxMTAvBgNV BAMTKERGMEM1MzY5RTgzMzQ0NEZFNzM0NTY3QjA1RUIxQUExNzNEQjIxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnt6JP9V4ZRc7jUyO6W6FsPA07 3bjttvQkp4atJB+/f/F7gAN8FHDs94C1oE1TY6HrtfOLUn27IbhtU3QL9ApLN2xU VE2YKf2v3qp7n5yXhuhLF2ojYVWKwkJJcd/C0zvZVT8uT42Q01Etqo2bT8CpCsp0 h89iVMY3ZNOwRp8ywgMhm/mvHNQwj82Ott1Q7W/zVRHCaeZxRrR4h5WwXxP6pJjT EQUamzmNKpjP6QVequYYOXDsxYCGXe9JabjB3qyYegG+mfyDmmXZONzBgbBuVIQU YgJTPHAfWSGJFC6zzZi6TwFcrBg4v7UmspP3qkclkqvIh2F7wTTJbESo0bLVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wxTaegzRE/nNFZ7BesaoXPbIbQwHwYDVR0j BBgwFoAUUjSkKLxjVZ4lEbPv+whbgrGVqO0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTA3MTUxNC1lNGRlLTRhY2UtYTBkZi1mN2M0YWI4MDc0YTUvMC81MjM0QTQyOEJD NjM1NTlFMjUxMUIzRUZGQjA4NUI4MkIxOTVBOEVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVCODJCMTk1 QThFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmEwNzE1MTQtZTRkZS00YWNlLWEw ZGYtZjdjNGFiODA3NGE1LzAvNTIzNEE0MjhCQzYzNTU5RTI1MTFCM0VGRkIwODVC ODJCMTk1QThFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbVI7xRHYz8mVX2rcfy9eMrphw4qznh09vP sgWxEaZCHv1QxG1gyqkslq6SXMbmk21eTLCpRrSKSUvyQwtUTaIclbgQThW/zCFj EcxpLmX7Al1leWxDfXbe376jyhzT0ZIrj42Ay7nXfqKSAuPVGuT137nAPq9WmTom DVoUKNF8oEfMdd9YtD5YNbW8CjElGvKHvqCtpjXGZjK8ksqvsrzwteJEi28lSRuD gAYe5Z5qsODJEQys3zfh/VXgErT5rZddZQ2ArHGexmnvs3IwKXSrGYI59LbZ8qVV m0oVOpehiT5Iv/xXbuFnNWhB+TKbq+MIUPkR4OgIA7XgOR+LDfQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:58:31 2026 by rpki-client