This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json)
Hash identifier: RIAG0V5Ec/F3F+J7k3XQ1YKCXLKZnoeGiCU/jrbXRdI=
Subject key identifier: 88:7B:7E:71:1A:1D:11:8A:43:E9:A8:3C:7D:1C:5E:B8:A8:29:73:2D
Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21
Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
Certificate serial: 35DA43EE7301DB032AC132D30D7015D4A8519FA5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
Manifest number: 02BF
Signing time: Sun 01 Feb 2026 15:11:32 +0000
Manifest this update: Sun 01 Feb 2026 15:06:32 +0000
Manifest next update: Wed 04 Feb 2026 20:24:32 +0000
Files and hashes: 1: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: TPHc8hMgpG4lNB1VT7M46EhAo2F9SEdX4ITwbrTmfrk=)
2: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: SQZwokLoXeRvlielYgwYLdx6P7w3eOQGoo+Hym3ZZkY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl
rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 20:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:da:43:ee:73:01:db:03:2a:c1:32:d3:0d:70:15:d4:a8:51:9f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21
Validity
Not Before: Feb 1 15:06:32 2026 GMT
Not After : Feb 4 20:24:32 2026 GMT
Subject: CN=887B7E711A1D118A43E9A83C7D1C5EB8A829732D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:7e:43:f6:ea:df:81:01:f8:d9:32:7c:13:
6c:8e:40:c8:2a:85:0c:b2:ce:1b:5e:d5:bb:62:ad:
b6:0f:50:09:57:36:f0:28:b0:3d:d7:23:fc:d7:ba:
50:9c:57:95:10:80:bb:29:11:c3:61:1c:2d:f3:0d:
f1:79:a5:07:e8:9b:55:6f:cf:55:0f:72:65:d3:d1:
3f:88:76:fd:f4:55:61:1f:39:4b:5b:c5:b0:fa:9c:
00:77:53:43:ed:c4:4a:1d:fb:1f:cf:f0:0e:9b:3e:
f6:85:db:97:c6:c7:88:15:e8:2b:a7:ad:2c:e3:67:
09:f3:fe:11:d1:0a:16:26:89:4d:ef:e5:c9:4f:90:
2e:2e:22:de:3b:77:41:36:3c:35:75:62:e7:68:45:
95:1b:d2:8a:9c:f5:e1:66:ed:63:74:26:a9:cc:b9:
e2:3d:d8:31:d5:b7:88:64:c1:94:52:a7:d1:6f:d1:
6f:30:ed:af:61:1d:ff:5f:27:e6:74:2a:b5:a0:97:
e3:5c:f4:b5:de:a6:64:d1:d4:02:ca:fa:57:f1:a5:
af:c0:ba:4c:63:b7:c6:8a:50:d5:70:3c:b4:58:2f:
2f:a3:3c:e8:12:17:cf:a9:1f:e3:de:f9:5f:54:d5:
78:c3:20:64:d3:32:1d:d2:1a:ea:68:8c:9f:05:bc:
88:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7B:7E:71:1A:1D:11:8A:43:E9:A8:3C:7D:1C:5E:B8:A8:29:73:2D
X509v3 Authority Key Identifier:
keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:cf:93:bf:b7:bb:aa:d4:c9:51:cf:53:7e:bb:68:59:5c:
89:23:95:f5:99:70:90:da:c2:30:87:b8:74:57:62:1d:84:cd:
17:6f:d8:81:1d:9b:a4:f4:db:e0:ad:8c:46:3d:ff:cf:4f:06:
32:7b:d3:ce:be:c7:29:64:61:a9:a3:09:1a:ab:f3:03:7a:a5:
6b:bd:a0:a2:80:13:18:82:8a:45:fb:91:d2:d2:76:8b:c2:7d:
b2:60:de:6b:2b:fb:7f:ef:71:ff:48:c7:65:c5:38:a6:27:70:
69:e6:74:3d:37:6b:2d:f6:48:23:3b:05:3f:f9:78:b3:9e:c2:
64:ec:4b:03:65:71:f2:92:a8:bd:e2:dc:1f:52:40:24:5a:d5:
5e:da:eb:69:0a:ab:b3:51:d8:db:8a:6c:f9:63:a5:f6:82:c1:
1a:c0:6d:50:08:d0:fd:b1:b6:5c:65:f1:5d:f1:78:a1:63:68:
23:5e:7f:f6:8b:f9:16:3d:8f:6d:5d:45:69:5b:80:26:5b:17:
75:8f:c4:14:15:5c:6a:6f:22:e2:cc:26:1b:a5:66:2f:91:46:
da:7c:20:94:f5:44:b2:1a:7c:fb:31:7b:fe:68:88:c7:26:36:
3a:8d:79:03:e4:d4:64:08:10:24:d3:c4:ba:6e:d3:7b:eb:1a:
f4:f9:27:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:14 2026 by rpki-client