This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft File: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft (raw, json) Hash identifier: 7vKxwcYhWvuOImteOu3wyLD1CIF7+urVdx9x+CjeAco= Subject key identifier: D9:6D:B8:7D:E4:A0:68:38:E1:E5:89:63:23:49:F1:19:67:97:FD:F7 Authority key identifier: 5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C Certificate issuer: /CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Certificate serial: 214BA6A0F601AA67B9011A4D60DBE378C4F444A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft Manifest number: 025C Signing time: Sat 31 Jan 2026 08:01:42 +0000 Manifest this update: Sat 31 Jan 2026 07:56:42 +0000 Manifest next update: Tue 03 Feb 2026 11:23:42 +0000 Files and hashes: 1: 5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl (hash: XMfORdyzjXFcFxO1JRzJVA17W5XndKgiiyjl9pFnBjs=) 2: 323030313a6466353a6338303a3a2f34382d3438203d3e20313431313038.roa (hash: iZCPzSaE2GsmyRSPmdEgeihtKnDbX+HPnVIulKI0y0c=) 3: 3130332e3135372e32352e302f32342d3234203d3e20313431313038.roa (hash: JVr4ISjQIPYpq1lUAq+CAUgp8toUADJxZ8neAP9jpDQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4b:a6:a0:f6:01:aa:67:b9:01:1a:4d:60:db:e3:78:c4:f4:44:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C Validity Not Before: Jan 31 07:56:42 2026 GMT Not After : Feb 3 11:23:42 2026 GMT Subject: CN=D96DB87DE4A06838E1E589632349F1196797FDF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:bd:2a:1a:90:97:19:8e:11:2a:ed:d9:46: 87:14:96:74:16:22:aa:23:61:27:a9:eb:62:3b:5c: 33:f6:cc:37:18:6c:0d:8f:4f:2f:22:95:6c:ab:ac: 04:db:da:bb:b8:7a:bf:30:6b:58:ae:44:30:24:1f: 16:72:e1:71:70:7e:d1:de:34:9a:1c:cd:cf:00:7b: e5:be:e7:fe:cc:6a:3f:98:c9:1e:36:24:1e:f0:92: 5b:1f:26:d1:6a:83:17:f8:ad:2f:7b:af:60:cd:13: e8:99:6c:96:3d:05:99:e0:c7:0c:17:46:7f:7e:e7: 16:d3:94:54:19:60:98:3d:65:fd:27:ac:25:51:3e: fa:66:f2:45:cd:3c:9f:f4:9b:b6:99:90:f1:01:d7: 25:68:4b:af:9a:55:19:41:ec:8c:21:36:00:bd:57: c4:cf:a4:c4:97:f3:93:61:43:1b:cf:0e:0f:a8:b0: a7:b2:71:51:00:48:1b:64:13:69:c4:c9:fc:b5:4a: f5:38:20:08:e7:2e:41:29:66:a3:f8:44:b0:f7:0d: b0:0a:c6:f7:bf:6f:7c:d4:d4:3a:57:96:34:07:34: 79:c3:34:2c:70:43:a2:0b:42:cf:5a:e2:b1:73:a5: c9:60:c2:ac:b3:fb:dc:09:95:0e:8a:e8:5b:3d:25: a7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6D:B8:7D:E4:A0:68:38:E1:E5:89:63:23:49:F1:19:67:97:FD:F7 X509v3 Authority Key Identifier: keyid:5C:55:87:61:8B:4E:1C:1F:4C:EF:C6:99:B0:1F:FC:3C:EC:E3:B6:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/801b79ac-3351-4705-8c3d-602adcd79bb7/0/5C5587618B4E1C1F4CEFC699B01FFC3CECE3B66C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:cc:e1:03:bc:04:73:84:0a:ce:bf:26:11:d9:a6:44:2e: 82:54:e3:0d:61:b5:d6:56:83:0c:dc:59:d5:1c:34:f0:ff:68: 99:b1:51:19:5b:46:58:1d:fa:ae:58:4e:14:19:f5:ff:a3:2e: 3a:70:7a:64:8b:5d:ed:9d:82:09:52:2a:9e:19:5e:e6:98:58: 52:58:79:06:10:66:62:86:36:77:ac:b5:7d:aa:cb:74:33:67: 28:ff:04:13:95:59:f3:4c:b3:90:9f:79:60:c2:3f:d7:e7:84: 0b:db:b1:97:a1:1f:36:1a:02:cd:50:6c:c7:4b:86:7b:49:ec: c0:48:62:0d:f7:79:f4:b3:47:92:e9:65:95:3b:a9:fb:16:54: 65:2c:ba:79:65:bb:aa:b3:fb:87:aa:30:05:c4:07:9b:1a:f5: 11:39:3e:5f:0c:81:af:c0:1f:eb:19:29:ff:b6:38:f2:3d:f8: 8b:61:f4:ed:e4:37:b4:9d:15:db:d9:4e:85:b3:0d:83:5d:03: 82:a8:1f:44:63:7f:88:02:41:7f:84:6c:c8:78:3e:86:d6:dc: d8:88:3b:04:dd:69:6d:72:e7:94:a1:23:48:e0:f3:a8:51:ae: 4c:66:19:4f:55:11:96:5a:a6:47:24:e8:94:b7:34:6b:65:b5: 86:3b:e3:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUumoPYBqme5ARpNYNvjeMT0RKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NF Q0UzQjY2QzAeFw0yNjAxMzEwNzU2NDJaFw0yNjAyMDMxMTIzNDJaMDMxMTAvBgNV BAMTKEQ5NkRCODdERTRBMDY4MzhFMUU1ODk2MzIzNDlGMTE5Njc5N0ZERjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsRL0qGpCXGY4RKu3ZRocUlnQW IqojYSep62I7XDP2zDcYbA2PTy8ilWyrrATb2ru4er8wa1iuRDAkHxZy4XFwftHe NJoczc8Ae+W+5/7Maj+YyR42JB7wklsfJtFqgxf4rS97r2DNE+iZbJY9BZngxwwX Rn9+5xbTlFQZYJg9Zf0nrCVRPvpm8kXNPJ/0m7aZkPEB1yVoS6+aVRlB7IwhNgC9 V8TPpMSX85NhQxvPDg+osKeycVEASBtkE2nEyfy1SvU4IAjnLkEpZqP4RLD3DbAK xve/b3zU1DpXljQHNHnDNCxwQ6ILQs9a4rFzpclgwqyz+9wJlQ6K6Fs9JafnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2W24feSgaDjh5YljI0nxGWeX/fcwHwYDVR0j BBgwFoAUXFWHYYtOHB9M78aZsB/8POzjtmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDFiNzlhYy0zMzUxLTQ3MDUtOGMzZC02MDJhZGNkNzliYjcvMC81QzU1ODc2MThC NEUxQzFGNENFRkM2OTlCMDFGRkMzQ0VDRTNCNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZDM0NFQ0Uz QjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxYjc5YWMtMzM1MS00NzA1LThj M2QtNjAyYWRjZDc5YmI3LzAvNUM1NTg3NjE4QjRFMUMxRjRDRUZDNjk5QjAxRkZD M0NFQ0UzQjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyqzOEDvARzhArOvyYR2aZELoJU4w1htdZW gwzcWdUcNPD/aJmxURlbRlgd+q5YThQZ9f+jLjpwemSLXe2dgglSKp4ZXuaYWFJY eQYQZmKGNnestX2qy3QzZyj/BBOVWfNMs5CfeWDCP9fnhAvbsZehHzYaAs1QbMdL hntJ7MBIYg33efSzR5LpZZU7qfsWVGUsunllu6qz+4eqMAXEB5sa9RE5Pl8Mga/A H+sZKf+2OPI9+Ith9O3kN7SdFdvZToWzDYNdA4KoH0Rjf4gCQX+EbMh4PobW3NiI OwTdaW1y55ShI0jg86hRrkxmGU9VEZZapkck6JS3NGtltYY748Q= -----END CERTIFICATE-----Generated at Mon Feb 2 12:46:58 2026 by rpki-client