This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json)
Hash identifier: 2Xa5MptCyx6vww6dkEE0J7tknxh7ty6k9T0juh9OCIg=
Subject key identifier: C0:4B:5C:7E:1F:E4:A4:B8:D4:52:DD:DF:4D:C2:F8:32:B0:92:4C:DE
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial: 433550D3EC45B2ED5C4F606D537D86978783596D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
Manifest number: 0292
Signing time: Mon 02 Feb 2026 01:51:58 +0000
Manifest this update: Mon 02 Feb 2026 01:46:58 +0000
Manifest next update: Thu 05 Feb 2026 09:55:58 +0000
Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: Bj1XPxwblXD9l/paYrLIy9b6PHBYhGpc8VC23biaMAE=)
2: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: eds4Of8da4SC99SeFlYwNiZA+FPQbty03YGR71eV2z4=)
3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: 10EOcxPDoAVD2WBxc4zcDJk05ToBXmYiU+bX0tdWcAE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:35:50:d3:ec:45:b2:ed:5c:4f:60:6d:53:7d:86:97:87:83:59:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Validity
Not Before: Feb 2 01:46:58 2026 GMT
Not After : Feb 5 09:55:58 2026 GMT
Subject: CN=C04B5C7E1FE4A4B8D452DDDF4DC2F832B0924CDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:1a:57:5c:e9:50:73:dc:13:16:6e:64:2b:
3b:b2:03:d8:df:eb:95:a7:7d:0d:a1:62:01:08:bf:
19:4b:c8:6e:50:3e:8f:36:70:9d:5f:b6:0f:a1:43:
2e:9b:aa:da:82:8b:73:42:f3:1e:48:08:0c:35:d7:
a8:97:e8:4a:be:bf:16:70:d5:1b:1d:e8:1f:a5:7f:
8c:36:d2:bc:6d:ff:ee:ef:ce:2f:2b:98:1a:9f:5f:
e5:7a:9c:5e:ce:c8:32:3c:02:55:bc:37:39:58:67:
a2:97:77:8e:94:eb:54:96:1b:e8:e3:39:7c:52:ea:
97:0e:d5:6f:5d:c5:9b:08:63:37:65:fa:55:eb:85:
06:88:1c:0d:7c:02:0a:4c:4f:db:82:9b:9d:a1:8f:
6c:fb:75:68:22:5f:35:16:32:6c:6f:5c:af:f3:46:
77:6b:e6:d8:d8:b1:c3:cd:56:a4:4b:2d:5f:17:4f:
af:ae:d0:70:fe:ba:58:2a:11:b1:d0:e5:c5:11:ad:
de:27:f5:45:a9:a8:16:71:d8:43:1a:21:e8:96:d4:
0e:68:42:ee:2c:cb:7c:ab:c5:58:97:4c:7a:6b:02:
77:b4:6d:bb:83:67:fe:a9:81:ef:2e:3b:5d:01:c1:
a0:24:db:96:97:7f:5b:5f:6e:c0:62:bd:cc:36:06:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4B:5C:7E:1F:E4:A4:B8:D4:52:DD:DF:4D:C2:F8:32:B0:92:4C:DE
X509v3 Authority Key Identifier:
keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:91:43:d9:9d:28:6f:a5:f3:69:31:4c:cd:f7:3d:45:9e:
a6:b7:68:79:17:b1:d9:ca:5d:30:de:e0:02:ab:ee:14:79:1a:
c2:14:6c:ba:34:0a:cb:9b:f3:1f:b9:27:d3:ba:3a:63:53:29:
44:70:88:f3:29:39:95:e3:5b:c3:b1:98:d6:cb:3e:73:db:83:
7d:2d:c0:37:4f:f1:17:02:90:ed:90:11:98:ff:2c:ed:f2:f9:
c3:ce:49:7a:04:14:d7:72:d9:37:a0:95:d7:5f:c7:2d:97:33:
9b:2c:c2:a2:05:4c:18:48:18:d9:a4:38:a5:d5:5d:c3:5f:d5:
c0:95:37:76:43:27:7a:3b:f5:5f:76:9c:57:62:11:55:34:73:
c1:37:e2:59:69:3a:03:d3:54:af:a3:35:5a:2f:b7:92:b2:f9:
24:60:02:bb:4e:9b:52:9b:c2:3e:45:58:e8:50:5b:63:43:45:
9d:cd:4c:5f:3b:7a:3b:62:36:52:02:f9:a4:6d:2e:57:e1:99:
0d:c7:30:fe:85:62:1b:31:06:20:a5:3f:75:f1:32:60:1a:ae:
15:a8:b7:c4:d4:d8:b9:2c:52:e8:27:bb:7c:fa:25:18:cf:b7:
e1:62:2f:4e:76:04:13:55:52:0e:34:14:d1:8d:77:f0:2d:39:
c2:aa:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:17 2026 by rpki-client