This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: /TwG7vK98NebPVwvBStahRvzXu58v+z9RAw5cnI4nw8= Subject key identifier: 0B:24:64:24:C5:7B:66:DD:9D:2F:1C:BE:1B:75:54:31:80:3D:70:55 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 7554F88AE34F21A766FACE71D301D81ED947ABED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 0222 Signing time: Sun 01 Feb 2026 08:51:51 +0000 Manifest this update: Sun 01 Feb 2026 08:46:51 +0000 Manifest next update: Wed 04 Feb 2026 18:35:51 +0000 Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: tZ0f5MTmtWdSIb0cW5V8BnDtVprPqdA4VLQLF9yhNs4=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: XJaPVKL+tFj4c3WHFeXKkbEPFHc33QGCd8eyCL/ZJ7M=) 3: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: fRkAKd5iI4LZXiYIpiEPK+Qe8cbYJDIaz1rF9bxU1Xs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 18:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:54:f8:8a:e3:4f:21:a7:66:fa:ce:71:d3:01:d8:1e:d9:47:ab:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: Feb 1 08:46:51 2026 GMT Not After : Feb 4 18:35:51 2026 GMT Subject: CN=0B246424C57B66DD9D2F1CBE1B755431803D7055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:43:c6:40:fc:5f:6f:ff:77:d4:84:9e:60:1b: 76:c2:5d:a4:01:10:78:68:cb:7e:22:9b:f4:83:cd: 39:54:33:84:12:17:40:eb:55:91:96:ba:36:12:5d: 26:36:2b:4b:83:86:ae:01:01:27:c1:2d:d9:20:ae: ea:66:b5:f4:0e:50:41:a4:3a:36:9c:a9:0c:16:8b: 02:37:eb:b1:1e:12:11:9b:d4:37:0c:ca:13:86:bb: 67:61:66:98:53:0a:9c:08:15:92:34:bb:05:7d:a9: 9b:e4:e4:a1:93:0d:7e:ea:80:12:91:b4:8f:fd:9b: 29:bf:bf:6f:2a:0c:fe:e5:ac:27:4c:c8:74:f0:ac: bc:e4:9a:db:85:9a:34:3f:25:df:0a:5a:f7:0c:54: 0a:41:9a:8d:8f:c6:03:7f:71:4a:29:77:b2:38:9b: a6:c9:a7:e3:14:85:39:99:b6:7f:4d:92:50:18:ca: 6d:47:35:c6:98:0d:86:73:c3:08:ca:a1:1f:18:c9: a4:e3:ac:b6:92:24:79:b1:96:13:fa:69:21:6c:64: d3:7f:4a:f8:d7:de:74:d1:1c:bb:87:f7:94:e2:f2: 6d:f4:ae:b8:7f:87:31:85:16:43:f0:c4:a0:04:5e: e8:16:80:0f:a7:1b:6e:07:e7:9e:ad:3b:92:6d:7c: 5a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:64:24:C5:7B:66:DD:9D:2F:1C:BE:1B:75:54:31:80:3D:70:55 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0d:89:40:2d:9a:a7:5b:0b:22:2d:20:6d:58:4e:eb:c4:51: 6f:ff:09:93:4f:7d:31:78:e1:93:5d:4b:88:84:dc:93:c2:f1: de:aa:63:3f:45:37:bc:c0:a9:a2:5f:2b:d4:8a:02:d6:ed:95: b8:ae:7b:43:b0:89:aa:15:28:e4:0d:ef:27:61:48:6c:4c:9b: 10:7c:50:5e:94:35:b2:30:31:b6:5e:35:01:a3:b7:08:2b:cc: 04:52:cc:9c:ab:29:1e:e7:b7:7a:ea:44:a4:af:ae:8c:97:6a: 8d:61:4e:77:68:56:80:7f:73:be:31:6e:5d:05:71:b3:73:97: 6b:3b:8f:6d:67:20:d4:b0:19:a5:ee:06:fa:be:14:a3:c9:52: fc:d1:05:d7:af:d5:5c:8c:30:d0:28:6c:90:12:87:f7:eb:76: 4b:da:03:d8:54:32:2c:c0:4b:24:f0:c8:4f:b0:53:0e:a7:03: b9:fe:3d:66:c2:f3:6e:45:c2:e0:a8:ed:94:86:65:33:9a:52: d0:ab:3c:8f:f4:7f:be:22:b0:0f:dd:5b:c8:ad:73:95:76:87: bc:ff:40:e3:bc:c5:64:6f:74:0b:e5:8b:73:5c:b4:31:5d:07: f8:aa:43:64:20:82:6f:cb:5b:be:90:41:9d:a8:7f:bf:31:f9: 84:df:00:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVT4iuNPIadm+s5x0wHYHtlHq+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNjAyMDEwODQ2NTFaFw0yNjAyMDQxODM1NTFaMDMxMTAvBgNV BAMTKDBCMjQ2NDI0QzU3QjY2REQ5RDJGMUNCRTFCNzU1NDMxODAzRDcwNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ8ZA/F9v/3fUhJ5gG3bCXaQB EHhoy34im/SDzTlUM4QSF0DrVZGWujYSXSY2K0uDhq4BASfBLdkgrupmtfQOUEGk OjacqQwWiwI367EeEhGb1DcMyhOGu2dhZphTCpwIFZI0uwV9qZvk5KGTDX7qgBKR tI/9mym/v28qDP7lrCdMyHTwrLzkmtuFmjQ/Jd8KWvcMVApBmo2PxgN/cUopd7I4 m6bJp+MUhTmZtn9NklAYym1HNcaYDYZzwwjKoR8YyaTjrLaSJHmxlhP6aSFsZNN/ SvjX3nTRHLuH95Ti8m30rrh/hzGFFkPwxKAEXugWgA+nG24H556tO5JtfFqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyRkJMV7Zt2dLxy+G3VUMYA9cFUwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsNiUAtmqdbCyItIG1YTuvEUW//CZNPfTF4 4ZNdS4iE3JPC8d6qYz9FN7zAqaJfK9SKAtbtlbiue0OwiaoVKOQN7ydhSGxMmxB8 UF6UNbIwMbZeNQGjtwgrzARSzJyrKR7nt3rqRKSvroyXao1hTndoVoB/c74xbl0F cbNzl2s7j21nINSwGaXuBvq+FKPJUvzRBdev1VyMMNAobJASh/frdkvaA9hUMizA SyTwyE+wUw6nA7n+PWbC825FwuCo7ZSGZTOaUtCrPI/0f74isA/dW8itc5V2h7z/ QOO8xWRvdAvli3NctDFdB/iqQ2Qggm/LW76QQZ2of78x+YTfAGc= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:48 2026 by rpki-client