This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft File: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft (raw, json) Hash identifier: I4ufpg8jp3HmxX9kV3xq7RPz9i+pIWnHAizyvYlBjuE= Subject key identifier: 03:91:6D:89:A2:A4:F6:24:B6:29:93:9E:00:4B:16:AB:4E:68:D5:E9 Authority key identifier: 5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B Certificate issuer: /CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Certificate serial: 52997D7A7790DE541AE30A823C4D32FDF74F4220 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft Manifest number: 0272 Signing time: Sun 01 Feb 2026 18:32:29 +0000 Manifest this update: Sun 01 Feb 2026 18:27:29 +0000 Manifest next update: Thu 05 Feb 2026 03:21:29 +0000 Files and hashes: 1: 3130332e3138342e31392e302f32342d3234203d3e203438343635.roa (hash: QzihEc5MkFa7NqybYwRpohd7XvTO9rPruJzvUalzVM8=) 2: 3130332e3138342e31382e302f32332d3233203d3e20313439363735.roa (hash: 8hPXkuW34xkK66/r5oL+jYYUmOueTjKMrZh36goENDw=) 3: 3130332e3138342e31382e302f32342d3234203d3e203438343635.roa (hash: 0IGopCvXSRXbCg3kz6wjCn1/1Kczl4zkhji2/R4GIz4=) 4: 3130332e3138342e31392e302f32342d3234203d3e20313439363735.roa (hash: i4XCxm32VCNZ/zacmmSjbAzxATWwcS43fZzejb3pvRo=) 5: 5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl (hash: OnbbhHbKDnDHJz9S0XSq/deV2lSOoBh3gFHlhiKFXBs=) 6: 3130332e3138342e31382e302f32342d3234203d3e20313439363735.roa (hash: 4BUtx10alv/ZZ9FJolZJ3I8WhlB5v1F5iKW6alQrr7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:99:7d:7a:77:90:de:54:1a:e3:0a:82:3c:4d:32:fd:f7:4f:42:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A40FD19E2DD5380CB6E502F16DB222F9089552B Validity Not Before: Feb 1 18:27:29 2026 GMT Not After : Feb 5 03:21:29 2026 GMT Subject: CN=03916D89A2A4F624B629939E004B16AB4E68D5E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:25:cd:8a:4d:1c:01:fa:1d:f9:67:61:67:c3: 6f:0b:3f:33:87:70:dd:69:c0:79:44:b2:e0:3d:41: 8a:aa:91:48:10:56:98:fc:0a:48:45:62:5a:7c:96: 59:83:40:22:d0:db:30:9c:03:5a:e5:e8:45:0b:d4: 92:c4:70:3d:3f:c8:6f:d6:91:6b:ec:f6:a8:00:38: a0:2d:3e:ff:64:d8:37:18:a0:aa:95:47:98:bf:a4: bd:ea:91:d6:27:c9:e7:ca:d1:e9:11:ee:46:1c:9f: f4:d6:d5:af:ab:5c:1f:64:8b:4e:2e:a6:bb:59:ea: 25:04:22:14:44:86:07:1c:cd:1a:cb:f5:0e:72:84: 2e:ac:53:de:82:7d:1e:cd:7d:68:6c:cb:a0:f1:2b: d4:b3:40:d3:be:37:f9:59:92:89:95:2d:be:2a:1a: a6:79:d5:c4:25:b5:71:b7:66:6f:db:7e:bd:7d:45: b8:82:ad:3f:21:4f:8b:89:b8:22:78:98:90:56:9f: c6:67:51:35:b7:a1:f0:ad:14:4c:72:91:dc:0c:30: 71:e6:34:9d:9f:b1:3b:25:cb:fd:4f:30:0b:f8:42: f6:72:bf:b6:60:2c:41:16:d0:82:46:d8:b1:b3:ea: df:ce:af:e8:bb:d9:b6:0f:11:f3:87:2a:a3:8a:b4: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:6D:89:A2:A4:F6:24:B6:29:93:9E:00:4B:16:AB:4E:68:D5:E9 X509v3 Authority Key Identifier: keyid:5A:40:FD:19:E2:DD:53:80:CB:6E:50:2F:16:DB:22:2F:90:89:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A40FD19E2DD5380CB6E502F16DB222F9089552B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0d914ef-0b1f-490b-808d-a27b83ff9a3e/0/5A40FD19E2DD5380CB6E502F16DB222F9089552B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:99:93:c2:db:5a:9b:f1:d7:a2:b4:37:a7:82:0e:2b:db:50: 87:72:20:2d:7e:8a:62:61:ef:9a:3e:1f:0b:2a:dc:34:c9:22: 2b:0e:8e:89:18:6a:b8:b5:3d:ae:a6:ee:05:51:20:7c:3b:a8: 1e:2d:aa:ae:6e:be:7c:48:e3:e4:a3:4f:8b:35:ca:c1:bb:f1: 33:79:45:7c:a9:90:9e:ff:00:b7:a7:0a:e4:48:40:8f:95:fb: 51:b9:de:76:91:8a:0b:6d:21:38:6a:2f:77:a0:04:2a:59:54: 66:98:6c:8d:0b:87:0a:66:90:69:04:8d:d6:5f:f5:41:8c:bd: b5:22:68:90:b9:e1:ff:b4:98:b7:a2:cb:3c:51:9b:73:c9:f5: 7d:7f:f8:c0:68:ae:31:56:22:31:f4:f1:ca:5d:04:b7:73:ed: ef:a9:72:40:e5:35:46:be:f5:f7:c4:b7:2b:27:a7:4c:27:71: b7:7d:29:4c:7a:3c:f8:b1:c0:14:48:37:36:61:91:85:b2:0c: 5e:6f:1e:94:09:ee:c3:18:a3:d0:1b:58:37:15:68:cb:c3:ff: 1e:63:fb:63:42:ff:e7:22:a6:6f:a4:79:9d:6b:6c:66:92:2e: 7f:3d:a7:d2:f1:58:89:5f:99:24:10:d0:78:f4:17:e7:dd:19: 93:7a:59:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpl9eneQ3lQa4wqCPE0y/fdPQiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5 MDg5NTUyQjAeFw0yNjAyMDExODI3MjlaFw0yNjAyMDUwMzIxMjlaMDMxMTAvBgNV BAMTKDAzOTE2RDg5QTJBNEY2MjRCNjI5OTM5RTAwNEIxNkFCNEU2OEQ1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaJc2KTRwB+h35Z2Fnw28LPzOH cN1pwHlEsuA9QYqqkUgQVpj8CkhFYlp8llmDQCLQ2zCcA1rl6EUL1JLEcD0/yG/W kWvs9qgAOKAtPv9k2DcYoKqVR5i/pL3qkdYnyefK0ekR7kYcn/TW1a+rXB9ki04u prtZ6iUEIhREhgcczRrL9Q5yhC6sU96CfR7NfWhsy6DxK9SzQNO+N/lZkomVLb4q GqZ51cQltXG3Zm/bfr19RbiCrT8hT4uJuCJ4mJBWn8ZnUTW3ofCtFExykdwMMHHm NJ2fsTsly/1PMAv4QvZyv7ZgLEEW0IJG2LGz6t/Or+i72bYPEfOHKqOKtOiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5FtiaKk9iS2KZOeAEsWq05o1ekwHwYDVR0j BBgwFoAUWkD9GeLdU4DLblAvFtsiL5CJVSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGQ5MTRlZi0wYjFmLTQ5MGItODA4ZC1hMjdiODNmZjlhM2UvMC81QTQwRkQxOUUy REQ1MzgwQ0I2RTUwMkYxNkRCMjIyRjkwODk1NTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIyMkY5MDg5 NTUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBkOTE0ZWYtMGIxZi00OTBiLTgw OGQtYTI3YjgzZmY5YTNlLzAvNUE0MEZEMTlFMkRENTM4MENCNkU1MDJGMTZEQjIy MkY5MDg5NTUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOZk8LbWpvx16K0N6eCDivbUIdyIC1+imJh 75o+Hwsq3DTJIisOjokYari1Pa6m7gVRIHw7qB4tqq5uvnxI4+SjT4s1ysG78TN5 RXypkJ7/ALenCuRIQI+V+1G53naRigttIThqL3egBCpZVGaYbI0LhwpmkGkEjdZf 9UGMvbUiaJC54f+0mLeiyzxRm3PJ9X1/+MBorjFWIjH08cpdBLdz7e+pckDlNUa+ 9ffEtysnp0wncbd9KUx6PPixwBRINzZhkYWyDF5vHpQJ7sMYo9AbWDcVaMvD/x5j +2NC/+cipm+keZ1rbGaSLn89p9LxWIlfmSQQ0Hj0F+fdGZN6Wd8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:33 2026 by rpki-client