This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft File: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft (raw, json) Hash identifier: 1sgPeEiK7d4rUHu+0YqFWnz7Xay4jgQ2kfa0gpMy6Oo= Subject key identifier: 19:81:D4:BA:B5:E9:13:3A:2F:36:F5:9C:8B:5E:23:D8:0F:68:9D:E1 Authority key identifier: 5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E Certificate issuer: /CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Certificate serial: 33A48720F6EE489CB6FE91DE7C796512CB8D864B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft Manifest number: 0205 Signing time: Sat 31 Jan 2026 15:01:08 +0000 Manifest this update: Sat 31 Jan 2026 14:56:08 +0000 Manifest next update: Tue 03 Feb 2026 18:20:08 +0000 Files and hashes: 1: 3130332e39302e36362e302f32332d3233203d3e20313530323635.roa (hash: OlSEaMFgO7PKKnmIhsUPpO1TcfNohwlH/C3NH/NvhZg=) 2: 5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl (hash: zIBtWxBedkg5gDDPkNg6hSife/15CRJsXznWWug0cmM=) 3: 3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (hash: Dx7DscJpzLnwBpRvWDdwBWGJeq/KxqK0kj+bdda4u4s=) 4: 3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (hash: xen07zc0j+/G4arkqASOm4ZjW/rKUxr6T3lpoWHLeW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a4:87:20:f6:ee:48:9c:b6:fe:91:de:7c:79:65:12:cb:8d:86:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B8C3A29E90C25CBF4615124B117BE7FC013C61E Validity Not Before: Jan 31 14:56:08 2026 GMT Not After : Feb 3 18:20:08 2026 GMT Subject: CN=1981D4BAB5E9133A2F36F59C8B5E23D80F689DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:23:21:7d:34:f5:39:c5:f9:62:b6:53:4f: 15:bd:0c:95:9f:74:0b:4c:e0:2c:45:c8:bc:8b:cc: 43:39:72:1f:a6:f9:a7:cf:e7:a5:64:f1:89:60:b9: 4b:cd:fe:e9:4a:7b:60:db:82:34:09:0c:50:67:75: c2:bf:7e:44:61:61:ab:e4:c7:c7:1a:85:8f:c9:d6: 6e:76:62:2e:50:17:38:ba:55:ac:16:fd:e8:83:5d: cd:de:14:ca:18:8a:fd:6a:92:37:3f:02:0f:7b:21: 0c:c5:a6:ed:2e:b9:f7:aa:bd:89:14:6b:33:6c:78: b3:4f:c4:09:47:f5:bb:c9:c2:fa:dd:03:8e:9e:41: f4:50:f7:f0:18:fe:82:4f:0f:26:7d:ee:3e:fd:b4: 34:b8:e5:f8:22:6a:eb:b5:c4:33:bd:d8:9c:17:c5: 29:fe:d0:b8:ed:b4:e8:64:22:dc:5a:50:7b:e8:71: a6:d3:21:a1:1e:1f:d9:6d:e6:f2:d7:7b:4c:9a:a3: 0c:ca:36:0a:99:95:a5:19:89:d0:3e:3a:9b:39:d5: 17:91:85:52:d7:6c:90:05:5e:48:7f:d1:4b:b6:c8: 97:15:8e:5d:1c:9c:52:c8:b4:6d:aa:e0:de:f3:43: 59:e7:6a:8e:d8:f4:55:97:40:62:94:4e:e9:50:4a: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:81:D4:BA:B5:E9:13:3A:2F:36:F5:9C:8B:5E:23:D8:0F:68:9D:E1 X509v3 Authority Key Identifier: keyid:5B:8C:3A:29:E9:0C:25:CB:F4:61:51:24:B1:17:BE:7F:C0:13:C6:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/5B8C3A29E90C25CBF4615124B117BE7FC013C61E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6e:5b:c3:fe:cb:6e:05:db:71:99:b1:ab:fd:24:53:00:e9: b1:8e:54:d4:85:d2:5f:8d:6c:08:40:cd:55:c7:7a:6b:c0:35: b2:de:c6:c0:48:e0:77:f6:32:c1:94:22:f6:5e:7f:ec:62:f4: 5f:18:00:b5:df:41:ed:b5:5b:15:68:53:e4:58:38:7f:12:5e: bf:a4:24:21:b0:c6:a1:09:04:0d:8b:4a:22:93:e5:a3:85:b2: cf:d9:cb:b5:29:47:38:8b:ce:45:87:d3:ba:8e:f7:9c:df:94: b5:f8:eb:36:51:01:1d:1b:39:9c:30:ee:6d:88:ad:98:ef:37: 94:9c:eb:34:41:60:7c:5f:31:85:ae:69:62:05:91:2b:f4:da: 4d:83:2a:62:53:0a:c1:51:31:68:01:04:f8:70:9a:15:56:1e: 64:4f:87:dd:cc:bb:15:e7:8f:f1:0f:44:4e:23:33:03:45:9b: 51:a0:48:d5:8e:32:eb:ab:fb:a7:71:e2:af:77:60:b2:2a:48: 19:3a:31:d9:08:a7:f7:84:eb:89:f1:e5:1f:d0:4f:55:0c:c8: 6b:ae:b1:74:fd:a1:2f:fd:a1:69:d6:5c:f0:be:f4:53:72:1d: 40:04:6d:7e:b7:25:1b:aa:06:8e:68:21:5e:68:e6:fb:c5:fc: 7c:af:49:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6SHIPbuSJy2/pHefHllEsuNhkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZD MDEzQzYxRTAeFw0yNjAxMzExNDU2MDhaFw0yNjAyMDMxODIwMDhaMDMxMTAvBgNV BAMTKDE5ODFENEJBQjVFOTEzM0EyRjM2RjU5QzhCNUUyM0Q4MEY2ODlERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GiMhfTT1OcX5YrZTTxW9DJWf dAtM4CxFyLyLzEM5ch+m+afP56Vk8YlguUvN/ulKe2DbgjQJDFBndcK/fkRhYavk x8cahY/J1m52Yi5QFzi6VawW/eiDXc3eFMoYiv1qkjc/Ag97IQzFpu0uufeqvYkU azNseLNPxAlH9bvJwvrdA46eQfRQ9/AY/oJPDyZ97j79tDS45fgiauu1xDO92JwX xSn+0LjttOhkItxaUHvocabTIaEeH9lt5vLXe0yaowzKNgqZlaUZidA+Ops51ReR hVLXbJAFXkh/0Uu2yJcVjl0cnFLItG2q4N7zQ1nnao7Y9FWXQGKUTulQSjM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGYHUurXpEzovNvWci14j2A9oneEwHwYDVR0j BBgwFoAUW4w6KekMJcv0YVEksRe+f8ATxh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWYzYzc2OS1jZmIxLTQyMDYtOWY1NC1jMDU4N2U2M2JhNWIvMC81QjhDM0EyOUU5 MEMyNUNCRjQ2MTUxMjRCMTE3QkU3RkMwMTNDNjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JFN0ZDMDEz QzYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlmM2M3NjktY2ZiMS00MjA2LTlm NTQtYzA1ODdlNjNiYTViLzAvNUI4QzNBMjlFOTBDMjVDQkY0NjE1MTI0QjExN0JF N0ZDMDEzQzYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADluW8P+y24F23GZsav9JFMA6bGOVNSF0l+N bAhAzVXHemvANbLexsBI4Hf2MsGUIvZef+xi9F8YALXfQe21WxVoU+RYOH8SXr+k JCGwxqEJBA2LSiKT5aOFss/Zy7UpRziLzkWH07qO95zflLX46zZRAR0bOZww7m2I rZjvN5Sc6zRBYHxfMYWuaWIFkSv02k2DKmJTCsFRMWgBBPhwmhVWHmRPh93MuxXn j/EPRE4jMwNFm1GgSNWOMuur+6dx4q93YLIqSBk6MdkIp/eE64nx5R/QT1UMyGuu sXT9oS/9oWnWXPC+9FNyHUAEbX63JRuqBo5oIV5o5vvF/HyvSe0= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:05 2026 by rpki-client