This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: 7EV7A7A3IHpD+ocLOD7BLPYJW8qAcHA2MhDdEZwnbEE= Subject key identifier: C9:D3:F4:D7:6A:0D:77:1E:5A:B8:30:8F:68:51:DE:C7:93:EF:EA:53 Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 70F91B4F1798315ACDAC68B4F6E8C2BEFF1084EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 021A Signing time: Mon 02 Feb 2026 05:41:04 +0000 Manifest this update: Mon 02 Feb 2026 05:36:04 +0000 Manifest next update: Thu 05 Feb 2026 11:40:04 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) 2: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: 4JwBrZbWVbgYIgCoD38idz1xM/ZtvXDuBSa3fK1L6a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:1b:4f:17:98:31:5a:cd:ac:68:b4:f6:e8:c2:be:ff:10:84:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Feb 2 05:36:04 2026 GMT Not After : Feb 5 11:40:04 2026 GMT Subject: CN=C9D3F4D76A0D771E5AB8308F6851DEC793EFEA53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:50:bb:ae:f2:12:46:72:db:d4:9e:2d:60: 10:3a:1f:bd:cf:7f:6d:a2:7e:fe:f2:4f:95:27:93: ef:f3:6d:11:93:2a:e4:1c:69:20:85:bb:05:81:6c: 9d:92:a1:e7:71:58:ae:c9:33:9c:38:9d:05:60:ff: 33:12:be:35:4d:78:bf:ec:00:e2:be:a1:6b:79:db: 3c:9f:1f:2e:f2:5b:8d:97:1b:1f:76:0e:81:84:86: 55:b8:05:3e:60:6b:77:13:83:f2:ca:ca:a1:69:b2: 72:e5:71:47:b9:72:30:23:80:63:e1:9e:bd:04:c4: 94:43:c4:b3:e0:ce:11:52:7f:ed:a7:5d:bd:5e:d0: a6:f2:38:44:f1:e8:3a:17:a5:48:b3:ac:fb:e8:f5: cf:05:2c:bb:4e:21:ab:b6:e2:5a:13:b5:fd:87:ed: 67:dc:d9:ee:0d:e3:51:56:e6:7e:4d:2c:9b:bb:bb: 92:05:a8:e5:d6:af:1a:0f:54:95:51:c9:fa:94:f2: 44:23:e4:05:d7:4d:8d:7b:0d:12:1d:3f:44:15:dd: d5:1d:ac:db:76:bf:38:83:50:f6:8f:36:9b:24:20: a0:6f:4d:0c:37:e9:ba:57:25:51:33:16:2d:38:a9: 78:6b:73:ff:54:97:13:d2:7a:e4:1f:1c:f9:bf:a6: 44:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D3:F4:D7:6A:0D:77:1E:5A:B8:30:8F:68:51:DE:C7:93:EF:EA:53 X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:77:8b:88:f0:c9:33:69:ea:ff:67:c3:2e:f5:d0:8e:c5:1c: 0f:f8:7a:86:9b:7d:8f:75:af:87:a6:ee:d1:61:a7:f7:f7:58: 13:62:da:21:c3:6b:18:00:f4:c5:7e:00:5c:4f:52:a2:e8:c8: b0:93:c3:29:56:d8:39:3e:3b:09:ea:42:58:2f:77:d2:47:d5: 12:01:78:34:d9:66:f7:d0:42:6c:71:d0:16:f2:85:c5:1f:7f: be:fa:e4:e0:35:6a:49:dc:20:57:f7:8a:6f:aa:51:7c:73:b1: d4:12:9a:b4:d2:6c:1a:ff:5e:2c:23:c1:12:15:45:8c:38:c7: 44:f5:b2:62:e6:0d:88:c1:f7:1c:71:bb:74:18:94:8e:a2:e9: 4d:ee:d8:3a:c1:26:90:f8:ac:c1:b6:40:eb:60:85:ee:f9:8a: 76:d8:ff:cc:1a:15:51:28:ea:cc:84:c5:08:bb:75:b6:dc:4a: c1:f4:15:6c:68:82:60:ee:a3:5e:e5:f8:84:7c:fb:79:6c:cb: 41:56:43:c4:94:c5:14:36:70:2b:cd:2d:45:37:b8:cf:44:91: 80:bc:1b:80:76:8f:29:86:56:b9:bd:80:57:0e:9b:01:06:dd: 92:ec:b1:cc:c2:e1:b0:8d:ef:31:65:7e:ef:29:bd:55:74:0c: 87:b9:a9:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPkbTxeYMVrNrGi09ujCvv8QhO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNjAyMDIwNTM2MDRaFw0yNjAyMDUxMTQwMDRaMDMxMTAvBgNV BAMTKEM5RDNGNEQ3NkEwRDc3MUU1QUI4MzA4RjY4NTFERUM3OTNFRkVBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+elC7rvISRnLb1J4tYBA6H73P f22ifv7yT5Unk+/zbRGTKuQcaSCFuwWBbJ2SoedxWK7JM5w4nQVg/zMSvjVNeL/s AOK+oWt52zyfHy7yW42XGx92DoGEhlW4BT5ga3cTg/LKyqFpsnLlcUe5cjAjgGPh nr0ExJRDxLPgzhFSf+2nXb1e0KbyOETx6DoXpUizrPvo9c8FLLtOIau24loTtf2H 7Wfc2e4N41FW5n5NLJu7u5IFqOXWrxoPVJVRyfqU8kQj5AXXTY17DRIdP0QV3dUd rNt2vziDUPaPNpskIKBvTQw36bpXJVEzFi04qXhrc/9UlxPSeuQfHPm/pkRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUydP012oNdx5auDCPaFHex5Pv6lMwHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFB3i4jwyTNp6v9nwy710I7FHA/4eoabfY91 r4em7tFhp/f3WBNi2iHDaxgA9MV+AFxPUqLoyLCTwylW2Dk+OwnqQlgvd9JH1RIB eDTZZvfQQmxx0BbyhcUff7765OA1akncIFf3im+qUXxzsdQSmrTSbBr/XiwjwRIV RYw4x0T1smLmDYjB9xxxu3QYlI6i6U3u2DrBJpD4rMG2QOtghe75inbY/8waFVEo 6syExQi7dbbcSsH0FWxogmDuo17l+IR8+3lsy0FWQ8SUxRQ2cCvNLUU3uM9EkYC8 G4B2jymGVrm9gFcOmwEG3ZLssczC4bCN7zFlfu8pvVV0DIe5qZI= -----END CERTIFICATE-----Generated at Mon Feb 2 12:51:41 2026 by rpki-client