This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft File: 5EC928AFD73AFC70F10C468E21482031920DF521.mft (raw, json) Hash identifier: CGAWhcTUtO4pCk2GuBSwApfEfBNcfAxDV9Z50luyACk= Subject key identifier: DE:9A:CE:20:B4:BB:FF:45:6B:A2:50:CC:9F:23:7B:F9:67:4C:D7:D5 Authority key identifier: 5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 Certificate issuer: /CN=5EC928AFD73AFC70F10C468E21482031920DF521 Certificate serial: 2DA2BC6352FA6A717DA6C3F140A521EA6A520E83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft Manifest number: 0157 Signing time: Mon 19 Jan 2026 11:20:42 +0000 Manifest this update: Mon 19 Jan 2026 11:15:42 +0000 Manifest next update: Thu 22 Jan 2026 17:43:42 +0000 Files and hashes: 1: 5EC928AFD73AFC70F10C468E21482031920DF521.crl (hash: uxxElHalxlRWMWwMI49Vhrez8nNRrBJioLHOztJyDBg=) 2: 3135372e31302e39312e302f32342d3234203d3e20313532303836.roa (hash: 7Vh+JQ+EwBgCn6qPsEsbKPExyQYjppcpw9GgUYCQELQ=) 3: 3135372e31302e39302e302f32332d3233203d3e20313532303836.roa (hash: AaLAr89wN5Sb+OgfLhYuDTNXNhPimJxdEDHMwucases=) 4: 3135372e31302e39302e302f32342d3234203d3e20313532303836.roa (hash: pR/QABV4HGWqAdwOU5HfqIfgDViuaTWTho6YrpqnOYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 17:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a2:bc:63:52:fa:6a:71:7d:a6:c3:f1:40:a5:21:ea:6a:52:0e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC928AFD73AFC70F10C468E21482031920DF521 Validity Not Before: Jan 19 11:15:42 2026 GMT Not After : Jan 22 17:43:42 2026 GMT Subject: CN=DE9ACE20B4BBFF456BA250CC9F237BF9674CD7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:9b:ba:47:f6:53:06:5c:4e:57:4e:42:55: a8:cf:be:9e:fc:20:00:5f:44:37:70:aa:b7:c5:28: 8c:03:71:ed:a3:e9:fc:d4:e2:59:46:09:ff:46:37: 42:b8:49:4f:57:06:e6:27:71:40:05:e3:b3:d0:19: a2:14:6d:28:91:fb:58:e2:42:ac:48:c5:ab:22:82: 9e:e7:15:9f:1c:a4:97:46:ed:8c:4f:85:95:ce:c4: da:11:88:68:cc:cd:fd:45:d6:d5:51:8d:92:b6:64: ec:d5:25:89:7f:5f:c7:f6:6f:c0:d3:9b:24:f1:16: 56:9b:77:d8:00:ff:17:15:ee:9a:30:3a:dd:98:0f: 6c:e9:1d:9d:10:90:ab:e8:41:ca:81:f6:6e:56:a7: de:19:d7:49:75:fc:48:70:7e:5f:27:c6:65:e4:a3: 6d:31:05:64:e0:83:36:df:18:58:2c:6f:f9:8f:76: 17:e3:9b:28:31:81:68:34:b5:74:69:4e:28:50:fc: d2:ad:21:c8:27:e5:b8:ee:2d:02:0a:a7:c6:6c:dd: d9:8f:37:ab:b4:a4:5a:ed:d4:07:d5:a8:6e:88:7e: 25:4e:33:18:8a:63:8b:fa:7b:7f:a4:a9:fb:14:9b: 66:40:b4:18:7c:f1:66:40:af:85:fd:48:18:14:89: a4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9A:CE:20:B4:BB:FF:45:6B:A2:50:CC:9F:23:7B:F9:67:4C:D7:D5 X509v3 Authority Key Identifier: keyid:5E:C9:28:AF:D7:3A:FC:70:F1:0C:46:8E:21:48:20:31:92:0D:F5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5EC928AFD73AFC70F10C468E21482031920DF521.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecf3f8c8-0406-4b38-a7a8-dcb15e41f2b7/0/5EC928AFD73AFC70F10C468E21482031920DF521.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ec:86:d9:2b:5b:ba:59:a5:e3:85:a6:9c:ea:20:ed:d0:f0: f4:46:e4:fc:bd:ed:a1:4c:1e:9a:e9:f7:6a:07:6c:fd:f9:b2: ce:f6:9c:79:c2:28:2a:2f:29:f0:cf:7b:e3:fa:35:6e:17:ab: 77:68:44:13:b0:05:ce:f7:52:aa:7f:c2:ba:61:9a:c3:9c:8b: c2:cf:3f:ae:2f:2d:4c:ac:7a:2f:4f:ec:c9:02:13:51:a3:17: b3:e0:ba:8e:2f:fe:d1:77:82:a4:38:02:5f:ba:ed:a0:0e:14: 39:c8:c5:f2:03:8b:57:50:7d:94:58:94:28:d6:d2:0c:72:93: 92:f8:fb:96:50:64:c4:7f:2b:09:54:00:30:2f:d1:19:f6:0c: 75:62:10:67:45:1e:49:e9:22:55:9c:11:64:29:a8:1a:89:ba: bd:af:1b:1c:d8:c8:ad:7e:fc:38:b5:d3:23:c7:f0:cf:be:4c: a6:af:71:da:b4:12:11:80:b6:53:cf:27:b1:f3:c8:4f:6e:20: cb:87:9e:6c:81:60:b2:f2:d9:8e:e7:e7:2d:70:84:a3:4b:fe: 1c:15:c9:86:da:ec:a2:02:18:b2:12:47:91:75:ae:07:09:bd: 03:cf:8c:aa:9b:ed:63:aa:84:b5:ca:d7:1c:b7:5f:38:70:e0: 71:dc:8f:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaK8Y1L6anF9psPxQKUh6mpSDoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5 MjBERjUyMTAeFw0yNjAxMTkxMTE1NDJaFw0yNjAxMjIxNzQzNDJaMDMxMTAvBgNV BAMTKERFOUFDRTIwQjRCQkZGNDU2QkEyNTBDQzlGMjM3QkY5Njc0Q0Q3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4Zu6R/ZTBlxOV05CVajPvp78 IABfRDdwqrfFKIwDce2j6fzU4llGCf9GN0K4SU9XBuYncUAF47PQGaIUbSiR+1ji QqxIxasigp7nFZ8cpJdG7YxPhZXOxNoRiGjMzf1F1tVRjZK2ZOzVJYl/X8f2b8DT myTxFlabd9gA/xcV7powOt2YD2zpHZ0QkKvoQcqB9m5Wp94Z10l1/Ehwfl8nxmXk o20xBWTggzbfGFgsb/mPdhfjmygxgWg0tXRpTihQ/NKtIcgn5bjuLQIKp8Zs3dmP N6u0pFrt1AfVqG6IfiVOMxiKY4v6e3+kqfsUm2ZAtBh88WZAr4X9SBgUiaTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3prOILS7/0VrolDMnyN7+WdM19UwHwYDVR0j BBgwFoAUXskor9c6/HDxDEaOIUggMZIN9SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2YzZjhjOC0wNDA2LTRiMzgtYTdhOC1kY2IxNWU0MWYyYjcvMC81RUM5MjhBRkQ3 M0FGQzcwRjEwQzQ2OEUyMTQ4MjAzMTkyMERGNTIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIwMzE5MjBE RjUyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNmM2Y4YzgtMDQwNi00YjM4LWE3 YTgtZGNiMTVlNDFmMmI3LzAvNUVDOTI4QUZENzNBRkM3MEYxMEM0NjhFMjE0ODIw MzE5MjBERjUyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/shtkrW7pZpeOFppzqIO3Q8PRG5Py97aFM Hprp92oHbP35ss72nHnCKCovKfDPe+P6NW4Xq3doRBOwBc73Uqp/wrphmsOci8LP P64vLUysei9P7MkCE1GjF7Pguo4v/tF3gqQ4Al+67aAOFDnIxfIDi1dQfZRYlCjW 0gxyk5L4+5ZQZMR/KwlUADAv0Rn2DHViEGdFHknpIlWcEWQpqBqJur2vGxzYyK1+ /Di10yPH8M++TKavcdq0EhGAtlPPJ7HzyE9uIMuHnmyBYLLy2Y7n5y1whKNL/hwV yYba7KICGLISR5F1rgcJvQPPjKqb7WOqhLXK1xy3Xzhw4HHcj1k= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:34 2026 by rpki-client