This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
File: FED855DD505D24B6FE25BD8656297329F7EF4785.mft (raw, json)
Hash identifier: 2DZjGh6TbXSzy9uZGcEYHKyO+nMJlgQQQqaHOhlP/Uk=
Subject key identifier: 81:90:92:FE:87:81:F2:05:35:33:53:6E:B8:E5:21:DF:88:35:7A:14
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Certificate issuer: /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial: 70AF8EEA9AAADC56FEC1289B2E3E71DC131109D7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
Manifest number: 04BE
Signing time: Sun 25 Jan 2026 09:51:30 +0000
Manifest this update: Sun 25 Jan 2026 09:46:30 +0000
Manifest next update: Wed 28 Jan 2026 15:48:30 +0000
Files and hashes: 1: 3130332e3130352e3132382e302f32342d3234203d3e203137373237.roa (hash: X2PEKknjtTcnLsrGiadMk08xxZNciTvdVjNrgOP4sHk=)
2: 3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (hash: yMrj8AoB/ixjd6PVgwO256Xjq06xuds8sgMBoLkTbyM=)
3: FED855DD505D24B6FE25BD8656297329F7EF4785.crl (hash: E1DPsQAOQKPQFnsjGIvhvoNZdE1UAfaze6Bq0jHRknY=)
4: 3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (hash: IhDRQtUCQIm4IOPr5vP9tEfWgB4QjIXQlUOAr7HBNq4=)
5: 3130332e3130352e3132392e302f32342d3234203d3e203137373237.roa (hash: hPyIxp0hj3k+joStahsmifFKwjq2yL5rkOsyq1Wlc34=)
6: 3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (hash: MeNQV5B+OerhDUDBOkfR5BHmeZ2GFCk+XtpnzmEeM9I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:af:8e:ea:9a:aa:dc:56:fe:c1:28:9b:2e:3e:71:dc:13:11:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Validity
Not Before: Jan 25 09:46:30 2026 GMT
Not After : Jan 28 15:48:30 2026 GMT
Subject: CN=819092FE8781F2053533536EB8E521DF88357A14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:95:73:20:af:42:53:0e:84:48:69:73:68:
df:f7:c3:33:a5:09:b4:37:65:3a:a9:90:ae:b7:07:
88:86:ee:d8:37:1d:54:c2:41:12:c2:ab:3c:38:bc:
3a:1d:8b:1a:ff:20:1e:a2:53:fc:3e:c9:32:1b:51:
d5:76:51:ab:a1:d5:1e:5d:c9:3e:70:b9:6b:74:60:
bf:88:46:61:30:17:ce:6b:15:e8:05:e5:3e:21:2f:
60:39:0e:ef:fb:b7:aa:f0:2f:f6:a5:3a:73:a0:24:
84:e9:20:10:56:be:29:50:c5:51:33:68:fc:40:20:
6b:16:a7:7b:05:67:13:48:fb:69:b5:69:e9:f9:3a:
31:d6:d0:e4:62:fc:79:c4:2a:d8:5c:de:2b:6a:d7:
e7:35:68:ae:3e:b5:7f:46:2c:b3:db:00:56:b4:a2:
ba:8c:30:61:87:c6:38:d2:24:54:56:bf:aa:0b:3a:
ef:c7:5f:18:23:c6:b7:7c:be:67:3d:f3:b0:1e:79:
ec:06:62:e3:bc:5e:cb:d7:7d:04:2a:b7:f0:0a:c2:
43:2c:c2:41:8d:f0:b6:90:9b:e2:47:0e:53:36:f5:
0e:d3:34:e2:cf:61:92:5a:2b:c0:ce:5d:1c:21:91:
58:f1:36:8f:7a:32:52:a7:5e:cb:bf:59:b8:93:53:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:92:FE:87:81:F2:05:35:33:53:6E:B8:E5:21:DF:88:35:7A:14
X509v3 Authority Key Identifier:
keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:d7:60:95:89:f0:f2:4d:ba:cb:a5:3a:31:60:48:97:62:2a:
23:7a:29:06:10:ee:4d:8f:fd:eb:fa:7b:fa:70:24:70:47:2a:
e5:e9:e4:52:5b:76:48:d4:8e:44:f6:13:1d:2c:09:0e:9f:a8:
4f:14:7e:83:4b:ec:f3:f9:02:19:2d:8c:9e:db:61:df:5d:e2:
f2:3f:bb:75:99:18:eb:73:15:16:eb:54:44:05:d1:bf:3d:c4:
15:a1:7f:ae:d2:9f:6a:b5:c6:d4:91:0e:f8:08:ed:39:ea:37:
af:0c:6f:62:b0:50:8a:2c:74:2d:ca:f1:c5:a1:c1:20:a0:b7:
db:ae:ab:4c:65:84:f1:05:aa:fb:9b:e0:68:8f:11:4a:f8:53:
25:3e:e1:31:56:84:e5:19:be:fe:1b:ea:7c:65:d2:07:05:9a:
1d:8a:d8:0e:fd:b5:f1:94:82:63:ba:c6:7b:35:38:9a:b2:f5:
3d:fb:70:e3:09:41:76:8b:c3:e5:6b:4a:ae:67:f0:fc:75:e7:
8e:d0:c9:e9:8a:6e:a1:7a:bf:60:65:c4:41:7d:50:fb:18:d8:
17:0d:65:69:f4:bc:78:9d:10:4c:1a:89:76:fa:e8:b7:d7:cb:
8d:f9:f4:b6:a2:33:dd:1b:c1:46:c8:c6:18:37:6a:4d:e5:ba:
b8:44:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:08:23 2026 by rpki-client