This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft File: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft (raw, json) Hash identifier: mLUzLEj//+LEYsbbtFByM1SLHalzHHzNaH0IYw5yjFU= Subject key identifier: 4C:CC:60:B7:FA:38:EF:62:33:14:97:4C:49:5C:3D:83:04:6F:71:11 Authority key identifier: FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B Certificate issuer: /CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Certificate serial: 1E85EA369ACF25BE80B5D116856BC81BCEE46775 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft Manifest number: 022F Signing time: Sun 25 Jan 2026 14:52:08 +0000 Manifest this update: Sun 25 Jan 2026 14:47:08 +0000 Manifest next update: Thu 29 Jan 2026 00:59:08 +0000 Files and hashes: 1: 3130332e31332e3133392e302f32342d3234203d3e20313530323135.roa (hash: cU1g8IvJ9xTyNpUSLD7UlYtWkf7YESigdS5w5xzxaBQ=) 2: 3130332e31332e3133382e302f32342d3234203d3e20313530323135.roa (hash: 6ADoYkeIrhNdhv/k4Oyj/4jDcP6VkQMjB86DXlVYGIc=) 3: FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl (hash: 3vshnsDGk/q/obEINO7tyovMCJujUTuZGB+M1qsf5sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:85:ea:36:9a:cf:25:be:80:b5:d1:16:85:6b:c8:1b:ce:e4:67:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE880CC93B6284E6833106A5BEB71A0CDDE57C0B Validity Not Before: Jan 25 14:47:08 2026 GMT Not After : Jan 29 00:59:08 2026 GMT Subject: CN=4CCC60B7FA38EF623314974C495C3D83046F7111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:5e:a1:46:a8:fe:72:ed:54:97:a5:2f:62: e4:32:a3:0d:85:06:e9:fa:11:1e:1b:11:48:06:e0: d2:0b:56:2a:ee:c2:80:3d:ec:79:f3:a7:0a:d6:4f: f2:39:a7:88:47:5e:ef:c7:56:43:c7:61:57:70:c2: 81:3d:e2:fa:4b:55:74:b8:8b:5c:3c:d8:8c:28:42: 16:9f:e9:91:15:1d:a6:00:d9:cd:f7:d8:86:44:7e: 0c:95:d0:03:b8:45:87:e3:07:ae:7f:6f:f5:80:ca: 87:1a:57:6a:84:a0:74:9b:34:25:10:b0:90:63:ed: a4:cf:f1:78:1e:64:ab:a0:53:ef:f8:ce:19:30:c3: fa:65:e9:42:83:f6:8c:fb:18:12:19:dc:5a:8f:3f: 47:29:5a:9b:fb:13:c1:a4:ce:cc:37:fb:45:a0:33: 8b:24:8c:5e:f5:b3:32:0e:0b:a4:63:66:43:84:35: 76:95:85:40:5a:f9:9d:f5:d6:51:f3:2f:c2:6f:3c: 8a:99:a8:df:fb:80:f8:77:16:95:5c:a3:15:13:7a: fc:cf:e1:3e:4c:f7:d5:28:77:bf:8c:11:53:90:3a: 43:c8:96:53:c7:b5:11:95:12:36:ca:21:66:8d:88: dc:fb:bb:19:79:53:87:91:4a:2e:c9:d0:48:ad:58: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CC:60:B7:FA:38:EF:62:33:14:97:4C:49:5C:3D:83:04:6F:71:11 X509v3 Authority Key Identifier: keyid:FE:88:0C:C9:3B:62:84:E6:83:31:06:A5:BE:B7:1A:0C:DD:E5:7C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1653247a-a56e-424a-a07b-36a2511d7caa/0/FE880CC93B6284E6833106A5BEB71A0CDDE57C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3e:b7:ff:7a:80:88:f0:26:31:88:bd:09:67:10:5d:43:86: 1c:4d:77:23:42:7f:95:85:fa:1e:d0:e5:5b:8f:69:5e:f3:ea: 77:46:8b:49:e5:ce:e4:4c:66:bb:29:8c:32:11:c5:51:2f:c7: 37:ec:9b:79:1e:6c:e3:38:af:5f:19:28:0e:1b:b5:dd:72:d5: af:f8:a1:d9:d3:01:f6:8e:43:88:72:be:b9:bf:29:1b:c7:0f: 5e:c1:a4:d5:60:8f:f6:0e:df:10:a6:84:32:ce:41:ad:0d:7b: fa:b0:98:e1:0c:d3:f7:58:2b:b1:45:73:9b:10:9d:3d:90:b6: 65:df:23:2e:a6:5e:b4:40:df:21:44:46:49:d6:cc:05:bb:07: b4:54:9f:46:be:b3:5a:fb:57:ea:89:07:93:aa:26:ce:c7:c0: 2f:59:49:68:f8:06:ab:2e:28:bc:f2:6c:5d:0b:52:9d:69:86: f5:e5:73:0f:8b:f5:66:97:8e:56:09:a5:ee:2d:3e:dd:84:28: ec:a7:6a:b5:ea:95:aa:4a:2e:ae:09:a8:a9:2c:c4:ad:d2:2a: af:28:f6:eb:49:e7:21:a3:71:1a:fa:70:63:4e:6e:55:fc:08: 95:8d:04:48:7e:92:94:82:b0:c2:9a:7a:8a:66:e3:2f:bf:fb: ca:c1:01:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHoXqNprPJb6AtdEWhWvIG87kZ3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENE REU1N0MwQjAeFw0yNjAxMjUxNDQ3MDhaFw0yNjAxMjkwMDU5MDhaMDMxMTAvBgNV BAMTKDRDQ0M2MEI3RkEzOEVGNjIzMzE0OTc0QzQ5NUMzRDgzMDQ2RjcxMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZl6hRqj+cu1Ul6UvYuQyow2F Bun6ER4bEUgG4NILViruwoA97HnzpwrWT/I5p4hHXu/HVkPHYVdwwoE94vpLVXS4 i1w82IwoQhaf6ZEVHaYA2c332IZEfgyV0AO4RYfjB65/b/WAyocaV2qEoHSbNCUQ sJBj7aTP8XgeZKugU+/4zhkww/pl6UKD9oz7GBIZ3FqPP0cpWpv7E8Gkzsw3+0Wg M4skjF71szIOC6RjZkOENXaVhUBa+Z311lHzL8JvPIqZqN/7gPh3FpVcoxUTevzP 4T5M99Uod7+MEVOQOkPIllPHtRGVEjbKIWaNiNz7uxl5U4eRSi7J0EitWOWzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMxgt/o472IzFJdMSVw9gwRvcREwHwYDVR0j BBgwFoAU/ogMyTtihOaDMQalvrcaDN3lfAswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NjUzMjQ3YS1hNTZlLTQyNGEtYTA3Yi0zNmEyNTExZDdjYWEvMC9GRTg4MENDOTNC NjI4NEU2ODMzMTA2QTVCRUI3MUEwQ0RERTU3QzBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFBMENEREU1 N0MwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTY1MzI0N2EtYTU2ZS00MjRhLWEw N2ItMzZhMjUxMWQ3Y2FhLzAvRkU4ODBDQzkzQjYyODRFNjgzMzEwNkE1QkVCNzFB MENEREU1N0MwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw+t/96gIjwJjGIvQlnEF1DhhxNdyNCf5WF +h7Q5VuPaV7z6ndGi0nlzuRMZrspjDIRxVEvxzfsm3kebOM4r18ZKA4btd1y1a/4 odnTAfaOQ4hyvrm/KRvHD17BpNVgj/YO3xCmhDLOQa0Ne/qwmOEM0/dYK7FFc5sQ nT2QtmXfIy6mXrRA3yFERknWzAW7B7RUn0a+s1r7V+qJB5OqJs7HwC9ZSWj4Bqsu KLzybF0LUp1phvXlcw+L9WaXjlYJpe4tPt2EKOynarXqlapKLq4JqKksxK3SKq8o 9utJ5yGjcRr6cGNOblX8CJWNBEh+kpSCsMKaeopm4y+/+8rBAds= -----END CERTIFICATE-----Generated at Sun Jan 25 18:37:09 2026 by rpki-client