This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: nBO9KtuQMAeQyGqoZrGBHNY0AjrJ2o4H/jOFnCXggHg= Subject key identifier: EB:9D:A3:2A:66:D9:94:EB:68:01:88:FC:D5:C7:55:14:9A:43:CD:6F Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 256F9CAB42A0870C353A9F23CAC29C8CFECB7852 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 0103 Signing time: Sun 25 Jan 2026 15:10:46 +0000 Manifest this update: Sun 25 Jan 2026 15:05:46 +0000 Manifest next update: Wed 28 Jan 2026 22:46:46 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: 1ukdLbFmAFOupIQNVpHIzW4AJcjVnAGLMLqHAtwMy7Y=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 21:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6f:9c:ab:42:a0:87:0c:35:3a:9f:23:ca:c2:9c:8c:fe:cb:78:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Jan 25 15:05:46 2026 GMT Not After : Jan 28 22:46:46 2026 GMT Subject: CN=EB9DA32A66D994EB680188FCD5C755149A43CD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:1d:ac:55:41:54:df:99:c5:57:24:17:f3: 1e:d9:3f:b6:6b:f1:f6:e2:69:46:16:8b:9a:6d:28: b9:79:6a:d3:28:fc:fd:f4:4f:82:e3:08:d4:22:d5: fa:7b:bd:6f:b4:d3:6e:82:05:73:b0:76:ea:de:9d: 05:87:dd:8a:d8:69:44:c1:65:42:02:d0:0b:f7:05: 43:06:2a:cc:8f:58:83:21:11:26:e6:06:be:af:42: e7:e7:2c:b7:b3:a9:7a:34:1a:8b:ce:5e:a6:05:46: 35:23:3c:06:31:97:17:d3:4a:69:ed:35:70:f0:73: ea:fb:f9:47:02:e6:e7:ae:0c:8c:68:10:6c:1c:fb: 39:4e:3f:70:dd:12:ee:c0:e8:38:a8:f4:ec:fd:41: a5:f6:03:06:79:99:7c:60:33:78:ed:d5:93:6c:2f: bb:f3:d3:28:62:32:80:5e:0d:78:6b:c9:ed:b1:01: 90:36:a0:15:97:37:0c:6c:98:31:85:39:c8:c4:71: 6d:e0:d2:b6:88:19:36:9e:fb:bb:50:5d:aa:07:0c: 9f:3b:0c:09:d3:c7:a0:df:32:b7:24:58:a9:af:a0: ad:d8:3e:49:72:dd:85:de:87:cc:ee:d9:72:20:cc: a4:b3:3b:86:5c:d2:c3:cb:d6:14:de:17:75:8a:24: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:A3:2A:66:D9:94:EB:68:01:88:FC:D5:C7:55:14:9A:43:CD:6F X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ae:17:6e:b9:58:e7:8c:f5:0f:05:55:ce:b4:db:05:3d:61: 99:7e:4a:e7:68:72:43:fc:9f:cb:b7:3a:64:c7:43:c9:b5:c0: 21:48:bb:cc:81:67:8d:dc:55:db:0e:eb:b5:b3:19:88:30:d9: e2:36:29:e9:68:94:03:f9:d8:ba:ac:5c:1a:ed:b6:62:44:de: 8d:75:43:13:3f:ea:0f:2e:57:80:dc:9a:d4:47:eb:3e:e9:87: 39:a3:01:ae:f7:65:34:05:bc:1e:6d:26:98:2d:75:fe:c9:17: ca:a4:c0:8e:03:9f:ad:b1:37:7e:5f:d9:be:c7:ab:f1:01:83: 75:2e:f0:68:22:5d:02:2f:bc:86:24:62:7f:bd:6a:d1:01:1b: bf:85:2c:a2:d0:b4:9f:bc:09:7d:62:41:4d:f8:07:80:03:f5: 17:92:e2:3d:c6:8b:78:78:6f:d1:ed:86:a2:0f:70:c2:7e:03: b5:8e:21:b8:d9:53:75:e4:bd:a7:c8:db:f5:23:08:c7:37:33: 0c:0d:a3:a0:d0:5b:9f:c1:d8:50:6b:22:68:ec:ab:f7:98:4a: 3b:b3:1b:a5:0a:10:a6:d9:c1:3d:e1:3a:dc:a7:9a:ca:be:b4: e6:17:8e:d7:8f:bd:fb:75:48:5e:ac:d6:4a:bb:91:62:13:02: cf:1c:ab:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJW+cq0Kghww1Op8jysKcjP7LeFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNjAxMjUxNTA1NDZaFw0yNjAxMjgyMjQ2NDZaMDMxMTAvBgNV BAMTKEVCOURBMzJBNjZEOTk0RUI2ODAxODhGQ0Q1Qzc1NTE0OUE0M0NENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7PB2sVUFU35nFVyQX8x7ZP7Zr 8fbiaUYWi5ptKLl5atMo/P30T4LjCNQi1fp7vW+0026CBXOwdurenQWH3YrYaUTB ZUIC0Av3BUMGKsyPWIMhESbmBr6vQufnLLezqXo0GovOXqYFRjUjPAYxlxfTSmnt NXDwc+r7+UcC5ueuDIxoEGwc+zlOP3DdEu7A6Dio9Oz9QaX2AwZ5mXxgM3jt1ZNs L7vz0yhiMoBeDXhrye2xAZA2oBWXNwxsmDGFOcjEcW3g0raIGTae+7tQXaoHDJ87 DAnTx6DfMrckWKmvoK3YPkly3YXeh8zu2XIgzKSzO4Zc0sPL1hTeF3WKJCCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU652jKmbZlOtoAYj81cdVFJpDzW8wHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM+uF265WOeM9Q8FVc602wU9YZl+SudockP8 n8u3OmTHQ8m1wCFIu8yBZ43cVdsO67WzGYgw2eI2KelolAP52LqsXBrttmJE3o11 QxM/6g8uV4DcmtRH6z7phzmjAa73ZTQFvB5tJpgtdf7JF8qkwI4Dn62xN35f2b7H q/EBg3Uu8GgiXQIvvIYkYn+9atEBG7+FLKLQtJ+8CX1iQU34B4AD9ReS4j3Gi3h4 b9HthqIPcMJ+A7WOIbjZU3XkvafI2/UjCMc3MwwNo6DQW5/B2FBrImjsq/eYSjuz G6UKEKbZwT3hOtynmsq+tOYXjtePvft1SF6s1kq7kWITAs8cq0w= -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:16 2026 by rpki-client