This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: fMJ+KL05YTYJqYViEBRl/uKEAnzlMBQUp21S4vOMgko= Subject key identifier: DE:CB:32:14:46:92:FD:BB:29:63:69:91:B7:D4:67:0C:D8:8E:E3:DB Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 0D6639A81BD1C503F8C98C3C0E7E82FB8FD90836 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0110 Signing time: Sat 24 Jan 2026 03:52:27 +0000 Manifest this update: Sat 24 Jan 2026 03:47:27 +0000 Manifest next update: Tue 27 Jan 2026 14:56:27 +0000 Files and hashes: 1: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: Ys7oEth38ZyNfX0eE4l53Gkzp9GKX/rrIUSANMxzlZ8=) 4: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:66:39:a8:1b:d1:c5:03:f8:c9:8c:3c:0e:7e:82:fb:8f:d9:08:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Jan 24 03:47:27 2026 GMT Not After : Jan 27 14:56:27 2026 GMT Subject: CN=DECB32144692FDBB29636991B7D4670CD88EE3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c9:03:ce:5a:7c:ce:2a:5d:55:77:67:60:15: 59:38:99:00:6e:f2:4f:69:a6:cc:67:91:2d:83:fe: 7e:79:71:ae:d9:42:27:f4:49:e2:72:d8:40:da:8b: 29:32:a7:0a:93:ce:03:4c:23:9e:6e:4c:d0:e9:1d: 01:a7:36:d2:1b:53:a9:e6:43:64:2c:d3:41:10:8e: 44:d5:24:ba:0c:2c:14:a3:70:2e:9f:6f:37:ae:8d: 8c:e1:f7:01:79:c1:34:49:fb:8d:d4:28:13:9e:0b: c9:7d:86:85:27:1f:b3:a2:9d:13:42:2b:a5:76:16: 7e:a8:22:6d:7e:79:b6:88:62:31:5d:e7:36:8c:8e: b4:80:dd:79:9d:cf:8b:9d:ed:50:8c:77:e0:78:04: 83:78:a0:0d:e1:e4:98:40:17:4a:6b:2f:36:77:6f: 38:9e:a6:bb:4a:57:4c:78:72:85:7c:ee:95:3e:32: e2:2a:5b:50:dd:87:98:0d:3f:dd:7a:ea:e4:07:b8: 14:a8:17:14:6e:85:2c:1c:8d:5f:53:23:c8:36:63: dd:e8:a3:fc:be:0d:89:33:6c:1d:88:81:72:63:79: 69:9b:6b:e0:fc:c4:a2:3c:f1:45:43:57:ee:11:bb: 54:47:c0:a8:dc:11:69:11:f1:03:98:45:c0:c0:de: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:32:14:46:92:FD:BB:29:63:69:91:B7:D4:67:0C:D8:8E:E3:DB X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9b:f6:bc:a0:89:90:24:5f:2e:ef:f6:43:dd:29:09:dd:21: 42:65:f2:16:bb:70:12:ca:78:6e:a5:3a:0f:01:03:69:0b:ef: e7:2f:90:82:80:b9:13:db:e3:0b:52:a7:74:42:48:85:7d:75: 89:52:c6:56:30:95:d8:8d:ac:bf:a7:ec:fc:cf:87:33:4d:70: 09:d0:4e:43:3e:84:20:34:92:32:44:7a:83:d0:af:46:04:85: 54:6e:96:98:85:7b:e8:36:e9:cc:99:0c:5d:30:6a:78:54:8b: 24:d9:ff:2c:ac:e1:da:35:2f:16:05:50:69:f3:05:fe:87:60: 20:75:9d:ac:b7:94:b7:e7:ed:e6:a2:39:91:c8:08:fc:4a:64: 98:af:15:f4:73:ae:69:47:19:72:ea:65:8d:cb:54:72:a1:74: 45:7f:cf:17:10:b6:10:48:c7:2d:3e:e2:77:37:a9:58:d4:30: f4:85:82:d7:fe:f7:74:28:69:f7:36:27:a1:02:de:af:00:9d: e5:da:a6:f6:97:1a:17:45:b6:33:b0:6f:67:a0:8b:de:9a:af: 1d:b8:7a:2a:40:8e:43:2c:6d:cf:45:c3:91:9a:80:98:55:4d: 0f:f2:d1:a2:e4:1f:5a:49:14:3c:3d:3f:df:e9:d8:d4:e2:b2: 12:79:a6:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWY5qBvRxQP4yYw8Dn6C+4/ZCDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjAxMjQwMzQ3MjdaFw0yNjAxMjcxNDU2MjdaMDMxMTAvBgNV BAMTKERFQ0IzMjE0NDY5MkZEQkIyOTYzNjk5MUI3RDQ2NzBDRDg4RUUzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzyQPOWnzOKl1Vd2dgFVk4mQBu 8k9ppsxnkS2D/n55ca7ZQif0SeJy2EDaiykypwqTzgNMI55uTNDpHQGnNtIbU6nm Q2Qs00EQjkTVJLoMLBSjcC6fbzeujYzh9wF5wTRJ+43UKBOeC8l9hoUnH7OinRNC K6V2Fn6oIm1+ebaIYjFd5zaMjrSA3Xmdz4ud7VCMd+B4BIN4oA3h5JhAF0prLzZ3 bzieprtKV0x4coV87pU+MuIqW1Ddh5gNP9166uQHuBSoFxRuhSwcjV9TI8g2Y93o o/y+DYkzbB2IgXJjeWmba+D8xKI88UVDV+4Ru1RHwKjcEWkR8QOYRcDA3gWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ssyFEaS/bspY2mRt9RnDNiO49swHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeb9rygiZAkXy7v9kPdKQndIUJl8ha7cBLK eG6lOg8BA2kL7+cvkIKAuRPb4wtSp3RCSIV9dYlSxlYwldiNrL+n7PzPhzNNcAnQ TkM+hCA0kjJEeoPQr0YEhVRulpiFe+g26cyZDF0wanhUiyTZ/yys4do1LxYFUGnz Bf6HYCB1nay3lLfn7eaiOZHICPxKZJivFfRzrmlHGXLqZY3LVHKhdEV/zxcQthBI xy0+4nc3qVjUMPSFgtf+93Qoafc2J6EC3q8AneXapvaXGhdFtjOwb2egi96arx24 eipAjkMsbc9Fw5GagJhVTQ/y0aLkH1pJFDw9P9/p2NTishJ5pho= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:00 2026 by rpki-client