This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json) Hash identifier: k49tRzOFRr0pExYKnLpL686j28eMZyQHTBHiGLdZtvY= Subject key identifier: 68:57:B4:33:D0:94:55:A5:F0:EC:5F:69:52:17:DC:5A:18:85:DE:E5 Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Certificate serial: 055C50917C49BE05CC15C49E85C76551F6AABE6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft Manifest number: F3 Signing time: Sun 25 Jan 2026 02:11:36 +0000 Manifest this update: Sun 25 Jan 2026 02:06:36 +0000 Manifest next update: Wed 28 Jan 2026 06:23:36 +0000 Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=) 2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: 0mhTmLKnoIo2eYBGGgIMCEdxcDSTtBaOQfTMV8wB7tM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5c:50:91:7c:49:be:05:cc:15:c4:9e:85:c7:65:51:f6:aa:be:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Validity Not Before: Jan 25 02:06:36 2026 GMT Not After : Jan 28 06:23:36 2026 GMT Subject: CN=6857B433D09455A5F0EC5F695217DC5A1885DEE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:63:f8:fd:7d:c5:c9:3a:23:21:55:07:19:4b: 95:56:c4:a4:a3:4f:dd:2f:b6:f9:0c:f9:61:0f:36: bf:a6:c7:c4:fe:47:b9:19:ab:c3:d7:e7:05:1b:f1: f6:a9:8b:f2:20:e4:83:6a:e0:69:2b:96:59:0b:e3: 46:e1:42:c8:24:ae:aa:ce:9d:e0:fc:f5:9f:45:de: 83:e7:ae:ed:34:9e:89:7f:23:3a:97:c9:80:8e:fa: 72:55:88:ff:92:83:e2:26:20:7b:68:a1:5b:c3:6b: 63:91:a4:da:71:77:af:0d:6f:25:aa:08:82:4f:41: 63:fe:5d:5d:27:6c:97:db:99:b6:79:a9:9f:fa:cb: 8f:1d:27:15:8b:4a:80:1b:c3:7f:cb:32:0b:28:9e: 72:00:ad:43:36:fe:44:13:87:c6:54:94:52:72:bf: ae:8c:2c:e2:ab:4d:21:17:5d:d8:42:68:dd:e6:6f: 9c:f3:d6:87:7e:55:d3:19:52:4b:c0:8e:65:63:17: ca:2b:a0:16:b8:c1:20:97:8c:9e:ca:5b:3a:60:b7: 99:87:29:89:b6:51:77:54:56:d5:fe:8b:a7:eb:6c: 18:ed:f2:43:a9:ab:66:e3:65:52:09:b2:66:bf:ad: 37:9d:1b:4b:49:14:50:61:c3:cd:ae:bf:10:ff:94: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:57:B4:33:D0:94:55:A5:F0:EC:5F:69:52:17:DC:5A:18:85:DE:E5 X509v3 Authority Key Identifier: keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:98:57:46:86:63:54:ce:47:d7:b6:29:4d:42:d1:a8:47: 2f:ca:d1:d6:e3:94:34:c3:7b:5e:8c:75:7c:49:d4:1b:9a:e4: c4:8a:b4:1d:6b:68:18:3f:c3:c6:f7:d9:54:1c:06:3f:3b:5c: fc:78:ca:eb:06:b7:70:5e:d3:20:91:3a:42:ad:3b:f0:83:f9: c7:2e:d1:55:c9:b5:f9:dc:a3:5b:99:66:6a:84:e9:cf:be:3a: a6:46:9a:fb:9f:8f:19:54:61:a0:67:f7:67:37:58:1b:41:89: 7e:27:43:b7:52:81:cc:11:fe:0f:20:56:58:cb:77:3a:57:9c: 10:b7:de:ad:44:12:89:34:70:7a:60:14:a7:bd:a6:2b:82:c1: 6e:87:95:f0:d7:d7:f1:de:37:98:8a:13:d5:99:c4:1b:8d:04: de:3a:a2:83:3a:f5:85:0b:be:45:dc:ca:ec:8c:cb:58:db:44: 43:4d:65:40:e5:fd:22:89:26:79:d2:eb:19:38:91:3a:45:f8: b8:60:1c:0b:aa:7b:70:18:3b:d0:0a:d0:2b:99:ff:ed:2c:ed: be:89:3b:be:b9:10:e2:fb:26:76:1d:ce:a3:a5:82:db:4c:4e: 88:36:b3:f6:d7:ef:16:b0:f4:cf:4d:70:67:7c:73:1e:44:01: 82:8a:9c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBVxQkXxJvgXMFcSehcdlUfaqvmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0 MzEzMEVBODAeFw0yNjAxMjUwMjA2MzZaFw0yNjAxMjgwNjIzMzZaMDMxMTAvBgNV BAMTKDY4NTdCNDMzRDA5NDU1QTVGMEVDNUY2OTUyMTdEQzVBMTg4NURFRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNY/j9fcXJOiMhVQcZS5VWxKSj T90vtvkM+WEPNr+mx8T+R7kZq8PX5wUb8fapi/Ig5INq4GkrllkL40bhQsgkrqrO neD89Z9F3oPnru00nol/IzqXyYCO+nJViP+Sg+ImIHtooVvDa2ORpNpxd68NbyWq CIJPQWP+XV0nbJfbmbZ5qZ/6y48dJxWLSoAbw3/LMgsonnIArUM2/kQTh8ZUlFJy v66MLOKrTSEXXdhCaN3mb5zz1od+VdMZUkvAjmVjF8oroBa4wSCXjJ7KWzpgt5mH KYm2UXdUVtX+i6frbBjt8kOpq2bjZVIJsma/rTedG0tJFFBhw82uvxD/lCYZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaFe0M9CUVaXw7F9pUhfcWhiF3uUwHwYDVR0j BBgwFoAU/5bTBVe9rOJsUR4fSKNRRkMTDqgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMC9GRjk2RDMwNTU3 QkRBQ0UyNkM1MTFFMUY0OEEzNTE0NjQzMTMwRUE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUxNDY0MzEz MEVBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQyYzFmMzItODFhYy00MTE4LWJl MmYtNTc0Y2E1YjU0MWVhLzAvRkY5NkQzMDU1N0JEQUNFMjZDNTExRTFGNDhBMzUx NDY0MzEzMEVBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg5mFdGhmNUzkfXtilNQtGoRy/K0dbjlDTD e16MdXxJ1Bua5MSKtB1raBg/w8b32VQcBj87XPx4yusGt3Be0yCROkKtO/CD+ccu 0VXJtfnco1uZZmqE6c++OqZGmvufjxlUYaBn92c3WBtBiX4nQ7dSgcwR/g8gVljL dzpXnBC33q1EEok0cHpgFKe9piuCwW6HlfDX1/HeN5iKE9WZxBuNBN46ooM69YUL vkXcyuyMy1jbRENNZUDl/SKJJnnS6xk4kTpF+LhgHAuqe3AYO9AK0CuZ/+0s7b6J O765EOL7JnYdzqOlgttMTog2s/bX7xaw9M9NcGd8cx5EAYKKnIM= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:29 2026 by rpki-client