This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json) Hash identifier: MeLsZx6G5839ds4GXzYCvgvjk0wa43SJW+EiwjmtZg0= Subject key identifier: 3D:08:B3:7E:D8:4E:E4:87:01:CB:5D:F2:30:47:1A:AC:83:91:88:70 Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E Certificate serial: 40723E57A923D29286252B49DD2C0CB3DFC07438 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft Manifest number: F5 Signing time: Sun 25 Jan 2026 06:21:15 +0000 Manifest this update: Sun 25 Jan 2026 06:16:15 +0000 Manifest next update: Wed 28 Jan 2026 17:15:15 +0000 Files and hashes: 1: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=) 2: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: d14Pq/wS2MGuThl5khM+oNzRhqfN3S/gL3FJmMqAMUo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:72:3e:57:a9:23:d2:92:86:25:2b:49:dd:2c:0c:b3:df:c0:74:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Validity Not Before: Jan 25 06:16:15 2026 GMT Not After : Jan 28 17:15:15 2026 GMT Subject: CN=3D08B37ED84EE48701CB5DF230471AAC83918870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:97:1d:5a:c0:0b:17:a0:b3:8c:03:cb:87: ab:43:b4:30:ac:36:cd:8c:59:2f:9e:f2:0c:52:60: 12:2b:e2:75:5c:16:dc:63:79:cf:6e:c5:87:9e:83: f0:c9:8a:c9:86:d6:16:be:05:55:c2:60:72:87:55: 6c:a2:e9:12:df:11:e3:4f:ec:b0:54:b6:e3:73:e3: b9:3d:84:b6:d3:f5:1c:93:b7:84:49:d8:97:a5:27: ce:ab:3b:40:8b:33:c0:61:f4:96:5b:c3:38:09:e7: ef:28:87:71:41:40:cb:eb:67:c5:01:0f:65:22:c7: 34:e2:15:37:60:fe:3b:ff:ce:31:17:aa:12:e6:7a: ce:dc:3a:38:b1:dc:34:b9:72:9b:66:67:73:58:f4: 36:49:a0:40:4d:6d:09:57:f1:d5:d9:cd:ab:a2:7a: 33:88:ac:6a:f3:dd:31:a8:de:7c:d3:82:15:1d:ee: 48:7d:10:8c:c5:9e:e1:36:c2:fa:ba:13:74:e2:94: 68:a8:ba:13:93:94:e2:f5:55:32:51:9f:c7:da:66: 43:d1:4f:19:35:ec:98:25:6b:d3:6e:a9:c7:3b:13: 3b:ea:4f:8f:0d:44:43:60:7f:5e:af:42:f7:14:c9: d0:dc:27:8b:ea:98:bc:9b:0b:14:34:3b:46:1d:07: d0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:08:B3:7E:D8:4E:E4:87:01:CB:5D:F2:30:47:1A:AC:83:91:88:70 X509v3 Authority Key Identifier: keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:70:56:70:eb:5c:77:0f:73:95:13:61:22:b4:75:52:bc: b7:45:18:2c:26:5a:69:e8:81:38:63:c8:a4:de:b4:9b:6b:4f: 70:db:6c:41:8a:ba:98:95:f2:94:dc:11:cb:7f:e9:37:aa:68: 6f:85:5c:2c:3b:f9:de:e8:d5:52:c0:10:b0:a8:1c:67:2b:26: 6f:a3:ac:15:af:15:51:3f:78:4e:7b:4d:fe:3a:9b:bd:62:df: 6b:8c:fa:a5:3d:45:fc:10:c0:ad:80:b4:1b:d9:89:bd:c1:82: 77:ca:57:a9:10:b0:4b:06:7f:56:9d:ff:e1:4e:7e:f3:e1:02: 18:23:6c:b6:ed:f4:c2:f1:22:95:3b:da:a8:84:e3:a9:6e:06: 1a:e9:94:7f:b1:c9:32:b1:9d:c9:d6:47:bb:65:25:72:97:7d: e7:e4:6b:b3:68:73:af:6d:ed:11:f8:8e:79:cc:29:21:f7:93: 88:64:7c:ec:14:9d:9a:af:57:a8:c6:4b:d2:ad:74:84:d9:19: ec:78:8f:3e:3e:da:dc:54:b9:25:fc:1b:1e:48:85:de:fa:7e: c7:a2:9e:ba:bd:44:9d:32:65:4e:1e:72:20:bd:21:19:f4:b9: 8a:28:79:e5:ba:9d:e2:51:d9:84:60:b5:2f:6d:0a:70:e7:ef: db:80:0e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHI+V6kj0pKGJStJ3SwMs9/AdDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEy MEM5ODYxRTAeFw0yNjAxMjUwNjE2MTVaFw0yNjAxMjgxNzE1MTVaMDMxMTAvBgNV BAMTKDNEMDhCMzdFRDg0RUU0ODcwMUNCNURGMjMwNDcxQUFDODM5MTg4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoZcdWsALF6CzjAPLh6tDtDCs Ns2MWS+e8gxSYBIr4nVcFtxjec9uxYeeg/DJismG1ha+BVXCYHKHVWyi6RLfEeNP 7LBUtuNz47k9hLbT9RyTt4RJ2JelJ86rO0CLM8Bh9JZbwzgJ5+8oh3FBQMvrZ8UB D2UixzTiFTdg/jv/zjEXqhLmes7cOjix3DS5cptmZ3NY9DZJoEBNbQlX8dXZzaui ejOIrGrz3TGo3nzTghUd7kh9EIzFnuE2wvq6E3TilGiouhOTlOL1VTJRn8faZkPR Txk17Jgla9Nuqcc7EzvqT48NRENgf16vQvcUydDcJ4vqmLybCxQ0O0YdB9A5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPQizfthO5IcBy13yMEcarIORiHAwHwYDVR0j BBgwFoAU/xAjcVZYMd25wG30ffebESDJhh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMC9GRjEwMjM3MTU2 NTgzMUREQjlDMDZERjQ3REY3OUIxMTIwQzk4NjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlCMTEyMEM5 ODYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQzZjI5ZWEtODc0YS00ZDFhLWFi Y2MtNzUyOTNjYjUxYTZkLzAvRkYxMDIzNzE1NjU4MzFEREI5QzA2REY0N0RGNzlC MTEyMEM5ODYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr9cFZw61x3D3OVE2EitHVSvLdFGCwmWmno gThjyKTetJtrT3DbbEGKupiV8pTcEct/6TeqaG+FXCw7+d7o1VLAELCoHGcrJm+j rBWvFVE/eE57Tf46m71i32uM+qU9RfwQwK2AtBvZib3BgnfKV6kQsEsGf1ad/+FO fvPhAhgjbLbt9MLxIpU72qiE46luBhrplH+xyTKxncnWR7tlJXKXfefka7Noc69t 7RH4jnnMKSH3k4hkfOwUnZqvV6jGS9KtdITZGex4jz4+2txUuSX8Gx5Ihd76fsei nrq9RJ0yZU4eciC9IRn0uYooeeW6neJR2YRgtS9tCnDn79uADhc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:55:30 2026 by rpki-client