This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
File: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft (raw, json)
Hash identifier: F4J3STi4Ln1XsUAdX0s5TiiohED8bPwg1w0yLRZGkeE=
Subject key identifier: EF:34:6E:EE:E9:36:50:FE:E4:27:D7:D8:44:E6:42:7F:FC:EB:90:EC
Authority key identifier: FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7
Certificate issuer: /CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7
Certificate serial: 2AAC75FB74749BAE76906A3C5D6BE2AEB52B7B9D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
Manifest number: 0502
Signing time: Sun 25 Jan 2026 21:22:10 +0000
Manifest this update: Sun 25 Jan 2026 21:17:10 +0000
Manifest next update: Wed 28 Jan 2026 21:46:10 +0000
Files and hashes: 1: 3130332e33392e35322e302f32342d3234203d3e203633353033.roa (hash: Bw5xJfUWgUnZZKn8O2MlqxKM9AFTPxg86d/p/QbMwfs=)
2: FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl (hash: l6tZTgyAj8h+t6hOTpkw9UoAvQK2+HcRlA5BE1iU3uY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl
rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ac:75:fb:74:74:9b:ae:76:90:6a:3c:5d:6b:e2:ae:b5:2b:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7
Validity
Not Before: Jan 25 21:17:10 2026 GMT
Not After : Jan 28 21:46:10 2026 GMT
Subject: CN=EF346EEEE93650FEE427D7D844E6427FFCEB90EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0a:a5:04:cd:f4:fe:61:c7:5b:ed:64:99:56:
b0:ff:6f:2d:b4:b3:4c:3f:d5:18:d6:1d:f7:d7:71:
32:df:22:16:eb:98:00:54:ce:48:6e:14:86:de:14:
f1:78:6f:af:53:a5:5b:97:b5:45:37:b2:40:16:f8:
c7:5c:fb:42:4e:8c:be:c5:88:8b:b4:12:3e:3e:1c:
4b:61:44:5f:f3:ad:a1:d0:66:86:e8:65:ad:64:f7:
41:fb:f8:b1:e3:d8:b2:c9:31:be:45:5f:57:16:5b:
b9:65:21:64:53:c6:ca:85:dc:f2:07:00:a5:68:fa:
38:88:76:f3:10:6f:96:44:ef:1d:c9:5e:8b:e7:fb:
3d:01:5e:e0:83:9f:8a:30:74:c0:70:cd:81:94:0b:
bf:2c:be:8a:8a:a6:0f:2e:28:1f:26:85:f8:d7:15:
77:b3:b3:85:04:a2:a2:d3:b3:0b:1a:f0:ab:cf:90:
d6:99:cc:5b:58:09:3a:a7:ba:b1:83:3d:00:2b:63:
fd:7d:0c:b9:b6:be:f1:bc:4f:59:60:02:ad:c4:49:
a1:3b:35:e7:9d:00:a5:30:1e:26:87:18:25:36:3f:
fe:df:4f:3e:4d:89:4d:2d:df:b0:1a:fc:a6:87:63:
e9:34:40:4f:e9:67:a3:87:8e:20:24:0c:01:b6:e2:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:34:6E:EE:E9:36:50:FE:E4:27:D7:D8:44:E6:42:7F:FC:EB:90:EC
X509v3 Authority Key Identifier:
keyid:FC:1C:63:95:AD:65:E5:3A:B9:BC:4B:BD:45:1A:E7:92:34:BF:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b9752f6-6066-4b38-87cc-9ba63d19e22c/0/FC1C6395AD65E53AB9BC4BBD451AE79234BF63D7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5e:53:54:40:32:8e:1b:e0:72:a6:32:fa:0e:42:95:17:3a:
3c:7c:6f:bf:3c:6d:f9:36:37:a7:f0:cb:80:22:6c:37:22:89:
e8:37:34:43:08:e8:0a:9a:da:8a:2f:c9:6c:5d:4d:96:62:b0:
ca:47:e6:03:dc:6c:3b:3e:0d:35:3c:e5:71:c6:49:c8:52:c8:
68:3e:2b:e0:74:19:81:fb:72:58:29:7f:63:6f:36:fa:fc:0b:
d1:fc:58:fd:ed:5a:5c:97:b3:30:71:2a:ff:a3:c3:69:d0:c9:
95:14:fe:86:0b:49:9e:5b:91:5d:57:64:85:2e:49:0b:c5:08:
63:2d:b6:88:ca:41:31:34:e3:96:65:cb:74:8d:da:6b:1e:21:
e6:e9:2b:e5:d3:13:2e:3f:67:9d:78:66:24:0b:1c:de:5a:6c:
8a:4c:aa:8d:17:70:f8:5e:2e:40:93:1a:ef:57:50:45:55:eb:
ef:8d:fc:d8:d8:4a:76:ff:5f:a1:e0:62:fc:18:f1:41:1f:e9:
05:81:3d:a9:3d:df:ef:e9:42:e4:a8:33:4e:2b:97:e9:4e:48:
e1:49:18:0e:2c:14:cf:9e:2a:4e:64:e6:26:42:55:20:a2:b7:
e4:36:04:ec:42:8f:ab:53:1a:83:cd:c5:ba:23:58:d2:88:23:
dd:1d:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:51:50 2026 by rpki-client