This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
File: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft (raw, json)
Hash identifier: I8DVrj6eVaJ/+PxrqrvfBrfSTD/rwVP7l3JeBb/cBi4=
Subject key identifier: 1C:CD:32:71:26:CA:1C:70:18:EF:C1:77:D6:4C:55:D5:37:11:CA:F8
Authority key identifier: FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
Certificate issuer: /CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Certificate serial: 187821D3C545380BFFA17EF3BCFAED7F537EA491
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
Manifest number: 01E2
Signing time: Sun 25 Jan 2026 08:22:11 +0000
Manifest this update: Sun 25 Jan 2026 08:17:11 +0000
Manifest next update: Wed 28 Jan 2026 08:55:11 +0000
Files and hashes: 1: 3130332e3134392e3131382e302f32332d3234203d3e20313431303535.roa (hash: IBRiB5ZmLj4+M80KfLmmLbAbFNEpKpmTUiD30MwcLOE=)
2: FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl (hash: mLc94dltyE3aTdFOHtlrm/eEzQtvcMDEVCGc2Vd/pyw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 08:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:78:21:d3:c5:45:38:0b:ff:a1:7e:f3:bc:fa:ed:7f:53:7e:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1
Validity
Not Before: Jan 25 08:17:11 2026 GMT
Not After : Jan 28 08:55:11 2026 GMT
Subject: CN=1CCD327126CA1C7018EFC177D64C55D53711CAF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:5c:33:bb:d0:53:5c:50:56:66:3f:50:e7:
25:31:de:1d:57:ce:a7:17:37:a7:93:53:b2:d0:03:
5b:6a:6e:2a:b7:93:73:dd:fd:83:92:4b:64:ee:90:
73:02:c4:82:0c:5d:f0:1a:15:0f:7d:5f:17:e1:0b:
7e:be:33:67:25:c2:75:32:31:0d:bf:6c:93:67:0d:
b9:c4:e2:18:85:ca:f4:bf:78:d5:25:1f:49:2f:71:
be:32:fc:13:5e:cc:81:3f:65:c5:1b:cb:2e:9b:e2:
49:03:2a:93:e9:98:6b:9a:11:63:1e:e8:00:3b:eb:
5d:d3:3c:89:9b:d0:d6:d2:a8:af:d7:77:bc:17:6a:
ab:3c:6c:2d:62:4d:c6:3c:21:2b:93:49:21:d3:65:
6e:fe:39:e1:48:b1:1c:36:81:55:39:c6:35:00:ab:
5d:5c:4b:6a:03:72:a8:c3:56:b5:eb:45:d0:64:05:
2f:3d:89:75:2f:e5:08:e6:72:08:bd:22:d2:f0:09:
13:d4:d3:41:ee:42:cb:9c:7d:3e:8b:12:6f:1d:dc:
59:b0:7d:4d:9c:88:66:51:fe:de:12:0b:52:14:a2:
d6:af:1f:43:c8:75:e2:bb:19:09:fb:8d:9c:d4:c2:
dc:7f:7f:e4:e0:26:b3:4d:8b:4c:ba:05:3a:4e:27:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:32:71:26:CA:1C:70:18:EF:C1:77:D6:4C:55:D5:37:11:CA:F8
X509v3 Authority Key Identifier:
keyid:FB:1D:4F:91:39:A6:1D:F4:B9:1E:31:27:0F:3D:2A:1C:07:B3:5C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5cc70f7d-33fe-4df2-81e5-dc0d55ac5170/0/FB1D4F9139A61DF4B91E31270F3D2A1C07B35CE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f3:d7:8a:36:b2:92:0f:d5:00:03:e4:cf:bc:a8:be:22:c7:
58:84:fe:24:ba:3c:dc:c3:0a:aa:d8:66:a1:7f:71:17:fc:89:
9c:4c:7c:77:b3:54:12:aa:4d:b8:85:0b:1f:6d:a9:fe:1a:9a:
f2:00:94:ba:20:70:c9:de:19:fe:de:05:f1:60:21:24:6b:ac:
78:8a:60:77:ef:53:44:91:25:95:a1:ca:8e:7a:9f:7d:32:ed:
b5:d6:81:54:3b:2b:d7:8b:27:f6:3c:2b:ef:51:10:bb:9c:d1:
76:e3:34:79:e3:77:e5:d3:ba:68:5e:89:f4:ef:82:1c:f3:0b:
d5:1e:c9:63:44:8e:c3:b4:37:d9:7c:90:d4:7c:a0:54:b9:4d:
26:1b:ea:f4:c5:48:46:9e:32:9a:a9:5c:f4:56:0a:96:c8:45:
ab:eb:51:45:d2:c4:b4:cd:4d:ac:d3:16:25:f8:af:94:1b:c0:
76:c8:a7:5a:6c:20:a4:93:72:f2:e2:bb:0b:39:20:2a:23:6c:
c0:6f:dc:32:27:83:e5:c8:a4:49:c4:1e:da:8b:3f:41:60:36:
12:92:3f:d1:8a:19:5c:ea:1c:72:76:52:30:93:77:28:aa:e6:
72:36:72:5e:d8:f1:1c:a6:38:73:e7:65:a0:a5:92:85:22:69:
a9:ac:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:59 2026 by rpki-client