This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft File: FE47963FB6E13EFC318606E3CA31013421827343.mft (raw, json) Hash identifier: OQjBGm9N06YMBv0BqdY8avUS+MmYUQjhAKmHj3mGvKE= Subject key identifier: 5E:47:5C:A3:97:C8:61:10:FD:E1:99:33:E3:42:FF:F5:CB:CE:0F:95 Authority key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Certificate issuer: /CN=FE47963FB6E13EFC318606E3CA31013421827343 Certificate serial: 732B494DC5F9A38C9AB19A0FD8752F7FB736F3F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft Manifest number: 0153 Signing time: Sat 24 Jan 2026 16:41:32 +0000 Manifest this update: Sat 24 Jan 2026 16:36:32 +0000 Manifest next update: Tue 27 Jan 2026 16:57:32 +0000 Files and hashes: 1: FE47963FB6E13EFC318606E3CA31013421827343.crl (hash: vwy8czd40frvMTHVOt/rUxmQDzuWADULFq8Enl93Vk8=) 2: 3130332e36372e34392e302f32342d3234203d3e20313431363732.roa (hash: BDIVxvQovejwSTdQVoThOksyexqcbmKKBcpAZUy8WSU=) 3: 3130332e3136322e3235322e302f32342d3234203d3e20313431363732.roa (hash: SKZ4JC2PVchiPELxqukX4ZUosexDdg2XkKRXWqgW864=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 16:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2b:49:4d:c5:f9:a3:8c:9a:b1:9a:0f:d8:75:2f:7f:b7:36:f3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FE47963FB6E13EFC318606E3CA31013421827343 Validity Not Before: Jan 24 16:36:32 2026 GMT Not After : Jan 27 16:57:32 2026 GMT Subject: CN=5E475CA397C86110FDE19933E342FFF5CBCE0F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:c4:8c:e5:f5:bd:7c:e4:29:77:09:93:a6: f7:67:c6:a0:c2:07:a4:8c:b9:66:37:f5:e9:17:21: 50:2d:a2:5d:cf:9e:1a:90:3b:41:23:2a:d9:27:e5: 3e:6e:53:e1:5d:c7:a6:0c:06:88:e1:54:e2:70:a8: a8:cc:8d:97:0b:1b:3e:f0:90:15:a4:1b:36:d0:ee: bb:53:c0:d4:b1:4d:c7:a9:2a:86:17:97:51:5d:59: d7:d0:8b:16:8e:0d:59:82:2b:28:6e:6c:37:d3:3a: 0b:00:55:c1:27:33:14:22:53:ff:b7:70:30:42:24: e9:07:06:63:00:b1:ae:35:14:68:56:74:2d:20:de: c8:e8:b3:d2:c5:38:fb:5e:38:5a:ff:31:f6:3c:1a: 9f:c3:72:ae:69:11:ad:3f:67:e8:1d:0a:20:c3:a7: e2:fb:7c:8e:54:ec:2a:49:3d:d6:66:66:71:8d:4f: 03:29:cb:35:db:74:74:3f:96:32:55:16:4c:85:13: 74:6f:55:a7:4d:bc:c5:27:09:26:d8:6d:c7:c5:3b: a5:33:d3:52:d8:fc:8b:21:ad:72:bb:18:1b:0a:7e: 5f:85:ab:8b:37:f0:db:e1:6b:67:43:b3:61:6b:b9: 89:5d:de:61:4c:f9:ad:3a:3a:6c:b5:f3:55:67:a0: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:47:5C:A3:97:C8:61:10:FD:E1:99:33:E3:42:FF:F5:CB:CE:0F:95 X509v3 Authority Key Identifier: keyid:FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9f:81:e0:08:9e:77:1c:4c:43:25:95:a1:f8:f0:93:85:fc: 4f:7b:2b:fb:e9:ad:14:cf:a3:d7:fc:ba:08:82:28:a2:58:77: 2d:03:6d:9f:bd:21:86:df:09:89:b2:6d:16:89:e2:17:ac:a3: 38:e1:21:16:71:41:c0:c1:16:c1:47:74:56:3d:a6:c8:c8:19: cf:a2:6f:9d:3a:fa:93:ac:d4:1b:68:18:72:b9:97:8d:bf:18: ef:4f:40:5f:04:ba:a0:0f:c3:3b:96:a1:a7:eb:00:60:18:3b: 10:4d:45:7e:74:fe:2c:c4:19:e7:3c:28:bf:ae:4c:3e:98:b9: 81:a7:d9:af:1c:af:2b:bc:ad:b8:8f:f3:5f:1d:f5:a2:70:c5: 99:48:91:20:b9:62:6a:fe:c0:71:6a:de:db:60:c4:56:2a:fd: c0:50:7c:35:40:cd:61:7f:dd:48:b4:ae:08:b4:8c:71:5e:71: 8a:de:d8:ea:33:71:3c:4e:80:b5:3b:94:87:d3:32:bb:8d:2f: 3f:6d:de:d0:8e:12:df:8f:3c:d4:f8:75:60:2d:88:19:d8:e1: 89:30:79:f3:e5:cb:a0:69:1d:42:70:77:1b:53:b6:16:c0:88: 1a:00:54:a0:cd:58:ae:56:bf:f0:c4:0b:54:f0:e7:6b:e8:2e: fc:41:2e:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcytJTcX5o4yasZoP2HUvf7c28/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQy MTgyNzM0MzAeFw0yNjAxMjQxNjM2MzJaFw0yNjAxMjcxNjU3MzJaMDMxMTAvBgNV BAMTKDVFNDc1Q0EzOTdDODYxMTBGREUxOTkzM0UzNDJGRkY1Q0JDRTBGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pMSM5fW9fOQpdwmTpvdnxqDC B6SMuWY39ekXIVAtol3PnhqQO0EjKtkn5T5uU+Fdx6YMBojhVOJwqKjMjZcLGz7w kBWkGzbQ7rtTwNSxTcepKoYXl1FdWdfQixaODVmCKyhubDfTOgsAVcEnMxQiU/+3 cDBCJOkHBmMAsa41FGhWdC0g3sjos9LFOPteOFr/MfY8Gp/Dcq5pEa0/Z+gdCiDD p+L7fI5U7CpJPdZmZnGNTwMpyzXbdHQ/ljJVFkyFE3RvVadNvMUnCSbYbcfFO6Uz 01LY/IshrXK7GBsKfl+Fq4s38Nvha2dDs2FruYld3mFM+a06Omy181VnoBwRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXkdco5fIYRD94Zkz40L/9cvOD5UwHwYDVR0j BBgwFoAU/keWP7bhPvwxhgbjyjEBNCGCc0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMC9GRTQ3OTYzRkI2 RTEzRUZDMzE4NjA2RTNDQTMxMDEzNDIxODI3MzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAxMzQyMTgy NzM0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjg0NjY4ODktYzFlZi00NDEwLWFk OWMtMzA2YzA5ZTFiZTA2LzAvRkU0Nzk2M0ZCNkUxM0VGQzMxODYwNkUzQ0EzMTAx MzQyMTgyNzM0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGfgeAInnccTEMllaH48JOF/E97K/vprRTP o9f8ugiCKKJYdy0DbZ+9IYbfCYmybRaJ4hesozjhIRZxQcDBFsFHdFY9psjIGc+i b506+pOs1BtoGHK5l42/GO9PQF8EuqAPwzuWoafrAGAYOxBNRX50/izEGec8KL+u TD6YuYGn2a8cryu8rbiP818d9aJwxZlIkSC5Ymr+wHFq3ttgxFYq/cBQfDVAzWF/ 3Ui0rgi0jHFecYre2OozcTxOgLU7lIfTMruNLz9t3tCOEt+PPNT4dWAtiBnY4Ykw efPly6BpHUJwdxtTthbAiBoAVKDNWK5Wv/DEC1Tw52voLvxBLvA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:09:27 2026 by rpki-client