This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft File: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft (raw, json) Hash identifier: 2uflSL87DhyU9opkEleIAIR4kMROFF5I+0IQoDNkoFM= Subject key identifier: 3B:EF:27:44:69:2B:9A:F0:78:6F:C2:4C:04:74:FB:F4:A0:D3:90:45 Authority key identifier: FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 Certificate issuer: /CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Certificate serial: 54E6B0A5528A0E5A592143687014D292A761369E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft Manifest number: 01E9 Signing time: Sun 25 Jan 2026 07:02:15 +0000 Manifest this update: Sun 25 Jan 2026 06:57:15 +0000 Manifest next update: Wed 28 Jan 2026 11:02:15 +0000 Files and hashes: 1: FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl (hash: 8VWR+D4zaq1QmLNNOxE+ESXrm7MHSxhbqMooZkaEVoE=) 2: 3130332e3132312e3234362e302f32332d3234203d3e20313335343738.roa (hash: 3Q3TcBWsaHvYgXVIh3Shkct0iPnHLeLaz/yA3bkjR18=) 3: 3130332e3132312e3234342e302f32332d3234203d3e20313335343738.roa (hash: ah6jjuDsScnETUKRuJMdbV7gAyHOG7vH/cUJcAPOG7U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e6:b0:a5:52:8a:0e:5a:59:21:43:68:70:14:d2:92:a7:61:36:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCA55FE68BF147AE20F00C45DADCDF960C120CF8 Validity Not Before: Jan 25 06:57:15 2026 GMT Not After : Jan 28 11:02:15 2026 GMT Subject: CN=3BEF2744692B9AF0786FC24C0474FBF4A0D39045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:8b:17:97:8b:44:46:3d:7f:2d:04:23:17: 1f:71:75:a2:6f:cd:f5:44:17:6b:29:26:8f:06:05: 7c:e6:98:db:d9:1b:60:48:65:15:1d:ba:da:ef:db: b7:22:18:f7:24:4e:5a:c7:7c:da:2d:a0:a8:24:54: c2:44:ef:5c:96:4a:af:1a:d6:f8:8b:b7:22:e3:3c: 47:31:5a:38:a9:43:44:cd:bc:38:84:61:79:74:a8: 0c:4d:5f:e9:49:f2:a3:46:6e:5c:d5:2c:19:8f:94: 07:ac:6c:a3:bd:ab:b2:d2:96:80:3f:ef:b7:0d:f5: d9:22:af:be:55:2b:b8:ba:33:f2:64:1d:6d:ee:22: 9b:7d:d5:fd:a5:39:9e:a6:ec:1b:77:57:45:17:78: b2:1b:0c:15:bf:44:04:78:bd:81:da:08:fd:d8:94: 00:4b:95:84:5b:7f:06:61:1b:b0:28:2f:77:15:e1: c4:36:cc:4d:28:11:ff:83:95:cd:40:70:1c:5d:23: be:ab:98:d8:d6:1b:b5:8a:eb:df:97:82:05:d2:5e: 05:35:d4:c9:a0:da:17:e7:c0:78:6d:78:ff:0e:c9: f1:fc:61:24:fe:58:4e:ea:62:e2:16:b9:ff:82:da: 73:0d:96:41:e7:5e:a6:64:1b:de:4f:df:f6:34:46: 3b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EF:27:44:69:2B:9A:F0:78:6F:C2:4C:04:74:FB:F4:A0:D3:90:45 X509v3 Authority Key Identifier: keyid:FC:A5:5F:E6:8B:F1:47:AE:20:F0:0C:45:DA:DC:DF:96:0C:12:0C:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795ee8fc-6efe-415d-b6c1-0f0cccf26144/0/FCA55FE68BF147AE20F00C45DADCDF960C120CF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:be:2b:a6:60:a4:ba:64:54:a8:a6:ec:08:93:87:73:b0:b7: af:f6:9d:94:1a:fd:61:e7:60:4d:6f:a1:b4:ff:34:db:01:e2: 17:af:33:31:ad:d7:f7:eb:a0:62:95:3d:43:ff:78:b1:4f:f5: fb:24:8e:2a:c4:52:04:31:b7:51:24:90:8b:0f:cc:df:82:5a: 0b:01:98:e0:66:5f:3d:26:0b:96:c8:a8:56:2b:77:2b:b2:30: e0:8c:a0:20:22:3c:37:9c:44:37:c2:5d:b3:a3:9b:2f:d3:61: e3:d5:90:74:b0:b4:d3:ee:9a:1e:71:81:ff:54:7c:67:c7:09: 0e:5a:ba:f3:9a:d4:7a:3e:eb:e1:61:79:77:fc:ad:f6:9e:78: c7:1f:42:66:05:f4:d9:40:da:1b:b8:05:71:9a:33:06:94:57: 7d:8d:d6:19:61:0a:7e:3a:d8:ed:1a:f9:60:ba:56:eb:58:ca: cd:cf:92:44:ac:30:51:93:01:e6:3c:c2:f9:25:06:55:20:c9: 71:e8:8e:44:6c:10:98:34:d8:67:88:45:97:6b:79:38:87:a6: 94:c3:39:fa:5b:cf:fa:d6:04:7b:39:45:e2:ec:d1:f5:ab:47: 81:79:30:08:fd:59:3d:ec:9f:0e:d2:30:80:48:1c:f5:dc:0c: 56:b7:d6:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOawpVKKDlpZIUNocBTSkqdhNp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYw QzEyMENGODAeFw0yNjAxMjUwNjU3MTVaFw0yNjAxMjgxMTAyMTVaMDMxMTAvBgNV BAMTKDNCRUYyNzQ0NjkyQjlBRjA3ODZGQzI0QzA0NzRGQkY0QTBEMzkwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IIsXl4tERj1/LQQjFx9xdaJv zfVEF2spJo8GBXzmmNvZG2BIZRUdutrv27ciGPckTlrHfNotoKgkVMJE71yWSq8a 1viLtyLjPEcxWjipQ0TNvDiEYXl0qAxNX+lJ8qNGblzVLBmPlAesbKO9q7LSloA/ 77cN9dkir75VK7i6M/JkHW3uIpt91f2lOZ6m7Bt3V0UXeLIbDBW/RAR4vYHaCP3Y lABLlYRbfwZhG7AoL3cV4cQ2zE0oEf+Dlc1AcBxdI76rmNjWG7WK69+XggXSXgU1 1Mmg2hfnwHhteP8OyfH8YST+WE7qYuIWuf+C2nMNlkHnXqZkG95P3/Y0RjsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+8nRGkrmvB4b8JMBHT79KDTkEUwHwYDVR0j BBgwFoAU/KVf5ovxR64g8AxF2tzflgwSDPgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTVlZThmYy02ZWZlLTQxNWQtYjZjMS0wZjBjY2NmMjYxNDQvMC9GQ0E1NUZFNjhC RjE0N0FFMjBGMDBDNDVEQURDREY5NjBDMTIwQ0Y4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RGOTYwQzEy MENGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk1ZWU4ZmMtNmVmZS00MTVkLWI2 YzEtMGYwY2NjZjI2MTQ0LzAvRkNBNTVGRTY4QkYxNDdBRTIwRjAwQzQ1REFEQ0RG OTYwQzEyMENGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADO+K6ZgpLpkVKim7AiTh3Owt6/2nZQa/WHn YE1vobT/NNsB4hevMzGt1/froGKVPUP/eLFP9fskjirEUgQxt1EkkIsPzN+CWgsB mOBmXz0mC5bIqFYrdyuyMOCMoCAiPDecRDfCXbOjmy/TYePVkHSwtNPumh5xgf9U fGfHCQ5auvOa1Ho+6+FheXf8rfaeeMcfQmYF9NlA2hu4BXGaMwaUV32N1hlhCn46 2O0a+WC6VutYys3PkkSsMFGTAeY8wvklBlUgyXHojkRsEJg02GeIRZdreTiHppTD Ofpbz/rWBHs5ReLs0fWrR4F5MAj9WT3snw7SMIBIHPXcDFa31ks= -----END CERTIFICATE-----Generated at Mon Jan 26 01:04:42 2026 by rpki-client