This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft File: 0FA41B65D1881666013C9683E40575E68E5DC0A5.mft (raw, json) Hash identifier: FFxjUbttrmO2rHlPI6y0GvYw7p0NpBlyrCe2qcx4YCA= Subject key identifier: 08:18:69:E1:08:CF:47:2B:18:D5:11:4D:FD:41:68:7A:1A:91:F8:48 Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 Certificate issuer: /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Certificate serial: 689DC973EBE133D6782170DCB66EA54C94DF3256 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft Manifest number: 0553 Signing time: Sat 24 Jan 2026 00:21:07 +0000 Manifest this update: Sat 24 Jan 2026 00:16:07 +0000 Manifest next update: Tue 27 Jan 2026 10:57:07 +0000 Files and hashes: 1: 3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (hash: 1h7fo52sVm4cJACJ1QTb5QR43dKEDAqoDnfictr7I+U=) 2: 323030313a6466313a666530303a3a2f34382d3438203d3e20313431313037.roa (hash: ArGX3GK83LFApxV4uLSs4kfPXNu12xplyTp4FBzO9Nw=) 3: 3130332e3232302e34372e302f32342d3234203d3e20313431313037.roa (hash: tHhLDdHHbsCkG+UHT3p88TUY2+W5e4f+3agioxt0A6g=) 4: 0FA41B65D1881666013C9683E40575E68E5DC0A5.crl (hash: Gi+XXSU9WvmovpQTRF2q98icIHkLQ9zw7qT9YXEwDws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 10:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9d:c9:73:eb:e1:33:d6:78:21:70:dc:b6:6e:a5:4c:94:df:32:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5 Validity Not Before: Jan 24 00:16:07 2026 GMT Not After : Jan 27 10:57:07 2026 GMT Subject: CN=081869E108CF472B18D5114DFD41687A1A91F848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4f:8e:7c:ec:4b:c6:57:e6:9c:e5:9f:63:7a: a2:8d:5f:d1:75:8e:b0:18:1c:89:10:33:1e:13:32: 00:2c:f7:09:f7:ea:5b:3b:50:9b:cf:96:22:1e:b0: 84:d8:42:0e:2f:7a:b5:a7:10:8e:a7:af:3b:0a:5a: f0:53:d1:f2:9a:ef:44:44:37:40:28:d2:54:04:46: 67:56:f8:20:44:94:23:08:bd:4b:b6:4e:2c:e6:be: d0:23:e1:c4:9d:11:81:30:48:00:1f:71:39:39:64: 4c:0f:a9:0f:51:8b:83:f6:59:c9:3a:77:f3:fe:31: 29:f7:0d:78:75:2f:54:b2:7a:87:0b:fa:0e:7b:54: 59:dc:3a:7d:5b:33:6e:2f:e9:9d:16:ea:80:a4:ea: bc:5f:7c:53:e8:37:3d:2d:87:d4:54:4c:be:02:1d: 1e:af:91:e5:1f:97:94:33:9f:4c:16:4b:e3:c6:31: 82:45:ea:f1:8c:93:86:08:cf:af:a5:ea:4e:45:88: 6d:06:9a:96:71:86:62:e1:32:aa:21:e0:e8:fb:e5: 41:f2:0e:33:0a:76:b6:00:ef:dc:b7:0d:5c:88:02: 1c:f7:6b:14:9e:38:0f:ff:29:01:4b:eb:88:10:c4: e5:ac:e0:0a:08:4d:ff:56:b3:e8:6f:d4:04:08:95: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:18:69:E1:08:CF:47:2B:18:D5:11:4D:FD:41:68:7A:1A:91:F8:48 X509v3 Authority Key Identifier: keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a3:51:9e:e7:ee:c6:4a:7f:ba:b3:62:84:e2:1b:b8:4e:59: fe:13:eb:2b:d6:a1:b6:de:44:ee:fc:f4:1b:3c:b9:66:64:df: db:9c:e6:b3:d3:ff:9d:f8:e7:44:db:49:63:06:6b:05:8d:89: e0:a3:e2:1e:cc:5c:23:23:0a:44:9d:9e:8b:94:7b:28:e4:5c: c4:bf:1b:55:5e:18:86:60:8c:98:72:56:80:c4:f9:2d:d9:8f: 47:92:26:81:83:5d:a5:07:3b:10:a6:ad:70:72:24:a5:c0:0f: 16:82:58:19:90:e6:c4:6d:4a:d8:88:27:70:91:17:75:3d:ae: bf:16:52:d9:0e:77:c1:76:ce:be:6a:52:f4:12:ec:87:1c:b3: 2f:69:5b:9e:1b:85:1e:eb:6e:dc:6e:cc:56:be:1b:44:d9:30: 86:f7:d3:cc:55:12:0e:25:99:aa:53:a7:79:d1:87:99:4a:90: df:37:ec:06:0a:80:e7:20:af:db:f2:f5:32:22:80:e6:af:2a: 53:5c:f2:2d:67:9d:b5:06:3f:26:f4:ae:61:3c:5c:3c:7c:f5: bf:40:7b:f8:c2:e1:69:9b:5d:9e:03:3c:93:f4:59:8f:ee:d4: e1:7e:28:4a:39:48:5c:e9:b1:19:8b:2d:15:d4:05:1d:f6:90: a3:38:f6:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJ3Jc+vhM9Z4IXDctm6lTJTfMlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4 RTVEQzBBNTAeFw0yNjAxMjQwMDE2MDdaFw0yNjAxMjcxMDU3MDdaMDMxMTAvBgNV BAMTKDA4MTg2OUUxMDhDRjQ3MkIxOEQ1MTE0REZENDE2ODdBMUE5MUY4NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBT4587EvGV+ac5Z9jeqKNX9F1 jrAYHIkQMx4TMgAs9wn36ls7UJvPliIesITYQg4verWnEI6nrzsKWvBT0fKa70RE N0Ao0lQERmdW+CBElCMIvUu2TizmvtAj4cSdEYEwSAAfcTk5ZEwPqQ9Ri4P2Wck6 d/P+MSn3DXh1L1SyeocL+g57VFncOn1bM24v6Z0W6oCk6rxffFPoNz0th9RUTL4C HR6vkeUfl5Qzn0wWS+PGMYJF6vGMk4YIz6+l6k5FiG0GmpZxhmLhMqoh4Oj75UHy DjMKdrYA79y3DVyIAhz3axSeOA//KQFL64gQxOWs4AoITf9Ws+hv1AQIlS+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCBhp4QjPRysY1RFN/UFoehqR+EgwHwYDVR0j BBgwFoAUD6QbZdGIFmYBPJaD5AV15o5dwKUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTk0ZDM3NS1mYzdkLTRkYzctYTFmMS1lMGIzYTU5ZmRmNzgvMC8wRkE0MUI2NUQx ODgxNjY2MDEzQzk2ODNFNDA1NzVFNjhFNURDMEE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1RTY4RTVE QzBBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzk5NGQzNzUtZmM3ZC00ZGM3LWEx ZjEtZTBiM2E1OWZkZjc4LzAvMEZBNDFCNjVEMTg4MTY2NjAxM0M5NjgzRTQwNTc1 RTY4RTVEQzBBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyjUZ7n7sZKf7qzYoTiG7hOWf4T6yvWobbe RO789Bs8uWZk39uc5rPT/53450TbSWMGawWNieCj4h7MXCMjCkSdnouUeyjkXMS/ G1VeGIZgjJhyVoDE+S3Zj0eSJoGDXaUHOxCmrXByJKXADxaCWBmQ5sRtStiIJ3CR F3U9rr8WUtkOd8F2zr5qUvQS7Iccsy9pW54bhR7rbtxuzFa+G0TZMIb308xVEg4l mapTp3nRh5lKkN837AYKgOcgr9vy9TIigOavKlNc8i1nnbUGPyb0rmE8XDx89b9A e/jC4WmbXZ4DPJP0WY/u1OF+KEo5SFzpsRmLLRXUBR32kKM49pc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:42 2026 by rpki-client