This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft File: FD0F38979237143A0D44165912E79E2FACD5A3BA.mft (raw, json) Hash identifier: U8qd8kYqabVNXDGUTxHJxix57yTJ8ibog7VJJ6yVDmo= Subject key identifier: 42:0A:ED:BD:9E:D0:39:01:DC:4D:CA:53:E0:64:41:A3:76:24:1D:0A Authority key identifier: FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA Certificate issuer: /CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Certificate serial: 4E087B889E6E5FC36F168F443A43C196CA3103B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft Manifest number: 0514 Signing time: Fri 23 Jan 2026 19:20:53 +0000 Manifest this update: Fri 23 Jan 2026 19:15:53 +0000 Manifest next update: Mon 26 Jan 2026 20:58:53 +0000 Files and hashes: 1: FD0F38979237143A0D44165912E79E2FACD5A3BA.crl (hash: bEQt5Fkgc/5Bus9mtxQiBfPOYvMJACT1nuggBklkq+c=) 2: 323430363a623734303a3a2f33322d3332203d3e20313431313235.roa (hash: QqT8D5lkBG4hSbXhFLTMPSoaBkT256vJUAYJ7NnLOL4=) 3: 3130332e3135382e39382e302f32332d3234203d3e20313431313235.roa (hash: SOkxDu78tXfJl/igqr9RzKPCr0bIXcHmyK6/S8XprpU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 20:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:08:7b:88:9e:6e:5f:c3:6f:16:8f:44:3a:43:c1:96:ca:31:03:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD0F38979237143A0D44165912E79E2FACD5A3BA Validity Not Before: Jan 23 19:15:53 2026 GMT Not After : Jan 26 20:58:53 2026 GMT Subject: CN=420AEDBD9ED03901DC4DCA53E06441A376241D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:be:2c:32:38:6c:17:1d:f5:a8:1a:4b:9b: 61:19:6d:36:90:45:52:4c:83:23:06:0a:87:c8:75: c8:70:00:d2:04:74:91:f7:25:f0:32:fa:a7:5b:31: 17:cb:9a:42:31:1a:6e:6d:1b:11:79:6b:fc:17:e3: 30:75:71:9a:be:8f:57:8d:3e:8b:dc:74:7b:d7:24: b2:8b:cf:00:23:d2:37:ad:0b:50:f8:ba:76:73:cf: 21:71:df:88:c6:6e:a1:89:bb:c9:2b:bc:3c:1b:9f: 02:9b:e8:4a:ba:62:c6:6f:96:c0:f1:48:36:7d:ee: e5:46:68:2a:30:ce:6d:19:f2:8b:55:43:99:22:fc: 3e:02:bc:0d:12:eb:cf:c9:d2:8c:79:f8:2d:8f:55: a8:04:41:26:df:5a:17:7f:6d:82:f3:28:6a:fe:64: db:c7:ef:c6:d2:5c:7e:4b:cc:71:6d:26:c0:84:b7: 90:fc:6e:9d:42:64:63:e7:4c:2b:4a:98:e5:72:52: 31:3b:ce:18:bf:df:77:1c:fa:7d:29:ad:c1:a5:a2: 52:d0:2e:e7:85:e7:ba:b4:07:3a:b6:f2:35:1d:60: 21:fa:1d:15:f4:69:a1:81:fe:1e:bb:80:e7:a2:1b: fe:33:33:08:8e:15:68:5a:5e:e2:7e:1d:af:54:70: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0A:ED:BD:9E:D0:39:01:DC:4D:CA:53:E0:64:41:A3:76:24:1D:0A X509v3 Authority Key Identifier: keyid:FD:0F:38:97:92:37:14:3A:0D:44:16:59:12:E7:9E:2F:AC:D5:A3:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FD0F38979237143A0D44165912E79E2FACD5A3BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d68500c-49f8-4f01-8774-f7c3164a0a58/0/FD0F38979237143A0D44165912E79E2FACD5A3BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:aa:27:30:21:73:b7:1d:80:f9:87:7b:7a:06:ed:c7:18:87: 5e:a0:12:44:65:5f:43:73:6e:3c:2a:bb:c6:61:f7:cb:3c:2b: 10:f8:b5:2d:98:15:26:5a:59:bd:5e:77:61:20:93:df:06:68: b9:d0:7d:29:f9:4c:27:88:21:6b:95:8f:ad:f7:aa:c7:e4:ad: d0:f8:11:ec:60:95:05:68:16:6f:c3:8c:6b:8d:dd:4b:f5:c3: 7b:cc:cc:99:ed:1c:c5:ee:85:4a:dc:4a:c9:90:45:28:83:d0: 25:01:70:75:28:79:d6:3f:5f:20:f9:b2:4c:ef:dc:96:d5:4a: 1e:97:39:bd:19:db:84:49:70:dc:4b:29:b1:e4:fe:d9:5c:05: 8d:4f:26:f4:10:2c:7b:8c:db:04:67:89:6e:2b:15:9d:71:d9: 87:bf:6b:0d:79:23:3a:2f:40:f7:3e:ff:7c:01:18:01:bd:4a: 0b:82:ac:4f:f6:b7:32:a2:6f:fd:3d:d9:37:0f:03:bf:52:7f: 56:51:e8:5b:f0:63:45:74:a5:10:45:0e:4f:71:03:8b:35:16: 20:73:b8:60:8e:1c:92:bd:c8:77:c6:b3:b7:f3:20:1c:55:c6: e4:5d:a5:03:a3:a9:ed:d5:5f:86:11:08:d6:51:8a:31:6a:14: 34:3a:33:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgh7iJ5uX8NvFo9EOkPBlsoxA7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZB Q0Q1QTNCQTAeFw0yNjAxMjMxOTE1NTNaFw0yNjAxMjYyMDU4NTNaMDMxMTAvBgNV BAMTKDQyMEFFREJEOUVEMDM5MDFEQzREQ0E1M0UwNjQ0MUEzNzYyNDFEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABb4sMjhsFx31qBpLm2EZbTaQ RVJMgyMGCofIdchwANIEdJH3JfAy+qdbMRfLmkIxGm5tGxF5a/wX4zB1cZq+j1eN PovcdHvXJLKLzwAj0jetC1D4unZzzyFx34jGbqGJu8krvDwbnwKb6Eq6YsZvlsDx SDZ97uVGaCowzm0Z8otVQ5ki/D4CvA0S68/J0ox5+C2PVagEQSbfWhd/bYLzKGr+ ZNvH78bSXH5LzHFtJsCEt5D8bp1CZGPnTCtKmOVyUjE7zhi/33cc+n0prcGlolLQ LueF57q0Bzq28jUdYCH6HRX0aaGB/h67gOeiG/4zMwiOFWhaXuJ+Ha9UcNubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQgrtvZ7QOQHcTcpT4GRBo3YkHQowHwYDVR0j BBgwFoAU/Q84l5I3FDoNRBZZEueeL6zVo7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY4NTAwYy00OWY4LTRmMDEtODc3NC1mN2MzMTY0YTBhNTgvMC9GRDBGMzg5Nzky MzcxNDNBMEQ0NDE2NTkxMkU3OUUyRkFDRDVBM0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlFMkZBQ0Q1 QTNCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ODUwMGMtNDlmOC00ZjAxLTg3 NzQtZjdjMzE2NGEwYTU4LzAvRkQwRjM4OTc5MjM3MTQzQTBENDQxNjU5MTJFNzlF MkZBQ0Q1QTNCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWqJzAhc7cdgPmHe3oG7ccYh16gEkRlX0Nz bjwqu8Zh98s8KxD4tS2YFSZaWb1ed2Egk98GaLnQfSn5TCeIIWuVj633qsfkrdD4 EexglQVoFm/DjGuN3Uv1w3vMzJntHMXuhUrcSsmQRSiD0CUBcHUoedY/XyD5skzv 3JbVSh6XOb0Z24RJcNxLKbHk/tlcBY1PJvQQLHuM2wRniW4rFZ1x2Ye/aw15Izov QPc+/3wBGAG9SguCrE/2tzKib/092TcPA79Sf1ZR6FvwY0V0pRBFDk9xA4s1FiBz uGCOHJK9yHfGs7fzIBxVxuRdpQOjqe3VX4YRCNZRijFqFDQ6M1o= -----END CERTIFICATE-----Generated at Sun Jan 25 19:00:32 2026 by rpki-client