This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft File: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft (raw, json) Hash identifier: AY9WxuuDfVu+C4XoH1EV3StbAkFwjwinh+cDsgACt+k= Subject key identifier: 86:7E:0B:F3:00:B2:F7:32:78:A4:B6:95:21:0D:4E:B0:96:A2:60:CD Authority key identifier: FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF Certificate issuer: /CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Certificate serial: 3412C83978AE72D6D9B7569A4FDEB685649C128B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft Manifest number: 02D4 Signing time: Sun 25 Jan 2026 11:02:20 +0000 Manifest this update: Sun 25 Jan 2026 10:57:20 +0000 Manifest next update: Wed 28 Jan 2026 11:30:20 +0000 Files and hashes: 1: FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl (hash: gTEdHOzL+dcPeKdVibGXcEyhRB2De7CE9v85Xb2W0h4=) 2: 3130332e3136332e3138342e302f32342d3234203d3e20313432333636.roa (hash: T0kgQ8xq7nBxfVnwpyYEmmzA0fn9DjLFvoVcfJfTj5g=) 3: 3130332e3136332e3138352e302f32342d3234203d3e20313432333636.roa (hash: pdL/jDmC/bRYeiHS8cnl+uvo57Pja48iQZSIZZK07no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:c8:39:78:ae:72:d6:d9:b7:56:9a:4f:de:b6:85:64:9c:12:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF Validity Not Before: Jan 25 10:57:20 2026 GMT Not After : Jan 28 11:30:20 2026 GMT Subject: CN=867E0BF300B2F73278A4B695210D4EB096A260CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1b:52:c4:d3:6e:ec:76:75:d9:84:32:aa:fa: 4b:49:92:1f:c6:ee:b1:d7:91:e7:0d:0d:5e:d4:f0: 4e:e5:d3:24:c9:52:3a:b4:66:cb:db:b4:2e:36:87: 03:f3:ca:88:cd:9a:db:0e:57:2d:21:bd:c2:22:98: dc:3e:8e:80:b8:96:e0:aa:84:b6:72:6d:04:b5:6e: 07:9c:de:ab:05:8b:c5:59:6c:ac:e7:5b:fb:23:9a: 08:f3:b3:ee:b4:fb:04:0f:16:9d:8f:a7:d5:b1:ae: 1a:69:5d:22:5b:a2:1e:4a:31:6c:35:63:48:16:b9: 44:66:44:fa:c7:9e:6c:18:49:fe:ca:44:df:72:81: 28:b8:78:6f:65:76:9d:4a:5d:fb:3e:77:29:b6:24: 87:92:04:9e:01:6f:2d:49:d3:7d:09:94:f4:8b:a0: 0f:80:22:85:06:36:0a:20:24:1d:4f:72:30:f0:d8: f7:a9:20:2f:d2:c1:ec:a8:14:ab:9a:d2:8a:e5:12: ac:64:7b:a6:fe:07:04:38:fd:c0:f8:61:74:84:60: 49:57:da:2d:01:6d:1c:a9:78:e1:68:18:09:e0:18: e4:dc:50:66:ce:d5:b5:cb:6b:ce:e9:35:76:e8:4f: ba:68:b5:37:a1:1b:86:a3:16:55:0d:84:29:18:5d: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7E:0B:F3:00:B2:F7:32:78:A4:B6:95:21:0D:4E:B0:96:A2:60:CD X509v3 Authority Key Identifier: keyid:FF:89:F2:3B:CB:C4:26:35:E9:7A:E1:5A:7F:B6:9E:1E:09:A9:7D:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b1664a7-c9c9-4442-8718-9aec9e2110a2/0/FF89F23BCBC42635E97AE15A7FB69E1E09A97DAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:f7:f5:0b:29:9d:3b:86:e1:d8:1f:1b:74:a1:c1:1a:8f: e2:49:2f:1e:86:aa:f7:61:4b:ad:6d:ca:a2:d4:66:20:d9:46: cc:58:fa:a7:e3:2f:d4:d9:07:6c:10:fe:0f:a5:e8:bf:06:c6: 81:ac:04:d1:9f:38:d1:55:cf:ca:1f:c4:f8:13:f0:1d:f7:0a: 26:d7:b1:c4:ae:81:32:c4:a1:96:ee:7d:23:5c:54:fc:db:3c: 3b:48:22:65:f1:51:c1:fe:2a:e7:5c:7a:83:af:c1:e9:21:6f: 57:61:66:9e:45:e0:75:07:b9:b9:61:da:73:5c:41:0e:b2:34: 3b:bd:b4:3e:83:3d:b1:58:6e:31:36:85:62:7c:b0:37:0b:30: f1:ba:2e:f2:54:54:19:2c:4b:11:61:62:4b:be:9e:fe:e9:dd: c8:68:dc:fb:40:62:65:3e:44:3e:cb:3c:8a:96:1a:d3:a7:47: 25:68:ce:eb:c0:6a:71:b7:ec:c6:a8:de:14:c7:92:d3:8d:dd: 65:cc:94:00:bd:e1:28:07:fb:20:94:a4:de:21:12:cc:5a:32: 82:68:cb:a1:de:02:2f:47:f1:4c:55:e2:f9:d5:fc:06:a2:49: 12:46:bd:7d:c7:99:04:f6:36:0a:7e:ed:ff:1c:2f:2b:2a:bb: 5d:6a:03:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBLIOXiuctbZt1aaT962hWScEoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUw OUE5N0RBRjAeFw0yNjAxMjUxMDU3MjBaFw0yNjAxMjgxMTMwMjBaMDMxMTAvBgNV BAMTKDg2N0UwQkYzMDBCMkY3MzI3OEE0QjY5NTIxMEQ0RUIwOTZBMjYwQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzG1LE027sdnXZhDKq+ktJkh/G 7rHXkecNDV7U8E7l0yTJUjq0ZsvbtC42hwPzyojNmtsOVy0hvcIimNw+joC4luCq hLZybQS1bgec3qsFi8VZbKznW/sjmgjzs+60+wQPFp2Pp9WxrhppXSJboh5KMWw1 Y0gWuURmRPrHnmwYSf7KRN9ygSi4eG9ldp1KXfs+dym2JIeSBJ4Bby1J030JlPSL oA+AIoUGNgogJB1PcjDw2PepIC/SweyoFKua0orlEqxke6b+BwQ4/cD4YXSEYElX 2i0BbRypeOFoGAngGOTcUGbO1bXLa87pNXboT7potTehG4ajFlUNhCkYXbAlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhn4L8wCy9zJ4pLaVIQ1OsJaiYM0wHwYDVR0j BBgwFoAU/4nyO8vEJjXpeuFaf7aeHgmpfa8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjE2NjRhNy1jOWM5LTQ0NDItODcxOC05YWVjOWUyMTEwYTIvMC9GRjg5RjIzQkNC QzQyNjM1RTk3QUUxNUE3RkI2OUUxRTA5QTk3REFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlFMUUwOUE5 N0RBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGIxNjY0YTctYzljOS00NDQyLTg3 MTgtOWFlYzllMjExMGEyLzAvRkY4OUYyM0JDQkM0MjYzNUU5N0FFMTVBN0ZCNjlF MUUwOUE5N0RBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT39/ULKZ07huHYHxt0ocEaj+JJLx6Gqvdh S61tyqLUZiDZRsxY+qfjL9TZB2wQ/g+l6L8GxoGsBNGfONFVz8ofxPgT8B33CibX scSugTLEoZbufSNcVPzbPDtIImXxUcH+KudceoOvwekhb1dhZp5F4HUHublh2nNc QQ6yNDu9tD6DPbFYbjE2hWJ8sDcLMPG6LvJUVBksSxFhYku+nv7p3cho3PtAYmU+ RD7LPIqWGtOnRyVozuvAanG37Mao3hTHktON3WXMlAC94SgH+yCUpN4hEsxaMoJo y6HeAi9H8UxV4vnV/AaiSRJGvX3HmQT2Ngp+7f8cLysqu11qA04= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:53 2026 by rpki-client