This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: FKTnZt4pS29gih21jqH6JYsVn86OFrqqEjTnYRho+kU= Subject key identifier: D6:7A:21:4F:B5:A2:00:B7:3D:34:6A:16:C0:7F:ED:CC:38:56:98:BD Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 2750A084FBD94C767019CC050BEC011117829C0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 0542 Signing time: Sun 25 Jan 2026 14:31:35 +0000 Manifest this update: Sun 25 Jan 2026 14:26:35 +0000 Manifest next update: Wed 28 Jan 2026 19:15:35 +0000 Files and hashes: 1: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) 2: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 3: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: fF9P3iqbuLpOfWK4mB9ldi9QIdsB4ehekDG6A1poPdE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:50:a0:84:fb:d9:4c:76:70:19:cc:05:0b:ec:01:11:17:82:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Jan 25 14:26:35 2026 GMT Not After : Jan 28 19:15:35 2026 GMT Subject: CN=D67A214FB5A200B73D346A16C07FEDCC385698BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:27:8b:a5:d7:04:68:9c:92:e4:ff:77:59:6c: 3f:11:24:b6:01:c7:a1:11:a8:24:d8:f3:e3:ac:13: 13:6f:2c:93:db:e3:51:fd:e8:17:30:99:d2:1f:ee: ef:48:fe:ae:06:ad:ab:d2:37:9f:3f:26:98:1d:b0: 32:2e:c4:59:19:4f:fd:20:d4:9c:2d:86:43:b0:24: b8:ca:2d:77:08:ae:cf:e7:7f:b2:79:fa:a0:8a:65: 7f:7b:87:40:78:49:29:11:ad:56:b4:7a:eb:a9:e2: 4a:16:01:8d:52:c6:1f:5e:9d:48:e0:0c:cc:38:4f: 69:19:f3:a2:d3:fd:bb:8c:94:1f:82:5e:fb:c6:2d: 29:df:6c:48:e0:33:61:61:65:16:d8:80:68:80:d6: bb:15:ac:27:4b:e2:6f:01:34:b0:a3:7c:1a:ef:0d: 3d:36:c2:8b:27:1e:be:b1:03:57:df:33:0c:d0:b7: fb:3c:88:53:b8:ff:f7:5b:11:ec:54:6a:6d:bc:9d: fa:e3:dc:cb:19:b7:f1:3a:3f:90:ef:d3:63:fb:cc: 2c:e1:d7:90:7e:e7:d4:a7:77:c6:78:1d:50:2e:df: 2f:87:40:75:7c:18:fa:65:2c:29:70:ac:8f:65:ec: 42:39:2c:9e:b2:81:65:56:49:f1:8e:02:e2:0c:79: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7A:21:4F:B5:A2:00:B7:3D:34:6A:16:C0:7F:ED:CC:38:56:98:BD X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:7a:6e:17:19:92:98:57:ef:ba:a5:ee:bc:39:bf:3a:f7:1d: 10:4c:c7:73:22:23:a6:d5:69:fa:ea:27:fa:0c:48:92:b9:93: b1:ab:01:09:5d:c1:fc:e5:35:8b:36:30:d5:4a:02:2e:c8:92: 01:c9:1f:15:ef:d2:96:33:7e:1d:8e:5a:e2:c6:9e:62:65:2c: 81:61:59:ae:9b:26:d7:49:44:78:17:14:e8:6c:d1:54:ad:c4: 16:a8:74:57:eb:b9:92:08:ed:c8:75:ce:8c:d5:f1:87:47:72: b5:0f:b2:60:84:af:2f:97:53:10:07:3a:08:b8:16:4c:3d:6d: 7d:9c:bd:75:b4:2b:4d:b6:b0:55:01:eb:25:1b:5b:23:15:11: 45:cd:07:bc:af:1a:32:c3:e4:87:90:d5:1e:26:f4:b2:71:60: 0c:3f:a9:a2:40:f7:1f:ab:07:9d:9b:75:7e:fa:f0:5c:43:55: 35:e0:6a:f9:65:a2:9d:9d:ea:a1:cd:a3:f3:85:a5:1e:d7:ca: 67:58:c2:a0:ac:07:07:00:1d:7d:ae:b2:6f:6b:b8:3f:c1:d5: 74:62:65:55:48:5b:61:6d:bf:97:e9:a8:ab:2e:bb:9c:3d:39: a3:9e:27:30:1e:8e:91:d2:2b:e4:b9:7c:18:bc:37:fe:82:aa: b7:b2:09:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1CghPvZTHZwGcwFC+wBEReCnAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNjAxMjUxNDI2MzVaFw0yNjAxMjgxOTE1MzVaMDMxMTAvBgNV BAMTKEQ2N0EyMTRGQjVBMjAwQjczRDM0NkExNkMwN0ZFRENDMzg1Njk4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJ4ul1wRonJLk/3dZbD8RJLYB x6ERqCTY8+OsExNvLJPb41H96BcwmdIf7u9I/q4GravSN58/JpgdsDIuxFkZT/0g 1JwthkOwJLjKLXcIrs/nf7J5+qCKZX97h0B4SSkRrVa0euup4koWAY1Sxh9enUjg DMw4T2kZ86LT/buMlB+CXvvGLSnfbEjgM2FhZRbYgGiA1rsVrCdL4m8BNLCjfBrv DT02wosnHr6xA1ffMwzQt/s8iFO4//dbEexUam28nfrj3MsZt/E6P5Dv02P7zCzh 15B+59Snd8Z4HVAu3y+HQHV8GPplLClwrI9l7EI5LJ6ygWVWSfGOAuIMeZzPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nohT7WiALc9NGoWwH/tzDhWmL0wHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHF6bhcZkphX77ql7rw5vzr3HRBMx3MiI6bV afrqJ/oMSJK5k7GrAQldwfzlNYs2MNVKAi7IkgHJHxXv0pYzfh2OWuLGnmJlLIFh Wa6bJtdJRHgXFOhs0VStxBaodFfruZII7ch1zozV8YdHcrUPsmCEry+XUxAHOgi4 Fkw9bX2cvXW0K022sFUB6yUbWyMVEUXNB7yvGjLD5IeQ1R4m9LJxYAw/qaJA9x+r B52bdX768FxDVTXgavllop2d6qHNo/OFpR7XymdYwqCsBwcAHX2usm9ruD/B1XRi ZVVIW2Ftv5fpqKsuu5w9OaOeJzAejpHSK+S5fBi8N/6CqreyCQs= -----END CERTIFICATE-----Generated at Sun Jan 25 23:57:30 2026 by rpki-client