This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft (raw, json)
Hash identifier: 0dZJYXiOyclMEgznu6qjCcjY/pq7zJtSMNAXSNBvGrU=
Subject key identifier: BE:23:7E:19:78:9F:EA:F7:48:9F:50:06:34:66:DE:FA:02:B8:10:1A
Authority key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
Certificate issuer: /CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
Certificate serial: 0368D655A9C1D015F728761723E97B8CEC200A55
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
Manifest number: 0246
Signing time: Fri 23 Jan 2026 15:12:25 +0000
Manifest this update: Fri 23 Jan 2026 15:07:25 +0000
Manifest next update: Tue 27 Jan 2026 02:00:25 +0000
Files and hashes: 1: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl (hash: lESA4342IAYDmCf10X2FriN0ZhjQ0Ep/BaZhZB1br68=)
2: 3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (hash: 2HLKDZ4NotrKv5eD+avvVTu9dBP+/6Ewaq5ipG+lyWE=)
3: 3130332e3137372e31342e302f32332d3233203d3e20313437313338.roa (hash: 5z8wRtouH3UZuHrJrJfhmhXWcm8bh9b9rb8I23FOiCg=)
4: 3130332e3137372e31352e302f32342d3234203d3e20313437313338.roa (hash: eF9NB+BjEkYpNET986L8/mFTnt6eJT0/RWpF2VpYMW8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl
rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:68:d6:55:a9:c1:d0:15:f7:28:76:17:23:e9:7b:8c:ec:20:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4
Validity
Not Before: Jan 23 15:07:25 2026 GMT
Not After : Jan 27 02:00:25 2026 GMT
Subject: CN=BE237E19789FEAF7489F50063466DEFA02B8101A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:10:bf:48:6d:a6:2b:3e:d3:6a:62:19:9e:
18:1a:3b:2c:1e:6b:45:c3:e8:50:00:de:e6:42:b8:
54:77:52:c4:5e:b4:35:8a:64:91:88:87:2f:8a:6f:
dc:5b:87:dd:35:3b:f6:6b:61:d6:ac:9c:5b:c1:91:
b0:a5:75:ac:5a:3a:a7:50:05:b0:b4:60:96:c0:c5:
bb:19:00:34:d4:b4:f1:d9:47:9b:35:c6:dc:ad:5e:
62:e3:1e:ec:89:f4:1b:b9:31:5a:61:4e:c9:2a:f9:
95:78:ef:aa:bc:aa:90:1c:8e:89:f1:db:8b:cd:fc:
a9:28:6e:5d:82:a3:5b:7f:87:f5:f5:86:0f:c8:cd:
83:d8:c7:01:fc:cf:5c:0b:a3:5a:ed:52:3c:ff:03:
75:c4:9f:75:ef:73:a6:f0:63:5f:33:e9:f1:67:63:
b0:a0:fd:e4:86:3c:3a:f1:53:de:d3:5a:d3:e8:7e:
6c:24:d3:a6:96:24:82:e8:53:0e:ec:58:d0:ab:31:
06:2f:2d:00:48:a2:59:63:aa:7f:e7:36:cd:cc:58:
13:fb:84:57:b8:47:46:b4:22:71:81:37:30:f8:46:
b4:6c:81:e9:e3:bf:26:13:a6:41:0e:03:33:d5:a4:
df:92:bc:ca:e6:39:f9:3b:51:35:e9:fb:59:cf:ce:
b5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:7E:19:78:9F:EA:F7:48:9F:50:06:34:66:DE:FA:02:B8:10:1A
X509v3 Authority Key Identifier:
keyid:FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:15:df:f5:de:d0:c0:f5:b7:a7:ba:d1:93:7b:97:19:6a:
f5:b9:f6:28:8e:af:87:df:41:3b:b3:69:3e:54:d1:a3:31:25:
cc:fa:d2:a3:4e:e3:b9:57:a4:97:19:51:ab:a7:09:88:18:ca:
20:dd:59:00:c0:ed:68:1e:3c:a6:74:14:06:27:62:d6:e1:e5:
5e:b2:96:5a:3f:b4:8c:34:44:d9:0d:a2:bf:cb:de:b7:35:5f:
6d:a7:ed:5c:06:30:e2:e6:de:a1:db:23:85:22:29:58:c9:4a:
71:48:05:68:3f:7b:71:f2:8b:9a:97:6c:bf:98:16:f5:df:fe:
ee:28:ae:88:ee:bb:e6:87:4e:fc:07:cf:0f:c7:87:6c:10:e7:
e6:cb:f9:90:6e:e9:e7:39:09:9f:38:14:47:c0:ff:49:df:5d:
77:98:fb:62:34:9d:e6:f0:05:ff:bd:c2:ec:3f:61:54:e5:d5:
5d:7d:80:9e:e2:8e:ca:99:f7:a0:9e:b0:c3:d4:6f:39:39:34:
39:1d:c5:37:91:e4:c2:a1:e6:e5:32:96:d8:b8:94:fd:40:92:
64:b7:ed:c8:c7:cd:01:c1:f9:8c:3c:fd:a7:12:e7:5d:f0:48:
39:76:7a:4f:75:16:0a:0f:98:a6:24:0e:d6:40:bf:39:31:88:
60:e9:76:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:36:40 2026 by rpki-client