This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft File: FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft (raw, json) Hash identifier: oEIhq1bOJ2UTdOq746TlS5UpqBUIG4mCS7r0kCswSds= Subject key identifier: 93:2E:17:20:BD:E7:DB:CB:7D:31:60:B4:3F:E3:CF:E5:59:BE:25:F1 Authority key identifier: FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD Certificate issuer: /CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Certificate serial: 45100232CCAE858FD5D070B59AFAB2D815E3A419 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft Manifest number: 0105 Signing time: Tue 20 Jan 2026 23:22:27 +0000 Manifest this update: Tue 20 Jan 2026 23:17:27 +0000 Manifest next update: Sat 24 Jan 2026 08:32:27 +0000 Files and hashes: 1: FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl (hash: VekwMqm+21doNAEd33ZlTrNSHrmB10tie21MoHXNyN0=) 2: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: 5RtTk3d772ssj1lManzV/eOyzfika2Q0NRT1wkf3Jmc=) 3: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 8MA2foEnZoWONyFnZ8JDy90VgYdcSiLJ0qYGxKq2+wY=) 4: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: WQbsLa/WI6fTYVHN1f/acG1CHu2vwbKzJ6P9lpc4ums=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 08:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:10:02:32:cc:ae:85:8f:d5:d0:70:b5:9a:fa:b2:d8:15:e3:a4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA30FF8566753253FBBD8786797FE93FB0CF62AD Validity Not Before: Jan 20 23:17:27 2026 GMT Not After : Jan 24 08:32:27 2026 GMT Subject: CN=932E1720BDE7DBCB7D3160B43FE3CFE559BE25F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:13:ea:3c:fe:bf:cc:f7:b7:7a:93:3e:4c: 18:5b:2f:4a:d3:e2:20:75:a0:ed:cd:f3:d3:51:00: c7:4e:99:43:5a:3d:bd:48:eb:e9:a9:3c:aa:2b:91: 15:71:ac:3d:07:a2:2c:8b:3f:2a:f0:cf:ba:6a:0d: 4a:30:40:d3:75:61:ad:4e:39:67:27:9f:70:64:3a: 46:29:22:ab:81:ed:85:cc:78:e9:a4:62:59:f3:13: b7:55:93:62:12:34:08:4f:7b:3e:25:24:b5:c4:5f: 26:e9:73:1d:37:0d:d8:dd:87:93:46:8f:03:ad:c7: 90:db:8d:3d:76:98:96:66:90:a3:5e:6d:52:df:03: 47:72:ac:1e:85:86:ae:27:55:31:70:12:df:c6:a5: c6:00:aa:3b:66:d1:4d:1f:39:c9:3a:d0:08:d3:e4: c0:d8:0c:1c:3d:64:c1:8b:7a:ab:7f:45:d2:8d:70: 6f:71:6e:dc:ad:8b:a0:3f:f7:35:1c:d5:66:1f:63: ed:f8:e7:0e:88:48:e9:8f:b9:49:1e:96:ed:c1:68: f4:b7:35:44:3d:8b:b5:e3:8b:f9:3d:6b:22:4f:cd: 93:84:6e:1a:f7:d8:39:4b:3b:4d:57:b4:47:c6:71: 1a:64:6f:80:fe:c1:55:a5:ef:a6:5a:3b:4a:94:b8: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2E:17:20:BD:E7:DB:CB:7D:31:60:B4:3F:E3:CF:E5:59:BE:25:F1 X509v3 Authority Key Identifier: keyid:FA:30:FF:85:66:75:32:53:FB:BD:87:86:79:7F:E9:3F:B0:CF:62:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA30FF8566753253FBBD8786797FE93FB0CF62AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/0/FA30FF8566753253FBBD8786797FE93FB0CF62AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d5:f3:70:e1:61:c2:87:00:b9:ee:e3:f5:57:08:91:49:48: e3:92:57:e7:38:fb:f1:94:9d:6f:5e:3d:d4:17:56:2f:3b:8b: 10:4f:5b:11:ef:74:72:94:17:8a:4c:01:9e:44:f8:06:de:82: a9:b6:f7:d7:5a:f4:ca:ab:00:77:c5:2b:22:5f:1c:46:46:7e: 91:89:d5:18:06:e5:6f:8f:dc:ef:45:fb:48:6c:7f:c9:2b:f6: ec:31:e1:01:bb:07:16:7f:2e:6f:f0:e6:1c:21:cd:93:76:50: 00:8f:6c:46:ab:e0:f2:1d:d1:fb:6b:53:0e:23:b5:c5:f2:c2: 23:77:cc:e3:be:50:10:76:3f:24:7c:ab:ad:ad:a6:c7:61:89: c8:ef:fa:c6:70:5b:c3:31:17:b5:9b:06:d5:72:41:4a:8c:e4: 1a:6f:90:cc:fc:ac:f8:06:88:d5:17:79:1a:da:f2:54:14:91: 0b:63:fd:c9:7f:3a:11:48:04:23:22:a1:7c:49:a9:d5:d8:14: 6a:37:ed:1a:45:69:ba:67:bc:1f:72:4c:32:95:da:33:8a:b0: e3:fe:45:97:24:76:83:6e:a9:f1:68:bc:f7:25:ff:31:3d:78: f0:36:c2:6d:80:58:1b:c4:7e:66:f4:d9:d6:b4:ce:12:c6:6a: 08:e4:1e:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRACMsyuhY/V0HC1mvqy2BXjpBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZC MENGNjJBRDAeFw0yNjAxMjAyMzE3MjdaFw0yNjAxMjQwODMyMjdaMDMxMTAvBgNV BAMTKDkzMkUxNzIwQkRFN0RCQ0I3RDMxNjBCNDNGRTNDRkU1NTlCRTI1RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4BPqPP6/zPe3epM+TBhbL0rT 4iB1oO3N89NRAMdOmUNaPb1I6+mpPKorkRVxrD0HoiyLPyrwz7pqDUowQNN1Ya1O OWcnn3BkOkYpIquB7YXMeOmkYlnzE7dVk2ISNAhPez4lJLXEXybpcx03Ddjdh5NG jwOtx5DbjT12mJZmkKNebVLfA0dyrB6Fhq4nVTFwEt/GpcYAqjtm0U0fOck60AjT 5MDYDBw9ZMGLeqt/RdKNcG9xbtyti6A/9zUc1WYfY+345w6ISOmPuUkelu3BaPS3 NUQ9i7Xji/k9ayJPzZOEbhr32DlLO01XtEfGcRpkb4D+wVWl76ZaO0qUuGbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUky4XIL3n28t9MWC0P+PP5Vm+JfEwHwYDVR0j BBgwFoAU+jD/hWZ1MlP7vYeGeX/pP7DPYq0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMC9GQTMwRkY4NTY2 NzUzMjUzRkJCRDg3ODY3OTdGRTkzRkIwQ0Y2MkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5M0ZCMENG NjJBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzAvRkEzMEZGODU2Njc1MzI1M0ZCQkQ4Nzg2Nzk3RkU5 M0ZCMENGNjJBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzV83DhYcKHALnu4/VXCJFJSOOSV+c4+/GU nW9ePdQXVi87ixBPWxHvdHKUF4pMAZ5E+Abegqm299da9MqrAHfFKyJfHEZGfpGJ 1RgG5W+P3O9F+0hsf8kr9uwx4QG7BxZ/Lm/w5hwhzZN2UACPbEar4PId0ftrUw4j tcXywiN3zOO+UBB2PyR8q62tpsdhicjv+sZwW8MxF7WbBtVyQUqM5BpvkMz8rPgG iNUXeRra8lQUkQtj/cl/OhFIBCMioXxJqdXYFGo37RpFabpnvB9yTDKV2jOKsOP+ RZckdoNuqfFovPcl/zE9ePA2wm2AWBvEfmb02da0zhLGagjkHqA= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:22 2026 by rpki-client