This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft File: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft (raw, json) Hash identifier: 6Tgkh2cZ3Abble6aFYBPLBd3w2naXYwaCdDRNQaTBP8= Subject key identifier: D6:44:1F:DC:1A:56:A9:F1:3A:16:1A:14:D3:2E:A5:25:5C:83:9D:7C Authority key identifier: FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 Certificate issuer: /CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Certificate serial: 4EAAD0059B8B508626BECD5689A0E1FF0F87511F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft Manifest number: 0101 Signing time: Tue 20 Jan 2026 21:00:47 +0000 Manifest this update: Tue 20 Jan 2026 20:55:47 +0000 Manifest next update: Sat 24 Jan 2026 04:38:47 +0000 Files and hashes: 1: FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl (hash: BnLS2rDP39gwrKFtQ3iRelrp1eiqBtefU6GitIyPdwI=) 2: 3135372e36362e33372e302f32342d3234203d3e20313338383034.roa (hash: elAlykoINKnAZ1hNxzJ7Wy9Qz4JU3YMP6UNvlutp4wU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 04:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:aa:d0:05:9b:8b:50:86:26:be:cd:56:89:a0:e1:ff:0f:87:51:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA62D828544F70BEAD8B3C04A86175E4FB07C4B6 Validity Not Before: Jan 20 20:55:47 2026 GMT Not After : Jan 24 04:38:47 2026 GMT Subject: CN=D6441FDC1A56A9F13A161A14D32EA5255C839D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:47:ee:86:8b:86:b4:a0:d1:3b:92:2a:27: f2:47:80:21:0e:22:0d:42:72:de:8a:00:6f:e8:aa: c1:74:32:2f:e9:d3:f2:eb:45:10:60:5a:9d:e5:f8: 0b:03:5c:06:f8:5c:30:96:d2:e1:7c:52:40:f8:47: 3a:1b:f5:82:2e:a8:b1:2f:43:14:b4:f9:4f:3b:44: b6:c5:82:5b:ff:31:48:3b:ff:f8:6d:fb:d7:c4:b2: 21:20:11:88:7b:22:84:93:a1:8b:d1:38:87:13:6c: fe:0b:da:93:4a:6b:cb:e4:e5:a9:d6:d0:90:0d:0f: 90:bf:a2:1c:f8:15:7f:53:7d:33:04:4d:b8:db:97: 24:ba:01:ee:13:a8:5d:90:13:56:bf:a5:69:58:b4: 20:2f:86:d5:b9:3f:d5:9d:cf:34:a3:5c:e8:e6:f0: d7:02:c5:e0:f5:de:74:9a:fa:e2:c7:c0:b4:b2:8f: b8:01:4f:fc:43:cc:77:cb:18:ed:bf:56:aa:50:ce: 7c:dc:88:a9:e1:8b:5f:32:fb:ec:6d:9e:e1:4f:9d: 4d:d5:5a:15:b7:80:39:89:75:be:4d:cb:dd:f1:48: 97:4f:38:f2:98:78:db:1f:93:5c:04:e9:c0:a3:1c: 9c:ae:3d:2d:e9:3a:52:70:07:b7:b9:95:25:35:8d: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:1F:DC:1A:56:A9:F1:3A:16:1A:14:D3:2E:A5:25:5C:83:9D:7C X509v3 Authority Key Identifier: keyid:FA:62:D8:28:54:4F:70:BE:AD:8B:3C:04:A8:61:75:E4:FB:07:C4:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1c04ded8-b0f5-4594-8e0e-911ecb77ee73/0/FA62D828544F70BEAD8B3C04A86175E4FB07C4B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:d2:f3:35:99:2e:79:1b:65:ba:d1:f6:6b:b5:b0:f5:87:8f: 0d:2f:1e:05:3a:05:42:9e:4b:07:47:34:fb:2a:5c:50:5a:72: ae:c5:cf:45:77:71:e4:a6:30:93:20:4d:57:40:85:d4:e2:ae: 20:1b:04:e0:03:c8:ee:6a:43:67:d2:5d:83:5e:f5:7e:b5:aa: 3b:37:bf:17:71:2e:6f:78:43:38:f0:5b:8a:4f:62:59:f1:bb: dd:f0:d1:47:78:50:88:79:67:3a:58:75:fb:d2:dd:fd:d8:33: 7e:e0:be:f4:5e:88:f5:64:29:d8:2a:30:34:5d:55:8b:36:b4: 96:c7:ab:35:df:b4:3d:d5:22:62:d8:99:ab:a8:e6:b5:de:62: 31:0f:74:ae:b0:de:51:b9:a3:a2:66:1e:d5:d7:3b:dc:95:24: 7f:d3:d8:07:e5:0f:6a:5b:0a:e7:4a:52:ad:e4:91:7c:b7:83: c8:b8:a9:6e:7b:58:51:45:ad:81:78:72:e8:f7:ae:f8:79:86: cc:53:b2:7c:f7:18:5f:5c:9e:60:8c:34:f2:f1:f1:70:5e:61: d9:d6:6d:fc:d3:2c:f1:e4:0d:47:95:ae:e1:08:44:c3:a2:07: 91:14:df:85:4c:c4:d6:7c:51:25:c3:8d:31:41:b6:5d:b4:96: 6b:6e:bb:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqrQBZuLUIYmvs1WiaDh/w+HUR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRG QjA3QzRCNjAeFw0yNjAxMjAyMDU1NDdaFw0yNjAxMjQwNDM4NDdaMDMxMTAvBgNV BAMTKEQ2NDQxRkRDMUE1NkE5RjEzQTE2MUExNEQzMkVBNTI1NUM4MzlEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgM0fuhouGtKDRO5IqJ/JHgCEO Ig1Cct6KAG/oqsF0Mi/p0/LrRRBgWp3l+AsDXAb4XDCW0uF8UkD4Rzob9YIuqLEv QxS0+U87RLbFglv/MUg7//ht+9fEsiEgEYh7IoSToYvROIcTbP4L2pNKa8vk5anW 0JAND5C/ohz4FX9TfTMETbjblyS6Ae4TqF2QE1a/pWlYtCAvhtW5P9WdzzSjXOjm 8NcCxeD13nSa+uLHwLSyj7gBT/xDzHfLGO2/VqpQznzciKnhi18y++xtnuFPnU3V WhW3gDmJdb5Ny93xSJdPOPKYeNsfk1wE6cCjHJyuPS3pOlJwB7e5lSU1jZrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1kQf3BpWqfE6FhoU0y6lJVyDnXwwHwYDVR0j BBgwFoAU+mLYKFRPcL6tizwEqGF15PsHxLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YzA0ZGVkOC1iMGY1LTQ1OTQtOGUwZS05MTFlY2I3N2VlNzMvMC9GQTYyRDgyODU0 NEY3MEJFQUQ4QjNDMDRBODYxNzVFNEZCMDdDNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1RTRGQjA3 QzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWMwNGRlZDgtYjBmNS00NTk0LThl MGUtOTExZWNiNzdlZTczLzAvRkE2MkQ4Mjg1NDRGNzBCRUFEOEIzQzA0QTg2MTc1 RTRGQjA3QzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnS8zWZLnkbZbrR9mu1sPWHjw0vHgU6BUKe SwdHNPsqXFBacq7Fz0V3ceSmMJMgTVdAhdTiriAbBOADyO5qQ2fSXYNe9X61qjs3 vxdxLm94QzjwW4pPYlnxu93w0Ud4UIh5ZzpYdfvS3f3YM37gvvReiPVkKdgqMDRd VYs2tJbHqzXftD3VImLYmauo5rXeYjEPdK6w3lG5o6JmHtXXO9yVJH/T2AflD2pb CudKUq3kkXy3g8i4qW57WFFFrYF4cuj3rvh5hsxTsnz3GF9cnmCMNPLx8XBeYdnW bfzTLPHkDUeVruEIRMOiB5EU34VMxNZ8USXDjTFBtl20lmtuuyM= -----END CERTIFICATE-----Generated at Wed Jan 21 12:15:17 2026 by rpki-client