This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft File: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft (raw, json) Hash identifier: fbJCcgX8lTWrWB/HY3FS3n7iK9lP0K/j3fChWxrI634= Subject key identifier: B7:FC:02:07:4E:28:A6:C5:1B:58:86:E2:8F:BA:2C:68:55:05:EC:59 Authority key identifier: FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 Certificate issuer: /CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Certificate serial: 05232C073403BDB76AE8529DC2733B670B73C4BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft Manifest number: 0114 Signing time: Mon 02 Feb 2026 05:02:27 +0000 Manifest this update: Mon 02 Feb 2026 04:57:27 +0000 Manifest next update: Thu 05 Feb 2026 10:37:27 +0000 Files and hashes: 1: FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl (hash: ywCuIoVTrecc/t4c4vgSTVILDTv1aPQa6GgQNs4u+uA=) 2: 3135372e31352e38322e302f32332d3233203d3e20313532333633.roa (hash: TxbDMhKSioNeR20MqOvnLPpYmLwOjXBp9YQNGW/Dswg=) 3: 3135372e31352e38332e302f32342d3234203d3e20313532333633.roa (hash: tmwMaZpoyniOHlrA1Ev0DGw1sFkx/sRTma2ZD2CnpMQ=) 4: 3135372e31352e38322e302f32342d3234203d3e20313532333633.roa (hash: LhdUiZ829jnCYzP+T/q1kR6KjN+CYgUrJ54OONbPWMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:23:2c:07:34:03:bd:b7:6a:e8:52:9d:c2:73:3b:67:0b:73:c4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8 Validity Not Before: Feb 2 04:57:27 2026 GMT Not After : Feb 5 10:37:27 2026 GMT Subject: CN=B7FC02074E28A6C51B5886E28FBA2C685505EC59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b4:24:80:96:0f:01:db:f6:9e:6b:43:25:cd: 01:b3:fc:66:15:e3:d9:a5:0e:e2:e9:44:c1:78:37: 96:f8:f8:9e:06:51:28:c2:5e:49:78:78:0c:52:ac: 88:77:fb:7c:ae:4d:18:c2:b2:a2:51:8f:8b:12:df: 47:da:f7:a6:bf:fe:70:85:a5:16:48:ff:af:3c:94: d0:53:99:18:fe:af:37:83:e9:92:94:4d:7e:0a:dc: 6f:50:46:29:8e:57:cc:73:59:4b:c5:1d:ef:e1:4c: f2:46:83:6f:48:46:d5:df:d3:d0:00:cb:1e:f7:93: bf:f8:88:0c:91:44:cd:c3:c7:ad:47:d2:de:ba:50: 1b:e3:65:c7:96:c7:6a:48:08:4d:e8:40:6f:bc:80: 1a:b3:4e:d3:39:43:d7:d0:15:1f:ee:27:dc:8c:28: 9a:07:c2:a8:d1:2c:be:a2:f0:40:5e:a7:7e:36:5f: 42:39:2d:ec:a5:f8:9e:6e:3d:cd:32:8a:9f:a7:b9: 1f:4a:e3:34:90:e2:57:d3:e0:a8:72:a5:56:3c:fb: 49:cf:7e:6d:39:6c:bb:71:a9:4b:f5:3f:5d:03:a4: da:b1:7b:f8:9f:e8:5f:d2:bf:a1:ac:17:c2:53:18: cd:2d:90:26:61:bd:a0:4e:62:9c:82:8b:d6:3c:b8: 86:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FC:02:07:4E:28:A6:C5:1B:58:86:E2:8F:BA:2C:68:55:05:EC:59 X509v3 Authority Key Identifier: keyid:FF:3F:06:6A:5E:9A:B8:F9:88:B8:E1:7C:7A:56:DD:2E:00:A6:6A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d011a1c-a0ad-4d93-86af-3f0aadd9684f/0/FF3F066A5E9AB8F988B8E17C7A56DD2E00A66AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b4:a6:77:d9:89:17:a7:56:6d:36:ed:59:3a:c0:ff:da:86: c8:90:f9:30:6c:ce:b2:b9:75:b2:4e:3b:5e:df:82:92:b2:cc: df:61:a7:1c:9d:c2:40:a0:92:37:eb:37:eb:9d:57:25:f7:b4: ff:19:b3:7d:c2:96:63:96:06:6b:cc:39:ff:18:30:3d:f2:94: e6:46:7c:e5:4f:d6:2d:42:95:d2:0c:fc:7f:ad:e1:70:63:90: 2b:59:9b:24:52:ac:5a:c5:e0:a2:eb:3b:31:93:7f:f0:b9:6b: 22:f2:67:44:be:51:b6:3a:58:c4:f0:05:76:fc:a6:b8:87:a1: 9f:f7:7b:09:d3:35:b7:a4:5c:a1:10:fe:a1:55:26:c8:18:f6: 06:3b:f9:28:e6:83:85:ce:07:2a:ac:29:a3:0d:3c:42:e7:40: fe:50:92:e8:b3:ef:6b:24:78:c3:2b:08:bb:5d:e0:b1:d9:a5: 5d:a5:04:22:e9:84:1e:92:05:7c:35:d0:67:f0:9c:c0:a1:01: 41:ec:ad:b8:01:ee:f6:a4:65:d2:3c:ae:84:f8:ac:0d:10:09: 5c:9b:5a:2b:3b:df:49:07:a5:ba:ed:c2:b2:d8:71:4a:f8:70: 00:7e:57:0e:39:54:a6:f3:ba:93:30:b6:a7:bb:cf:df:64:2f: 5d:e6:26:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSMsBzQDvbdq6FKdwnM7ZwtzxL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUw MEE2NkFEODAeFw0yNjAyMDIwNDU3MjdaFw0yNjAyMDUxMDM3MjdaMDMxMTAvBgNV BAMTKEI3RkMwMjA3NEUyOEE2QzUxQjU4ODZFMjhGQkEyQzY4NTUwNUVDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtCSAlg8B2/aea0MlzQGz/GYV 49mlDuLpRMF4N5b4+J4GUSjCXkl4eAxSrIh3+3yuTRjCsqJRj4sS30fa96a//nCF pRZI/688lNBTmRj+rzeD6ZKUTX4K3G9QRimOV8xzWUvFHe/hTPJGg29IRtXf09AA yx73k7/4iAyRRM3Dx61H0t66UBvjZceWx2pICE3oQG+8gBqzTtM5Q9fQFR/uJ9yM KJoHwqjRLL6i8EBep342X0I5Leyl+J5uPc0yip+nuR9K4zSQ4lfT4KhypVY8+0nP fm05bLtxqUv1P10DpNqxe/if6F/Sv6GsF8JTGM0tkCZhvaBOYpyCi9Y8uIbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/wCB04opsUbWIbij7osaFUF7FkwHwYDVR0j BBgwFoAU/z8Gal6auPmIuOF8elbdLgCmatgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDAxMWExYy1hMGFkLTRkOTMtODZhZi0zZjBhYWRkOTY4NGYvMC9GRjNGMDY2QTVF OUFCOEY5ODhCOEUxN0M3QTU2REQyRTAwQTY2QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkREMkUwMEE2 NkFEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQwMTFhMWMtYTBhZC00ZDkzLTg2 YWYtM2YwYWFkZDk2ODRmLzAvRkYzRjA2NkE1RTlBQjhGOTg4QjhFMTdDN0E1NkRE MkUwMEE2NkFEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+0pnfZiRenVm027Vk6wP/ahsiQ+TBszrK5 dbJOO17fgpKyzN9hpxydwkCgkjfrN+udVyX3tP8Zs33ClmOWBmvMOf8YMD3ylOZG fOVP1i1CldIM/H+t4XBjkCtZmyRSrFrF4KLrOzGTf/C5ayLyZ0S+UbY6WMTwBXb8 priHoZ/3ewnTNbekXKEQ/qFVJsgY9gY7+Sjmg4XOByqsKaMNPELnQP5Qkuiz72sk eMMrCLtd4LHZpV2lBCLphB6SBXw10GfwnMChAUHsrbgB7vakZdI8roT4rA0QCVyb Wis730kHpbrtwrLYcUr4cAB+Vw45VKbzupMwtqe7z99kL13mJto= -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:19 2026 by rpki-client