This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft
File: FF96D30557BDACE26C511E1F48A3514643130EA8.mft (raw, json)
Hash identifier: XMuAi7GeA7PFI5TuyGhp5VhOIUxcRkhAp1p+ihK8MeE=
Subject key identifier: F3:73:B9:C6:21:7D:4D:4E:B0:47:36:D1:5E:33:74:AA:B5:58:5D:84
Authority key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8
Certificate issuer: /CN=FF96D30557BDACE26C511E1F48A3514643130EA8
Certificate serial: 7AD2ACB20500A034B7B5874FE433DDEDF54C6BEF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft
Manifest number: F6
Signing time: Sat 31 Jan 2026 23:41:33 +0000
Manifest this update: Sat 31 Jan 2026 23:36:33 +0000
Manifest next update: Wed 04 Feb 2026 05:36:33 +0000
Files and hashes: 1: 3130332e3232392e3133312e302f32342d3234203d3e20313530393632.roa (hash: ATfPtcSN9IeC66O3vEUygO5SRQOxL5VmkMshCygiymo=)
2: FF96D30557BDACE26C511E1F48A3514643130EA8.crl (hash: kRSMkWodwabcP8zu9Ci+ptRsIk491Cp92G665EUe0Ug=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl
rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d2:ac:b2:05:00:a0:34:b7:b5:87:4f:e4:33:dd:ed:f5:4c:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF96D30557BDACE26C511E1F48A3514643130EA8
Validity
Not Before: Jan 31 23:36:33 2026 GMT
Not After : Feb 4 05:36:33 2026 GMT
Subject: CN=F373B9C6217D4D4EB04736D15E3374AAB5585D84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:be:b8:ee:9b:05:45:00:29:69:9c:43:26:
6e:d2:9e:31:9f:b4:03:36:80:f4:a5:a6:1e:30:f0:
9b:e1:83:ea:61:42:28:e4:7c:59:0a:ef:0a:33:0e:
f2:7c:a9:95:08:fc:df:65:3c:fb:ea:0b:5f:f0:66:
40:45:02:fa:58:d6:dc:fe:27:9b:59:c7:7f:67:76:
7e:d0:50:a5:48:aa:73:05:0f:51:ca:f6:be:ea:b8:
63:93:8d:3a:4c:ac:44:69:ef:2b:53:c9:0b:95:d8:
69:48:b1:0d:ca:40:7d:d5:7f:e8:c5:4a:f9:5b:dc:
77:9f:91:d6:e7:25:92:90:bd:74:1d:ed:fd:60:a5:
5f:bd:17:5c:03:c8:9c:4c:09:9d:58:f0:af:e2:09:
1c:09:a1:fd:80:3f:9a:24:93:0c:af:40:86:96:21:
9c:94:1a:db:dc:53:6e:b1:3f:fd:9a:a1:e5:90:d0:
69:3c:a9:b8:28:73:42:d3:16:6a:75:db:c9:a6:f0:
9a:f2:9b:48:20:80:04:ce:b7:dc:7c:22:90:75:8f:
44:11:73:21:35:9c:68:b9:5f:41:8b:69:9f:b4:7e:
c0:02:8c:ad:dc:3b:dc:c3:61:65:bb:3b:97:bf:ac:
83:ff:b3:69:79:d7:83:33:68:d9:0d:a7:1a:44:18:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:B9:C6:21:7D:4D:4E:B0:47:36:D1:5E:33:74:AA:B5:58:5D:84
X509v3 Authority Key Identifier:
keyid:FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:b1:c4:e3:07:05:d9:cf:c4:b0:07:7d:8a:e0:31:ba:58:
a4:9b:30:43:4d:58:83:ea:6d:6c:c2:4c:64:b8:d0:d5:c1:a5:
b1:d2:b6:62:88:8b:03:e1:2b:78:ee:64:64:69:73:8b:8b:95:
37:3a:7f:ff:60:28:9a:3f:41:fe:25:ea:af:f8:4f:0b:49:3c:
87:39:56:28:a5:49:23:2c:38:ba:c8:78:7e:a4:94:7f:e5:c6:
23:04:8c:50:37:b5:ed:f0:61:e6:29:99:c3:52:1a:76:b0:29:
7a:dd:89:49:3a:31:ce:3f:7f:07:32:e6:0f:28:e6:4b:14:c1:
5a:f2:c5:ef:b7:52:63:21:9a:1f:31:ba:2d:d9:1d:99:fe:41:
6a:12:a5:64:e3:ed:e8:d1:2a:c6:02:36:df:0d:12:e6:cb:a9:
da:86:aa:b0:9d:3d:3b:33:52:92:2c:6c:45:c8:07:7c:19:a2:
f6:9e:34:b1:0b:7d:19:6b:44:a5:23:fa:19:f9:d0:b2:4c:30:
5e:03:ea:95:94:18:a9:cb:10:9d:21:ad:62:5f:95:38:af:01:
6b:c8:d1:04:a3:84:a8:2f:3e:52:7d:4e:c2:71:52:62:7a:9f:
02:f4:6b:6f:3c:7c:ee:a6:3d:8f:37:6e:2d:b0:75:1e:73:4d:
86:a1:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:55 2026 by rpki-client