This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
File: FF102371565831DDB9C06DF47DF79B1120C9861E.mft (raw, json)
Hash identifier: q1+tQptHM5NvRywP5Mwz1FPiddswtNWznzGot7qYo80=
Subject key identifier: AF:9F:B2:2F:84:B4:4B:11:08:4E:4B:01:AC:3F:2F:EF:AC:23:35:57
Authority key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E
Certificate issuer: /CN=FF102371565831DDB9C06DF47DF79B1120C9861E
Certificate serial: 29DC87E733DD2206F5358F1264FCD85E832C1C3B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
Manifest number: F8
Signing time: Sun 01 Feb 2026 02:31:14 +0000
Manifest this update: Sun 01 Feb 2026 02:26:14 +0000
Manifest next update: Wed 04 Feb 2026 03:04:14 +0000
Files and hashes: 1: FF102371565831DDB9C06DF47DF79B1120C9861E.crl (hash: sd49NF7dS3pCwYjRN8HyH9WAmXr1G/VauQVVh/V2HOU=)
2: 3130332e332e3233332e302f32342d3234203d3e203538343837.roa (hash: J+VrJkjfilmZKoAgsIWnKv1mOwdSs14Mc87IKiPWNdQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl
rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 03:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:dc:87:e7:33:dd:22:06:f5:35:8f:12:64:fc:d8:5e:83:2c:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF102371565831DDB9C06DF47DF79B1120C9861E
Validity
Not Before: Feb 1 02:26:14 2026 GMT
Not After : Feb 4 03:04:14 2026 GMT
Subject: CN=AF9FB22F84B44B11084E4B01AC3F2FEFAC233557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:da:12:47:88:9b:e2:65:0c:1c:18:ff:3a:
fc:8e:4c:26:cd:1d:db:1a:33:d2:8a:80:a1:c0:0b:
2b:3e:25:cb:3e:d9:bb:b6:c4:0d:5c:f2:7f:74:74:
ce:d8:ae:be:64:04:76:79:af:33:72:a1:c4:51:9d:
fb:9c:9c:d8:da:4e:74:a6:c2:e1:91:7a:5e:e9:3a:
14:42:49:8c:29:95:ff:60:78:e0:a8:74:17:c8:e5:
d2:7d:bb:44:3b:24:b4:ce:4e:ea:a1:60:fa:d7:b3:
01:71:b7:8d:63:60:9f:61:1a:d8:40:7a:df:ff:47:
4e:44:3d:dd:50:fa:a1:4f:40:3b:6c:a5:fb:01:15:
75:eb:c6:40:93:a7:03:5b:50:4d:78:02:40:52:ee:
30:a4:2a:17:89:18:cb:83:47:01:75:6a:8c:66:86:
46:39:28:27:f8:b9:c2:57:b9:d7:4d:d8:ba:1f:35:
dc:27:e4:e0:6e:24:6e:21:d6:f1:c0:92:a6:c8:a5:
51:dd:82:ba:d2:5c:ed:7e:d2:cb:a3:44:7c:f1:eb:
22:50:e5:35:03:c2:61:44:ac:18:cd:c9:86:5a:89:
6c:90:ab:7d:07:f4:81:bd:a0:34:9b:d7:57:5d:83:
70:2c:8c:00:8f:8d:49:75:87:e7:f7:40:4d:00:e7:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9F:B2:2F:84:B4:4B:11:08:4E:4B:01:AC:3F:2F:EF:AC:23:35:57
X509v3 Authority Key Identifier:
keyid:FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:90:d9:3c:c6:93:45:8d:04:b5:7a:3c:e2:93:3f:76:c6:ca:
dc:1c:b0:55:ec:99:b3:c9:e7:54:49:cc:4e:be:f9:99:8b:3e:
03:b9:80:7b:00:93:83:05:b0:36:85:bd:e4:55:a4:05:71:aa:
30:7b:7c:96:25:2b:89:01:0b:a7:68:51:55:fe:7f:3a:39:6f:
05:0c:41:31:25:15:b2:18:ee:d2:fb:ca:42:e9:1e:23:3e:29:
a3:47:72:fe:ec:95:fe:30:a9:f2:50:4d:b9:92:3f:9b:53:dc:
ea:2a:c8:79:2f:46:09:4f:dc:61:3d:a2:95:ae:74:e4:d8:cc:
d8:5b:d1:56:4f:bb:3f:aa:3f:e6:fb:e8:4f:80:08:66:6d:88:
cd:05:f6:aa:18:14:56:36:c4:0a:28:c6:28:01:ad:0c:6d:30:
c1:ea:4e:77:ef:56:e8:85:18:e2:21:de:31:53:4b:40:4c:90:
b7:c3:f3:14:04:6c:9b:10:15:98:d1:ad:85:81:a6:84:86:7d:
cf:8f:e7:66:a7:a8:89:fe:8b:2a:ae:46:c1:4d:13:ea:33:94:
0c:00:d0:82:7d:eb:09:21:f0:fc:81:46:bc:d0:27:c0:80:15:
ef:25:ef:a8:e0:73:27:c0:2b:46:69:25:7a:c4:c3:f0:c8:43:
11:04:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:55 2026 by rpki-client