This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft File: F9645D835A5B60A8E839A13E87861562B73F34B6.mft (raw, json) Hash identifier: n7MkutrnxGsvF1MZPuW0HrHX10H9BW35wCztiQ+oy6M= Subject key identifier: C1:05:00:F8:94:C6:64:A6:9E:E8:13:A6:95:76:04:B9:99:8D:AB:86 Authority key identifier: F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 Certificate issuer: /CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Certificate serial: 7F9A09F346D0858C3E8435544344945DD6215953 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft Manifest number: 02FC Signing time: Sun 01 Feb 2026 11:12:08 +0000 Manifest this update: Sun 01 Feb 2026 11:07:08 +0000 Manifest next update: Wed 04 Feb 2026 16:56:08 +0000 Files and hashes: 1: 3130332e3136322e33362e302f32342d3234203d3e20313431363339.roa (hash: ctP7iZh6Pi4bGkXsiPVFEzH3C3SbuLNPCJCcVp3ePus=) 2: 3130332e3136322e33362e302f32332d3233203d3e20313431363339.roa (hash: uAyx0ZgKo2lMKIycgmtqallZpoJhZxNdFY86j3bZrVw=) 3: F9645D835A5B60A8E839A13E87861562B73F34B6.crl (hash: A2LEj8oPH3bpu9Thl3wBHVuwswZp/p6tZqhZITmg5+I=) 4: 3130332e3136322e33372e302f32342d3234203d3e20313431363339.roa (hash: MOGpmW/h+E15GwcO70IrB2XUZ90h0rF4wtoE5qVNIaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 16:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9a:09:f3:46:d0:85:8c:3e:84:35:54:43:44:94:5d:d6:21:59:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F9645D835A5B60A8E839A13E87861562B73F34B6 Validity Not Before: Feb 1 11:07:08 2026 GMT Not After : Feb 4 16:56:08 2026 GMT Subject: CN=C10500F894C664A69EE813A6957604B9998DAB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:f2:ee:36:6d:ab:9d:67:cf:60:4b:77:ad: ee:65:0d:4e:d3:42:cd:b3:c2:49:cb:2f:48:3c:64: d0:42:9e:96:5f:c4:51:20:98:94:ec:72:74:e9:17: 44:d6:fc:f7:8a:70:e8:14:0f:80:6e:2c:1e:45:c8: c4:e1:30:08:1f:5e:79:5e:5b:84:ba:22:68:d6:6c: 69:b4:ae:77:20:ed:f2:a5:a0:27:ba:30:8d:72:34: 3a:f0:52:e7:dd:d0:17:b1:3a:5f:c6:9b:53:9f:1b: f5:60:1e:a4:79:f6:95:a2:12:44:ab:d8:aa:64:ad: c4:78:fb:10:34:df:8a:e5:66:87:12:db:19:88:d0: c5:0f:71:67:fc:c0:bd:68:98:71:5c:69:28:d8:75: a0:7b:b1:d1:44:a8:1c:3f:b7:21:6f:b1:50:4c:f0: 82:43:90:ff:d3:07:6e:6e:ff:75:a7:52:34:1c:0c: fc:81:8b:ca:f3:40:2d:88:38:bf:8c:9e:97:9a:5e: f0:57:fc:14:cc:21:52:cf:97:a6:9a:ad:da:58:8f: 8d:96:08:11:6c:60:0b:6d:a9:1c:77:2d:05:30:50: cb:76:19:f3:2b:9f:36:8d:84:d4:0b:75:1f:c7:47: 5b:e5:2b:62:19:c7:72:7e:f0:00:d9:17:36:82:9c: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:05:00:F8:94:C6:64:A6:9E:E8:13:A6:95:76:04:B9:99:8D:AB:86 X509v3 Authority Key Identifier: keyid:F9:64:5D:83:5A:5B:60:A8:E8:39:A1:3E:87:86:15:62:B7:3F:34:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9645D835A5B60A8E839A13E87861562B73F34B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36f3ae97-f52e-4977-90d1-4349aad052a8/0/F9645D835A5B60A8E839A13E87861562B73F34B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d2:29:c4:d8:7e:8a:b1:a7:38:a1:aa:21:98:b5:fe:4f:15: 1f:2c:68:49:55:0d:b8:16:d1:36:d7:36:92:75:e7:46:88:14: ae:c1:3a:e4:58:b9:59:93:30:d4:63:b1:d4:52:cd:a1:ee:83: e6:d0:da:bc:a4:d2:5e:d7:8a:5c:16:75:a1:fa:f4:36:1d:72: 19:52:d5:ce:da:1b:09:66:23:3c:7b:1f:df:c7:cf:8a:d8:c3: 29:9d:16:26:3d:dd:68:4a:c6:60:28:15:90:a9:d5:8f:fd:bb: 40:fd:8f:15:d4:cf:86:46:42:94:40:c6:88:32:05:25:ca:68: e1:83:5c:17:11:0c:c1:55:4d:12:b1:45:9e:54:00:fc:3e:87: ae:1a:12:6e:2e:39:b1:42:f6:dc:39:e4:4b:60:4a:86:0a:e5: cf:19:a0:f9:46:e5:54:97:7b:45:1d:f0:9e:bc:e3:37:14:e7: 7f:36:b6:2c:c7:cd:0a:af:85:75:1d:cf:15:16:83:4a:98:75: be:4d:99:b0:ab:46:38:43:cc:b6:95:17:38:40:a2:b3:32:c6: 62:18:bd:67:9c:9d:8b:68:a0:d4:98:2a:73:22:56:bb:eb:74: 28:c4:fd:7d:1b:09:63:60:8f:2d:ba:12:d0:19:f3:c4:74:ef: b9:5d:ad:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf5oJ80bQhYw+hDVUQ0SUXdYhWVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJC NzNGMzRCNjAeFw0yNjAyMDExMTA3MDhaFw0yNjAyMDQxNjU2MDhaMDMxMTAvBgNV BAMTKEMxMDUwMEY4OTRDNjY0QTY5RUU4MTNBNjk1NzYwNEI5OTk4REFCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2qfLuNm2rnWfPYEt3re5lDU7T Qs2zwknLL0g8ZNBCnpZfxFEgmJTscnTpF0TW/PeKcOgUD4BuLB5FyMThMAgfXnle W4S6ImjWbGm0rncg7fKloCe6MI1yNDrwUufd0BexOl/Gm1OfG/VgHqR59pWiEkSr 2KpkrcR4+xA034rlZocS2xmI0MUPcWf8wL1omHFcaSjYdaB7sdFEqBw/tyFvsVBM 8IJDkP/TB25u/3WnUjQcDPyBi8rzQC2IOL+MnpeaXvBX/BTMIVLPl6aardpYj42W CBFsYAttqRx3LQUwUMt2GfMrnzaNhNQLdR/HR1vlK2IZx3J+8ADZFzaCnBEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQUA+JTGZKae6BOmlXYEuZmNq4YwHwYDVR0j BBgwFoAU+WRdg1pbYKjoOaE+h4YVYrc/NLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmYzYWU5Ny1mNTJlLTQ5NzctOTBkMS00MzQ5YWFkMDUyYTgvMC9GOTY0NUQ4MzVB NUI2MEE4RTgzOUExM0U4Nzg2MTU2MkI3M0YzNEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1NjJCNzNG MzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZmM2FlOTctZjUyZS00OTc3LTkw ZDEtNDM0OWFhZDA1MmE4LzAvRjk2NDVEODM1QTVCNjBBOEU4MzlBMTNFODc4NjE1 NjJCNzNGMzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjSKcTYfoqxpzihqiGYtf5PFR8saElVDbgW 0TbXNpJ150aIFK7BOuRYuVmTMNRjsdRSzaHug+bQ2ryk0l7XilwWdaH69DYdchlS 1c7aGwlmIzx7H9/Hz4rYwymdFiY93WhKxmAoFZCp1Y/9u0D9jxXUz4ZGQpRAxogy BSXKaOGDXBcRDMFVTRKxRZ5UAPw+h64aEm4uObFC9tw55EtgSoYK5c8ZoPlG5VSX e0Ud8J684zcU5382tizHzQqvhXUdzxUWg0qYdb5NmbCrRjhDzLaVFzhAorMyxmIY vWecnYtooNSYKnMiVrvrdCjE/X0bCWNgjy26EtAZ88R077ldrfk= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:33 2026 by rpki-client