This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft File: FF467F8613654288ED5F52ACB466941450FA5DF8.mft (raw, json) Hash identifier: UnqRPn8boLMTTYM/6lm9FkRJGDnYq6aIlloBKbTdc5c= Subject key identifier: 23:46:11:4E:23:2E:3A:B7:C6:60:E3:AE:AB:5F:8F:07:F4:32:98:A3 Authority key identifier: FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 Certificate issuer: /CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Certificate serial: 6256764252B0756EBC65D3F7034D20B1CA013436 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft Manifest number: 0246 Signing time: Sat 31 Jan 2026 17:22:32 +0000 Manifest this update: Sat 31 Jan 2026 17:17:32 +0000 Manifest next update: Wed 04 Feb 2026 02:42:32 +0000 Files and hashes: 1: 3130332e3136342e3137342e302f32332d3234203d3e20313439393330.roa (hash: 5dMeFoH75yb3wslMxgFX9lE7/v4DQyEis4eWyx6RIyk=) 2: FF467F8613654288ED5F52ACB466941450FA5DF8.crl (hash: XYKL1wVNmhf3ezHdS5fwPlikDjwI0GMlS7JB718TKNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 02:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:76:42:52:b0:75:6e:bc:65:d3:f7:03:4d:20:b1:ca:01:34:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF467F8613654288ED5F52ACB466941450FA5DF8 Validity Not Before: Jan 31 17:17:32 2026 GMT Not After : Feb 4 02:42:32 2026 GMT Subject: CN=2346114E232E3AB7C660E3AEAB5F8F07F43298A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:25:fb:17:92:c9:1e:b5:61:bb:59:8c:1a:3a: bc:bb:61:24:8f:00:f2:0f:b8:84:6a:5a:23:72:7d: ae:e0:8f:ff:f0:73:9e:28:42:10:f7:ee:9d:03:b1: f5:3c:c4:32:98:c6:e1:b5:46:78:25:c6:f7:e6:27: 00:4a:53:8a:5e:ac:d2:47:f0:cd:55:bb:60:76:38: 44:10:74:ab:bb:6d:f7:ce:a1:92:2f:cd:17:01:ab: 36:9f:8b:aa:75:a1:26:a8:b9:b1:4c:26:a9:83:5d: 91:a6:8b:5a:ae:b3:bc:97:a9:29:51:e3:28:e0:fa: 6c:dc:f0:3b:de:a2:63:cf:39:d4:d5:11:47:5d:1c: ce:84:82:77:76:be:f3:0d:9c:57:78:9e:88:17:db: 04:c6:c7:a7:84:04:33:f3:96:60:94:1d:1a:62:3e: 11:a5:93:ee:a7:68:a9:df:c1:9e:2c:71:a3:35:28: 95:e0:4d:e0:e4:bd:39:e9:8e:0c:eb:12:19:81:aa: 10:68:42:5f:e6:ed:0f:ff:72:1b:37:6c:3c:1f:6f: 97:68:b8:07:6f:2f:00:d6:78:e3:0d:53:f1:b8:c4: 59:1c:90:ee:4e:6a:bb:77:35:92:f5:c5:f1:26:4a: 6d:77:9d:43:7e:a4:ce:59:9b:3f:59:38:a1:89:fd: 9e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:46:11:4E:23:2E:3A:B7:C6:60:E3:AE:AB:5F:8F:07:F4:32:98:A3 X509v3 Authority Key Identifier: keyid:FF:46:7F:86:13:65:42:88:ED:5F:52:AC:B4:66:94:14:50:FA:5D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF467F8613654288ED5F52ACB466941450FA5DF8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/483a1db2-b11e-4cdc-a25c-0f124cae70ee/0/FF467F8613654288ED5F52ACB466941450FA5DF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4a:7f:bb:cf:d6:fc:ac:e8:fe:07:f4:4a:e2:7e:71:f8:5e: f9:8e:51:24:57:7e:3a:58:f9:7f:5a:ac:10:00:05:1e:d9:c3: 0c:ab:d1:fb:3f:03:b1:65:2f:b3:c5:7e:d1:3e:be:b4:7a:3d: bc:d8:0c:a7:4f:97:e6:78:40:0f:94:13:63:0b:c6:2a:cd:02: bc:e3:12:6d:02:2a:93:d6:04:51:7b:b6:17:eb:35:f6:73:f1: 24:9b:55:4c:44:75:e2:a5:cf:8b:4a:cc:89:88:6c:6a:b9:9e: fd:16:5d:b7:88:06:17:ca:b3:37:42:83:7a:d8:c2:00:76:58: dd:a4:04:7e:2e:4a:23:34:3d:26:a7:63:f8:18:c0:20:31:3a: 96:04:84:89:c3:0f:26:90:cb:30:dc:d5:ac:c8:41:31:48:44: 93:08:14:43:b1:fe:f9:9b:6f:54:49:91:66:86:4f:6f:c3:ac: e3:a5:c7:b1:3c:69:56:97:d1:a3:41:f9:45:bf:c1:f6:35:a2: cb:48:a5:52:7b:42:f6:36:1d:cd:66:ae:28:ef:49:b0:39:40: b6:44:80:77:2b:47:d9:46:a1:39:16:a3:90:76:0e:1b:db:26: 00:e3:98:ba:87:14:d6:7c:8b:9c:34:71:4d:a8:42:b4:8c:1a: 15:84:85:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlZ2QlKwdW68ZdP3A00gscoBNDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1 MEZBNURGODAeFw0yNjAxMzExNzE3MzJaFw0yNjAyMDQwMjQyMzJaMDMxMTAvBgNV BAMTKDIzNDYxMTRFMjMyRTNBQjdDNjYwRTNBRUFCNUY4RjA3RjQzMjk4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChJfsXksketWG7WYwaOry7YSSP APIPuIRqWiNyfa7gj//wc54oQhD37p0DsfU8xDKYxuG1RnglxvfmJwBKU4perNJH 8M1Vu2B2OEQQdKu7bffOoZIvzRcBqzafi6p1oSaoubFMJqmDXZGmi1qus7yXqSlR 4yjg+mzc8DveomPPOdTVEUddHM6Egnd2vvMNnFd4nogX2wTGx6eEBDPzlmCUHRpi PhGlk+6naKnfwZ4scaM1KJXgTeDkvTnpjgzrEhmBqhBoQl/m7Q//chs3bDwfb5do uAdvLwDWeOMNU/G4xFkckO5Oart3NZL1xfEmSm13nUN+pM5Zmz9ZOKGJ/Z6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0YRTiMuOrfGYOOuq1+PB/QymKMwHwYDVR0j BBgwFoAU/0Z/hhNlQojtX1KstGaUFFD6XfgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODNhMWRiMi1iMTFlLTRjZGMtYTI1Yy0wZjEyNGNhZTcwZWUvMC9GRjQ2N0Y4NjEz NjU0Mjg4RUQ1RjUyQUNCNDY2OTQxNDUwRkE1REY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0MTQ1MEZB NURGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgzYTFkYjItYjExZS00Y2RjLWEy NWMtMGYxMjRjYWU3MGVlLzAvRkY0NjdGODYxMzY1NDI4OEVENUY1MkFDQjQ2Njk0 MTQ1MEZBNURGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlKf7vP1vys6P4H9ErifnH4XvmOUSRXfjpY +X9arBAABR7Zwwyr0fs/A7FlL7PFftE+vrR6PbzYDKdPl+Z4QA+UE2MLxirNArzj Em0CKpPWBFF7thfrNfZz8SSbVUxEdeKlz4tKzImIbGq5nv0WXbeIBhfKszdCg3rY wgB2WN2kBH4uSiM0PSanY/gYwCAxOpYEhInDDyaQyzDc1azIQTFIRJMIFEOx/vmb b1RJkWaGT2/DrOOlx7E8aVaX0aNB+UW/wfY1ostIpVJ7QvY2Hc1mrijvSbA5QLZE gHcrR9lGoTkWo5B2DhvbJgDjmLqHFNZ8i5w0cU2oQrSMGhWEhVM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:04 2026 by rpki-client