This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft File: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft (raw, json) Hash identifier: 5TxxGb7zkMab/YFlZ6AGdFgUq/gw08VNx368J0zTKpc= Subject key identifier: 91:DC:11:33:70:2A:F3:A3:B0:4E:9D:A9:F8:9B:A2:29:96:27:E2:7F Authority key identifier: FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD Certificate issuer: /CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Certificate serial: 60944E902B81D30586DC805F0BD3509AC66CA941 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft Manifest number: 0154 Signing time: Sat 31 Jan 2026 07:51:21 +0000 Manifest this update: Sat 31 Jan 2026 07:46:21 +0000 Manifest next update: Tue 03 Feb 2026 19:46:21 +0000 Files and hashes: 1: FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl (hash: 49qCb/dJM1HBnWR9JOkcqb501+5LYEB42sECwxMwhJQ=) 2: 3138302e39342e382e302f32342d3234203d3e20313532303430.roa (hash: gDLjvs7mUZTJqV7sQahqgCZp1Ur5vaxNFNQ6lwvC3fA=) 3: 3138302e39342e392e302f32342d3234203d3e20313532303430.roa (hash: wEcX2juwCI4r7czUlMraVPKObT0SxDceFI9YFbZ+Zxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 19:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:94:4e:90:2b:81:d3:05:86:dc:80:5f:0b:d3:50:9a:c6:6c:a9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA5F6CC99BAC829D4DE7BECEE823199657D018CD Validity Not Before: Jan 31 07:46:21 2026 GMT Not After : Feb 3 19:46:21 2026 GMT Subject: CN=91DC1133702AF3A3B04E9DA9F89BA2299627E27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:42:d8:5b:07:d4:79:a1:04:f8:f2:bf:f6: 4a:fa:03:db:7c:45:49:18:8a:d5:01:a7:3c:1c:b1: 64:c9:c5:b2:0a:6c:55:e4:20:75:ad:50:b8:15:59: e1:d3:f0:d5:bd:a1:27:2c:22:9f:4b:3b:18:b1:f7: 0a:21:f0:83:7b:1e:c9:e5:19:7e:81:6c:b4:6b:88: bb:6e:8a:0e:54:cb:55:21:02:3e:75:1e:5e:02:33: b1:83:a0:cd:df:13:9a:fa:94:22:6b:a7:28:84:67: 23:aa:be:8b:23:85:92:b3:13:d5:27:8e:3a:4c:0d: 43:5a:41:d5:4f:7c:e8:d0:2c:3d:f5:b6:16:d9:94: eb:94:3e:4c:2c:df:b6:9c:c6:c1:88:b9:b1:27:24: 28:92:44:b7:01:af:32:0e:eb:b3:17:a0:f8:17:d6: 04:1d:82:88:c5:e4:da:1f:54:d7:60:1d:9f:e6:6a: 04:43:11:a7:23:92:ea:87:1d:69:4c:33:bc:b6:d6: d1:a8:d7:ca:4b:90:77:21:75:33:47:2a:20:6f:51: 0d:af:2f:51:ee:da:23:94:cf:8d:cf:36:70:3c:ad: 6a:8f:a9:14:12:fb:cd:fe:a0:cb:8e:3a:ca:99:b7: 4a:11:f0:76:67:e0:9f:16:fb:4d:f4:14:4d:22:83: ff:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DC:11:33:70:2A:F3:A3:B0:4E:9D:A9:F8:9B:A2:29:96:27:E2:7F X509v3 Authority Key Identifier: keyid:FA:5F:6C:C9:9B:AC:82:9D:4D:E7:BE:CE:E8:23:19:96:57:D0:18:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56f1eb4b-48dc-4eea-9181-128cb28b3dba/0/FA5F6CC99BAC829D4DE7BECEE823199657D018CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:7d:99:7a:59:58:67:a9:bc:53:5e:11:2e:db:0c:ca:65: 2e:06:d3:17:5c:1c:aa:2a:37:b3:fe:c5:7f:8b:33:bf:22:7f: e9:de:7d:36:f4:19:b4:c6:bf:2d:44:4d:96:fb:2e:09:26:77: f4:6d:3d:19:35:e8:b5:e5:1e:1d:82:37:be:3d:a7:dc:b0:ac: e1:90:d8:f7:b3:fc:77:a4:f6:76:e7:62:36:df:e8:47:e0:42: 27:8a:d4:51:5b:c4:29:6d:34:78:ad:81:fb:9b:1a:f7:a0:f8: f4:20:f6:fd:14:eb:00:50:ef:ce:c6:bd:56:ed:bc:69:8e:e3: 03:e9:c3:f3:5d:67:5e:6e:db:a0:a2:f2:f7:1b:d5:df:b8:30: b6:44:35:23:fb:3b:52:b4:73:c2:cc:7d:e8:1a:8c:aa:5a:c3: be:50:b0:3b:50:6b:ba:81:ba:cd:8e:17:6c:6e:83:90:01:fb: fb:7e:e5:69:d2:29:9b:82:ce:03:5c:12:6f:43:8a:69:37:7e: 9e:e6:a2:d3:bd:0b:00:7a:98:52:bc:57:7f:36:6b:8d:8f:28: fd:ba:12:3b:42:6c:99:08:16:d0:33:78:9e:b4:1e:8b:9a:21: 0a:2a:07:da:1b:20:9d:e5:4d:52:bb:b6:d8:da:e2:d1:d7:1d: 6d:42:ea:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJROkCuB0wWG3IBfC9NQmsZsqUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1 N0QwMThDRDAeFw0yNjAxMzEwNzQ2MjFaFw0yNjAyMDMxOTQ2MjFaMDMxMTAvBgNV BAMTKDkxREMxMTMzNzAyQUYzQTNCMDRFOURBOUY4OUJBMjI5OTYyN0UyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fELYWwfUeaEE+PK/9kr6A9t8 RUkYitUBpzwcsWTJxbIKbFXkIHWtULgVWeHT8NW9oScsIp9LOxix9woh8IN7Hsnl GX6BbLRriLtuig5Uy1UhAj51Hl4CM7GDoM3fE5r6lCJrpyiEZyOqvosjhZKzE9Un jjpMDUNaQdVPfOjQLD31thbZlOuUPkws37acxsGIubEnJCiSRLcBrzIO67MXoPgX 1gQdgojF5NofVNdgHZ/magRDEacjkuqHHWlMM7y21tGo18pLkHchdTNHKiBvUQ2v L1Hu2iOUz43PNnA8rWqPqRQS+83+oMuOOsqZt0oR8HZn4J8W+030FE0ig/8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdwRM3Aq86OwTp2p+JuiKZYn4n8wHwYDVR0j BBgwFoAU+l9syZusgp1N577O6CMZllfQGM0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmYxZWI0Yi00OGRjLTRlZWEtOTE4MS0xMjhjYjI4YjNkYmEvMC9GQTVGNkNDOTlC QUM4MjlENERFN0JFQ0VFODIzMTk5NjU3RDAxOENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5OTY1N0Qw MThDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmMWViNGItNDhkYy00ZWVhLTkx ODEtMTI4Y2IyOGIzZGJhLzAvRkE1RjZDQzk5QkFDODI5RDRERTdCRUNFRTgyMzE5 OTY1N0QwMThDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAElfZl6WVhnqbxTXhEu2wzKZS4G0xdcHKoq N7P+xX+LM78if+nefTb0GbTGvy1ETZb7Lgkmd/RtPRk16LXlHh2CN749p9ywrOGQ 2Pez/Hek9nbnYjbf6EfgQieK1FFbxCltNHitgfubGveg+PQg9v0U6wBQ787GvVbt vGmO4wPpw/NdZ15u26Ci8vcb1d+4MLZENSP7O1K0c8LMfegajKpaw75QsDtQa7qB us2OF2xug5AB+/t+5WnSKZuCzgNcEm9Dimk3fp7motO9CwB6mFK8V382a42PKP26 EjtCbJkIFtAzeJ60HouaIQoqB9obIJ3lTVK7ttja4tHXHW1C6tY= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:19 2026 by rpki-client