This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft File: FA479894B4849679EBB9029580F04B8BD74CE048.mft (raw, json) Hash identifier: cLft7XnTcZ1L+M6jVt/DXUcUipmCuCsve9pf9Gts46o= Subject key identifier: 3D:33:1E:68:1F:CD:2B:5F:0C:BD:0D:68:F6:59:2A:EA:8C:F0:CF:C5 Authority key identifier: FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 Certificate issuer: /CN=FA479894B4849679EBB9029580F04B8BD74CE048 Certificate serial: 542C44765B0C6C36FCFECEBF26C7E8A117198BC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft Manifest number: D7 Signing time: Tue 20 Jan 2026 03:11:36 +0000 Manifest this update: Tue 20 Jan 2026 03:06:36 +0000 Manifest next update: Fri 23 Jan 2026 14:17:36 +0000 Files and hashes: 1: 323030313a6466343a343463303a3a2f34382d3438203d3e20313533313137.roa (hash: TN7coRRv7ozdQ4MBQjtVExbapiKpR2cs6McrqrVZTKc=) 2: FA479894B4849679EBB9029580F04B8BD74CE048.crl (hash: zSiITjR+fjGmprRial114wAS3MCIgQFtW387HP9dE3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 14:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:2c:44:76:5b:0c:6c:36:fc:fe:ce:bf:26:c7:e8:a1:17:19:8b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA479894B4849679EBB9029580F04B8BD74CE048 Validity Not Before: Jan 20 03:06:36 2026 GMT Not After : Jan 23 14:17:36 2026 GMT Subject: CN=3D331E681FCD2B5F0CBD0D68F6592AEA8CF0CFC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:c0:eb:fe:c4:99:61:fd:a8:9d:ec:37:44: e7:19:47:43:81:f8:68:19:6b:4f:7b:a9:61:df:19: 36:af:ad:5a:4b:05:11:eb:77:d3:f8:d0:24:f9:48: cb:d5:6b:07:e4:ab:bd:38:de:48:ca:fb:a3:00:f2: a9:08:92:d6:55:b2:6f:5a:a6:ca:7a:c8:a9:2a:53: d8:be:9d:78:ca:97:46:c4:df:f9:f2:76:fa:92:6c: f0:2b:ee:2a:57:ae:e3:9a:a8:3a:03:55:0b:ee:92: 4b:a3:e7:b2:3e:14:61:bf:87:6a:ca:18:ed:6a:08: 59:c9:a8:d8:63:2a:13:17:79:cf:cc:6e:6f:e6:7b: f9:c6:b0:a2:69:a4:6c:3c:3b:57:8b:c1:4f:51:e0: 7b:42:d7:f6:25:cf:69:64:6d:bc:05:2f:be:ef:e1: a3:6d:10:cd:23:08:9d:63:22:88:3e:9e:df:5f:46: b6:97:31:2f:97:e7:9e:bd:fa:c5:c1:1c:94:12:b9: 8e:09:0d:6a:99:3a:ea:2d:c4:b1:d9:b9:6b:9d:59: 4e:0c:11:91:83:de:63:ff:9c:91:53:22:2e:96:42: 14:1c:f7:1a:f6:6f:58:cc:d7:c5:84:99:58:29:41: d8:fd:42:e3:7b:0c:ee:46:88:c5:2f:fc:1d:0d:35: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:33:1E:68:1F:CD:2B:5F:0C:BD:0D:68:F6:59:2A:EA:8C:F0:CF:C5 X509v3 Authority Key Identifier: keyid:FA:47:98:94:B4:84:96:79:EB:B9:02:95:80:F0:4B:8B:D7:4C:E0:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FA479894B4849679EBB9029580F04B8BD74CE048.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/1/FA479894B4849679EBB9029580F04B8BD74CE048.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:54:ed:e4:f6:0f:80:a0:4c:0a:7c:2b:6e:f5:e0:07:8d:de: 27:39:23:3e:21:17:99:c1:28:b3:fe:e9:a7:2c:ab:b9:6b:73: 7f:f0:70:34:d3:92:e1:fe:0c:5a:12:6b:71:e1:97:15:40:17: f7:7c:b2:b7:44:30:ab:43:1d:81:bf:85:94:48:70:8e:c1:71: ac:a7:75:06:82:bb:41:e8:11:4e:57:e0:89:09:ae:65:92:a8: 47:18:e2:a4:96:f7:32:47:3c:6e:26:9a:ab:79:51:0a:05:e8: b4:41:ed:d0:42:3c:8e:8f:10:ec:dc:e4:78:73:7d:32:4b:7c: 42:47:46:93:27:29:88:eb:bb:52:de:66:eb:7a:8e:27:f8:82: b9:2d:f7:21:05:f8:85:1f:6f:1b:ad:d8:b3:cc:db:54:f2:be: e2:e1:ba:59:73:af:63:fa:67:b1:bf:db:5e:3e:23:20:55:43: fc:51:85:4d:ca:a8:bc:da:58:53:bf:c0:e5:7d:82:9b:0e:ec: 2f:64:e3:c2:e5:37:0b:30:1f:8c:1e:84:e3:d8:c2:2c:52:47: e6:b1:5b:3b:6d:b8:4f:5b:a5:9d:40:40:5d:6d:19:b2:6e:30: 0f:a3:25:1c:76:3a:ed:ea:a0:bb:f2:6d:7f:cb:e5:64:27:dc: 6f:57:25:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCxEdlsMbDb8/s6/JsfooRcZi8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJE NzRDRTA0ODAeFw0yNjAxMjAwMzA2MzZaFw0yNjAxMjMxNDE3MzZaMDMxMTAvBgNV BAMTKDNEMzMxRTY4MUZDRDJCNUYwQ0JEMEQ2OEY2NTkyQUVBOENGMENGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT8Dr/sSZYf2onew3ROcZR0OB +GgZa097qWHfGTavrVpLBRHrd9P40CT5SMvVawfkq7043kjK+6MA8qkIktZVsm9a psp6yKkqU9i+nXjKl0bE3/nydvqSbPAr7ipXruOaqDoDVQvukkuj57I+FGG/h2rK GO1qCFnJqNhjKhMXec/Mbm/me/nGsKJppGw8O1eLwU9R4HtC1/Ylz2lkbbwFL77v 4aNtEM0jCJ1jIog+nt9fRraXMS+X5569+sXBHJQSuY4JDWqZOuotxLHZuWudWU4M EZGD3mP/nJFTIi6WQhQc9xr2b1jM18WEmVgpQdj9QuN7DO5GiMUv/B0NNXpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPTMeaB/NK18MvQ1o9lkq6ozwz8UwHwYDVR0j BBgwFoAU+keYlLSElnnruQKVgPBLi9dM4EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMS9GQTQ3OTg5NEI0 ODQ5Njc5RUJCOTAyOTU4MEYwNEI4QkQ3NENFMDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRCOEJENzRD RTA0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzEvRkE0Nzk4OTRCNDg0OTY3OUVCQjkwMjk1ODBGMDRC OEJENzRDRTA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApU7eT2D4CgTAp8K2714AeN3ic5Iz4hF5nB KLP+6acsq7lrc3/wcDTTkuH+DFoSa3HhlxVAF/d8srdEMKtDHYG/hZRIcI7Bcayn dQaCu0HoEU5X4IkJrmWSqEcY4qSW9zJHPG4mmqt5UQoF6LRB7dBCPI6PEOzc5Hhz fTJLfEJHRpMnKYjru1LeZut6jif4grkt9yEF+IUfbxut2LPM21TyvuLhullzr2P6 Z7G/214+IyBVQ/xRhU3KqLzaWFO/wOV9gpsO7C9k48LlNwswH4wehOPYwixSR+ax WzttuE9bpZ1AQF1tGbJuMA+jJRx2Ou3qoLvybX/L5WQn3G9XJR0= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:07 2026 by rpki-client