This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft File: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft (raw, json) Hash identifier: Hxjlr1c72Czjz8SwFCT5DToZkGKCpLXM9P+LNb+DAYw= Subject key identifier: 20:42:2A:6A:12:7B:30:DF:16:4F:CE:4A:7D:A3:97:4E:5B:6B:68:AF Authority key identifier: FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 Certificate issuer: /CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Certificate serial: 25DA8B98D615AB929167E986DACC00C96FDF0B9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft Manifest number: 03FE Signing time: Sat 31 Jan 2026 12:11:10 +0000 Manifest this update: Sat 31 Jan 2026 12:06:10 +0000 Manifest next update: Tue 03 Feb 2026 22:37:10 +0000 Files and hashes: 1: FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl (hash: FjkFkt5fnIQZWWK3B9lhns9+nIkDDr9k8mn+K0JoYYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:da:8b:98:d6:15:ab:92:91:67:e9:86:da:cc:00:c9:6f:df:0b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6 Validity Not Before: Jan 31 12:06:10 2026 GMT Not After : Feb 3 22:37:10 2026 GMT Subject: CN=20422A6A127B30DF164FCE4A7DA3974E5B6B68AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:2d:a3:5b:f2:82:84:e1:fd:28:71:69:da: 0b:c6:8b:20:b5:6e:2d:87:d7:ef:73:eb:47:f4:c7: 67:7f:af:09:70:96:03:4a:51:5d:00:32:f0:2b:1a: f3:a4:10:d4:57:ec:75:5f:db:5c:60:4c:29:a6:13: 5a:ae:82:5f:09:99:a3:1d:00:42:f9:68:60:1a:66: 96:03:fe:9c:a9:db:cf:ac:df:75:cb:22:44:cd:bb: c3:3e:04:15:65:73:53:e8:3c:ed:8a:ff:98:cf:7e: e4:d4:41:c1:0b:a5:f1:25:e3:af:c6:bf:8c:6d:12: 41:b3:10:99:9f:dc:78:32:1a:54:db:ab:70:fc:7d: 76:a3:7a:5b:ec:4e:d4:e4:b0:35:a9:a3:aa:4e:3f: 1a:72:33:79:a8:b7:ac:a2:90:ab:23:d4:b3:89:ee: ed:3d:db:12:a3:1b:90:78:39:aa:1e:56:c4:2e:d9: 8a:e8:e9:39:fb:7f:b4:ae:d2:45:5a:dd:8e:2c:d4: 9b:2c:a2:59:a4:ad:87:bf:d8:cf:8e:2d:49:79:4c: 68:f1:45:10:74:bd:9d:90:e9:16:e8:34:d2:0c:e9: e3:19:da:81:40:13:8d:58:9c:ea:52:56:dc:a3:69: 7c:0d:b7:ec:ad:7f:9b:11:6a:0c:70:92:04:1b:5c: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:42:2A:6A:12:7B:30:DF:16:4F:CE:4A:7D:A3:97:4E:5B:6B:68:AF X509v3 Authority Key Identifier: keyid:FF:EF:EB:2C:96:B1:BE:D5:C5:D6:D8:23:EE:3C:6D:80:69:8B:9F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6efb90b1-b68f-4463-a1bd-e908c8a1ed1a/0/FFEFEB2C96B1BED5C5D6D823EE3C6D80698B9FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3c:fb:6a:ab:72:f3:07:ad:35:6a:f0:d3:f1:7d:57:24:de: aa:6b:3c:29:88:68:d1:01:af:08:a6:01:28:81:06:33:f8:08: 25:e5:38:72:49:e7:77:72:29:c7:9f:62:fd:4b:c9:04:71:f1: c5:fd:06:82:bb:ef:f4:f2:bb:eb:f9:39:ea:3b:7f:f3:2c:97: 49:9c:8d:6a:48:3f:3d:f9:f0:db:15:63:32:81:69:3f:3f:2e: 58:e8:ad:74:57:4e:f3:85:a1:ed:60:8b:b1:e7:1d:34:17:6d: 3f:3d:25:ad:82:4e:6f:03:60:12:a2:c9:a8:34:8e:59:c6:19: aa:64:c8:6b:71:25:79:8e:46:29:21:99:24:40:8d:14:7a:f8: 4c:7d:62:f0:67:07:1c:58:37:ad:82:d4:ee:f0:39:07:5f:64: 0a:c7:00:60:12:1e:43:2a:34:b2:5c:27:bd:b6:c0:e2:2a:fc: 1a:27:98:94:25:0c:dd:63:e7:81:eb:72:94:67:46:2c:0f:6e: ee:08:b9:92:e3:42:cf:75:e4:16:97:8e:a3:df:07:36:d5:b9: 91:0d:2c:42:6a:2c:2d:8a:e8:22:de:a4:72:ec:96:9f:50:63: 3b:d2:ee:87:1a:0c:7b:09:ed:26:11:05:1c:59:8a:47:40:72: 5f:62:ac:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJdqLmNYVq5KRZ+mG2swAyW/fC54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2 OThCOUZENjAeFw0yNjAxMzExMjA2MTBaFw0yNjAyMDMyMjM3MTBaMDMxMTAvBgNV BAMTKDIwNDIyQTZBMTI3QjMwREYxNjRGQ0U0QTdEQTM5NzRFNUI2QjY4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7S2jW/KChOH9KHFp2gvGiyC1 bi2H1+9z60f0x2d/rwlwlgNKUV0AMvArGvOkENRX7HVf21xgTCmmE1qugl8JmaMd AEL5aGAaZpYD/pyp28+s33XLIkTNu8M+BBVlc1PoPO2K/5jPfuTUQcELpfEl46/G v4xtEkGzEJmf3HgyGlTbq3D8fXajelvsTtTksDWpo6pOPxpyM3mot6yikKsj1LOJ 7u092xKjG5B4OaoeVsQu2Yro6Tn7f7Su0kVa3Y4s1JssolmkrYe/2M+OLUl5TGjx RRB0vZ2Q6RboNNIM6eMZ2oFAE41YnOpSVtyjaXwNt+ytf5sRagxwkgQbXC/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEIqahJ7MN8WT85KfaOXTltraK8wHwYDVR0j BBgwFoAU/+/rLJaxvtXF1tgj7jxtgGmLn9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWZiOTBiMS1iNjhmLTQ0NjMtYTFiZC1lOTA4YzhhMWVkMWEvMC9GRkVGRUIyQzk2 QjFCRUQ1QzVENkQ4MjNFRTNDNkQ4MDY5OEI5RkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZEODA2OThC OUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVmYjkwYjEtYjY4Zi00NDYzLWEx YmQtZTkwOGM4YTFlZDFhLzAvRkZFRkVCMkM5NkIxQkVENUM1RDZEODIzRUUzQzZE ODA2OThCOUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAE8+2qrcvMHrTVq8NPxfVck3qprPCmIaNEB rwimASiBBjP4CCXlOHJJ53dyKcefYv1LyQRx8cX9BoK77/Tyu+v5Oeo7f/Msl0mc jWpIPz358NsVYzKBaT8/LljorXRXTvOFoe1gi7HnHTQXbT89Ja2CTm8DYBKiyag0 jlnGGapkyGtxJXmORikhmSRAjRR6+Ex9YvBnBxxYN62C1O7wOQdfZArHAGASHkMq NLJcJ722wOIq/BonmJQlDN1j54HrcpRnRiwPbu4IuZLjQs915BaXjqPfBzbVuZEN LEJqLC2K6CLepHLslp9QYzvS7ocaDHsJ7SYRBRxZikdAcl9irO4= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:13 2026 by rpki-client