This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft File: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft (raw, json) Hash identifier: 0stgAqCWqCXvsGVSY+uUvPkU8xHuk+j7E2G3gEh99RI= Subject key identifier: 01:B5:42:CB:19:96:F5:A9:67:3F:3C:B1:05:6E:B6:43:38:3B:C4:EF Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 Certificate issuer: /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Certificate serial: 713B2B48D164CBEA81B9157F9A82F48F5664ACA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft Manifest number: 0298 Signing time: Sat 31 Jan 2026 14:30:48 +0000 Manifest this update: Sat 31 Jan 2026 14:25:48 +0000 Manifest next update: Tue 03 Feb 2026 18:56:48 +0000 Files and hashes: 1: 3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (hash: qUEFUeyx6PFKDpLj8lLr44AqFpnGjzqjL8vcRbAqP5U=) 2: FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl (hash: AWZKhg95GzcUEnQPBsQROmp3bj64vULMeURi6tc8p/I=) 3: 3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (hash: 0B/Z8RQPoiVOhRHwE1cqN2QWbyPN7hLbYCLPIcC7ksQ=) 4: 3130332e3138302e3139352e302f32342d3234203d3e2039333431.roa (hash: 7T0qhCvx1xUQ0ejRAS+BE16gGRrpbPoO/i/qSb56WPY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3b:2b:48:d1:64:cb:ea:81:b9:15:7f:9a:82:f4:8f:56:64:ac:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89 Validity Not Before: Jan 31 14:25:48 2026 GMT Not After : Feb 3 18:56:48 2026 GMT Subject: CN=01B542CB1996F5A9673F3CB1056EB643383BC4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:71:54:df:24:a3:b4:80:cf:57:50:24:78:9d: 0b:db:06:4e:a7:e9:14:76:02:52:49:20:24:93:5c: 7f:f2:da:37:f7:39:95:de:67:06:60:bb:87:e4:10: 91:e1:38:b9:48:d9:42:a3:c7:4a:88:69:93:b2:6a: fd:79:95:65:10:0b:39:e9:58:ac:f2:e9:92:e0:34: 4a:b3:94:1c:9e:d5:44:cd:9e:85:c8:87:64:83:b1: ee:1a:a9:1f:93:31:3b:42:2f:ab:21:08:d9:36:f7: 1b:7c:2e:47:2e:78:c7:76:96:d9:b6:07:14:f7:e9: 09:92:10:7b:72:7a:a1:8e:01:43:4a:e7:6b:dc:0a: 27:a3:6f:24:8e:b7:5c:44:e8:fa:f3:e3:ee:1a:5b: ab:c7:0a:51:dd:fb:c2:e8:1b:66:80:3f:b6:2d:bc: 96:4f:23:1b:a4:11:e3:ba:03:0a:d1:5e:75:74:76: ef:84:72:58:5b:27:b4:13:9d:04:92:9b:ac:3d:49: 9d:03:75:98:f3:ad:7f:b9:2f:68:cf:68:ed:29:22: 3b:39:82:52:7c:f4:b4:ca:89:80:4a:82:5d:90:85: f4:b7:34:0f:9a:bb:67:ac:36:b0:c1:3a:7a:79:18: 5c:6c:f0:00:78:fb:0e:f4:3b:85:cb:d9:da:73:64: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B5:42:CB:19:96:F5:A9:67:3F:3C:B1:05:6E:B6:43:38:3B:C4:EF X509v3 Authority Key Identifier: keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:8d:25:ae:8f:a5:12:c4:96:b4:a1:99:ba:52:b8:18:9c:fa: f0:3e:37:3f:62:58:5f:14:2f:76:45:c6:ac:5c:4a:16:6b:9d: 03:60:17:46:7c:1b:c6:7d:0d:48:d2:cc:4e:0b:38:51:39:e2: 85:19:17:c2:c6:30:0a:db:1e:fd:a9:b4:1e:01:38:b0:24:00: 6e:fe:0d:08:9c:1f:7e:bb:11:41:3e:b8:7f:d7:fc:0e:fa:3b: 01:2e:ed:64:5e:48:71:1c:ca:59:28:a9:ab:ba:e7:ec:13:03: e3:d1:e4:e7:68:f8:05:3f:ee:e9:36:91:2d:3d:8b:9c:91:62: 13:8a:70:a1:27:ad:87:05:98:7e:70:5f:92:20:0d:e3:56:ba: 52:f7:b3:93:44:24:76:f7:7e:0f:bc:37:c4:ef:16:39:f3:52: 08:76:32:d8:70:42:d4:75:65:e8:9e:c4:41:db:76:71:0f:15: bf:3b:01:e7:0e:d3:09:16:e8:9e:df:aa:f6:45:db:03:cf:a6: 7d:1f:9b:06:56:87:ed:22:08:8e:dc:39:ed:fb:fe:d9:35:78: 1c:75:cc:6c:32:8f:e7:b5:e0:34:65:d4:20:07:98:a8:8c:03: e5:79:c3:89:3a:e9:a0:09:f6:34:88:f9:04:9f:3c:ca:64:34: cc:e2:fd:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcTsrSNFky+qBuRV/moL0j1ZkrKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMz NjYzMkM4OTAeFw0yNjAxMzExNDI1NDhaFw0yNjAyMDMxODU2NDhaMDMxMTAvBgNV BAMTKDAxQjU0MkNCMTk5NkY1QTk2NzNGM0NCMTA1NkVCNjQzMzgzQkM0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClcVTfJKO0gM9XUCR4nQvbBk6n 6RR2AlJJICSTXH/y2jf3OZXeZwZgu4fkEJHhOLlI2UKjx0qIaZOyav15lWUQCznp WKzy6ZLgNEqzlBye1UTNnoXIh2SDse4aqR+TMTtCL6shCNk29xt8LkcueMd2ltm2 BxT36QmSEHtyeqGOAUNK52vcCiejbySOt1xE6Prz4+4aW6vHClHd+8LoG2aAP7Yt vJZPIxukEeO6AwrRXnV0du+EclhbJ7QTnQSSm6w9SZ0DdZjzrX+5L2jPaO0pIjs5 glJ89LTKiYBKgl2QhfS3NA+au2esNrDBOnp5GFxs8AB4+w70O4XL2dpzZAipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbVCyxmW9alnPzyxBW62Qzg7xO8wHwYDVR0j BBgwFoAU/tSavNocnQl/Uq0m2AAcDDZjLIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2Y3NTA4OC0wODhlLTQxYzAtYmZjZS1lZGM2OWJlYWZkNGEvMC9GRUQ0OUFCQ0RB MUM5RDA5N0Y1MkFEMjZEODAwMUMwQzM2NjMyQzg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFDMEMzNjYz MkM4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNmNzUwODgtMDg4ZS00MWMwLWJm Y2UtZWRjNjliZWFmZDRhLzAvRkVENDlBQkNEQTFDOUQwOTdGNTJBRDI2RDgwMDFD MEMzNjYzMkM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALONJa6PpRLElrShmbpSuBic+vA+Nz9iWF8U L3ZFxqxcShZrnQNgF0Z8G8Z9DUjSzE4LOFE54oUZF8LGMArbHv2ptB4BOLAkAG7+ DQicH367EUE+uH/X/A76OwEu7WReSHEcylkoqau65+wTA+PR5Odo+AU/7uk2kS09 i5yRYhOKcKEnrYcFmH5wX5IgDeNWulL3s5NEJHb3fg+8N8TvFjnzUgh2MthwQtR1 ZeiexEHbdnEPFb87AecO0wkW6J7fqvZF2wPPpn0fmwZWh+0iCI7cOe37/tk1eBx1 zGwyj+e14DRl1CAHmKiMA+V5w4k66aAJ9jSI+QSfPMpkNMzi/T4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:15 2026 by rpki-client