This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft (raw, json) Hash identifier: JJ0WVSc9Uy8bgzgPV/QOjFfb3ogifOehg5yEvTBVVrM= Subject key identifier: C2:6C:6F:57:CC:D3:C0:D5:1A:83:EF:F8:74:A4:6A:B3:1F:00:7B:C6 Authority key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Certificate issuer: /CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Certificate serial: 7A4C9270CD9255B0DC154CFABB4581D428233D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft Manifest number: 0118 Signing time: Sat 31 Jan 2026 10:42:07 +0000 Manifest this update: Sat 31 Jan 2026 10:37:07 +0000 Manifest next update: Tue 03 Feb 2026 11:31:07 +0000 Files and hashes: 1: 3130332e3136312e3130382e302f32342d3234203d3e20313431393132.roa (hash: uvIhcJu4c3esMkst4+88cWSmjSO0QaYXOH2ffUAXAVQ=) 2: FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl (hash: GF5i1EJHSkrFJbGMdQuvvojaIcHkUPgVYvpKWWuu78s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4c:92:70:cd:92:55:b0:dc:15:4c:fa:bb:45:81:d4:28:23:3d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Validity Not Before: Jan 31 10:37:07 2026 GMT Not After : Feb 3 11:31:07 2026 GMT Subject: CN=C26C6F57CCD3C0D51A83EFF874A46AB31F007BC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:0f:f6:e3:c1:b4:35:e5:b5:0d:d3:78:48: 87:a8:93:1f:c7:a8:a5:44:9b:ad:26:bc:e5:a5:22: 75:06:22:6c:fd:7b:22:ac:b2:f6:ba:0e:14:1b:f4: 11:3b:08:f0:36:28:88:cc:bf:8a:3a:6f:2f:de:22: f2:99:69:55:88:e6:96:4c:ff:78:e3:bd:79:65:07: e2:38:19:87:ed:58:e5:eb:ba:d5:3d:c6:07:23:18: 5e:20:9c:17:3f:03:20:5c:4f:ed:d1:b8:a4:24:58: c2:a7:92:2f:91:4f:0f:47:e7:ce:d5:f6:17:96:1e: e1:12:e5:3c:dd:6c:be:40:f7:9a:8c:b4:cd:48:c6: a5:84:c7:70:53:5d:7b:55:ab:b0:c0:ec:a7:36:2e: 68:cd:e1:14:53:5d:cb:25:20:28:de:c8:60:a8:df: 6b:f8:5f:44:a7:62:68:4a:31:c4:d6:ef:c9:05:d3: d8:93:88:26:c5:54:62:0d:18:2b:5b:84:9f:f5:d8: 94:93:e2:57:74:80:cd:29:84:6d:19:32:5f:1e:ec: 9f:3f:32:79:23:7f:1b:55:f3:00:e6:96:e2:63:92: c8:d1:f0:5c:56:6c:0e:e2:b4:13:3a:46:23:54:60: f8:cf:d9:fa:20:0e:66:e8:50:8e:45:a4:b1:f7:90: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:6F:57:CC:D3:C0:D5:1A:83:EF:F8:74:A4:6A:B3:1F:00:7B:C6 X509v3 Authority Key Identifier: keyid:FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:be:ef:7a:2b:d3:29:a6:32:64:65:7e:d8:97:1e:4d:c0:f6: 9b:43:69:69:b9:f1:a4:22:e2:9c:ea:bc:be:ad:01:e1:46:de: aa:7b:88:c5:c3:6d:9f:b4:f0:5a:5d:79:e9:86:c7:82:45:a2: 31:26:4f:6f:ca:e3:89:f5:5a:50:cf:5c:57:3b:23:d8:7e:75: c8:6f:25:0f:ed:71:71:c5:b2:b9:a5:9d:4f:e7:e6:f3:03:22: d4:27:38:92:3c:16:8d:10:c6:f0:90:ca:1e:df:a6:9f:cc:02: 07:ed:3c:79:77:2b:b7:00:e7:e9:65:d4:6b:d6:c4:e1:5b:92: 90:92:2d:85:47:6e:1e:76:6d:0f:a4:b2:58:f1:c7:e6:bd:21: ca:41:b1:aa:d2:0a:79:15:fd:7e:b9:0e:51:fc:7f:52:6d:97: 5e:ff:bb:b1:48:33:49:c8:26:cf:b5:36:81:3a:9b:95:af:17: 04:e5:7a:ab:d0:64:b5:11:32:eb:9d:53:00:6b:e8:6e:12:e8: 92:99:d5:1b:db:b4:0a:c1:71:ec:6b:79:ef:7e:22:fe:88:81: dc:b9:a7:d9:be:4c:3b:8d:9e:ed:9b:f8:b5:e6:b0:56:46:d3: f6:bc:32:5b:16:d7:33:b6:b6:f2:ec:f0:65:ca:62:46:41:56: 0f:c4:fb:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekyScM2SVbDcFUz6u0WB1CgjPU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRF RDY0NTc4NzAeFw0yNjAxMzExMDM3MDdaFw0yNjAyMDMxMTMxMDdaMDMxMTAvBgNV BAMTKEMyNkM2RjU3Q0NEM0MwRDUxQTgzRUZGODc0QTQ2QUIzMUYwMDdCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4zw/248G0NeW1DdN4SIeokx/H qKVEm60mvOWlInUGImz9eyKssva6DhQb9BE7CPA2KIjMv4o6by/eIvKZaVWI5pZM /3jjvXllB+I4GYftWOXrutU9xgcjGF4gnBc/AyBcT+3RuKQkWMKnki+RTw9H587V 9heWHuES5TzdbL5A95qMtM1IxqWEx3BTXXtVq7DA7Kc2LmjN4RRTXcslICjeyGCo 32v4X0SnYmhKMcTW78kF09iTiCbFVGINGCtbhJ/12JST4ld0gM0phG0ZMl8e7J8/ MnkjfxtV8wDmluJjksjR8FxWbA7itBM6RiNUYPjP2fogDmboUI5FpLH3kNJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwmxvV8zTwNUag+/4dKRqsx8Ae8YwHwYDVR0j BBgwFoAU/xJGsa9bFY6ibnVlTXt6be1kV4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMC9GRjEyNDZCMUFG NUIxNThFQTI2RTc1NjU0RDdCN0E2REVENjQ1Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdBNkRFRDY0 NTc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg5YTA2NjEtMzFlZS00OWEyLWFl OWYtZjZkNTczYTE3ZGY3LzAvRkYxMjQ2QjFBRjVCMTU4RUEyNkU3NTY1NEQ3QjdB NkRFRDY0NTc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq+73or0ymmMmRlftiXHk3A9ptDaWm58aQi 4pzqvL6tAeFG3qp7iMXDbZ+08FpdeemGx4JFojEmT2/K44n1WlDPXFc7I9h+dchv JQ/tcXHFsrmlnU/n5vMDItQnOJI8Fo0QxvCQyh7fpp/MAgftPHl3K7cA5+ll1GvW xOFbkpCSLYVHbh52bQ+ksljxx+a9IcpBsarSCnkV/X65DlH8f1Jtl17/u7FIM0nI Js+1NoE6m5WvFwTleqvQZLURMuudUwBr6G4S6JKZ1RvbtArBcexree9+Iv6Igdy5 p9m+TDuNnu2b+LXmsFZG0/a8MlsW1zO2tvLs8GXKYkZBVg/E+28= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:06 2026 by rpki-client