This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
File: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft (raw, json)
Hash identifier: NWJh/mc1xBjcSRnnFC2pYXSvu0oRN7PwzP3amcNQ+yU=
Subject key identifier: C6:1C:A9:CC:BB:5F:15:0A:E6:3C:BD:99:26:ED:2C:CF:DD:1D:69:29
Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
Certificate issuer: /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
Certificate serial: 67BE5033D0EFB18C8C5AB8D90FF339D5D508A20B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
Manifest number: 014F
Signing time: Sun 01 Feb 2026 00:40:43 +0000
Manifest this update: Sun 01 Feb 2026 00:35:43 +0000
Manifest next update: Wed 04 Feb 2026 05:01:43 +0000
Files and hashes: 1: 3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (hash: ZuDG3oqhW0+APEzfCML43aRTTIhVqjXyjhsrMxTrLWg=)
2: 323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (hash: +lfpXVJZZB7mX5EhQPkK63ZYtoy/YmVZrC57zXFlQBc=)
3: FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl (hash: T1n2hg+wBXIRyni9e4lOD+DvtV+sRa7OfA5aPmsMojE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl
rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 05:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:be:50:33:d0:ef:b1:8c:8c:5a:b8:d9:0f:f3:39:d5:d5:08:a2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
Validity
Not Before: Feb 1 00:35:43 2026 GMT
Not After : Feb 4 05:01:43 2026 GMT
Subject: CN=C61CA9CCBB5F150AE63CBD9926ED2CCFDD1D6929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:d4:24:11:c1:3d:e5:0c:4b:24:ac:58:b4:
42:bb:1e:53:da:ff:07:22:6e:84:8b:13:f7:75:0c:
b8:b0:42:45:df:96:7a:a0:c0:f3:ac:c5:57:c6:51:
fa:8f:ec:42:0b:90:50:4e:ba:27:44:6c:18:1e:ce:
d1:7b:e8:63:0c:8c:57:f1:e7:f7:68:2f:69:c5:8f:
06:2c:8c:84:a3:e3:d5:3a:67:47:a0:7d:34:72:7f:
40:1a:41:d7:93:a3:2e:61:8f:47:90:db:e0:ff:2d:
ac:48:ea:c6:b8:e6:da:c3:34:e5:d9:48:b5:d1:6a:
98:18:7e:4c:0b:41:7f:4b:ed:3b:79:d1:b4:5c:05:
26:61:28:b0:5a:8e:eb:2a:da:77:54:99:8c:05:be:
16:3b:b7:56:f6:93:4e:ba:29:dc:3b:2c:65:4c:f4:
e2:2c:b0:76:f7:18:3b:9b:f9:34:ef:07:68:2f:bf:
54:6b:db:e5:07:98:cd:9e:aa:da:7d:ab:4f:79:20:
b1:16:b2:2b:6d:a0:5d:64:ac:40:af:24:d9:75:ab:
03:d7:d8:54:3c:35:9c:f0:a9:5b:86:a9:f7:cd:3a:
55:40:9a:2c:cd:2f:4c:c9:d0:bf:a0:25:51:68:b5:
f6:d3:a5:fd:3c:4b:34:fe:21:43:eb:d1:2b:c1:92:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1C:A9:CC:BB:5F:15:0A:E6:3C:BD:99:26:ED:2C:CF:DD:1D:69:29
X509v3 Authority Key Identifier:
keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:d8:c0:c5:c9:a4:ed:55:70:57:73:14:14:5b:59:fd:14:
8f:38:95:02:fd:42:6a:9d:2b:1d:e5:44:fe:98:6f:4d:c4:f1:
67:e2:68:d0:23:b2:2e:0d:ac:90:86:23:b4:55:c0:fd:fd:da:
c4:f5:37:85:8a:4d:ca:d3:a6:77:17:7f:f4:ed:47:db:aa:5e:
61:d3:da:07:44:e8:5a:0d:7f:e4:4f:dd:26:b2:b4:11:13:25:
45:54:95:c6:92:b0:e3:e8:a2:17:03:76:7a:9b:f6:8f:60:dd:
15:b7:48:56:bb:ea:8b:82:bd:38:c1:d2:c8:bc:52:96:53:aa:
2e:07:8a:42:ef:e3:a9:f9:01:c4:ff:6d:33:d3:bb:45:e2:59:
52:33:b7:d1:5d:22:99:b0:80:0c:cc:01:79:2f:e9:ab:29:56:
e3:05:e9:1d:ff:53:34:75:04:dc:eb:09:86:85:ed:95:e9:b7:
84:59:44:6f:29:11:59:62:8a:6e:7b:3b:0d:72:1b:43:98:83:
f1:a8:62:cc:6c:65:64:c2:5d:a5:43:7f:e5:06:3a:19:77:37:
31:4e:63:c2:12:e6:bd:7d:c0:ac:11:96:f1:08:e6:73:6d:7c:
87:16:bd:f6:3a:2e:ea:a3:1a:84:71:b0:6b:df:33:8d:f2:b7:
fc:c4:96:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:11 2026 by rpki-client