This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft File: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft (raw, json) Hash identifier: RE0JHdU43yI+eKBXTMXn93HrK+bYkWw0O9sC2RTQyl8= Subject key identifier: 95:55:62:A8:56:12:20:F7:1F:60:64:D5:95:08:40:B6:A4:B8:4B:E5 Authority key identifier: FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC Certificate issuer: /CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Certificate serial: 569684CB05218F2BAD02822E75F183DB7EE0E685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft Manifest number: 012C Signing time: Mon 19 Jan 2026 02:01:17 +0000 Manifest this update: Mon 19 Jan 2026 01:56:17 +0000 Manifest next update: Thu 22 Jan 2026 12:25:17 +0000 Files and hashes: 1: 3135372e32302e39352e302f32342d3234203d3e20313431363032.roa (hash: 88y84elDiek3O/IhTaNMS2vLlPQVqlAnqgDoLBdJafc=) 2: FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl (hash: a8KL5lkn/pkyA+fqEWJgdZ1XjgCSUbYa/BDr/ooIW2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 12:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:96:84:cb:05:21:8f:2b:ad:02:82:2e:75:f1:83:db:7e:e0:e6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC Validity Not Before: Jan 19 01:56:17 2026 GMT Not After : Jan 22 12:25:17 2026 GMT Subject: CN=955562A8561220F71F6064D5950840B6A4B84BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:5f:cc:b6:0e:d1:31:3d:90:2e:49:5d:90: 0b:55:2f:5a:b4:be:99:43:10:1b:3c:61:04:a0:f0: 16:37:d5:77:54:9c:27:1d:1e:99:3d:0a:97:2b:c1: 2b:7a:a1:68:9c:51:33:2b:36:84:98:7a:3b:68:26: d9:05:e6:2f:f3:c4:54:5b:c9:36:91:08:f0:21:31: d9:5a:0e:3b:c0:1f:a5:3b:1f:6a:0d:18:7d:8a:84: 9a:55:2c:6f:6e:b2:87:94:35:f5:80:ce:14:fa:84: 5f:38:37:85:33:a1:19:e2:63:bc:04:e6:88:ee:49: c5:73:07:98:be:a6:60:a9:9b:51:cc:66:47:e4:0e: 71:ac:1a:cd:d3:30:d7:e8:f7:de:f2:50:0f:be:27: 23:ff:9f:32:ed:72:5d:19:6b:21:88:ab:3b:84:cd: c7:d5:d7:5c:4b:97:66:09:96:05:1f:9d:08:57:cc: e2:13:30:58:80:c3:91:55:a0:16:5b:46:17:4b:fd: b7:d5:86:b3:c3:ba:6a:65:b5:d6:69:00:7b:45:e6: 1a:15:b5:e5:3d:60:90:61:1a:33:b5:f1:79:4d:6e: f0:33:20:29:81:e8:80:07:41:e9:97:6a:7b:67:69: 94:2c:cb:0c:58:b9:96:7c:fc:66:0e:e6:5b:30:32: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:55:62:A8:56:12:20:F7:1F:60:64:D5:95:08:40:B6:A4:B8:4B:E5 X509v3 Authority Key Identifier: keyid:FD:18:E3:EC:B5:F2:28:5C:07:51:C4:8E:AF:23:EF:21:0B:A8:FD:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dae13bac-91c1-463b-8333-64eec6d2797e/0/FD18E3ECB5F2285C0751C48EAF23EF210BA8FDCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:b6:12:76:13:e2:8c:15:e9:a9:f4:72:db:ab:4e:ae:61: d4:1a:c3:9b:93:a1:46:ff:a5:ca:93:30:05:10:5e:60:72:c2: a9:24:6e:53:ef:10:0b:36:00:04:a9:a8:3e:9c:79:6d:63:77: 59:6e:ed:c5:e6:68:78:6d:da:db:a3:45:d0:1d:01:b6:d1:4a: 41:4d:98:90:c6:b2:cd:ef:e4:96:ff:81:92:26:7a:60:40:76: 9e:30:90:5b:d8:a4:eb:15:35:57:7f:8c:57:38:21:47:21:77: c5:e9:c6:f7:9e:46:f9:d5:19:cf:0a:ca:cf:51:38:ab:2b:f3: 9e:76:b6:dc:1b:65:a3:3c:7a:5f:65:99:77:26:50:38:ef:20: 0f:37:06:b0:4d:7c:09:eb:be:0d:31:23:0d:4e:97:8f:52:9b: 20:a1:0d:b2:f6:dc:28:7f:60:c3:25:7a:89:b1:72:b5:22:d4: 67:79:9e:40:95:60:0d:c3:f9:12:93:68:a5:9d:3b:82:2c:2a: 56:8d:37:bd:0c:a1:91:79:17:70:f4:0d:77:46:31:ea:ef:eb: 64:67:a7:9d:98:69:a7:c4:04:88:6a:88:de:fa:05:b0:37:ae: 7a:70:43:b7:12:3e:30:d2:cb:8e:6b:c5:76:4f:de:fa:ac:9f: 8a:bd:47:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpaEywUhjyutAoIudfGD237g5oUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEw QkE4RkRDQzAeFw0yNjAxMTkwMTU2MTdaFw0yNjAxMjIxMjI1MTdaMDMxMTAvBgNV BAMTKDk1NTU2MkE4NTYxMjIwRjcxRjYwNjRENTk1MDg0MEI2QTRCODRCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp8l/Mtg7RMT2QLkldkAtVL1q0 vplDEBs8YQSg8BY31XdUnCcdHpk9CpcrwSt6oWicUTMrNoSYejtoJtkF5i/zxFRb yTaRCPAhMdlaDjvAH6U7H2oNGH2KhJpVLG9usoeUNfWAzhT6hF84N4UzoRniY7wE 5ojuScVzB5i+pmCpm1HMZkfkDnGsGs3TMNfo997yUA++JyP/nzLtcl0ZayGIqzuE zcfV11xLl2YJlgUfnQhXzOITMFiAw5FVoBZbRhdL/bfVhrPDumpltdZpAHtF5hoV teU9YJBhGjO18XlNbvAzICmB6IAHQemXantnaZQsywxYuZZ8/GYO5lswMvCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlVViqFYSIPcfYGTVlQhAtqS4S+UwHwYDVR0j BBgwFoAU/Rjj7LXyKFwHUcSOryPvIQuo/cwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWUxM2JhYy05MWMxLTQ2M2ItODMzMy02NGVlYzZkMjc5N2UvMC9GRDE4RTNFQ0I1 RjIyODVDMDc1MUM0OEVBRjIzRUYyMTBCQThGRENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VGMjEwQkE4 RkRDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFlMTNiYWMtOTFjMS00NjNiLTgz MzMtNjRlZWM2ZDI3OTdlLzAvRkQxOEUzRUNCNUYyMjg1QzA3NTFDNDhFQUYyM0VG MjEwQkE4RkRDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmdthJ2E+KMFemp9HLbq06uYdQaw5uToUb/ pcqTMAUQXmBywqkkblPvEAs2AASpqD6ceW1jd1lu7cXmaHht2tujRdAdAbbRSkFN mJDGss3v5Jb/gZImemBAdp4wkFvYpOsVNVd/jFc4IUchd8XpxveeRvnVGc8Kys9R OKsr8552ttwbZaM8el9lmXcmUDjvIA83BrBNfAnrvg0xIw1Ol49SmyChDbL23Ch/ YMMleomxcrUi1Gd5nkCVYA3D+RKTaKWdO4IsKlaNN70MoZF5F3D0DXdGMerv62Rn p52YaafEBIhqiN76BbA3rnpwQ7cSPjDSy45rxXZP3vqsn4q9Rws= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:34 2026 by rpki-client