This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
File: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft (raw, json)
Hash identifier: gOCW0n2Zt7gj66oTQ9nWjLaSt6vqEGDbtv0Fux9qYZ4=
Subject key identifier: C2:4C:ED:E9:94:BF:31:F0:12:A9:82:36:99:BD:3F:71:76:2A:64:AA
Authority key identifier: FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF
Certificate issuer: /CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
Certificate serial: 5FF0FD25CF6CB2B58F67D1EA4A9B15AE501420B4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
Manifest number: 0542
Signing time: Sat 31 Jan 2026 06:10:47 +0000
Manifest this update: Sat 31 Jan 2026 06:05:47 +0000
Manifest next update: Tue 03 Feb 2026 14:05:47 +0000
Files and hashes: 1: FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl (hash: V0ZN0xIbm4A26Y24nEJKEfjQg4R/o8SYAIn00O5+jNI=)
2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: 7v+UWewpBXKuzE8AR/fYejkKyBNOrEBvR5vrqtJwA4s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl
rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 14:05:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f0:fd:25:cf:6c:b2:b5:8f:67:d1:ea:4a:9b:15:ae:50:14:20:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF
Validity
Not Before: Jan 31 06:05:47 2026 GMT
Not After : Feb 3 14:05:47 2026 GMT
Subject: CN=C24CEDE994BF31F012A9823699BD3F71762A64AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:3d:4c:52:78:df:0b:46:0b:33:5e:c8:97:
4c:06:80:68:a3:7e:cb:da:56:28:8c:db:c4:65:4d:
5a:3b:57:f7:34:13:ba:c5:d0:0e:65:a5:d5:2f:35:
0c:80:81:91:35:46:e3:0c:2a:c2:82:fd:4c:f4:ef:
c2:43:5a:dc:e5:5c:a6:ab:db:6d:a7:d6:66:83:cc:
9c:a1:a5:b1:05:c5:49:0b:3d:58:cf:42:45:c6:95:
41:cd:03:a4:8d:d5:2f:66:67:24:39:9b:bc:f0:03:
af:0c:b9:cc:e8:1d:2a:e7:66:13:d1:3c:15:22:e4:
1a:8a:7b:96:1d:ed:16:b6:e8:e7:4e:2c:8d:48:06:
90:82:20:9c:7c:c2:c3:b9:33:ae:3b:bd:f7:ac:71:
e6:d8:63:ed:1a:73:eb:d2:fc:a0:fb:34:7e:47:4e:
b6:c0:30:ca:02:e5:bf:8d:78:75:d6:0b:4c:fb:e5:
d5:df:07:70:47:17:0b:f6:87:b1:00:ec:a8:9f:be:
92:c2:e8:88:0a:e7:79:1d:d7:93:b2:08:47:ad:ec:
6c:2d:d2:c4:b7:37:1f:08:61:e3:b9:d8:6e:22:55:
2a:5f:27:22:ae:f0:d7:54:c5:7e:f8:d7:97:67:4d:
98:64:88:da:ba:a0:63:f5:2e:fe:48:16:1a:10:5f:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4C:ED:E9:94:BF:31:F0:12:A9:82:36:99:BD:3F:71:76:2A:64:AA
X509v3 Authority Key Identifier:
keyid:FC:31:DB:70:F7:B2:F1:7F:13:E9:2A:2E:7B:AE:55:54:79:2E:FB:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/FC31DB70F7B2F17F13E92A2E7BAE5554792EFBBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a3:ad:36:86:d4:9b:6d:78:d6:1b:0c:cc:9c:a0:42:cc:42:
38:2b:82:e3:de:44:a8:6d:66:c6:1e:1c:d1:55:3f:df:1d:99:
0d:9b:cb:3d:35:51:70:45:85:b3:c3:d4:eb:2e:dc:7c:c7:ff:
13:63:24:8b:4a:92:a8:81:9f:92:5e:34:cf:5d:4a:3c:ce:a0:
57:46:ce:89:f6:58:3b:d0:96:00:da:18:59:d6:33:8f:85:2a:
c2:41:2a:91:6d:92:ca:21:af:59:1f:04:28:31:c4:31:6c:56:
78:77:4b:40:1b:17:34:d6:9f:03:55:f6:bd:b0:ed:98:0a:4b:
cf:62:8f:46:1a:42:4d:0c:af:c4:27:d8:3b:ea:e2:7c:e1:0f:
20:b6:db:c9:41:f0:0c:8d:ae:40:ad:24:1f:bc:83:50:39:c8:
e3:9d:05:97:26:80:3e:d2:f7:a3:ea:9a:ff:0b:79:ab:67:cf:
2f:62:07:64:f9:7e:c8:4d:e6:d7:69:90:f5:61:08:16:73:82:
29:91:15:f5:77:cf:27:92:df:83:bc:19:66:92:fe:65:5d:80:
9d:3d:04:a5:c4:db:fc:a8:6b:f5:f2:ac:f6:dd:cc:a5:d7:a0:
32:8f:1c:4f:14:00:82:c6:36:f8:65:49:81:3b:b1:c4:6e:b6:
b6:bf:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:42:16 2026 by rpki-client