This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft File: 3CA825E93FE8830376EF386786BF847CB239BE70.mft (raw, json) Hash identifier: 4qaYPBR5gxfk8XUzxuhq4Fd0sJL8BnCi7BzUpDKsnHc= Subject key identifier: 27:64:44:F1:59:E7:E5:53:5F:2B:83:4D:C6:AF:03:8F:6A:92:EE:6C Authority key identifier: 3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 Certificate issuer: /CN=3CA825E93FE8830376EF386786BF847CB239BE70 Certificate serial: 30CF9F5FCBC7E3A6EA6CDE44467B8C93DBF85048 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft Manifest number: 0542 Signing time: Sat 24 Jan 2026 12:31:50 +0000 Manifest this update: Sat 24 Jan 2026 12:26:50 +0000 Manifest next update: Tue 27 Jan 2026 18:29:50 +0000 Files and hashes: 1: 3131392e38322e3232342e302f32302d3234203d3e203234323133.roa (hash: rMCMSl1s+WWM7uToBUHib02Gf8GW78oaPsE3tZQeKpc=) 2: 3130332e38332e39322e302f32322d3234203d3e20313331313131.roa (hash: 7BaUBkYi576UVLsHbTQQnc27jnKH4uxS8EK0pK4qmYo=) 3: 3CA825E93FE8830376EF386786BF847CB239BE70.crl (hash: 5qUcRx0fj9ob0Opr8TznSC27qGtoEWRpUugyAqQbhyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 18:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cf:9f:5f:cb:c7:e3:a6:ea:6c:de:44:46:7b:8c:93:db:f8:50:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CA825E93FE8830376EF386786BF847CB239BE70 Validity Not Before: Jan 24 12:26:50 2026 GMT Not After : Jan 27 18:29:50 2026 GMT Subject: CN=276444F159E7E5535F2B834DC6AF038F6A92EE6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b8:00:05:bb:fa:07:3b:c1:ef:31:0e:e0:dd: 91:b5:c6:df:14:d5:db:b0:6d:e1:76:b9:4b:82:b6: e3:af:62:8d:aa:ca:61:50:19:c7:af:05:b2:17:11: 7c:57:8f:aa:5f:84:de:32:a3:09:25:ce:f7:b3:3c: 6a:c9:f6:60:16:ed:43:18:67:5f:51:1e:39:6c:89: bd:1b:45:bc:a4:df:4c:36:2b:4b:e2:2a:3e:fd:90: 55:b7:a8:f1:71:ca:2f:6a:bd:ed:46:3f:e0:8b:f7: ad:85:26:24:00:c9:c0:8b:20:d6:9a:ba:ae:2a:08: 99:68:75:5a:d2:57:57:34:89:49:43:64:e5:61:6a: 3e:b7:43:1d:a7:28:67:40:1e:77:94:2e:5f:ea:3a: 57:fd:41:12:44:0b:75:39:76:1b:35:d4:d7:a0:ae: 6b:39:6b:cf:cc:9f:b0:fc:ab:32:24:c1:77:b2:e5: ac:d2:cd:86:9c:af:89:35:06:ed:56:ba:21:9a:f7: 06:bf:56:28:98:95:8f:1a:a9:3a:6c:a2:0d:a4:08: 98:77:f3:32:05:c1:5b:a6:f8:20:77:af:64:64:6b: a1:17:af:fc:c4:d1:d1:3c:d7:06:92:77:b1:21:20: ee:32:cd:4b:7a:7b:0d:5f:08:37:54:a5:2c:4d:42: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:44:F1:59:E7:E5:53:5F:2B:83:4D:C6:AF:03:8F:6A:92:EE:6C X509v3 Authority Key Identifier: keyid:3C:A8:25:E9:3F:E8:83:03:76:EF:38:67:86:BF:84:7C:B2:39:BE:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CA825E93FE8830376EF386786BF847CB239BE70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08b8c1b5-3be8-4aa7-a4c6-21bcc8f3fa40/0/3CA825E93FE8830376EF386786BF847CB239BE70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:89:65:0a:bf:44:bc:b0:58:e4:dc:d6:a7:3e:47:a7:38:bf: 6a:8e:4a:84:de:b5:f4:00:88:fb:1c:54:86:4a:1d:18:05:2d: cf:f1:02:57:46:76:1f:4d:8f:87:a7:f6:14:1f:d3:f2:c9:37: 13:fe:56:9a:a6:7b:37:b1:09:c1:ed:fa:ae:b1:9d:51:b2:0b: a0:6d:74:aa:99:d8:03:86:c2:cb:44:5f:73:a5:20:24:c2:29: b7:6d:89:46:58:1c:e5:ed:e3:72:e7:4e:ae:f2:9f:cf:9c:c7: f0:51:62:f8:67:f1:03:14:c4:86:da:7f:98:66:11:99:1f:28: e8:28:9e:4f:67:fd:39:c5:fe:a2:3b:17:6f:8c:29:8e:d8:d4: e9:38:db:a9:fc:f2:2c:9c:e4:03:45:25:35:87:85:b8:3d:4b: d8:50:c6:72:74:b1:b5:54:c0:2c:db:0b:95:b8:e0:3b:23:49: 75:e1:e1:73:e1:df:9c:0c:a2:29:b0:4f:79:07:0e:b0:97:cc: b6:e4:95:30:a7:50:56:8f:f3:27:e9:ad:f0:a0:c4:ce:86:dd: 83:6d:aa:56:4e:0c:f5:de:2a:7e:89:7b:3a:16:2b:1f:f1:0f: f2:92:c5:c9:19:3f:51:f9:c7:79:7d:01:0d:71:8f:48:65:65: fd:f9:47:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMM+fX8vH46bqbN5ERnuMk9v4UEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NC MjM5QkU3MDAeFw0yNjAxMjQxMjI2NTBaFw0yNjAxMjcxODI5NTBaMDMxMTAvBgNV BAMTKDI3NjQ0NEYxNTlFN0U1NTM1RjJCODM0REM2QUYwMzhGNkE5MkVFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLuAAFu/oHO8HvMQ7g3ZG1xt8U 1duwbeF2uUuCtuOvYo2qymFQGcevBbIXEXxXj6pfhN4yowklzvezPGrJ9mAW7UMY Z19RHjlsib0bRbyk30w2K0viKj79kFW3qPFxyi9qve1GP+CL962FJiQAycCLINaa uq4qCJlodVrSV1c0iUlDZOVhaj63Qx2nKGdAHneULl/qOlf9QRJEC3U5dhs11Neg rms5a8/Mn7D8qzIkwXey5azSzYacr4k1Bu1WuiGa9wa/ViiYlY8aqTpsog2kCJh3 8zIFwVum+CB3r2Rka6EXr/zE0dE81waSd7EhIO4yzUt6ew1fCDdUpSxNQnHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2RE8Vnn5VNfK4NNxq8Dj2qS7mwwHwYDVR0j BBgwFoAUPKgl6T/ogwN27zhnhr+EfLI5vnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OGI4YzFiNS0zYmU4LTRhYTctYTRjNi0yMWJjYzhmM2ZhNDAvMC8zQ0E4MjVFOTNG RTg4MzAzNzZFRjM4Njc4NkJGODQ3Q0IyMzlCRTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0N0NCMjM5 QkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDhiOGMxYjUtM2JlOC00YWE3LWE0 YzYtMjFiY2M4ZjNmYTQwLzAvM0NBODI1RTkzRkU4ODMwMzc2RUYzODY3ODZCRjg0 N0NCMjM5QkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeJZQq/RLywWOTc1qc+R6c4v2qOSoTetfQA iPscVIZKHRgFLc/xAldGdh9Nj4en9hQf0/LJNxP+VpqmezexCcHt+q6xnVGyC6Bt dKqZ2AOGwstEX3OlICTCKbdtiUZYHOXt43LnTq7yn8+cx/BRYvhn8QMUxIbaf5hm EZkfKOgonk9n/TnF/qI7F2+MKY7Y1Ok426n88iyc5ANFJTWHhbg9S9hQxnJ0sbVU wCzbC5W44DsjSXXh4XPh35wMoimwT3kHDrCXzLbklTCnUFaP8yfprfCgxM6G3YNt qlZODPXeKn6JezoWKx/xD/KSxckZP1H5x3l9AQ1xj0hlZf35R68= -----END CERTIFICATE-----Generated at Sun Jan 25 20:39:17 2026 by rpki-client