This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: m3zfy7OF7WHgijXycXZ2//m2+1VDM/6myCvGllYl45U= Subject key identifier: 67:E7:B5:3C:08:5D:29:9E:B1:7A:EE:67:D4:31:1B:F7:45:CF:93:D7 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 7CFCA3F3422C5A840D7395DC023408BA9BA1649F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 0103 Signing time: Sun 25 Jan 2026 17:32:25 +0000 Manifest this update: Sun 25 Jan 2026 17:27:25 +0000 Manifest next update: Thu 29 Jan 2026 01:16:25 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: zrhZ9kGuCB6w+Pg2bMyvYfKFpklnoUEkiUc+x72AutM=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fc:a3:f3:42:2c:5a:84:0d:73:95:dc:02:34:08:ba:9b:a1:64:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jan 25 17:27:25 2026 GMT Not After : Jan 29 01:16:25 2026 GMT Subject: CN=67E7B53C085D299EB17AEE67D4311BF745CF93D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:fa:43:e7:3a:6f:f3:f1:a9:5e:73:df:80: af:86:26:74:9a:5e:f0:73:f4:22:45:4e:7a:d5:63: 69:4f:83:1a:6f:4a:98:46:ee:00:8a:7a:38:68:f8: bc:97:b2:5e:b3:5c:ca:95:63:33:51:1c:48:24:ff: 4c:18:f2:9a:a3:29:0e:2e:d2:74:7d:60:01:9d:af: cb:f5:e7:14:86:3e:78:5a:91:36:2b:64:59:64:f3: 71:e7:28:f2:6a:a0:21:78:ec:15:ad:65:38:8e:31: 8d:7d:81:f7:5f:25:9c:42:62:30:68:ca:18:87:25: 27:47:ab:c6:28:cd:7e:70:fd:7d:5c:60:db:89:34: ce:60:48:a0:f8:e8:98:8d:8e:98:98:ed:f1:a8:44: 42:08:cf:4b:d0:20:5c:4b:91:d5:fa:55:a0:97:3e: c0:a8:fe:d9:8f:fc:86:cb:62:81:68:7b:a3:30:d9: b0:de:db:4d:dc:64:f5:e8:37:97:db:b8:d3:41:1c: 35:69:1e:de:ca:84:a6:4f:1f:ce:f3:11:be:b5:09: 57:06:de:cf:c5:8e:7d:7f:b5:8c:9d:67:67:fa:0d: 18:0c:90:ed:80:fc:fd:af:04:5b:d2:ea:fd:ee:83: 14:f4:10:64:ef:a0:16:53:0c:42:65:5e:53:5f:7f: 30:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E7:B5:3C:08:5D:29:9E:B1:7A:EE:67:D4:31:1B:F7:45:CF:93:D7 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:af:82:fd:fe:7b:71:4d:6e:c2:67:eb:f1:b3:e5:e0:ca:9d: ad:bb:5e:3b:3f:a3:17:02:29:79:e7:b5:19:6b:fa:68:6d:60: b3:ea:09:5b:22:0e:4c:94:ca:d2:1f:94:bf:a8:6c:03:16:e9: b5:48:3f:cb:be:0f:5e:56:83:53:cc:84:97:f1:ea:96:5c:d0: 56:6f:82:66:c8:15:83:b4:3c:a4:92:02:54:76:4e:d4:6a:0a: 57:94:af:03:07:8d:35:c6:b7:c1:35:2f:24:0a:81:7e:70:67: fd:10:0a:16:ca:50:95:43:82:84:01:f6:ae:24:8d:46:2b:07: 2e:10:bd:8c:15:87:92:0b:1f:70:2e:b5:39:8a:58:23:93:7b: 9f:44:fd:85:42:22:ac:00:71:2d:05:20:04:38:c9:89:28:67: 91:9a:9f:43:65:19:6a:6b:f1:24:41:81:92:8d:42:b9:77:a3: 7a:bc:82:6a:9d:27:23:6e:57:37:7d:14:bd:d1:bb:3b:12:48: fc:0f:a2:3e:06:b3:b3:20:2c:e8:b5:8b:fb:f5:52:96:1a:45: a7:94:79:bd:5e:e2:e6:74:78:ac:a2:45:9c:36:1b:49:45:ed: 27:cb:e0:52:c7:b7:24:44:6c:ce:25:8a:3e:48:e0:b0:da:a0: 2d:42:d3:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPyj80IsWoQNc5XcAjQIupuhZJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjAxMjUxNzI3MjVaFw0yNjAxMjkwMTE2MjVaMDMxMTAvBgNV BAMTKDY3RTdCNTNDMDg1RDI5OUVCMTdBRUU2N0Q0MzExQkY3NDVDRjkzRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQPpD5zpv8/GpXnPfgK+GJnSa XvBz9CJFTnrVY2lPgxpvSphG7gCKejho+LyXsl6zXMqVYzNRHEgk/0wY8pqjKQ4u 0nR9YAGdr8v15xSGPnhakTYrZFlk83HnKPJqoCF47BWtZTiOMY19gfdfJZxCYjBo yhiHJSdHq8YozX5w/X1cYNuJNM5gSKD46JiNjpiY7fGoREIIz0vQIFxLkdX6VaCX PsCo/tmP/IbLYoFoe6Mw2bDe203cZPXoN5fbuNNBHDVpHt7KhKZPH87zEb61CVcG 3s/Fjn1/tYydZ2f6DRgMkO2A/P2vBFvS6v3ugxT0EGTvoBZTDEJlXlNffzCZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ+e1PAhdKZ6xeu5n1DEb90XPk9cwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2vgv3+e3FNbsJn6/Gz5eDKna27Xjs/oxcC KXnntRlr+mhtYLPqCVsiDkyUytIflL+obAMW6bVIP8u+D15Wg1PMhJfx6pZc0FZv gmbIFYO0PKSSAlR2TtRqCleUrwMHjTXGt8E1LyQKgX5wZ/0QChbKUJVDgoQB9q4k jUYrBy4QvYwVh5ILH3AutTmKWCOTe59E/YVCIqwAcS0FIAQ4yYkoZ5Gan0NlGWpr 8SRBgZKNQrl3o3q8gmqdJyNuVzd9FL3RuzsSSPwPoj4Gs7MgLOi1i/v1UpYaRaeU eb1e4uZ0eKyiRZw2G0lF7SfL4FLHtyREbM4lij5I4LDaoC1C03s= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:14 2026 by rpki-client