This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: DvscuVPqG8AsOqVMxVF1yB+rlxgWuBgQZBgZ+jw4Hvw= Subject key identifier: CF:7E:E8:78:10:50:FF:AD:C3:E3:F9:8B:E1:04:46:68:99:0E:F2:85 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 5B6CD0443D0BBE597DCBE8E51CA067CCECDFDEEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0273 Signing time: Sun 25 Jan 2026 07:31:57 +0000 Manifest this update: Sun 25 Jan 2026 07:26:57 +0000 Manifest next update: Wed 28 Jan 2026 17:41:57 +0000 Files and hashes: 1: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: kYEwndHqgi2mYa390kFo57NCkO9UunyaWsmFo+yYsa4=) 2: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 3: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:6c:d0:44:3d:0b:be:59:7d:cb:e8:e5:1c:a0:67:cc:ec:df:de:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Jan 25 07:26:57 2026 GMT Not After : Jan 28 17:41:57 2026 GMT Subject: CN=CF7EE8781050FFADC3E3F98BE1044668990EF285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:66:75:b4:ac:b9:32:b4:7b:b5:14:ac:7b: 8d:7c:18:65:7e:85:06:58:db:73:0d:8b:73:df:73: 5d:c1:38:67:e5:58:53:f8:5c:85:1f:7b:45:dc:11: 6d:78:97:8c:06:6e:69:be:5d:72:f6:9d:9d:6d:11: a0:bd:56:9e:47:5c:c9:4e:9c:0f:52:08:23:a7:c4: e4:54:99:9a:93:1c:10:b2:2f:1b:a7:2c:94:86:29: b9:ac:e3:bf:10:f3:72:51:cd:63:fe:b1:6f:35:3f: d7:8c:ca:cb:15:30:f0:cc:2f:48:d4:90:65:31:bb: 99:0f:53:78:af:44:ba:7c:0c:f6:a8:65:cb:b6:fd: 0b:d4:ea:a8:d7:cd:e3:da:d6:27:fa:d1:b7:44:40: bb:35:ed:f4:8d:e4:44:34:74:7d:ff:0f:05:0f:9d: 89:d1:13:d2:84:40:97:65:de:07:b9:94:9c:d1:76: 25:3d:f5:be:50:98:55:b2:c3:f3:bf:73:80:d7:34: e5:31:df:5b:08:af:dd:10:5c:5f:f4:39:84:8b:0f: e1:53:1b:be:da:b5:68:25:5c:08:69:1c:7b:81:c6: 52:87:10:50:de:87:b0:b9:a7:0b:91:fb:20:e9:65: 3b:f8:0f:3d:35:54:d4:c5:66:7d:04:a8:ee:78:6d: 46:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:E8:78:10:50:FF:AD:C3:E3:F9:8B:E1:04:46:68:99:0E:F2:85 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b6:79:48:87:09:de:e4:f0:e5:a9:ca:f0:84:94:59:75:9c: 48:f0:ec:02:cd:17:e3:e2:3a:4b:80:54:6c:a4:ed:a6:87:b5: 24:26:a5:b4:6c:c6:0d:76:db:cc:b5:39:0a:d2:9c:39:c1:d6: 0a:0e:9e:63:a4:03:ab:af:0f:41:9e:45:b6:71:58:46:12:0f: 1f:b2:eb:74:42:00:a2:50:29:b0:ef:78:e9:49:60:2b:dc:74: 5b:fe:79:aa:ce:c2:37:5e:6f:5c:1d:49:3f:ec:00:c3:19:74: 00:1b:81:9c:45:41:00:12:59:cb:27:70:07:8a:56:f6:b0:50: c5:02:07:c1:b9:f6:1b:93:99:51:1f:a3:66:16:5d:f5:cc:ad: f5:2c:dd:c2:44:47:4a:0a:28:70:9c:b9:19:ff:4b:91:ab:04: b9:31:d8:3f:98:c9:7d:58:06:cf:32:14:ff:b6:9a:d8:1d:3b: 6b:fb:11:8c:ba:a3:f9:71:e4:6d:2d:8b:fd:fc:50:02:47:8c: 9a:e9:fe:92:f8:2b:cb:75:a7:80:71:92:fc:96:05:6f:1c:d3: a5:44:02:5e:40:5a:52:ff:58:8a:6b:ed:4b:89:61:11:a9:d7: 56:df:e5:ea:49:bd:b6:8f:ef:69:fc:33:23:7c:9a:14:48:4a: 66:e2:79:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW2zQRD0Lvll9y+jlHKBnzOzf3uowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNjAxMjUwNzI2NTdaFw0yNjAxMjgxNzQxNTdaMDMxMTAvBgNV BAMTKENGN0VFODc4MTA1MEZGQURDM0UzRjk4QkUxMDQ0NjY4OTkwRUYyODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dWZ1tKy5MrR7tRSse418GGV+ hQZY23MNi3Pfc13BOGflWFP4XIUfe0XcEW14l4wGbmm+XXL2nZ1tEaC9Vp5HXMlO nA9SCCOnxORUmZqTHBCyLxunLJSGKbms478Q83JRzWP+sW81P9eMyssVMPDML0jU kGUxu5kPU3ivRLp8DPaoZcu2/QvU6qjXzePa1if60bdEQLs17fSN5EQ0dH3/DwUP nYnRE9KEQJdl3ge5lJzRdiU99b5QmFWyw/O/c4DXNOUx31sIr90QXF/0OYSLD+FT G77atWglXAhpHHuBxlKHEFDeh7C5pwuR+yDpZTv4Dz01VNTFZn0EqO54bUaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz37oeBBQ/63D4/mL4QRGaJkO8oUwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA62eUiHCd7k8OWpyvCElFl1nEjw7ALNF+Pi OkuAVGyk7aaHtSQmpbRsxg1228y1OQrSnDnB1goOnmOkA6uvD0GeRbZxWEYSDx+y 63RCAKJQKbDveOlJYCvcdFv+earOwjdeb1wdST/sAMMZdAAbgZxFQQASWcsncAeK VvawUMUCB8G59huTmVEfo2YWXfXMrfUs3cJER0oKKHCcuRn/S5GrBLkx2D+YyX1Y Bs8yFP+2mtgdO2v7EYy6o/lx5G0ti/38UAJHjJrp/pL4K8t1p4BxkvyWBW8c06VE Al5AWlL/WIpr7UuJYRGp11bf5epJvbaP72n8MyN8mhRISmbiefs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:40:41 2026 by rpki-client