This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: +BR/YKq/glhPlgA6xC9qm0gwOidXfZilEnlTJ8vEc/M= Subject key identifier: 43:83:C3:1D:FC:39:7F:E4:BE:F1:0D:E3:BF:F8:5B:DB:03:8E:E9:A8 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 6D3D1EF19BE575E656B23B96B8932FE7AD8E25FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0390 Signing time: Sat 24 Jan 2026 14:12:22 +0000 Manifest this update: Sat 24 Jan 2026 14:07:22 +0000 Manifest next update: Wed 28 Jan 2026 01:53:22 +0000 Files and hashes: 1: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: 9rAo0YRNTUf3m23oC6wnmQBlznm+e5OAUeU8uKgNvns=) 2: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3d:1e:f1:9b:e5:75:e6:56:b2:3b:96:b8:93:2f:e7:ad:8e:25:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Jan 24 14:07:22 2026 GMT Not After : Jan 28 01:53:22 2026 GMT Subject: CN=4383C31DFC397FE4BEF10DE3BFF85BDB038EE9A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:84:94:5c:a1:b4:72:50:85:1e:60:55:a0: 79:5c:66:b4:42:32:19:cf:2d:9b:80:55:94:a6:b5: 2b:2b:b2:4f:ba:8f:bc:31:09:84:41:63:42:97:06: 12:6c:c2:e3:99:b5:fd:cc:32:4f:53:e1:66:f5:ea: d0:45:ff:c1:91:5b:14:6d:9f:6e:7e:5b:37:5c:04: 53:14:c6:3b:53:0e:88:dd:e9:46:3c:53:29:52:63: d7:15:4b:6f:64:be:8b:35:d5:a1:cd:fa:3e:31:f8: c4:cf:af:94:b3:05:51:bf:f4:34:04:b0:72:3a:fb: 0f:c3:b4:91:47:a8:19:a3:a7:8f:cf:7d:07:66:6a: 1b:b2:35:63:73:23:28:91:4b:a8:87:f7:f6:b6:5f: d3:6f:03:78:10:3e:36:26:f4:76:03:2f:91:41:11: fd:aa:bd:b3:a2:9f:87:ed:ae:ed:09:50:8a:82:0e: 7a:e3:ca:ef:80:61:f2:7a:66:6f:ec:9b:f2:c9:fe: 31:06:16:5d:b9:47:00:ec:33:db:f4:21:af:96:1d: df:2a:9e:eb:0a:aa:13:d5:42:66:18:c7:f1:0a:8a: b9:11:cd:df:3e:ef:00:32:5f:04:3a:9a:b4:02:8c: ae:7e:39:be:a3:f3:0a:d7:65:47:c0:c7:d3:0c:5b: e1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:83:C3:1D:FC:39:7F:E4:BE:F1:0D:E3:BF:F8:5B:DB:03:8E:E9:A8 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:33:5f:ff:d4:ce:24:1e:84:90:30:f2:13:7a:b3:40:96:94: 2c:fb:a7:11:7f:18:40:f8:9e:73:df:23:62:5f:e3:b8:41:5e: 91:f4:71:9c:77:b2:a6:92:8d:c5:5d:f6:9e:12:59:b4:4d:4c: 3b:b6:d0:83:3e:65:8d:ea:20:87:78:ae:66:e5:9e:5b:16:c2: a9:be:de:2b:d5:81:05:2e:18:dd:d2:fc:f2:14:f0:e9:20:d1: 58:7d:01:12:0b:c6:91:dc:30:91:8c:d9:e9:34:07:13:c8:18: 5b:9e:6e:4b:b1:ba:82:a1:51:48:6e:2a:d9:fb:6f:6d:1d:4e: ae:4d:ef:c5:36:b2:7b:69:19:b3:e6:55:2d:b9:2f:ff:db:be: e7:59:2e:04:33:e0:b4:78:5c:3c:fe:f7:12:c5:00:49:38:07: 3f:b4:20:7f:46:e1:60:a3:1b:02:dd:26:30:83:3f:e6:13:53: ac:5d:f3:87:51:50:9a:7a:c8:ed:b9:9a:39:4c:03:59:5b:32: 24:78:6d:93:dd:3b:b2:67:66:44:e6:86:f6:30:8c:64:11:7c: 71:0e:ae:df:63:8d:af:08:01:14:cc:38:dc:c0:35:7f:e4:d3: 5a:22:3e:43:9b:8e:56:af:30:3d:11:c5:26:6f:4c:e1:45:87: d3:0d:67:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbT0e8ZvldeZWsjuWuJMv562OJfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNjAxMjQxNDA3MjJaFw0yNjAxMjgwMTUzMjJaMDMxMTAvBgNV BAMTKDQzODNDMzFERkMzOTdGRTRCRUYxMERFM0JGRjg1QkRCMDM4RUU5QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtISUXKG0clCFHmBVoHlcZrRC MhnPLZuAVZSmtSsrsk+6j7wxCYRBY0KXBhJswuOZtf3MMk9T4Wb16tBF/8GRWxRt n25+WzdcBFMUxjtTDojd6UY8UylSY9cVS29kvos11aHN+j4x+MTPr5SzBVG/9DQE sHI6+w/DtJFHqBmjp4/PfQdmahuyNWNzIyiRS6iH9/a2X9NvA3gQPjYm9HYDL5FB Ef2qvbOin4ftru0JUIqCDnrjyu+AYfJ6Zm/sm/LJ/jEGFl25RwDsM9v0Ia+WHd8q nusKqhPVQmYYx/EKirkRzd8+7wAyXwQ6mrQCjK5+Ob6j8wrXZUfAx9MMW+FbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ4PDHfw5f+S+8Q3jv/hb2wOO6agwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgzX//UziQehJAw8hN6s0CWlCz7pxF/GED4 nnPfI2Jf47hBXpH0cZx3sqaSjcVd9p4SWbRNTDu20IM+ZY3qIId4rmblnlsWwqm+ 3ivVgQUuGN3S/PIU8Okg0Vh9ARILxpHcMJGM2ek0BxPIGFuebkuxuoKhUUhuKtn7 b20dTq5N78U2sntpGbPmVS25L//bvudZLgQz4LR4XDz+9xLFAEk4Bz+0IH9G4WCj GwLdJjCDP+YTU6xd84dRUJp6yO25mjlMA1lbMiR4bZPdO7JnZkTmhvYwjGQRfHEO rt9jja8IARTMONzANX/k01oiPkObjlavMD0RxSZvTOFFh9MNZyo= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:48 2026 by rpki-client