This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: kVqLwMNrMxxwkdX8mleJu5ZT1fDW6YJUvtsAy83SI08= Subject key identifier: 31:9D:34:B0:1E:4F:12:25:71:65:C4:6A:CC:B8:70:A8:54:5A:D4:3D Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 77AF655A5FFAD8525A4628AC7869858C20260008 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 011A Signing time: Sun 25 Jan 2026 13:30:48 +0000 Manifest this update: Sun 25 Jan 2026 13:25:48 +0000 Manifest next update: Wed 28 Jan 2026 21:50:48 +0000 Files and hashes: 1: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 2: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 3: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: ekorSKCBC2EOfKOmXtR8VW010Dv9MT7QCzVSS9j24YY=) 4: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) 5: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 6: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:af:65:5a:5f:fa:d8:52:5a:46:28:ac:78:69:85:8c:20:26:00:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Jan 25 13:25:48 2026 GMT Not After : Jan 28 21:50:48 2026 GMT Subject: CN=319D34B01E4F12257165C46ACCB870A8545AD43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:82:3f:f4:38:5c:c8:4a:01:2d:4e:1a:47:18: a2:de:f0:95:68:82:c9:89:7a:5a:b9:d0:bd:9b:98: de:b7:83:bf:f9:9a:d3:e2:ab:5c:f1:2e:55:e6:85: a3:eb:80:c0:51:19:ce:8c:ab:d4:b7:12:d0:0e:8a: e0:41:04:67:03:e9:7b:44:95:9b:4a:27:7a:6e:a8: 53:cd:ef:5a:c8:a1:af:73:4c:8e:17:ca:31:27:de: 64:98:ec:01:83:d9:38:18:dc:e2:10:1b:d2:ec:97: db:66:fb:f3:f9:a4:ea:96:35:ac:60:96:92:1f:71: b0:57:36:a0:7e:ee:75:bc:b1:26:56:3e:11:32:3c: bc:5d:e5:33:a0:0a:2b:70:82:21:23:0c:d9:08:a3: 63:35:c1:92:4f:9e:46:5d:8e:f2:ba:85:08:f6:1b: 05:4d:c2:cc:e9:65:2e:2b:c9:3c:a0:ba:7e:9d:ad: 75:5c:ad:15:9e:1c:92:32:b8:3c:2b:81:92:82:ae: a1:b6:25:f2:e4:c6:48:b2:f5:f3:ee:59:41:c0:09: 65:73:21:5c:11:52:85:f3:a9:2f:48:f9:78:7e:03: a7:52:76:b1:e9:94:b4:e1:e4:2a:5a:c3:f0:e6:9e: e3:44:69:ae:1b:0e:27:d9:a3:00:cf:d7:12:2a:8d: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9D:34:B0:1E:4F:12:25:71:65:C4:6A:CC:B8:70:A8:54:5A:D4:3D X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f9:20:bc:ac:e2:b7:75:84:bc:79:9f:9d:c8:30:4a:12:50: 81:35:43:44:c6:3e:d2:61:3d:9a:7a:6d:b1:09:53:55:dd:77: 18:08:5b:9f:1c:5b:44:55:8a:88:dd:22:93:01:90:49:b6:1f: cc:fb:2c:f2:bd:92:e3:d3:fe:f6:1f:28:8b:a8:0c:cf:e9:7f: 79:ed:ac:c6:10:e3:86:59:da:f6:ea:3d:cf:f7:75:f6:e5:6b: 31:0d:d7:0a:c3:cb:d5:d5:4c:0d:77:9f:f8:63:dc:7d:95:84: 81:04:71:ba:3d:a2:0d:0b:a9:76:9d:61:83:f4:35:0e:4b:7f: d4:d7:42:25:41:bf:06:45:d0:b9:35:0b:07:23:34:01:02:28: f3:a3:ea:a6:5c:8b:b9:ab:b3:bf:ee:76:d3:65:52:7b:26:1d: 29:67:39:2d:41:7f:a1:04:77:37:ea:fc:61:0e:e1:06:00:2d: ac:6c:50:2d:d3:d0:8f:ef:02:fb:b2:4a:40:b9:08:b3:f3:67: aa:4d:b5:97:ac:aa:63:f5:a4:94:a0:06:b9:4d:04:eb:29:3a: d1:54:d7:dc:35:4b:39:3c:c2:3c:5e:c1:c7:ce:57:8c:10:d3: eb:8b:36:66:c0:19:41:69:6c:7b:11:01:fb:32:56:56:11:97: c9:c9:32:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd69lWl/62FJaRiiseGmFjCAmAAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjAxMjUxMzI1NDhaFw0yNjAxMjgyMTUwNDhaMDMxMTAvBgNV BAMTKDMxOUQzNEIwMUU0RjEyMjU3MTY1QzQ2QUNDQjg3MEE4NTQ1QUQ0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCigj/0OFzISgEtThpHGKLe8JVo gsmJelq50L2bmN63g7/5mtPiq1zxLlXmhaPrgMBRGc6Mq9S3EtAOiuBBBGcD6XtE lZtKJ3puqFPN71rIoa9zTI4XyjEn3mSY7AGD2TgY3OIQG9Lsl9tm+/P5pOqWNaxg lpIfcbBXNqB+7nW8sSZWPhEyPLxd5TOgCitwgiEjDNkIo2M1wZJPnkZdjvK6hQj2 GwVNwszpZS4ryTygun6drXVcrRWeHJIyuDwrgZKCrqG2JfLkxkiy9fPuWUHACWVz IVwRUoXzqS9I+Xh+A6dSdrHplLTh5Cpaw/DmnuNEaa4bDifZowDP1xIqjfT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZ00sB5PEiVxZcRqzLhwqFRa1D0wHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG35ILys4rd1hLx5n53IMEoSUIE1Q0TGPtJh PZp6bbEJU1XddxgIW58cW0RViojdIpMBkEm2H8z7LPK9kuPT/vYfKIuoDM/pf3nt rMYQ44ZZ2vbqPc/3dfblazEN1wrDy9XVTA13n/hj3H2VhIEEcbo9og0LqXadYYP0 NQ5Lf9TXQiVBvwZF0Lk1CwcjNAECKPOj6qZci7mrs7/udtNlUnsmHSlnOS1Bf6EE dzfq/GEO4QYALaxsUC3T0I/vAvuySkC5CLPzZ6pNtZesqmP1pJSgBrlNBOspOtFU 19w1Szk8wjxewcfOV4wQ0+uLNmbAGUFpbHsRAfsyVlYRl8nJMk4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:18 2026 by rpki-client