This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft File: 3A594744F1BEA2F04C7437AD77133DD4423F2302.mft (raw, json) Hash identifier: 5L02bxty/fn4eta+1HYcPBJja3siVGZuBDY1WByGfSM= Subject key identifier: A5:6E:2E:CC:81:ED:06:89:AD:C1:97:8D:DE:84:D2:65:F4:E8:5F:A0 Authority key identifier: 3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 Certificate issuer: /CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Certificate serial: 23E7B3DE68F73692A26EA9CDD85F10DDD3C48B8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft Manifest number: 01B7 Signing time: Sun 25 Jan 2026 16:02:00 +0000 Manifest this update: Sun 25 Jan 2026 15:57:00 +0000 Manifest next update: Wed 28 Jan 2026 18:45:00 +0000 Files and hashes: 1: 3A594744F1BEA2F04C7437AD77133DD4423F2302.crl (hash: icD9HzhNWskoLFaHIiaYgaMuFYNNmXcLybSd0jEfinY=) 2: 3130332e3134362e3134342e302f32342d3234203d3e20313530313836.roa (hash: znZGLIjUzURgum/jx4W0HoiMuO981vr9z87dACOch+4=) 3: 3130332e3134362e3134352e302f32342d3234203d3e20313530313836.roa (hash: wZ4FpNzX3drEBgShz+olo2TjY92RiWtb59UljgCmsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e7:b3:de:68:f7:36:92:a2:6e:a9:cd:d8:5f:10:dd:d3:c4:8b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A594744F1BEA2F04C7437AD77133DD4423F2302 Validity Not Before: Jan 25 15:57:00 2026 GMT Not After : Jan 28 18:45:00 2026 GMT Subject: CN=A56E2ECC81ED0689ADC1978DDE84D265F4E85FA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:2b:d1:f8:28:88:6f:84:56:59:5e:c1:ad: 3e:9e:bf:29:45:2f:2d:b7:8a:91:e7:c8:2f:5a:88: 37:f7:53:d5:57:d1:7a:94:7d:5f:ae:df:4b:b9:d9: 1a:f0:11:de:4b:f1:87:e3:99:d0:9d:a5:24:04:46: 0c:e8:d4:d3:19:3f:21:ed:b4:ab:40:87:89:57:99: fd:b3:fe:f2:fc:fa:62:7e:2e:42:c2:7b:db:86:aa: ad:8a:d2:1b:01:ea:46:ae:87:3b:d8:74:2e:43:78: dd:76:2a:31:6a:d3:05:44:f6:09:fd:df:f8:85:f4: ff:ed:fa:3d:b6:70:a3:cf:ce:66:55:72:8c:7d:6f: 30:14:15:b8:40:b0:5a:7e:2a:da:bb:86:4d:db:c9: c8:f8:1a:73:f9:49:f2:a7:7a:ae:77:6a:e3:fe:50: ea:07:a9:a7:de:8e:c6:a4:7f:1c:0b:ec:04:a2:45: e2:43:bb:65:30:2f:cd:11:7b:7b:9a:ec:6d:34:71: 1f:a4:13:37:20:8e:f4:7f:83:eb:dc:b0:54:a0:dd: 97:48:35:64:87:1b:8c:68:54:24:39:b3:ef:66:76: 4a:b4:bc:34:1e:e3:bd:dd:f0:aa:b2:81:3a:09:f8: 18:11:e7:a4:a7:0d:1d:55:83:f3:b6:0b:21:87:f5: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6E:2E:CC:81:ED:06:89:AD:C1:97:8D:DE:84:D2:65:F4:E8:5F:A0 X509v3 Authority Key Identifier: keyid:3A:59:47:44:F1:BE:A2:F0:4C:74:37:AD:77:13:3D:D4:42:3F:23:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A594744F1BEA2F04C7437AD77133DD4423F2302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40614163-4ca4-4936-bf8b-84d8c2d1f02d/0/3A594744F1BEA2F04C7437AD77133DD4423F2302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:13:ec:84:63:84:3a:dc:93:ad:6f:d7:5b:35:f2:c5:5c:15: c9:f6:b8:32:40:82:ca:12:d2:7b:c5:bc:75:8a:bb:0c:c7:5c: d3:e0:aa:40:27:56:7e:aa:d5:2b:85:de:8d:89:73:14:92:6d: d4:8c:bf:3b:37:3b:40:f4:d3:11:df:96:eb:c6:4b:5e:9e:3f: 96:97:e2:36:70:41:c8:12:da:91:3d:e5:ec:02:a5:62:1c:9f: c5:56:40:27:db:4e:bc:b2:bd:a5:8c:37:d2:0d:64:61:21:91: 87:d2:b1:ed:74:3e:7f:e1:03:5f:06:fc:b2:3d:8f:4d:55:42: c1:9d:a4:f5:f1:3e:bd:7d:ce:1e:99:27:1b:fe:29:03:f5:2f: 1a:34:0b:1d:d7:1c:d0:01:5c:71:2f:71:0a:c4:7a:6f:ac:4b: 3f:65:87:f7:e1:12:53:a2:af:fc:1f:f7:ad:f4:8a:90:99:bf: 0b:4e:18:b8:8f:30:8e:e0:34:b2:4e:08:27:1d:5a:13:1a:93: 08:27:2b:1e:03:d9:e2:63:e0:e7:24:45:07:6a:15:a6:74:9f: 3b:40:23:23:e5:74:0e:b9:07:90:49:eb:75:26:bb:70:c1:1e: 35:b8:72:c6:85:5c:29:0c:b6:e4:2c:ab:1e:89:c5:a3:49:bf: 7c:53:a5:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+ez3mj3NpKibqnN2F8Q3dPEi4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0 MjNGMjMwMjAeFw0yNjAxMjUxNTU3MDBaFw0yNjAxMjgxODQ1MDBaMDMxMTAvBgNV BAMTKEE1NkUyRUNDODFFRDA2ODlBREMxOTc4RERFODREMjY1RjRFODVGQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVfCvR+CiIb4RWWV7BrT6evylF Ly23ipHnyC9aiDf3U9VX0XqUfV+u30u52RrwEd5L8YfjmdCdpSQERgzo1NMZPyHt tKtAh4lXmf2z/vL8+mJ+LkLCe9uGqq2K0hsB6kauhzvYdC5DeN12KjFq0wVE9gn9 3/iF9P/t+j22cKPPzmZVcox9bzAUFbhAsFp+Ktq7hk3bycj4GnP5SfKneq53auP+ UOoHqafejsakfxwL7ASiReJDu2UwL80Re3ua7G00cR+kEzcgjvR/g+vcsFSg3ZdI NWSHG4xoVCQ5s+9mdkq0vDQe473d8KqygToJ+BgR56SnDR1Vg/O2CyGH9a3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpW4uzIHtBomtwZeN3oTSZfToX6AwHwYDVR0j BBgwFoAUOllHRPG+ovBMdDetdxM91EI/IwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDYxNDE2My00Y2E0LTQ5MzYtYmY4Yi04NGQ4YzJkMWYwMmQvMC8zQTU5NDc0NEYx QkVBMkYwNEM3NDM3QUQ3NzEzM0RENDQyM0YyMzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNERDQ0MjNG MjMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA2MTQxNjMtNGNhNC00OTM2LWJm OGItODRkOGMyZDFmMDJkLzAvM0E1OTQ3NDRGMUJFQTJGMDRDNzQzN0FENzcxMzNE RDQ0MjNGMjMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQT7IRjhDrck61v11s18sVcFcn2uDJAgsoS 0nvFvHWKuwzHXNPgqkAnVn6q1SuF3o2JcxSSbdSMvzs3O0D00xHfluvGS16eP5aX 4jZwQcgS2pE95ewCpWIcn8VWQCfbTryyvaWMN9INZGEhkYfSse10Pn/hA18G/LI9 j01VQsGdpPXxPr19zh6ZJxv+KQP1Lxo0Cx3XHNABXHEvcQrEem+sSz9lh/fhElOi r/wf9630ipCZvwtOGLiPMI7gNLJOCCcdWhMakwgnKx4D2eJj4OckRQdqFaZ0nztA IyPldA65B5BJ63Umu3DBHjW4csaFXCkMtuQsqx6JxaNJv3xTpV0= -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:46 2026 by rpki-client