This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft File: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft (raw, json) Hash identifier: ZUfs2l6DgIVTviBFmFiJ2BwJnYYTsUMv6XYuMuduj3w= Subject key identifier: 80:92:E7:42:87:DF:A1:6E:D7:31:A3:51:A0:29:1E:9A:53:DF:A9:16 Authority key identifier: 3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 Certificate issuer: /CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Certificate serial: 5C5A53D54D977CCC090C413B0BD4211BC61E64F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft Manifest number: 0516 Signing time: Sun 25 Jan 2026 11:30:51 +0000 Manifest this update: Sun 25 Jan 2026 11:25:51 +0000 Manifest next update: Wed 28 Jan 2026 11:42:51 +0000 Files and hashes: 1: 3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl (hash: z1zmsjEZwbNGqAG1M/g0W9KwhCru3pN4bUfV2Fl78z4=) 2: 3130332e3233362e3138382e302f32322d3234203d3e203633383738.roa (hash: IK+u+i97z9eMvyQxyRqv23SPg6t3j5oWeOL0K/ItAE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5a:53:d5:4d:97:7c:cc:09:0c:41:3b:0b:d4:21:1b:c6:1e:64:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2 Validity Not Before: Jan 25 11:25:51 2026 GMT Not After : Jan 28 11:42:51 2026 GMT Subject: CN=8092E74287DFA16ED731A351A0291E9A53DFA916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e0:e7:52:61:d3:4e:f8:94:c1:0a:c4:56:a1: bf:40:0b:fa:da:0f:26:41:8f:29:1c:9c:ff:ff:d3: 1b:3e:d3:d8:a3:e9:ae:5e:7e:c3:40:3f:55:2b:66: a9:34:89:b0:8c:d5:84:0b:b3:01:cb:59:f9:da:fc: 31:65:24:78:21:d0:f4:ae:e8:a8:ac:a5:6f:14:78: 3c:f0:38:8f:3d:23:73:d9:3f:16:b0:89:d9:0c:39: 68:ea:cd:61:ec:e1:a7:9f:ff:43:e4:33:de:3e:7c: e9:6f:8b:6c:27:1b:e5:1f:67:7d:a5:88:aa:61:37: 86:88:05:65:17:cb:2f:29:61:41:54:90:96:66:b5: 3c:b0:e3:54:37:c3:18:de:97:a1:e5:4f:d6:72:b5: 04:1a:2c:2b:f5:bc:ac:82:ea:3f:bc:8c:0b:75:0b: 86:dc:0a:2c:ed:ef:a8:c3:58:ba:95:1f:29:34:f2: 44:01:db:a6:01:eb:a5:50:07:49:26:93:6c:9f:07: b7:eb:f0:9a:65:95:0c:97:bb:22:7d:8f:dc:f5:8a: 74:6a:74:8c:32:69:96:32:54:7c:d5:8b:4b:4f:a2: 3b:f8:2f:49:fe:ba:c6:f0:e0:a7:58:4b:0c:3d:53: 6c:c9:db:11:c5:83:df:3e:7c:0b:a9:68:ae:c1:d7: 40:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:92:E7:42:87:DF:A1:6E:D7:31:A3:51:A0:29:1E:9A:53:DF:A9:16 X509v3 Authority Key Identifier: keyid:3A:0E:A2:A2:1C:E4:23:A2:4D:4D:08:AD:C1:08:69:F1:2C:9A:D4:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4261fabb-d46f-4f8c-8100-714c20e7b3ca/0/3A0EA2A21CE423A24D4D08ADC10869F12C9AD4A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a9:a5:a1:25:2e:f1:a6:8d:43:01:56:1c:da:41:a6:54:42: 00:fa:d2:8b:a5:c4:29:c8:72:9a:31:de:33:11:85:ca:63:b0: 33:dc:99:de:af:ba:d4:af:7e:bc:44:db:e7:65:5f:67:f2:f5: a1:3f:d1:4e:c0:14:c7:92:a2:e1:76:74:a6:05:4e:55:fc:68: 57:cd:3a:be:5d:4c:6f:ac:9e:ce:79:11:6a:a8:bb:d2:86:34: ea:56:4e:b5:c6:14:c3:d7:c9:2f:72:a8:de:56:6e:44:93:d6: 74:30:83:63:10:32:9d:a7:ef:60:bd:f3:4c:22:47:c7:d7:48: f1:93:2c:b1:34:68:3b:29:f0:d8:ac:4e:10:81:58:b8:99:75: d9:8c:8d:7a:7c:ab:19:b9:cd:4a:b0:5e:c4:ce:ea:7c:ad:d4: 6e:e4:bc:83:72:32:57:96:79:f5:34:c8:36:f5:96:b5:5c:47: 08:6e:6a:49:f7:ad:05:3b:6a:9e:9a:6f:6f:81:d7:b4:aa:f9: 5c:56:f4:19:ff:50:aa:92:32:fb:49:18:55:45:4d:e5:9f:6a: da:94:03:dc:c1:cb:73:a5:61:46:0e:39:de:84:8c:f9:f2:08: 4f:ac:04:38:b6:98:d3:bc:a8:e4:3e:6e:98:5d:9f:90:d6:95: 12:79:3f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFpT1U2XfMwJDEE7C9QhG8YeZPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEy QzlBRDRBMjAeFw0yNjAxMjUxMTI1NTFaFw0yNjAxMjgxMTQyNTFaMDMxMTAvBgNV BAMTKDgwOTJFNzQyODdERkExNkVENzMxQTM1MUEwMjkxRTlBNTNERkE5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4OdSYdNO+JTBCsRWob9AC/ra DyZBjykcnP//0xs+09ij6a5efsNAP1UrZqk0ibCM1YQLswHLWfna/DFlJHgh0PSu 6KispW8UeDzwOI89I3PZPxawidkMOWjqzWHs4aef/0PkM94+fOlvi2wnG+UfZ32l iKphN4aIBWUXyy8pYUFUkJZmtTyw41Q3wxjel6HlT9ZytQQaLCv1vKyC6j+8jAt1 C4bcCizt76jDWLqVHyk08kQB26YB66VQB0kmk2yfB7fr8JpllQyXuyJ9j9z1inRq dIwyaZYyVHzVi0tPojv4L0n+usbw4KdYSww9U2zJ2xHFg98+fAupaK7B10BPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgJLnQoffoW7XMaNRoCkemlPfqRYwHwYDVR0j BBgwFoAUOg6iohzkI6JNTQitwQhp8Sya1KIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjYxZmFiYi1kNDZmLTRmOGMtODEwMC03MTRjMjBlN2IzY2EvMC8zQTBFQTJBMjFD RTQyM0EyNEQ0RDA4QURDMTA4NjlGMTJDOUFENEEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5RjEyQzlB RDRBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI2MWZhYmItZDQ2Zi00ZjhjLTgx MDAtNzE0YzIwZTdiM2NhLzAvM0EwRUEyQTIxQ0U0MjNBMjRENEQwOEFEQzEwODY5 RjEyQzlBRDRBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASppaElLvGmjUMBVhzaQaZUQgD60oulxCnI cpox3jMRhcpjsDPcmd6vutSvfrxE2+dlX2fy9aE/0U7AFMeSouF2dKYFTlX8aFfN Or5dTG+sns55EWqou9KGNOpWTrXGFMPXyS9yqN5WbkST1nQwg2MQMp2n72C980wi R8fXSPGTLLE0aDsp8NisThCBWLiZddmMjXp8qxm5zUqwXsTO6nyt1G7kvINyMleW efU0yDb1lrVcRwhuakn3rQU7ap6ab2+B17Sq+VxW9Bn/UKqSMvtJGFVFTeWfatqU A9zBy3OlYUYOOd6EjPnyCE+sBDi2mNO8qOQ+bphdn5DWlRJ5P6o= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:31 2026 by rpki-client