This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft File: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft (raw, json) Hash identifier: TJ4HRkq8CDT2h0+0/kWh8bk1gwU/XyC3mUx3YtcVZeA= Subject key identifier: 66:81:41:E3:F8:A3:32:30:F4:01:9D:C6:02:3B:B9:20:81:AB:E2:B4 Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA Certificate issuer: /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Certificate serial: 3A73B61650037DB21CB86E3617CB7C5540EB00A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft Manifest number: 0138 Signing time: Sat 24 Jan 2026 18:22:04 +0000 Manifest this update: Sat 24 Jan 2026 18:17:04 +0000 Manifest next update: Wed 28 Jan 2026 03:55:04 +0000 Files and hashes: 1: 33362e35302e39372e302f32342d3234203d3e20333936393832.roa (hash: OPMqecBKKIwGMsBY4Yx/lNhDxmjNFnVBd5dNPmXkTCQ=) 2: 33362e35302e39372e302f32342d3234203d3e20313532333939.roa (hash: 82ZZd9ZKqDtwhlONQ96AcoNzTHzQmEXlz9QIND1/UOU=) 3: 3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl (hash: PxT++MFuzgf+13q2ZegVkuKa6Ei1vtrgdYY/KPfjrwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 03:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:b6:16:50:03:7d:b2:1c:b8:6e:36:17:cb:7c:55:40:eb:00:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA Validity Not Before: Jan 24 18:17:04 2026 GMT Not After : Jan 28 03:55:04 2026 GMT Subject: CN=668141E3F8A33230F4019DC6023BB92081ABE2B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:5f:4d:da:fd:2e:47:9e:8a:f6:87:02:a5: 57:c0:ca:05:83:dd:d7:ed:34:a4:67:7a:0c:6a:a7: ca:f3:51:83:c1:9b:bb:49:09:31:4c:c6:73:a8:6e: 0e:53:f0:70:93:ff:83:24:2c:d2:8b:0c:de:27:78: 7d:94:b8:f3:45:b8:68:68:92:e0:b0:f1:b2:45:8e: af:f7:62:38:cb:52:83:07:60:a7:c7:c6:3b:86:38: 85:f4:ba:50:72:8d:37:ea:76:37:b4:4a:60:5d:5e: f1:9b:8a:20:af:46:dd:e6:bf:18:b3:4e:b1:93:70: bb:32:41:c1:78:06:7a:f3:30:1c:5c:cd:c4:70:6a: e7:19:34:81:d5:35:28:d4:39:88:ab:a8:ea:a8:45: 5b:e5:12:dd:15:a0:ba:ec:12:24:e5:dc:61:ba:25: 0f:83:e5:28:d8:1c:77:da:57:df:16:32:cd:e2:f5: bc:78:e4:89:30:ad:93:70:5c:bf:6b:b5:91:f8:40: 16:11:8d:61:39:59:3d:2b:31:df:2a:c7:b0:cc:50: 3b:32:84:c2:b5:78:5d:26:f1:55:17:37:95:e8:2a: be:90:cd:4d:2e:f7:a7:5e:56:96:4d:9b:78:d1:3f: 19:ce:55:7c:89:62:d7:40:1f:e9:78:48:91:46:e8: 24:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:81:41:E3:F8:A3:32:30:F4:01:9D:C6:02:3B:B9:20:81:AB:E2:B4 X509v3 Authority Key Identifier: keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c6:24:a2:93:db:57:eb:0e:3b:7f:1b:d0:0d:a7:96:e1:c5: 04:0b:40:3a:92:44:cc:5a:97:ed:8f:ed:bf:36:0b:81:3b:78: 85:a4:7c:bb:13:ea:15:d9:79:90:08:54:91:3e:c1:ae:05:68: 4e:d8:a4:e2:9d:5e:6b:97:fd:e6:1b:c2:4f:5b:11:d6:9b:bc: a7:96:68:17:59:33:8c:bc:e0:d9:95:25:49:bf:52:90:88:a1: 4d:bc:a0:40:eb:eb:d1:df:82:0f:f6:6d:62:81:7c:10:b8:db: ab:0b:a4:12:65:bb:43:ed:a6:24:6c:d4:90:43:4c:9c:a4:a3: a4:28:58:fd:cb:b3:fb:f7:45:8d:47:37:23:71:49:4d:eb:c8: c7:13:2f:a8:26:af:44:b2:68:ee:e6:ea:14:91:83:bb:5c:f6: d0:0a:38:f1:12:dd:26:b0:5e:f9:07:45:98:da:97:4a:4e:7a: e3:10:a6:29:d9:2d:77:b5:ad:fb:fc:20:a3:5f:e9:7a:d7:e3: b5:2e:ac:bd:9d:3a:d4:56:28:24:30:ee:4c:5c:82:bd:f5:20: b8:2f:b5:7a:ca:dd:4b:35:e7:2f:0b:8e:d9:3c:76:8e:dd:69: ae:9f:2d:8d:4f:cc:0c:6f:80:49:d4:b9:bc:ca:e4:25:6f:d6: 14:d7:e5:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOnO2FlADfbIcuG42F8t8VUDrAKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0 ODRCM0ZEQTAeFw0yNjAxMjQxODE3MDRaFw0yNjAxMjgwMzU1MDRaMDMxMTAvBgNV BAMTKDY2ODE0MUUzRjhBMzMyMzBGNDAxOURDNjAyM0JCOTIwODFBQkUyQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Zl9N2v0uR56K9ocCpVfAygWD 3dftNKRnegxqp8rzUYPBm7tJCTFMxnOobg5T8HCT/4MkLNKLDN4neH2UuPNFuGho kuCw8bJFjq/3YjjLUoMHYKfHxjuGOIX0ulByjTfqdje0SmBdXvGbiiCvRt3mvxiz TrGTcLsyQcF4BnrzMBxczcRwaucZNIHVNSjUOYirqOqoRVvlEt0VoLrsEiTl3GG6 JQ+D5SjYHHfaV98WMs3i9bx45IkwrZNwXL9rtZH4QBYRjWE5WT0rMd8qx7DMUDsy hMK1eF0m8VUXN5XoKr6QzU0u96deVpZNm3jRPxnOVXyJYtdAH+l4SJFG6CT9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoFB4/ijMjD0AZ3GAju5IIGr4rQwHwYDVR0j BBgwFoAUMkHYk3H/PTr8C6kR4xaoJUhLP9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGMwNzQ0MS1jZDlkLTRkODUtYWFiNC02NWY1ZGQ0ZWQ3ZTAvMC8zMjQxRDg5Mzcx RkYzRDNBRkMwQkE5MTFFMzE2QTgyNTQ4NEIzRkRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4MjU0ODRC M0ZEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhjMDc0NDEtY2Q5ZC00ZDg1LWFh YjQtNjVmNWRkNGVkN2UwLzAvMzI0MUQ4OTM3MUZGM0QzQUZDMEJBOTExRTMxNkE4 MjU0ODRCM0ZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPGJKKT21frDjt/G9ANp5bhxQQLQDqSRMxa l+2P7b82C4E7eIWkfLsT6hXZeZAIVJE+wa4FaE7YpOKdXmuX/eYbwk9bEdabvKeW aBdZM4y84NmVJUm/UpCIoU28oEDr69Hfgg/2bWKBfBC426sLpBJlu0PtpiRs1JBD TJyko6QoWP3Ls/v3RY1HNyNxSU3ryMcTL6gmr0SyaO7m6hSRg7tc9tAKOPES3Saw XvkHRZjal0pOeuMQpinZLXe1rfv8IKNf6XrX47UurL2dOtRWKCQw7kxcgr31ILgv tXrK3Us15y8Ljtk8do7daa6fLY1PzAxvgEnUubzK5CVv1hTX5cc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:26 2026 by rpki-client