This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft File: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft (raw, json) Hash identifier: 3x+JJ5kHmC8s9MDZevMqlarEbTYB316IyMTOFJ/zOfk= Subject key identifier: 07:84:49:50:A3:6A:68:0E:61:0E:AF:7C:9E:02:9A:F2:79:DB:92:12 Authority key identifier: 3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 Certificate issuer: /CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Certificate serial: 61FA1F47763F581B8081CB1C38ADE3CD2C3347EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft Manifest number: 01A4 Signing time: Sat 24 Jan 2026 17:31:03 +0000 Manifest this update: Sat 24 Jan 2026 17:26:03 +0000 Manifest next update: Tue 27 Jan 2026 23:12:03 +0000 Files and hashes: 1: 3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl (hash: 8fcu8U6TGuJ9tvEqI3YwbtCeFWRtaJf6Vq0Ti1uzY9c=) 2: 3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (hash: Ew2OSWEohUTuvmIQMM4jLPYBjKqzXCpLNwLiyPu5TfM=) 3: 3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (hash: vmw9bcS7HYiEIqjVICRaVcatSeJQ8ZNuTTgtgTfawew=) 4: 3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (hash: D5hukbaY+N3AjWmkuBGFFTwqc+CzamYmFL0amMEyMMM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fa:1f:47:76:3f:58:1b:80:81:cb:1c:38:ad:e3:cd:2c:33:47:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67 Validity Not Before: Jan 24 17:26:03 2026 GMT Not After : Jan 27 23:12:03 2026 GMT Subject: CN=07844950A36A680E610EAF7C9E029AF279DB9212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:20:8b:39:60:bf:a2:3f:d6:8b:6a:3b:27: de:0f:2c:4f:aa:42:23:67:78:f5:0c:a5:d8:65:32: a6:62:1b:c1:50:47:7e:82:81:55:ab:27:e2:3e:24: 79:48:a9:db:e3:12:87:9a:f2:24:24:dd:8e:f6:71: f2:54:94:2d:83:53:cf:c4:b6:59:61:20:e1:52:65: 19:8c:3e:af:86:b2:97:f5:bc:9c:87:50:ee:db:1a: 97:0a:41:8f:af:1a:43:94:b7:82:2c:e1:08:f6:02: 0f:a8:90:79:de:48:10:92:63:47:58:3b:29:df:a3: 59:e0:d9:0c:40:96:cb:61:fd:e2:9c:73:8b:e3:0d: a8:bd:85:a3:d1:c4:f5:a8:a8:a9:6a:d2:0d:5b:33: fe:8e:e4:64:67:56:3f:be:08:c2:6b:eb:a6:1b:32: 71:8c:19:6f:2b:a8:89:a9:bd:61:15:50:d1:7c:6d: 26:4a:95:09:f4:2f:da:61:ef:6a:58:ff:ae:50:15: df:ff:e5:10:eb:ea:ae:db:de:38:f9:2b:0c:90:e2: ce:27:ac:b9:bc:84:b5:8d:07:5c:97:3c:30:79:18: 47:1c:b2:33:39:ec:cc:70:e2:46:84:cf:43:39:7b: 85:06:6e:ff:af:0f:c4:0b:c5:90:1f:2f:a9:52:4a: 82:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:84:49:50:A3:6A:68:0E:61:0E:AF:7C:9E:02:9A:F2:79:DB:92:12 X509v3 Authority Key Identifier: keyid:3A:5E:DA:CC:61:BD:7D:05:EB:D4:24:BB:DB:F5:1D:4C:50:85:2A:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3A5EDACC61BD7D05EBD424BBDBF51D4C50852A67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bb:69:a9:09:a2:3e:d3:79:e9:78:42:3b:fb:69:92:c4:a5: ed:3a:4a:45:7d:3c:43:b1:f9:e8:d6:d0:52:68:ad:df:66:94: e7:62:16:ed:76:97:76:4d:8c:9e:fd:e5:e7:53:3d:21:70:e9: 0c:82:68:95:bd:26:e6:66:99:01:14:61:d6:3e:63:3e:57:cb: fb:86:59:72:72:e1:2b:b8:81:b6:2a:b8:eb:d6:4e:ba:65:41: da:83:04:1c:ff:7f:c8:ba:f0:84:06:41:81:86:b8:c8:6e:fb: 94:a6:d4:2a:88:f4:51:f9:8d:98:1b:ff:58:6f:8b:f2:15:ae: be:90:24:c0:33:64:dd:f1:61:f6:f7:5b:61:03:8f:d5:c0:4d: 05:78:15:bf:e0:97:de:11:cb:36:49:76:8f:56:bf:70:02:eb: 33:93:2f:aa:ac:b3:98:08:04:06:5d:2d:96:b5:d6:b3:b8:54: 02:0b:c3:ba:70:f5:5f:86:5b:5c:45:c9:16:86:50:d7:ef:0a: 22:a2:71:23:7b:56:93:f8:a6:11:ea:35:d9:31:dc:fd:05:7a: 47:5c:33:51:c9:6a:69:6e:2c:d2:70:48:97:3b:c9:d4:4f:0d: b9:94:ae:37:e3:e8:94:77:e2:31:09:ac:de:3a:7d:66:b1:2d: 5c:5a:d6:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfofR3Y/WBuAgcscOK3jzSwzR+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1 MDg1MkE2NzAeFw0yNjAxMjQxNzI2MDNaFw0yNjAxMjcyMzEyMDNaMDMxMTAvBgNV BAMTKDA3ODQ0OTUwQTM2QTY4MEU2MTBFQUY3QzlFMDI5QUYyNzlEQjkyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2SCLOWC/oj/Wi2o7J94PLE+q QiNnePUMpdhlMqZiG8FQR36CgVWrJ+I+JHlIqdvjEoea8iQk3Y72cfJUlC2DU8/E tllhIOFSZRmMPq+Gspf1vJyHUO7bGpcKQY+vGkOUt4Is4Qj2Ag+okHneSBCSY0dY Oynfo1ng2QxAlsth/eKcc4vjDai9haPRxPWoqKlq0g1bM/6O5GRnVj++CMJr66Yb MnGMGW8rqImpvWEVUNF8bSZKlQn0L9ph72pY/65QFd//5RDr6q7b3jj5KwyQ4s4n rLm8hLWNB1yXPDB5GEccsjM57Mxw4kaEz0M5e4UGbv+vD8QLxZAfL6lSSoK1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB4RJUKNqaA5hDq98ngKa8nnbkhIwHwYDVR0j BBgwFoAUOl7azGG9fQXr1CS72/UdTFCFKmcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjM4OGY2ZS05OTc0LTQ0NTctYWY0Yi01YzljODJmNTBlOTcvMC8zQTVFREFDQzYx QkQ3RDA1RUJENDI0QkJEQkY1MUQ0QzUwODUyQTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFENEM1MDg1 MkE2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIzODhmNmUtOTk3NC00NDU3LWFm NGItNWM5YzgyZjUwZTk3LzAvM0E1RURBQ0M2MUJEN0QwNUVCRDQyNEJCREJGNTFE NEM1MDg1MkE2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ27aakJoj7Teel4Qjv7aZLEpe06SkV9PEOx +ejW0FJord9mlOdiFu12l3ZNjJ795edTPSFw6QyCaJW9JuZmmQEUYdY+Yz5Xy/uG WXJy4Su4gbYquOvWTrplQdqDBBz/f8i68IQGQYGGuMhu+5Sm1CqI9FH5jZgb/1hv i/IVrr6QJMAzZN3xYfb3W2EDj9XATQV4Fb/gl94RyzZJdo9Wv3AC6zOTL6qss5gI BAZdLZa11rO4VAILw7pw9V+GW1xFyRaGUNfvCiKicSN7VpP4phHqNdkx3P0Fekdc M1HJamluLNJwSJc7ydRPDbmUrjfj6JR34jEJrN46fWaxLVxa1rw= -----END CERTIFICATE-----Generated at Sun Jan 25 23:22:16 2026 by rpki-client