This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft File: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft (raw, json) Hash identifier: EOgR2ILAS6qwY7y0cpEanwtQ5IDWt5lcE0nyOuNAXdU= Subject key identifier: 39:DB:EF:6D:CB:C6:3B:15:A0:16:01:5E:6C:B8:2A:39:71:70:B6:06 Authority key identifier: ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A Certificate issuer: /CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Certificate serial: 3DC84DD8B95E4D65FFCF9E4DE2431A916329B834 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft Manifest number: 023B Signing time: Sun 25 Jan 2026 07:01:16 +0000 Manifest this update: Sun 25 Jan 2026 06:56:16 +0000 Manifest next update: Wed 28 Jan 2026 14:14:16 +0000 Files and hashes: 1: 3130332e3133352e34382e302f32322d3234203d3e203338333230.roa (hash: /cF+CKjnrx0BGZ8wL/sfXfp5hgNUQBZIeeM9AfAYFsU=) 2: ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl (hash: ugm8zbWTbst7rC+ABKX42wTFMDsQ2moSBb4V89Y3FAY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c8:4d:d8:b9:5e:4d:65:ff:cf:9e:4d:e2:43:1a:91:63:29:b8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A Validity Not Before: Jan 25 06:56:16 2026 GMT Not After : Jan 28 14:14:16 2026 GMT Subject: CN=39DBEF6DCBC63B15A016015E6CB82A397170B606 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:22:0a:a6:df:1c:3c:de:05:50:42:8a:88: 22:f1:c4:bc:f0:47:90:4f:91:be:56:5f:66:42:7b: 36:b9:a6:6e:56:f5:7d:ff:ae:31:43:60:67:fc:1d: 95:05:bd:37:10:56:77:26:46:eb:7d:8d:55:53:b4: 09:3e:92:e5:24:ae:c6:0a:04:87:6d:7e:b0:de:72: 46:c3:13:7e:80:b1:da:8c:b9:99:5c:a9:ff:e0:b9: 33:85:2b:fc:06:9c:e9:18:d3:c5:e7:fd:34:9a:ce: 27:c1:79:c2:86:f5:47:bf:24:6b:c7:55:1b:1e:a3: be:fc:12:1f:bf:5b:fe:a7:df:8a:35:3d:6b:4c:bd: 27:06:69:b9:12:cf:0d:77:0e:94:74:3e:ff:ec:cc: 36:fd:58:79:3e:72:21:69:3b:1a:74:11:1d:81:67: 2b:8f:a3:8e:8c:49:52:39:07:2e:3e:6e:23:8d:95: 09:e0:b1:51:e3:73:c2:39:56:c6:48:bf:29:83:f8: bb:5c:97:94:b6:06:58:c0:ec:db:e4:c9:4b:88:27: 37:07:f6:c6:bc:18:89:8a:fa:1d:f5:54:e1:18:f6: 6f:c2:48:39:e9:5c:8d:8a:e6:e0:ca:26:33:67:87: db:dd:dd:8f:61:cb:16:33:24:07:30:d3:64:df:30: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DB:EF:6D:CB:C6:3B:15:A0:16:01:5E:6C:B8:2A:39:71:70:B6:06 X509v3 Authority Key Identifier: keyid:ED:3C:E7:26:45:63:AD:B9:40:EA:FA:F4:BD:87:CD:CD:A9:1C:A1:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ccc2af4-a62d-4708-b688-1892594ba989/0/ED3CE7264563ADB940EAFAF4BD87CDCDA91CA15A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ab:35:d0:09:67:db:d8:71:63:46:15:56:7c:4e:75:78:e1: 14:51:04:a4:72:79:d8:ba:56:67:7a:ac:54:15:55:bf:b7:e2: 4c:b9:ba:3b:ff:da:b5:60:87:78:a1:c5:43:c0:cd:39:1c:7a: 1b:d9:6c:54:12:7c:89:16:1f:57:06:63:d4:d3:a0:26:16:b8: b4:38:f0:17:af:91:11:a7:e6:1e:c9:e3:01:72:d3:84:b4:89: c8:52:3e:8a:95:e8:bc:7c:63:1d:1c:1a:e8:97:18:93:55:67: b7:dd:a1:36:cd:91:2f:59:45:f6:72:9d:f8:f2:4f:ea:b5:5f: fe:67:42:e4:8a:77:7d:95:d4:ac:57:e7:99:98:2d:43:f8:47: 94:51:19:ce:81:bf:76:19:df:13:ec:76:9b:bc:c9:35:7f:6d: 01:7f:e6:64:7f:4a:82:1f:08:19:0e:b0:b6:8f:4c:02:73:3c: 2f:4d:7f:a6:89:96:be:67:fd:f3:f5:53:40:31:e8:5d:2b:85: be:17:67:da:9e:5b:52:59:16:2b:8a:4d:d7:83:f2:6f:39:b2: 3f:1d:36:b3:7e:32:6e:1b:dc:49:e0:fc:36:7b:1f:8c:19:0d: ca:33:04:b7:99:ae:30:06:12:48:df:b0:05:9d:45:81:f1:f7: 1a:7d:da:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPchN2LleTWX/z55N4kMakWMpuDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RB OTFDQTE1QTAeFw0yNjAxMjUwNjU2MTZaFw0yNjAxMjgxNDE0MTZaMDMxMTAvBgNV BAMTKDM5REJFRjZEQ0JDNjNCMTVBMDE2MDE1RTZDQjgyQTM5NzE3MEI2MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwyiIKpt8cPN4FUEKKiCLxxLzw R5BPkb5WX2ZCeza5pm5W9X3/rjFDYGf8HZUFvTcQVncmRut9jVVTtAk+kuUkrsYK BIdtfrDeckbDE36AsdqMuZlcqf/guTOFK/wGnOkY08Xn/TSazifBecKG9Ue/JGvH VRseo778Eh+/W/6n34o1PWtMvScGabkSzw13DpR0Pv/szDb9WHk+ciFpOxp0ER2B ZyuPo46MSVI5By4+biONlQngsVHjc8I5VsZIvymD+Ltcl5S2BljA7NvkyUuIJzcH 9sa8GImK+h31VOEY9m/CSDnpXI2K5uDKJjNnh9vd3Y9hyxYzJAcw02TfMDV1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdvvbcvGOxWgFgFebLgqOXFwtgYwHwYDVR0j BBgwFoAU7TznJkVjrblA6vr0vYfNzakcoVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Y2NjMmFmNC1hNjJkLTQ3MDgtYjY4OC0xODkyNTk0YmE5ODkvMC9FRDNDRTcyNjQ1 NjNBREI5NDBFQUZBRjRCRDg3Q0RDREE5MUNBMTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NEQ0RBOTFD QTE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGNjYzJhZjQtYTYyZC00NzA4LWI2 ODgtMTg5MjU5NGJhOTg5LzAvRUQzQ0U3MjY0NTYzQURCOTQwRUFGQUY0QkQ4N0NE Q0RBOTFDQTE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANmrNdAJZ9vYcWNGFVZ8TnV44RRRBKRyedi6 Vmd6rFQVVb+34ky5ujv/2rVgh3ihxUPAzTkcehvZbFQSfIkWH1cGY9TToCYWuLQ4 8BevkRGn5h7J4wFy04S0ichSPoqV6Lx8Yx0cGuiXGJNVZ7fdoTbNkS9ZRfZynfjy T+q1X/5nQuSKd32V1KxX55mYLUP4R5RRGc6Bv3YZ3xPsdpu8yTV/bQF/5mR/SoIf CBkOsLaPTAJzPC9Nf6aJlr5n/fP1U0Ax6F0rhb4XZ9qeW1JZFiuKTdeD8m85sj8d NrN+Mm4b3Eng/DZ7H4wZDcozBLeZrjAGEkjfsAWdRYHx9xp92pc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:40 2026 by rpki-client