This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: LpvvcDEHZWqPW27ff33TAa6MG54FQYY5Kq3dlKa4iX8= Subject key identifier: CF:65:23:13:0F:9F:B9:A7:6A:BA:FB:BA:D9:AB:42:7E:E9:8B:0C:B4 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 2AB1D87C4E3E72C9BB5A127C30936CEC4706993C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: 0148 Signing time: Sat 24 Jan 2026 18:50:47 +0000 Manifest this update: Sat 24 Jan 2026 18:45:47 +0000 Manifest next update: Tue 27 Jan 2026 22:53:47 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: PUDiHGcZBIfxtq6/fpmEzRSdoXQcn8vb8lOY0ZXNnqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b1:d8:7c:4e:3e:72:c9:bb:5a:12:7c:30:93:6c:ec:47:06:99:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Jan 24 18:45:47 2026 GMT Not After : Jan 27 22:53:47 2026 GMT Subject: CN=CF6523130F9FB9A76ABAFBBAD9AB427EE98B0CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:68:f8:fa:e6:76:0e:75:a9:70:59:ff:15: 86:fc:ae:5a:b6:71:62:86:cb:2c:db:e8:fc:e3:13: fd:2e:e5:bf:75:58:50:56:4c:4c:60:f9:7e:20:0f: f5:0d:d9:53:ab:f5:d7:f4:ca:d3:19:aa:d3:83:c3: e0:73:c2:e9:0c:75:76:cf:44:7c:f2:d9:e2:73:ad: 51:bf:0e:cd:a3:d7:82:fe:b3:d4:fc:fd:b5:20:13: 1a:ac:d5:f8:ef:39:f3:77:94:81:e1:2e:b3:3f:7d: 4c:48:3b:7f:cc:3c:25:1a:c4:4f:63:f6:6c:7e:ea: 06:89:6d:a2:47:c9:c7:67:07:e8:28:0d:9d:aa:3b: 8d:3d:8d:88:62:1f:9a:33:cd:c1:10:69:23:10:00: d7:91:58:7d:bc:8e:f9:a7:b9:10:e1:8b:a5:46:23: ad:4d:63:a5:ba:aa:80:f2:b1:6f:0a:c9:c1:46:9e: f1:c9:f6:76:e9:d2:57:b5:e7:39:30:e9:7a:84:4b: 90:6c:c9:13:a1:bf:bd:8a:ff:e8:8c:96:98:14:10: d8:d6:e1:2a:e8:97:86:9d:f2:2e:b3:d4:cf:ab:7b: 49:73:17:e4:dc:e2:ce:15:52:b4:4f:43:77:20:dc: 43:99:bd:50:68:17:f1:1f:ca:aa:74:65:60:2a:17: e6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:23:13:0F:9F:B9:A7:6A:BA:FB:BA:D9:AB:42:7E:E9:8B:0C:B4 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:29:1a:3e:10:95:ff:23:bf:1f:f3:70:7e:2e:98:2a:58:d7: ea:d5:43:9e:5f:2a:11:ce:2b:1c:a1:c2:4c:be:0b:77:82:dc: 71:24:d5:6a:11:5a:a5:2b:31:bb:a4:eb:35:56:27:00:b6:e4: 67:de:1c:66:54:40:14:dd:00:f6:1f:c0:d9:98:bf:df:e7:8f: 1b:1c:2c:3e:d1:24:60:44:ab:05:87:b2:0b:2d:80:5c:5b:4c: 7a:2f:2d:72:d2:2c:55:57:0a:91:15:b3:3c:8d:4f:d7:f4:ed: 03:00:48:c3:47:6d:d3:c4:51:87:0f:e1:a0:f1:89:7d:52:fb: 05:0a:58:81:df:9c:63:30:12:2c:dc:f5:c9:62:b4:0d:2f:ed: ea:d2:42:3f:bc:9a:c9:51:37:54:6d:96:0f:db:a5:a8:42:7c: f5:91:37:ab:3f:3b:53:c2:bf:d5:03:91:2d:8b:14:8d:23:59: 7e:86:ba:f4:e8:84:11:2d:08:6b:bb:e6:00:ff:64:9c:54:c1: e2:ab:50:c3:33:18:a6:1e:f8:5d:cc:d5:71:7b:00:ca:1d:16: c3:1a:3f:65:fd:63:8a:94:02:55:a9:64:a3:99:aa:c4:50:11: 06:55:fe:bb:e4:e2:28:a4:b8:d1:b9:69:6d:78:16:12:a9:21: 7a:22:b7:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKrHYfE4+csm7WhJ8MJNs7EcGmTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNjAxMjQxODQ1NDdaFw0yNjAxMjcyMjUzNDdaMDMxMTAvBgNV BAMTKENGNjUyMzEzMEY5RkI5QTc2QUJBRkJCQUQ5QUI0MjdFRTk4QjBDQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWGj4+uZ2DnWpcFn/FYb8rlq2 cWKGyyzb6PzjE/0u5b91WFBWTExg+X4gD/UN2VOr9df0ytMZqtODw+BzwukMdXbP RHzy2eJzrVG/Ds2j14L+s9T8/bUgExqs1fjvOfN3lIHhLrM/fUxIO3/MPCUaxE9j 9mx+6gaJbaJHycdnB+goDZ2qO409jYhiH5ozzcEQaSMQANeRWH28jvmnuRDhi6VG I61NY6W6qoDysW8KycFGnvHJ9nbp0le15zkw6XqES5BsyROhv72K/+iMlpgUENjW 4Srol4ad8i6z1M+re0lzF+Tc4s4VUrRPQ3cg3EOZvVBoF/Efyqp0ZWAqF+arAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz2UjEw+fuadquvu62atCfumLDLQwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOUpGj4Qlf8jvx/zcH4umCpY1+rVQ55fKhHO Kxyhwky+C3eC3HEk1WoRWqUrMbuk6zVWJwC25GfeHGZUQBTdAPYfwNmYv9/njxsc LD7RJGBEqwWHsgstgFxbTHovLXLSLFVXCpEVszyNT9f07QMASMNHbdPEUYcP4aDx iX1S+wUKWIHfnGMwEizc9clitA0v7erSQj+8mslRN1Rtlg/bpahCfPWRN6s/O1PC v9UDkS2LFI0jWX6GuvTohBEtCGu75gD/ZJxUweKrUMMzGKYe+F3M1XF7AModFsMa P2X9Y4qUAlWpZKOZqsRQEQZV/rvk4iikuNG5aW14FhKpIXoit+M= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:34 2026 by rpki-client