This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: CJ+ipW7wS0Tk3CTYXZp1k0sPC2Sggjgkiz+05TqlOKE= Subject key identifier: 6B:8D:69:44:89:16:2D:4B:D8:91:D7:6D:C9:BE:F8:CB:5F:20:EC:5C Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 1709B48D04F9C73F901973F8BB41A65B343274C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02F1 Signing time: Sun 25 Jan 2026 14:41:22 +0000 Manifest this update: Sun 25 Jan 2026 14:36:22 +0000 Manifest next update: Wed 28 Jan 2026 20:32:22 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: Dt7dShsZ/bhKecNWtT3VDStMT1pqyObVgdakoeiDUTI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:09:b4:8d:04:f9:c7:3f:90:19:73:f8:bb:41:a6:5b:34:32:74:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Jan 25 14:36:22 2026 GMT Not After : Jan 28 20:32:22 2026 GMT Subject: CN=6B8D694489162D4BD891D76DC9BEF8CB5F20EC5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:c8:58:9e:ae:f0:3c:3a:b3:31:ad:ee:45: d7:b4:4f:db:fb:0f:89:39:38:b7:1a:83:fe:60:d8: d9:d1:4f:bd:4b:bc:f7:fa:85:f7:0d:91:d0:ef:43: e9:fe:43:f4:99:17:db:2a:f6:15:e2:02:2d:4a:80: 3d:15:a7:db:1b:38:94:d3:41:67:5a:be:06:d7:bf: 2f:bf:f8:49:9a:90:57:c0:a6:9c:3f:6c:79:4e:49: cc:59:92:57:55:e0:41:dc:24:e5:7c:69:3d:c5:b6: 78:b6:ce:db:20:56:9f:cf:5d:c9:ae:d9:9e:6b:91: f9:e5:a6:c6:94:3d:20:1a:cd:fe:7b:38:4f:e4:be: 6e:78:a4:17:64:0f:35:56:6c:b2:a1:8b:c8:4e:66: 73:2a:37:2f:b2:7a:b2:83:86:4d:97:52:00:b7:08: 55:db:a6:ac:c5:13:83:dd:05:0c:50:90:66:28:83: dc:e3:76:5b:a0:25:b0:e4:54:4e:66:0b:28:8c:ae: 32:bb:37:8e:e7:ed:e4:87:2f:c2:01:a5:27:88:aa: 9f:52:6a:f2:c6:8f:c4:4c:74:03:81:78:9a:f5:d0: a4:28:f1:03:b7:8f:50:7a:c1:2e:ab:d6:c1:2f:0b: 34:b4:fd:ff:59:cd:f7:3e:68:e1:43:2a:16:54:f6: a5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:8D:69:44:89:16:2D:4B:D8:91:D7:6D:C9:BE:F8:CB:5F:20:EC:5C X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1f:f6:99:73:01:a5:76:10:68:6c:cb:0a:a3:8f:26:4a:f5: 6d:7c:01:11:27:3a:19:59:8d:36:84:fe:63:84:1c:e7:a3:d2: 84:08:c6:16:3d:0a:c2:38:c7:01:17:df:16:fa:76:c9:72:a2: b8:eb:92:5c:f5:fa:e1:e6:79:17:38:04:af:eb:2a:f0:e2:59: 39:2d:24:11:f9:56:b2:35:28:aa:68:97:74:50:bf:54:fb:50: c4:d8:b8:2c:ab:1c:1d:d2:f7:75:42:d3:0f:24:05:90:ff:24: 19:e3:d0:f3:b3:e6:44:87:5a:d3:4b:d7:4c:0d:90:4b:07:0b: 24:5b:6b:4d:1c:4e:b2:2f:a9:e4:6a:a9:17:a0:e9:35:bd:66: 47:a6:b4:e3:74:df:ef:88:f2:d2:f3:d6:c3:90:5a:ff:e0:41: 67:12:ff:82:b6:10:1f:d2:13:43:7c:9c:5e:22:94:27:82:7e: 50:17:9b:88:3e:5a:2a:43:04:12:c8:c8:7a:e0:8b:dd:b3:73: a9:74:5b:3f:b5:5f:68:7c:a5:f2:f9:00:12:d1:86:fd:60:03: 99:98:73:ef:a8:52:b5:1e:15:00:9f:a1:36:bf:76:51:c2:4b: 37:c8:fe:bd:d0:dd:0d:1e:fd:99:22:4b:88:46:b6:b4:07:51: 88:9b:44:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwm0jQT5xz+QGXP4u0GmWzQydMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNjAxMjUxNDM2MjJaFw0yNjAxMjgyMDMyMjJaMDMxMTAvBgNV BAMTKDZCOEQ2OTQ0ODkxNjJENEJEODkxRDc2REM5QkVGOENCNUYyMEVDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRoshYnq7wPDqzMa3uRde0T9v7 D4k5OLcag/5g2NnRT71LvPf6hfcNkdDvQ+n+Q/SZF9sq9hXiAi1KgD0Vp9sbOJTT QWdavgbXvy+/+EmakFfAppw/bHlOScxZkldV4EHcJOV8aT3Ftni2ztsgVp/PXcmu 2Z5rkfnlpsaUPSAazf57OE/kvm54pBdkDzVWbLKhi8hOZnMqNy+yerKDhk2XUgC3 CFXbpqzFE4PdBQxQkGYog9zjdlugJbDkVE5mCyiMrjK7N47n7eSHL8IBpSeIqp9S avLGj8RMdAOBeJr10KQo8QO3j1B6wS6r1sEvCzS0/f9Zzfc+aOFDKhZU9qXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa41pRIkWLUvYkddtyb74y18g7FwwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUf9plzAaV2EGhsywqjjyZK9W18AREnOhlZ jTaE/mOEHOej0oQIxhY9CsI4xwEX3xb6dslyorjrklz1+uHmeRc4BK/rKvDiWTkt JBH5VrI1KKpol3RQv1T7UMTYuCyrHB3S93VC0w8kBZD/JBnj0POz5kSHWtNL10wN kEsHCyRba00cTrIvqeRqqReg6TW9ZkemtON03++I8tLz1sOQWv/gQWcS/4K2EB/S E0N8nF4ilCeCflAXm4g+WipDBBLIyHrgi92zc6l0Wz+1X2h8pfL5ABLRhv1gA5mY c++oUrUeFQCfoTa/dlHCSzfI/r3Q3Q0e/ZkiS4hGtrQHUYibRAc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:57 2026 by rpki-client