This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft File: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft (raw, json) Hash identifier: h1uFgMTL8t/U9HlBZOB+o5ckrstzXihvF9a6XBznq3s= Subject key identifier: 8C:32:C6:A3:41:DC:13:79:28:CA:C2:02:D1:69:F0:4B:EC:4B:6F:7D Authority key identifier: 3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 Certificate issuer: /CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Certificate serial: 7F267B816E4A452D1F327492F6E383944B376D85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft Manifest number: 0243 Signing time: Sun 25 Jan 2026 09:31:38 +0000 Manifest this update: Sun 25 Jan 2026 09:26:38 +0000 Manifest next update: Wed 28 Jan 2026 10:30:38 +0000 Files and hashes: 1: 3130332e3134332e3232342e302f32332d3233203d3e20313339343132.roa (hash: Zm0hpNa3KzjUY5ugGNSToALOnFgESrmbArm+FZK1Qzs=) 2: 3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl (hash: tufUtoPcRDIYEnIkE7uiDRtF/vaS4LjSbtHmFV2dgmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 10:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:26:7b:81:6e:4a:45:2d:1f:32:74:92:f6:e3:83:94:4b:37:6d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D7EA7788E025E12DEFD18EEB278AF6D47B034C2 Validity Not Before: Jan 25 09:26:38 2026 GMT Not After : Jan 28 10:30:38 2026 GMT Subject: CN=8C32C6A341DC137928CAC202D169F04BEC4B6F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:15:a7:68:67:1c:65:8b:c3:44:b3:62:f8: b1:d5:9e:ec:32:db:8a:97:e7:16:f7:75:10:6b:89: b2:d9:d7:dc:bf:04:cf:93:5c:e6:d9:48:ab:79:35: 55:6d:5c:d3:c1:c4:95:1d:ec:08:8c:dd:b4:97:66: 26:13:b9:23:3e:02:9b:84:08:25:1d:11:6c:c1:32: a5:24:69:08:17:61:c3:e0:62:0e:d7:04:5f:0a:8f: 07:84:07:3b:b5:93:9b:01:fe:e3:ce:56:79:3b:96: 7a:a2:22:c9:fd:f4:1b:76:2d:71:e5:77:96:b0:7d: a7:14:05:6a:38:26:d5:8b:41:02:d2:3e:1b:3a:4d: c2:75:c4:9a:b0:61:29:33:35:e5:6a:87:69:5c:e9: d5:b7:dd:a1:b2:6b:20:91:29:62:33:ce:35:8c:bc: 53:bf:32:3c:36:83:e7:4b:a3:75:f5:a0:b2:44:7d: b9:a8:69:05:bd:e5:ef:89:9a:45:94:46:db:41:54: df:db:96:b9:e9:61:c3:12:d6:01:0e:94:6d:1a:55: db:b1:d5:97:63:60:bb:29:59:11:92:19:60:7a:28: 09:51:ab:6c:6a:3c:f1:12:74:2c:46:57:a4:a9:f1: 1d:04:64:0e:46:04:c5:bd:d6:53:7a:62:66:ba:56: 6a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:C6:A3:41:DC:13:79:28:CA:C2:02:D1:69:F0:4B:EC:4B:6F:7D X509v3 Authority Key Identifier: keyid:3D:7E:A7:78:8E:02:5E:12:DE:FD:18:EE:B2:78:AF:6D:47:B0:34:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7770feeb-2caa-476a-ab43-f652a11fd08c/0/3D7EA7788E025E12DEFD18EEB278AF6D47B034C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:c3:f8:b1:75:8e:96:32:f9:bd:c9:2d:07:a8:eb:ba:30: 9a:78:2b:ea:42:81:3f:dd:c0:1d:66:3d:ac:dc:8b:6a:4e:2b: e3:3b:4d:54:13:55:19:c2:8f:d6:c1:1b:3e:a2:78:f6:b8:e3: e7:70:2c:4a:4b:30:f0:42:d0:ae:0b:43:33:9a:5e:13:3e:40: 20:69:cd:cc:ed:f8:22:1d:22:44:d7:33:4a:e6:bf:58:6a:39: 08:b0:e6:92:28:43:d6:fc:73:dc:9b:27:a7:1a:b1:2c:ee:6a: 07:bc:98:e9:d6:b5:ae:43:b2:89:8e:4c:7b:39:9f:4a:f9:d4: b8:3d:9e:c4:bb:e3:4d:78:4a:21:3b:d2:e0:f8:05:76:06:eb: ac:63:80:0c:e0:98:81:32:f0:65:fa:1d:6e:66:31:c2:92:ee: f4:f3:19:f3:33:29:a7:95:04:bf:8e:a5:1c:00:4d:6d:f4:78: 3a:7f:aa:7c:98:c2:73:46:fe:1c:8a:9a:22:14:19:a4:90:e9: c9:17:6a:75:82:77:03:c3:48:c7:01:d7:ac:bc:8a:8e:8d:07: 58:15:8a:1e:f0:49:c8:95:7e:24:0a:bd:af:8f:2d:03:a4:9e: a0:29:8e:d7:78:94:0f:b7:ab:7f:35:3f:43:00:02:70:db:5b: fb:c6:f2:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyZ7gW5KRS0fMnSS9uODlEs3bYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0 N0IwMzRDMjAeFw0yNjAxMjUwOTI2MzhaFw0yNjAxMjgxMDMwMzhaMDMxMTAvBgNV BAMTKDhDMzJDNkEzNDFEQzEzNzkyOENBQzIwMkQxNjlGMDRCRUM0QjZGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXxWnaGccZYvDRLNi+LHVnuwy 24qX5xb3dRBribLZ19y/BM+TXObZSKt5NVVtXNPBxJUd7AiM3bSXZiYTuSM+ApuE CCUdEWzBMqUkaQgXYcPgYg7XBF8KjweEBzu1k5sB/uPOVnk7lnqiIsn99Bt2LXHl d5awfacUBWo4JtWLQQLSPhs6TcJ1xJqwYSkzNeVqh2lc6dW33aGyayCRKWIzzjWM vFO/Mjw2g+dLo3X1oLJEfbmoaQW95e+JmkWURttBVN/blrnpYcMS1gEOlG0aVdux 1ZdjYLspWRGSGWB6KAlRq2xqPPESdCxGV6Sp8R0EZA5GBMW91lN6Yma6VmqpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDLGo0HcE3koysIC0WnwS+xLb30wHwYDVR0j BBgwFoAUPX6neI4CXhLe/RjusnivbUewNMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzcwZmVlYi0yY2FhLTQ3NmEtYWI0My1mNjUyYTExZmQwOGMvMC8zRDdFQTc3ODhF MDI1RTEyREVGRDE4RUVCMjc4QUY2RDQ3QjAzNEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFGNkQ0N0Iw MzRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3MGZlZWItMmNhYS00NzZhLWFi NDMtZjY1MmExMWZkMDhjLzAvM0Q3RUE3Nzg4RTAyNUUxMkRFRkQxOEVFQjI3OEFG NkQ0N0IwMzRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSWw/ixdY6WMvm9yS0HqOu6MJp4K+pCgT/d wB1mPazci2pOK+M7TVQTVRnCj9bBGz6iePa44+dwLEpLMPBC0K4LQzOaXhM+QCBp zczt+CIdIkTXM0rmv1hqOQiw5pIoQ9b8c9ybJ6casSzuage8mOnWta5DsomOTHs5 n0r51Lg9nsS74014SiE70uD4BXYG66xjgAzgmIEy8GX6HW5mMcKS7vTzGfMzKaeV BL+OpRwATW30eDp/qnyYwnNG/hyKmiIUGaSQ6ckXanWCdwPDSMcB16y8io6NB1gV ih7wSciVfiQKva+PLQOknqApjtd4lA+3q381P0MAAnDbW/vG8lA= -----END CERTIFICATE-----Generated at Mon Jan 26 02:17:03 2026 by rpki-client