This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft
File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json)
Hash identifier: z12n3QV+3BpYpT4usYVpgIl0YJZ+4z/fJYlik3dVpjk=
Subject key identifier: 7D:A9:89:A6:2C:C4:3A:50:FA:39:B4:CC:4C:41:CC:2A:FB:E2:95:74
Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85
Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85
Certificate serial: 575143A7BE936EEC8C3201002361FE22167831F4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft
Manifest number: 0150
Signing time: Sat 24 Jan 2026 09:31:15 +0000
Manifest this update: Sat 24 Jan 2026 09:26:15 +0000
Manifest next update: Tue 27 Jan 2026 18:08:15 +0000
Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: HE3JU+BbQ1GXZ/Ze5Jt6FLA2858cPohy/MbqE/uKm14=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl
rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 18:08:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:51:43:a7:be:93:6e:ec:8c:32:01:00:23:61:fe:22:16:78:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85
Validity
Not Before: Jan 24 09:26:15 2026 GMT
Not After : Jan 27 18:08:15 2026 GMT
Subject: CN=7DA989A62CC43A50FA39B4CC4C41CC2AFBE29574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:14:da:e7:c8:7d:14:96:48:44:c6:c8:9f:7a:
41:9b:c0:66:cf:b5:8b:cc:a1:ac:42:29:1e:4b:6a:
96:a8:59:37:f5:19:eb:2b:17:19:65:d3:a1:11:b1:
a5:fc:43:b0:83:e5:36:07:24:f3:11:c9:18:0f:ce:
cc:64:3f:bb:fc:e0:51:e1:4c:a1:2b:3b:4c:c9:dc:
73:1c:94:55:d8:81:8a:65:86:a3:0a:d3:da:54:a7:
0b:d8:b5:52:63:ba:2f:39:c6:cb:f4:88:64:a0:3c:
59:40:5f:1c:2a:08:07:e3:43:f5:e2:70:87:29:48:
ab:dc:87:90:87:98:51:7c:34:fd:00:f4:12:e8:ef:
f8:ff:fb:06:31:42:e8:75:92:7c:ef:c9:db:c9:f0:
83:3c:75:ff:b2:4f:9f:a6:db:5d:c5:87:06:aa:d8:
09:ad:94:42:67:ed:df:35:28:e2:62:1d:f7:de:a8:
d3:af:f6:78:7f:b9:9e:1d:2e:1f:53:69:d7:df:7f:
34:22:ac:7c:b5:24:fc:b2:56:bd:40:9f:8f:38:c4:
d7:1d:f3:96:68:e0:14:e9:28:8d:8c:58:93:48:61:
5c:9e:a3:e3:cb:49:eb:2c:5f:5f:f3:c4:56:3f:ac:
03:a5:27:9e:8b:93:e8:c1:da:eb:d2:42:b8:51:43:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A9:89:A6:2C:C4:3A:50:FA:39:B4:CC:4C:41:CC:2A:FB:E2:95:74
X509v3 Authority Key Identifier:
keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e1:25:17:10:9c:c7:90:a5:d6:4c:1c:18:c2:a7:31:0d:7d:
01:16:32:51:f3:37:3a:ee:97:c7:0d:83:c7:08:35:4c:a0:0d:
b6:53:2f:94:9c:b5:59:f9:bf:f7:b2:38:b1:37:70:35:36:d9:
74:43:62:c3:5f:28:72:0b:dc:da:1f:c4:ab:7b:0a:8c:78:c4:
7f:f0:c4:cb:7d:e0:59:2b:a9:17:bc:fd:c1:aa:77:7c:ec:2a:
2b:6b:d3:34:6d:74:ad:ba:90:68:23:f0:e7:87:ff:97:fd:c1:
32:c1:56:5b:2f:f3:3d:5b:8c:c6:d6:21:4d:3c:aa:74:6e:2b:
4d:f4:db:6c:55:20:06:19:d0:96:7b:03:96:79:42:8c:3a:30:
a4:42:da:e1:91:d6:ed:cf:e7:1e:31:88:84:de:1c:c0:03:fd:
ee:41:60:0d:a3:bd:1b:63:43:f8:54:35:21:f9:45:ec:24:50:
d2:58:9f:b2:fa:e7:65:0d:fc:8c:a8:b7:2a:97:58:ab:5c:1a:
78:6b:b4:59:ae:03:f1:33:d3:e5:38:a9:53:b2:19:75:fe:55:
e4:b6:4f:52:dd:63:08:bb:92:ca:cc:53:5c:a7:19:f6:4c:a7:
d5:aa:3f:66:c6:6d:7c:21:19:5c:7a:ef:8a:8d:1a:20:a5:79:
78:d3:5e:84
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUV1FDp76TbuyMMgEAI2H+IhZ4MfQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My
Rjc4REU4NTAeFw0yNjAxMjQwOTI2MTVaFw0yNjAxMjcxODA4MTVaMDMxMTAvBgNV
BAMTKDdEQTk4OUE2MkNDNDNBNTBGQTM5QjRDQzRDNDFDQzJBRkJFMjk1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFNrnyH0UlkhExsifekGbwGbP
tYvMoaxCKR5LapaoWTf1GesrFxll06ERsaX8Q7CD5TYHJPMRyRgPzsxkP7v84FHh
TKErO0zJ3HMclFXYgYplhqMK09pUpwvYtVJjui85xsv0iGSgPFlAXxwqCAfjQ/Xi
cIcpSKvch5CHmFF8NP0A9BLo7/j/+wYxQuh1knzvydvJ8IM8df+yT5+m213Fhwaq
2AmtlEJn7d81KOJiHffeqNOv9nh/uZ4dLh9TadfffzQirHy1JPyyVr1An484xNcd
85Zo4BTpKI2MWJNIYVyeo+PLSessX1/zxFY/rAOlJ56Lk+jB2uvSQrhRQwCJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfamJpizEOlD6ObTMTEHMKvvilXQwHwYDVR0j
BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG
OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4
REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz
ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE
N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJLhJRcQnMeQpdZMHBjCpzENfQEWMlHzNzru
l8cNg8cINUygDbZTL5SctVn5v/eyOLE3cDU22XRDYsNfKHIL3NofxKt7Cox4xH/w
xMt94FkrqRe8/cGqd3zsKitr0zRtdK26kGgj8OeH/5f9wTLBVlsv8z1bjMbWIU08
qnRuK03022xVIAYZ0JZ7A5Z5Qow6MKRC2uGR1u3P5x4xiITeHMAD/e5BYA2jvRtj
Q/hUNSH5RewkUNJYn7L652UN/IyotyqXWKtcGnhrtFmuA/Ez0+U4qVOyGXX+VeS2
T1LdYwi7ksrMU1ynGfZMp9WqP2bGbXwhGVx674qNGiCleXjTXoQ=
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:47:30 2026 by rpki-client