This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json) Hash identifier: Ei3KXWDxyKotbwFaE4rnc8WjHcza+Pvkp18fSTlDKBk= Subject key identifier: B2:13:68:F8:1F:DE:E7:0A:FF:F4:A6:01:2A:93:8E:74:9E:0A:1A:2B Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744 Certificate serial: 5694225B95E782A6CA11A315284185B27095330B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft Manifest number: 01C4 Signing time: Sat 24 Jan 2026 23:11:52 +0000 Manifest this update: Sat 24 Jan 2026 23:06:52 +0000 Manifest next update: Wed 28 Jan 2026 09:32:52 +0000 Files and hashes: 1: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=) 2: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=) 3: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=) 4: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: ZIi+qGCwpGf+V8MXHo/nPYE5sDwN8lGMnCL5tOd9fyk=) 5: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:94:22:5b:95:e7:82:a6:ca:11:a3:15:28:41:85:b2:70:95:33:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BA10823C279932D7573B930625CD2884433C744 Validity Not Before: Jan 24 23:06:52 2026 GMT Not After : Jan 28 09:32:52 2026 GMT Subject: CN=B21368F81FDEE70AFFF4A6012A938E749E0A1A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:42:d0:d9:55:cd:cf:7c:01:c3:10:e6:d3: f9:2b:bf:09:f5:02:2c:3c:9c:9f:df:cc:9f:14:7f: c4:7f:0e:7f:8c:93:5b:44:b4:78:2a:39:07:9a:bb: db:e4:c7:c6:73:91:21:de:81:df:7b:38:f5:f3:05: dc:6c:28:bc:d5:29:93:b3:cf:0c:6a:93:2d:86:5b: 02:2d:f0:54:ed:0b:11:3e:1a:f9:35:6b:c7:52:08: ea:3d:e1:a4:3f:7c:85:5d:6d:61:be:d0:1b:d9:c0: 5c:7b:7c:4e:fa:85:24:84:58:66:fc:22:fc:e6:13: 7e:16:ad:f3:9a:01:95:3d:22:c3:12:3f:34:39:6f: c6:af:cb:fe:bc:12:6a:d0:d8:6e:f9:0f:79:b0:61: 33:db:e4:4f:1f:d0:9d:68:11:35:6a:d6:24:7a:52: 36:c6:8c:59:4c:c1:ee:f7:92:c1:2a:ee:82:e9:b3: 03:5b:2a:42:7b:31:f6:8b:7a:07:94:f9:e0:80:56: 9b:d9:b7:f3:a6:56:db:46:38:d5:ec:aa:9d:98:98: 91:a2:f7:fd:b8:8a:56:f6:70:df:99:f4:8d:04:ea: 3d:02:ed:b7:0b:3c:94:0e:d8:f0:56:75:27:40:7d: ec:4e:00:57:44:ed:49:20:6b:1e:d8:d1:ee:44:eb: c2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:13:68:F8:1F:DE:E7:0A:FF:F4:A6:01:2A:93:8E:74:9E:0A:1A:2B X509v3 Authority Key Identifier: keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:5c:ea:07:77:bb:61:a6:12:60:1f:3b:b5:12:49:d9:ae:13: b1:7f:71:a2:c4:7a:7f:00:04:d1:63:01:a6:94:33:25:7f:db: 1b:b5:31:d6:36:67:fd:ee:08:c1:f9:d8:f1:c8:7b:a5:1e:5c: d4:f4:95:8e:c5:6c:8d:7a:2c:9f:e5:a7:6e:bb:80:a3:90:09: 16:66:f6:c6:26:44:81:c5:88:d6:8e:60:4b:1f:c5:ef:9c:d6: a8:3b:0a:0d:d5:b6:6c:b7:05:a7:8a:29:49:5f:5c:f9:48:0e: 6c:11:7e:b6:3e:f2:84:b6:6a:95:75:b7:22:b7:76:a9:33:28: 5d:68:1e:a6:74:81:de:ed:bb:54:71:a5:fa:1c:cd:04:c5:50: 4c:b2:c0:5d:92:7e:84:84:f2:0a:47:48:5d:f5:af:4c:1b:59: 9c:0b:c1:ae:01:df:ea:80:88:19:a6:b7:c0:21:67:cb:70:4e: 7d:4e:49:f6:7e:36:f6:8e:3a:9e:ba:91:dc:28:d2:5d:1f:e5: e4:d3:b9:56:35:1d:a8:c8:be:ce:e9:0c:67:af:bc:ad:d6:56: 89:4c:b6:29:20:9b:19:7e:7b:99:d6:75:96:c6:51:ec:5e:73: 56:eb:6c:89:2c:af:f5:c8:1d:92:f0:93:ad:50:4d:1f:2e:c3: 8a:ad:7a:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpQiW5XngqbKEaMVKEGFsnCVMwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0 NDMzQzc0NDAeFw0yNjAxMjQyMzA2NTJaFw0yNjAxMjgwOTMyNTJaMDMxMTAvBgNV BAMTKEIyMTM2OEY4MUZERUU3MEFGRkY0QTYwMTJBOTM4RTc0OUUwQTFBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3ELQ2VXNz3wBwxDm0/krvwn1 Aiw8nJ/fzJ8Uf8R/Dn+Mk1tEtHgqOQeau9vkx8ZzkSHegd97OPXzBdxsKLzVKZOz zwxqky2GWwIt8FTtCxE+Gvk1a8dSCOo94aQ/fIVdbWG+0BvZwFx7fE76hSSEWGb8 IvzmE34WrfOaAZU9IsMSPzQ5b8avy/68EmrQ2G75D3mwYTPb5E8f0J1oETVq1iR6 UjbGjFlMwe73ksEq7oLpswNbKkJ7MfaLegeU+eCAVpvZt/OmVttGONXsqp2YmJGi 9/24ilb2cN+Z9I0E6j0C7bcLPJQO2PBWdSdAfexOAFdE7Ukgax7Y0e5E68J7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshNo+B/e5wr/9KYBKpOOdJ4KGiswHwYDVR0j BBgwFoAUO6EII8J5ky11c7kwYlzSiEQzx0QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmQ0OTE3OS00ZDhiLTRkMmQtYWJmNC00MzIzMWRlYjViMDEvMC8zQkExMDgyM0My Nzk5MzJENzU3M0I5MzA2MjVDRDI4ODQ0MzNDNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0QyODg0NDMz Qzc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJkNDkxNzktNGQ4Yi00ZDJkLWFi ZjQtNDMyMzFkZWI1YjAxLzAvM0JBMTA4MjNDMjc5OTMyRDc1NzNCOTMwNjI1Q0Qy ODg0NDMzQzc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNc6gd3u2GmEmAfO7USSdmuE7F/caLEen8A BNFjAaaUMyV/2xu1MdY2Z/3uCMH52PHIe6UeXNT0lY7FbI16LJ/lp267gKOQCRZm 9sYmRIHFiNaOYEsfxe+c1qg7Cg3Vtmy3BaeKKUlfXPlIDmwRfrY+8oS2apV1tyK3 dqkzKF1oHqZ0gd7tu1RxpfoczQTFUEyywF2SfoSE8gpHSF31r0wbWZwLwa4B3+qA iBmmt8AhZ8twTn1OSfZ+NvaOOp66kdwo0l0f5eTTuVY1HajIvs7pDGevvK3WVolM tikgmxl+e5nWdZbGUexec1brbIksr/XIHZLwk61QTR8uw4qtelU= -----END CERTIFICATE-----Generated at Mon Jan 26 01:19:56 2026 by rpki-client