This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: pOmshEwMi2iJ2zC15fMRuQWaGrjN1Jlpti0w09Ch1gQ= Subject key identifier: 9B:92:9F:2D:D5:B5:39:26:11:A7:BF:1E:C5:FE:0F:09:1E:BA:08:FC Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 75C0D45F6AC65C7B4F13AC8412B2F619140F0BC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01F3 Signing time: Sun 25 Jan 2026 06:20:45 +0000 Manifest this update: Sun 25 Jan 2026 06:15:45 +0000 Manifest next update: Wed 28 Jan 2026 16:31:45 +0000 Files and hashes: 1: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: K3onSD63X9WZ+nPQ+af3qZ+Hw5T7ZcQriYKK8nGXbfo=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=) 3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c0:d4:5f:6a:c6:5c:7b:4f:13:ac:84:12:b2:f6:19:14:0f:0b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Jan 25 06:15:45 2026 GMT Not After : Jan 28 16:31:45 2026 GMT Subject: CN=9B929F2DD5B5392611A7BF1EC5FE0F091EBA08FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:16:bc:50:99:b1:4c:4e:48:4f:33:ac:f1:62: d5:b3:8f:16:3a:af:8b:98:38:d2:db:8b:94:d6:30: da:51:63:b1:91:95:ff:2f:ea:48:24:a5:f0:ec:61: 3d:7f:6f:b0:2b:95:99:b9:d5:73:75:e1:03:e9:41: da:ad:86:82:2f:77:a8:f6:a6:2a:6d:9b:de:71:7e: 6b:05:e7:24:93:fa:a6:cb:48:4e:39:d2:8e:76:0c: 6e:08:57:ad:dd:05:f4:bb:9a:59:4b:23:64:ff:30: da:d8:61:58:2d:e1:63:17:fc:93:d3:b3:31:e7:f2: 5e:4d:da:f4:cf:a0:bb:99:1c:d2:ef:94:4f:4c:c0: 5d:d5:1e:37:08:a3:84:12:e5:a8:63:dc:33:20:bc: 49:3a:48:02:4a:ac:db:bf:0f:66:98:b8:82:b6:ad: 43:08:57:f9:cc:11:c1:1e:6f:74:20:42:6b:42:96: ca:75:17:c4:50:c3:b5:8b:d4:e2:3e:83:e5:9b:6b: 94:51:ce:f2:88:07:48:1a:fe:27:11:57:b0:1f:a3: 8f:ba:5d:47:3d:c7:33:3e:1a:28:76:0d:04:d8:f1: e0:dc:84:c8:80:2e:96:a1:a9:4e:79:b6:32:a3:df: f3:53:ea:3e:e2:19:6a:70:70:ca:8b:1a:d3:0c:6b: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:9F:2D:D5:B5:39:26:11:A7:BF:1E:C5:FE:0F:09:1E:BA:08:FC X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9c:af:52:c6:06:e2:3e:9b:47:ae:08:5d:10:c0:af:f9:66: 88:76:63:d0:06:e9:ba:4a:c5:db:b0:bd:12:b1:54:72:e1:62: 29:24:4e:1e:cf:d7:4f:e0:51:51:d1:3b:a8:f5:41:a7:9f:0b: 5e:1d:06:81:0b:cb:42:cb:7f:c5:8d:50:a8:6b:59:a8:10:01: d3:ba:06:21:aa:63:9a:2c:f8:7a:fa:6b:34:19:57:ab:a2:68: 23:e8:15:2b:2b:45:0e:06:af:92:a8:95:ee:df:35:90:bc:d2: c3:04:8a:bb:c1:8c:ba:f1:1a:83:f0:6c:74:c5:36:50:dd:94: b2:08:60:26:28:e6:ce:9a:c3:74:6e:22:de:1b:c0:d7:0d:c5: 8b:03:07:b5:02:a6:40:08:b4:01:2a:f0:fe:8b:b8:da:d2:3a: 9d:ae:bd:ee:e5:4d:e0:2c:bf:c9:c6:4f:0a:7a:a6:79:c0:21: 44:f1:0b:05:ac:06:17:17:d7:b7:d8:cb:f5:0c:ee:81:49:f8: a2:0d:81:29:25:c9:a9:e8:bd:51:7c:a1:33:da:38:50:b2:93: 6c:3e:6b:a1:a8:b9:83:4f:78:f1:36:a9:13:bd:d8:ff:de:73: b5:e4:29:e6:b9:b9:e5:7c:88:39:0c:6d:47:77:c6:34:55:47: 76:8e:f2:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcDUX2rGXHtPE6yEErL2GRQPC8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNjAxMjUwNjE1NDVaFw0yNjAxMjgxNjMxNDVaMDMxMTAvBgNV BAMTKDlCOTI5RjJERDVCNTM5MjYxMUE3QkYxRUM1RkUwRjA5MUVCQTA4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAFrxQmbFMTkhPM6zxYtWzjxY6 r4uYONLbi5TWMNpRY7GRlf8v6kgkpfDsYT1/b7ArlZm51XN14QPpQdqthoIvd6j2 piptm95xfmsF5yST+qbLSE450o52DG4IV63dBfS7mllLI2T/MNrYYVgt4WMX/JPT szHn8l5N2vTPoLuZHNLvlE9MwF3VHjcIo4QS5ahj3DMgvEk6SAJKrNu/D2aYuIK2 rUMIV/nMEcEeb3QgQmtClsp1F8RQw7WL1OI+g+Wba5RRzvKIB0ga/icRV7Afo4+6 XUc9xzM+Gih2DQTY8eDchMiALpahqU55tjKj3/NT6j7iGWpwcMqLGtMMa/xVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5KfLdW1OSYRp78exf4PCR66CPwwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqcr1LGBuI+m0euCF0QwK/5Zoh2Y9AG6bpK xduwvRKxVHLhYikkTh7P10/gUVHRO6j1QaefC14dBoELy0LLf8WNUKhrWagQAdO6 BiGqY5os+Hr6azQZV6uiaCPoFSsrRQ4Gr5Kole7fNZC80sMEirvBjLrxGoPwbHTF NlDdlLIIYCYo5s6aw3RuIt4bwNcNxYsDB7UCpkAItAEq8P6LuNrSOp2uve7lTeAs v8nGTwp6pnnAIUTxCwWsBhcX17fYy/UM7oFJ+KINgSklyanovVF8oTPaOFCyk2w+ a6GouYNPePE2qRO92P/ec7XkKea5ueV8iDkMbUd3xjRVR3aO8js= -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:15 2026 by rpki-client