This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
File: 3E0D060F214DF8E6493243033EBD30ABD627ED36.mft (raw, json)
Hash identifier: fTje3u+cCVKpzo7AuFqat8p5dJgCVIINW2sTTOHPgMA=
Subject key identifier: AC:5B:31:6D:56:30:3D:94:8E:AE:44:22:D7:B1:05:9F:D6:8B:2E:3C
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Certificate issuer: /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial: 567B9975066FE7F2D88BFAF8D4AB6C7CDC466482
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
Manifest number: 038E
Signing time: Fri 23 Jan 2026 10:21:26 +0000
Manifest this update: Fri 23 Jan 2026 10:16:26 +0000
Manifest next update: Mon 26 Jan 2026 18:04:26 +0000
Files and hashes: 1: 3130332e36362e34362e302f32342d3234203d3e203233363934.roa (hash: xxFYLgnOs6wDgHlT3HJi54CQjUA2KWj+T7DvpjE3DPU=)
2: 3130332e36362e34372e302f32342d3234203d3e203233363934.roa (hash: jx7v0Idpebq1Ou6PCUn6oQ0kEGw/RyRx4sL+jxJLcZU=)
3: 323030313a6466323a623230303a3a2f34382d3438203d3e203233363934.roa (hash: CbVKZtVYvVOggDO1uOKPHPfiUdMOnMjVJFDe5xCk8Yw=)
4: 3130332e36362e34342e302f32342d3234203d3e203233363934.roa (hash: weBnxCBwkaeNxkdjFOdohMOR+sXn3+vCk0UPpAqaQI8=)
5: 3130332e36362e34342e302f32332d3233203d3e203233363934.roa (hash: JWZBNDnWrENdctaqQmnbVevM+3EqtVlewochx0EfS+s=)
6: 3130332e36362e34352e302f32342d3234203d3e203233363934.roa (hash: 3D9vuP9WnybAIy/tjpIyzYKT6Y/ASbbbLJ7Kn+x1z7Q=)
7: 3130332e36362e34362e302f32332d3233203d3e203233363934.roa (hash: Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=)
8: 3130332e36362e34342e302f32322d3232203d3e203233363934.roa (hash: fOY5dkAcQph8EWJTLprRbPuleZdE/MLjzsb7GZ9f9kI=)
9: 3E0D060F214DF8E6493243033EBD30ABD627ED36.crl (hash: t7mP608gGC//D6KTYuQCauLcTzMg3No4ZMJRDVJljzo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Jan 2026 18:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:7b:99:75:06:6f:e7:f2:d8:8b:fa:f8:d4:ab:6c:7c:dc:46:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Validity
Not Before: Jan 23 10:16:26 2026 GMT
Not After : Jan 26 18:04:26 2026 GMT
Subject: CN=AC5B316D56303D948EAE4422D7B1059FD68B2E3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:0c:98:7c:c5:af:a9:05:f4:3c:04:65:cd:
b4:e2:3d:45:f8:7f:da:0e:07:e6:0a:45:fd:18:37:
13:9a:6d:8f:8d:16:09:55:fc:94:c0:77:5b:a0:7f:
40:d7:34:38:6a:28:29:9e:6e:33:db:85:30:d1:52:
b7:30:f3:93:38:65:59:97:a3:3a:c5:1e:a6:de:e2:
51:0e:b5:57:c9:8d:77:ab:34:af:a8:47:d0:3f:2d:
c9:f2:d7:1b:f4:53:33:07:36:06:be:79:9e:82:01:
18:e0:db:85:d6:0f:af:64:e3:6e:de:e3:ff:1d:3e:
2a:86:0c:93:ef:04:3c:e4:6b:f0:c8:c4:55:57:ef:
3c:59:83:13:6f:1d:f3:49:e1:56:c4:8d:cd:10:0a:
4a:23:53:c2:98:b4:82:c0:3d:d1:53:cf:5c:e3:84:
f0:de:5a:b6:26:d8:a4:90:8d:c3:67:8f:24:65:7c:
44:d0:ae:b8:37:6d:9a:7b:a9:c7:2f:47:ae:7f:66:
0b:56:00:9f:75:e7:6f:e2:bf:1c:f7:13:87:24:c2:
87:b8:a2:82:5b:81:29:15:67:e6:cb:ad:8b:5e:68:
cd:79:89:78:22:f0:62:37:7c:3c:83:0a:40:62:82:
de:10:75:dc:3a:c3:a9:3f:c8:95:7e:d8:9e:69:4f:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:31:6D:56:30:3D:94:8E:AE:44:22:D7:B1:05:9F:D6:8B:2E:3C
X509v3 Authority Key Identifier:
keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6b:c6:05:18:a3:81:9c:d0:a4:7c:69:f8:be:4e:f5:03:5f:
8b:7f:bf:16:4b:78:2b:50:3a:91:e7:91:a5:3f:ca:17:a5:36:
3d:c5:ef:0d:58:28:66:fe:ee:04:a8:ad:ca:75:01:e4:ae:42:
28:cf:c3:fb:30:57:23:a6:06:b8:56:ad:9c:15:08:3e:0a:67:
65:3e:d6:69:09:33:85:80:4c:90:f2:c1:2e:43:56:3d:27:39:
2b:68:4f:94:b6:89:17:fc:ee:49:8e:42:8e:93:49:67:b4:01:
fa:a4:3e:dc:c3:75:20:1c:44:54:83:cd:5a:1a:42:57:3c:6c:
d4:de:5e:48:db:25:b0:e9:ac:ea:ad:61:64:9d:79:c3:ac:d5:
c5:b6:e7:91:d3:b5:24:44:6b:45:53:9a:1a:bf:52:c0:35:7e:
8c:c8:38:bd:79:29:2b:7c:a4:3a:00:1a:7e:c9:6d:de:9b:ee:
3e:b0:9d:3e:9f:79:22:47:7e:82:b6:26:cc:90:5f:8e:a4:a6:
c8:7d:0b:a2:c7:ff:9e:bc:4a:d2:ea:14:23:eb:3e:03:19:31:
bb:64:ed:21:82:44:0a:9e:a0:0f:64:7f:41:2b:3d:ce:46:a2:
6c:d1:d8:df:d1:23:27:ee:61:1c:3e:8e:f8:36:56:0d:96:50:
61:10:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:48:14 2026 by rpki-client