This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: 5yXlAD3JLBdTaJ6SnntJHc6KGeE0bURysjn8CB3inh4= Subject key identifier: 44:0E:05:27:8D:19:7E:75:95:A0:48:B2:24:73:C6:32:73:2A:58:C1 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 5E8ED4289FE757CB44A7FC6FE475462D45B10B46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02B2 Signing time: Sat 24 Jan 2026 06:52:01 +0000 Manifest this update: Sat 24 Jan 2026 06:47:01 +0000 Manifest next update: Tue 27 Jan 2026 13:38:01 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: RVk1Xf+fSh0R62z4nh5n0Vl9t2XE0NL367YYsp1QM1g=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 3: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) 4: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8e:d4:28:9f:e7:57:cb:44:a7:fc:6f:e4:75:46:2d:45:b1:0b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Jan 24 06:47:01 2026 GMT Not After : Jan 27 13:38:01 2026 GMT Subject: CN=440E05278D197E7595A048B22473C632732A58C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:23:a8:b0:ba:e1:20:a1:eb:c0:f5:2e:6a: 0f:94:c6:5c:de:c0:73:da:b4:cc:a9:ce:70:6f:90: aa:f1:c4:22:5f:91:71:92:fc:40:06:7f:16:7a:af: ee:18:e7:28:1c:39:71:21:db:c9:0b:0f:06:e9:46: 10:56:e3:3d:fe:35:27:50:f2:45:b3:59:b7:61:10: dd:bb:97:3b:0e:d7:e2:19:39:24:69:03:44:3c:91: 1a:41:f8:52:48:2e:4e:be:7e:e2:41:91:cb:0b:55: e6:39:3d:12:04:b4:28:9c:78:07:5c:9c:63:42:00: 97:cd:36:17:8a:ff:af:96:ee:a6:0c:be:bd:fa:f6: 20:fc:a1:d7:aa:cb:7b:72:25:0f:0e:76:ae:d1:9f: 9b:d6:28:b3:eb:82:b8:99:62:55:ec:72:3c:f7:39: f8:f5:73:10:bb:1e:8f:f2:46:b3:0c:20:fb:3c:9d: 92:3a:fa:5d:e4:26:78:f9:9d:19:16:3a:03:f9:50: 40:19:6a:f1:04:82:0d:9f:44:1b:b9:65:92:44:c2: 48:1a:b7:f9:c1:0e:92:72:1c:77:d3:b3:aa:c0:a7: 2f:4c:c8:8b:ac:04:26:1a:83:c5:ed:82:53:fb:51: 58:6a:db:60:1c:7e:88:ca:de:b7:b2:68:39:e6:a9: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0E:05:27:8D:19:7E:75:95:A0:48:B2:24:73:C6:32:73:2A:58:C1 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ad:65:d5:88:7d:c9:ba:a7:b4:25:b5:3d:5d:8d:93:61:10: 38:90:5a:eb:22:d6:53:4a:5d:b2:a1:3f:83:f4:a2:07:c7:63: fb:d8:5a:f9:e5:b9:dc:d5:ce:86:4a:a8:11:cf:4d:0a:14:c1: be:23:19:85:81:9d:ef:b4:39:54:00:0e:04:e7:38:5d:93:b7: ce:da:f1:80:b3:2f:87:92:6f:b5:4c:59:46:13:f1:37:21:d0: 1c:b1:c7:d4:dc:dc:95:ef:da:64:9f:b0:06:61:b6:83:12:8a: 1b:34:b7:c6:f5:00:92:ae:7f:29:ba:d9:e0:55:c8:64:5b:d5: 13:8a:42:9e:e1:c3:62:35:fc:c8:28:94:91:c0:21:bf:0a:f8: 39:6e:e9:6f:9d:21:89:4a:38:8b:e5:7e:49:85:51:b9:c6:0e: de:a7:7d:16:5c:41:57:46:fe:33:b4:c8:82:df:b5:e7:f1:e4: 9e:2a:9d:aa:64:ba:6a:b8:30:76:f2:a5:b0:90:a1:8c:fb:33: cc:54:05:fb:a0:ed:cd:d6:b6:c6:c8:8f:71:ae:71:5d:20:76: 5e:4d:dd:79:30:76:eb:2d:4a:20:ba:dd:20:30:40:85:83:63: fc:a4:37:53:f5:e6:ca:ce:a1:4f:8c:a3:81:b2:93:e4:6d:8f: 7e:93:6b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXo7UKJ/nV8tEp/xv5HVGLUWxC0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNjAxMjQwNjQ3MDFaFw0yNjAxMjcxMzM4MDFaMDMxMTAvBgNV BAMTKDQ0MEUwNTI3OEQxOTdFNzU5NUEwNDhCMjI0NzNDNjMyNzMyQTU4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgCOosLrhIKHrwPUuag+Uxlze wHPatMypznBvkKrxxCJfkXGS/EAGfxZ6r+4Y5ygcOXEh28kLDwbpRhBW4z3+NSdQ 8kWzWbdhEN27lzsO1+IZOSRpA0Q8kRpB+FJILk6+fuJBkcsLVeY5PRIEtCiceAdc nGNCAJfNNheK/6+W7qYMvr369iD8odeqy3tyJQ8Odq7Rn5vWKLPrgriZYlXscjz3 Ofj1cxC7Ho/yRrMMIPs8nZI6+l3kJnj5nRkWOgP5UEAZavEEgg2fRBu5ZZJEwkga t/nBDpJyHHfTs6rApy9MyIusBCYag8XtglP7UVhq22AcfojK3reyaDnmqdIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURA4FJ40ZfnWVoEiyJHPGMnMqWMEwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAytZdWIfcm6p7QltT1djZNhEDiQWusi1lNK XbKhP4P0ogfHY/vYWvnludzVzoZKqBHPTQoUwb4jGYWBne+0OVQADgTnOF2Tt87a 8YCzL4eSb7VMWUYT8Tch0Byxx9Tc3JXv2mSfsAZhtoMSihs0t8b1AJKufym62eBV yGRb1ROKQp7hw2I1/MgolJHAIb8K+Dlu6W+dIYlKOIvlfkmFUbnGDt6nfRZcQVdG /jO0yILftefx5J4qnapkumq4MHbypbCQoYz7M8xUBfug7c3WtsbIj3GucV0gdl5N 3XkwdustSiC63SAwQIWDY/ykN1P15srOoU+Mo4Gyk+Rtj36Ta4I= -----END CERTIFICATE-----Generated at Sun Jan 25 22:09:43 2026 by rpki-client