This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: 2t9tmw6OjFjShcllfAp++LAVgJtvTBkefr9v8SYmTdk= Subject key identifier: 35:40:16:2E:F7:52:17:40:9E:C8:5D:83:04:E3:80:6C:0F:83:C2:B0 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 1C06F82C1B8222FECADEBD3DDD6E2DF2812108AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0543 Signing time: Fri 23 Jan 2026 13:10:40 +0000 Manifest this update: Fri 23 Jan 2026 13:05:40 +0000 Manifest next update: Mon 26 Jan 2026 19:26:40 +0000 Files and hashes: 1: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) 2: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 3: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 4: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: q8/m0o7FUHuYhsLK45LuGv/Xg/aKPpSRNvbqC+UJIpE=) 5: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:06:f8:2c:1b:82:22:fe:ca:de:bd:3d:dd:6e:2d:f2:81:21:08:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Jan 23 13:05:40 2026 GMT Not After : Jan 26 19:26:40 2026 GMT Subject: CN=3540162EF75217409EC85D8304E3806C0F83C2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:77:41:52:5b:9f:9d:c8:02:ca:3f:27:29: a4:30:b0:f2:32:b6:f1:ef:51:6d:5b:07:00:54:1a: 6d:6a:5f:d0:a5:ee:9d:02:2f:a9:27:c1:71:0a:f7: 32:7b:ac:ba:b7:43:25:cb:74:73:2f:e6:51:ed:55: ed:60:19:86:e8:fb:d4:51:44:ec:a4:58:60:22:f7: 95:94:c8:90:6b:97:89:a9:b8:43:32:1f:2d:75:9e: 7c:01:27:14:3e:0e:1c:fb:47:5e:12:a4:05:2c:78: 8c:1e:2b:c1:c9:e9:f2:d8:a8:46:db:b0:79:6c:d8: 81:cf:f0:d1:8c:0b:48:fc:73:f2:b2:7a:01:40:68: 87:02:65:80:6e:cb:ab:a0:25:ed:00:d0:dd:5f:40: dd:df:88:cc:e9:ca:d9:91:22:fb:98:67:b7:40:16: bb:9c:1b:9f:ad:5a:5e:de:94:69:48:36:05:66:33: 8e:e1:89:88:02:82:e5:56:75:32:93:c8:10:ea:71: c6:ed:1a:93:6d:ff:6b:49:67:7d:82:77:b3:e9:60: 40:d3:f9:92:0c:29:a1:ac:b1:c9:30:64:4a:4d:2c: be:fc:f1:9d:df:a9:9f:ee:5d:fd:58:c7:ef:fd:2a: 75:ed:3e:14:01:1b:53:c2:98:13:0f:b2:4d:24:6b: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:16:2E:F7:52:17:40:9E:C8:5D:83:04:E3:80:6C:0F:83:C2:B0 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:12:8e:89:f1:93:56:18:45:91:eb:7d:a9:54:49:9c:b2:f4: 1b:3e:98:ea:45:21:52:5e:70:43:06:93:20:2c:cf:55:24:fd: ad:29:57:fd:14:de:03:ee:24:22:0a:4e:74:d4:4a:09:24:61: 7c:a2:5a:99:36:3a:ec:bb:5a:ee:7d:f7:5f:b6:82:45:9c:83: cb:dc:67:fe:62:00:a3:c0:aa:5c:9a:2b:71:de:85:e2:89:60: af:06:86:46:c8:45:13:dd:9c:be:64:6a:e1:4c:45:10:3a:79: b5:ee:72:b6:40:0c:2c:aa:b8:70:54:00:d7:24:c3:89:70:a6: 5b:63:d8:88:c6:4d:d9:c5:cc:68:59:ad:c0:f2:80:c3:35:34: a3:9e:f6:ea:29:35:e8:22:6e:44:01:93:f8:8c:cd:8c:87:0a: f9:9d:00:14:f8:34:34:30:e6:83:06:12:73:b5:f0:93:8e:e1: 5a:39:e2:3a:9f:a9:26:e2:8c:b1:a6:16:d0:7c:d5:1f:a1:8e: 61:9f:38:f8:24:65:bf:b4:cb:6f:c5:fb:ba:f8:ac:2a:91:00: 72:c1:0e:4a:ee:c1:ed:47:68:9a:53:b6:1e:75:6e:88:c7:f9: 55:75:9d:ea:63:3c:c2:99:6f:89:6a:e2:47:06:23:71:b6:94: 6c:d8:54:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAb4LBuCIv7K3r093W4t8oEhCK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNjAxMjMxMzA1NDBaFw0yNjAxMjYxOTI2NDBaMDMxMTAvBgNV BAMTKDM1NDAxNjJFRjc1MjE3NDA5RUM4NUQ4MzA0RTM4MDZDMEY4M0MyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/3dBUlufncgCyj8nKaQwsPIy tvHvUW1bBwBUGm1qX9Cl7p0CL6knwXEK9zJ7rLq3QyXLdHMv5lHtVe1gGYbo+9RR ROykWGAi95WUyJBrl4mpuEMyHy11nnwBJxQ+Dhz7R14SpAUseIweK8HJ6fLYqEbb sHls2IHP8NGMC0j8c/KyegFAaIcCZYBuy6ugJe0A0N1fQN3fiMzpytmRIvuYZ7dA FrucG5+tWl7elGlINgVmM47hiYgCguVWdTKTyBDqccbtGpNt/2tJZ32Cd7PpYEDT +ZIMKaGssckwZEpNLL788Z3fqZ/uXf1Yx+/9KnXtPhQBG1PCmBMPsk0ka0VxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNUAWLvdSF0CeyF2DBOOAbA+DwrAwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4Sjonxk1YYRZHrfalUSZyy9Bs+mOpFIVJe cEMGkyAsz1Uk/a0pV/0U3gPuJCIKTnTUSgkkYXyiWpk2Ouy7Wu5991+2gkWcg8vc Z/5iAKPAqlyaK3HeheKJYK8GhkbIRRPdnL5kauFMRRA6ebXucrZADCyquHBUANck w4lwpltj2IjGTdnFzGhZrcDygMM1NKOe9uopNegibkQBk/iMzYyHCvmdABT4NDQw 5oMGEnO18JOO4Vo54jqfqSbijLGmFtB81R+hjmGfOPgkZb+0y2/F+7r4rCqRAHLB Dkruwe1HaJpTth51bojH+VV1nepjPMKZb4lq4kcGI3G2lGzYVCI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:19:07 2026 by rpki-client