This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: Z/MtzAJESQvhbINXpYruEFSVp6b+dLqJPwLxuKeYgxg= Subject key identifier: C6:DB:0D:6F:2E:6E:80:8C:F2:F0:1C:CD:DB:07:41:83:75:77:F6:AA Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 3AA3596830AEF02BAC3B4FB06732D0916F117706 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0253 Signing time: Sat 24 Jan 2026 01:20:03 +0000 Manifest this update: Sat 24 Jan 2026 01:15:03 +0000 Manifest next update: Tue 27 Jan 2026 09:06:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 2: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 3: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 4: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: p2auCglloWn6louofwUodNS1DYIUhSGdHhFs9EQ1kLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a3:59:68:30:ae:f0:2b:ac:3b:4f:b0:67:32:d0:91:6f:11:77:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Jan 24 01:15:03 2026 GMT Not After : Jan 27 09:06:03 2026 GMT Subject: CN=C6DB0D6F2E6E808CF2F01CCDDB0741837577F6AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:ad:56:69:ad:3a:99:43:0a:70:a4:76:9a: 0c:b3:f6:cf:15:c5:48:35:4f:3c:80:37:49:97:38: 55:f9:cb:cb:5b:e1:c1:39:73:f3:dc:a0:66:bc:73: af:9f:87:ea:b0:14:b7:fd:12:a5:08:2c:bb:37:f5: 79:9e:29:b1:74:40:d0:66:5a:aa:9b:95:87:27:26: 07:b5:e9:94:2e:ac:86:0d:f5:70:9f:0a:b8:ff:b6: 52:b5:ab:fe:a8:37:bd:20:e5:64:1c:d7:7d:0c:7a: bc:06:ea:11:9c:8f:e8:84:81:2e:70:f2:86:c9:20: 18:76:ba:36:91:30:8c:39:a1:5f:b7:ab:e5:d4:eb: 96:40:04:4a:bc:40:09:40:08:d1:7e:91:4e:eb:11: 54:ab:04:e1:97:ac:0c:36:58:61:e3:93:7b:25:d4: ee:27:04:b5:45:31:3d:d4:7f:95:7e:8f:02:60:5e: 4b:4d:e4:cc:dc:19:f3:ec:2e:e7:34:fd:cd:7c:69: a7:e0:39:da:65:11:b7:eb:de:d3:7b:96:0e:33:d4: d1:e8:75:8c:ea:9b:cf:bc:b5:86:4c:ff:bc:29:d7: ea:32:45:94:f4:e4:cf:c3:35:ab:14:2e:4a:23:2c: 74:41:4d:9a:25:59:84:fd:96:63:0d:f8:09:b4:61: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DB:0D:6F:2E:6E:80:8C:F2:F0:1C:CD:DB:07:41:83:75:77:F6:AA X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8b:af:d3:69:5b:af:97:db:01:7e:96:5c:b4:40:21:ce:ab: 2f:12:36:28:d8:fa:c6:f0:61:dc:41:19:06:8f:df:90:e5:c8: 6e:ec:79:81:8e:88:c6:d6:ab:a7:08:f2:90:75:b4:77:29:27: 3f:e8:21:0c:ff:dc:fa:f6:bd:0c:a1:a8:d6:e2:ae:ed:02:81: e4:c8:6f:22:fc:ca:1f:15:a5:db:1d:79:02:a4:b7:a7:b9:a8: 0e:78:77:a9:61:aa:eb:15:c6:a6:a6:46:05:a6:01:f2:6a:71: 24:4a:b8:90:0a:f8:e3:d5:72:78:47:32:99:8d:e2:e5:62:5a: 08:fd:d7:bc:82:0d:bc:ba:73:fb:9c:8c:0b:75:b4:fc:54:19: 14:d1:2e:5d:12:8b:67:15:48:f5:74:3d:59:01:01:b3:f8:b0: e3:f9:0b:d7:31:57:84:50:93:41:d3:0f:e6:2b:e7:e6:dc:02: 7a:18:e5:39:21:f2:ef:1d:ea:bf:5f:eb:7b:21:59:c3:65:e5: 38:6a:a4:13:45:79:d1:f6:ba:f8:e5:68:41:cb:58:f3:26:d0: f4:00:d0:86:42:ad:d1:6c:f2:00:22:82:ee:9a:01:ec:6e:69: 93:44:27:99:58:66:c3:73:e0:21:86:e2:46:0a:d9:a0:ee:f4: e3:17:c3:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqNZaDCu8CusO0+wZzLQkW8RdwYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNjAxMjQwMTE1MDNaFw0yNjAxMjcwOTA2MDNaMDMxMTAvBgNV BAMTKEM2REIwRDZGMkU2RTgwOENGMkYwMUNDRERCMDc0MTgzNzU3N0Y2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvq1Waa06mUMKcKR2mgyz9s8V xUg1TzyAN0mXOFX5y8tb4cE5c/PcoGa8c6+fh+qwFLf9EqUILLs39XmeKbF0QNBm WqqblYcnJge16ZQurIYN9XCfCrj/tlK1q/6oN70g5WQc130MerwG6hGcj+iEgS5w 8obJIBh2ujaRMIw5oV+3q+XU65ZABEq8QAlACNF+kU7rEVSrBOGXrAw2WGHjk3sl 1O4nBLVFMT3Uf5V+jwJgXktN5MzcGfPsLuc0/c18aafgOdplEbfr3tN7lg4z1NHo dYzqm8+8tYZM/7wp1+oyRZT05M/DNasULkojLHRBTZolWYT9lmMN+Am0YQV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxtsNby5ugIzy8BzN2wdBg3V39qowHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuLr9NpW6+X2wF+lly0QCHOqy8SNijY+sbw YdxBGQaP35DlyG7seYGOiMbWq6cI8pB1tHcpJz/oIQz/3Pr2vQyhqNbiru0CgeTI byL8yh8VpdsdeQKkt6e5qA54d6lhqusVxqamRgWmAfJqcSRKuJAK+OPVcnhHMpmN 4uViWgj917yCDby6c/ucjAt1tPxUGRTRLl0Si2cVSPV0PVkBAbP4sOP5C9cxV4RQ k0HTD+Yr5+bcAnoY5Tkh8u8d6r9f63shWcNl5ThqpBNFedH2uvjlaEHLWPMm0PQA 0IZCrdFs8gAigu6aAexuaZNEJ5lYZsNz4CGG4kYK2aDu9OMXw8c= -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:07 2026 by rpki-client