This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.mft (raw, json)
Hash identifier: iMzC/gBB1A2tGYXrwSbEYjeolY0oKKn+TzXRfvwyPIM=
Subject key identifier: ED:73:0E:D6:57:07:81:54:94:FD:D7:26:CB:20:35:BF:37:8D:C7:8A
Authority key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64
Certificate issuer: /CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
Certificate serial: 592ACB07F79F2324520A522495733893C4A8D76D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
Manifest number: 0124
Signing time: Sun 25 Jan 2026 00:22:28 +0000
Manifest this update: Sun 25 Jan 2026 00:17:28 +0000
Manifest next update: Wed 28 Jan 2026 06:51:28 +0000
Files and hashes: 1: 3132312e3130312e3138352e302f32342d3234203d3e203338373835.roa (hash: azmIwktH3vpajsF8gQt8znOMbH0C7Vn9MDVUjZva6CY=)
2: 3132312e3130312e3138372e302f32342d3234203d3e203338373835.roa (hash: Hv2jdXQUlOnlnToQUuoVlZDHe+biYftXfxb3LM1GOc0=)
3: 3132312e3130312e3138362e302f32342d3234203d3e203338373835.roa (hash: ldyK2huQ95pUCINHnT0U5z7ALHHC4dFAFsmJktUnRJw=)
4: 3132312e3130312e3138382e302f32342d3234203d3e203338373835.roa (hash: jVBeyFMPWkiATlRCTVFrCw8EykcpuEgYVgn4T3UPT6M=)
5: 3132312e3130312e3139302e302f32342d3234203d3e203338373835.roa (hash: db2ZBDbPQBZ+1fLhUcrVMNSFZdZMKLIQU1qfyXpKY5M=)
6: 3132312e3130312e3138342e302f32342d3234203d3e203338373835.roa (hash: cpQ+yGOPRMcycDguY5pOMH22P4g6dN/h+7VVRFd0gvs=)
7: 3308A0FBD29F359AD61CAA389208E1D74CC28164.crl (hash: TSf+pttnKHI+OKHnIKV1kLIf+uS8+XQt+9EHYFY+fec=)
8: 3132312e3130312e3138392e302f32342d3234203d3e203338373835.roa (hash: Csz/yUZ7Lzvn/nuu4THB9U+el9Pek+D7VdsMj61HX6w=)
9: 3132312e3130312e3139312e302f32342d3234203d3e203338373835.roa (hash: EV9DFisiiygvSyZKF0tZ0Lxf1X12CCisGawptespLsI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl
rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 06:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:2a:cb:07:f7:9f:23:24:52:0a:52:24:95:73:38:93:c4:a8:d7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164
Validity
Not Before: Jan 25 00:17:28 2026 GMT
Not After : Jan 28 06:51:28 2026 GMT
Subject: CN=ED730ED65707815494FDD726CB2035BF378DC78A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:00:ea:3b:6f:de:08:9f:75:0e:f4:d6:cf:07:
4e:95:49:89:c9:48:78:e3:f1:a1:16:a5:d9:4f:f3:
51:f8:61:ee:99:6c:d8:46:d4:c3:79:9e:56:c4:51:
31:54:5d:4b:1c:a0:3a:e0:7a:6a:93:d3:78:24:46:
3a:bf:9a:74:fc:4c:4d:96:4f:92:04:b1:67:b0:52:
d7:69:a1:c9:79:32:99:86:77:e7:1a:10:2b:ec:b6:
8f:3a:96:8d:7e:44:ab:cd:0b:a3:54:cc:b7:7c:dd:
a7:12:b8:f0:5e:bf:4f:6a:a4:92:fb:c6:a3:fa:79:
28:8e:18:36:9c:cb:b4:6b:ad:57:cc:9d:f1:f5:ef:
cd:8c:d0:47:11:c8:06:0f:0f:b0:ca:79:9a:95:50:
74:99:5f:21:1b:cd:28:e8:4f:0a:0f:8f:c6:3e:f9:
bf:33:10:d2:2a:f4:32:05:37:e6:75:f3:ce:66:88:
1d:61:f6:d6:bf:8b:f9:1d:32:7d:1a:b0:d8:21:2f:
f7:19:74:ca:17:4e:ce:de:1f:af:20:2d:bc:06:95:
ae:65:e2:09:03:2f:64:1d:41:48:07:32:60:c8:3b:
ff:d4:5f:b6:5d:15:27:ff:37:fd:cd:43:64:6a:5e:
31:ea:a4:48:54:39:95:a3:35:1b:a4:76:1a:ab:a7:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:0E:D6:57:07:81:54:94:FD:D7:26:CB:20:35:BF:37:8D:C7:8A
X509v3 Authority Key Identifier:
keyid:33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:d1:be:db:7e:b6:c3:bb:63:5a:e1:be:10:b4:60:e1:d4:
9b:2c:95:76:74:fb:9e:63:16:24:cc:c5:e8:5a:96:9e:ea:5c:
a3:f0:13:89:cb:92:02:9c:d9:af:05:a5:00:05:b9:e4:dc:ee:
14:6a:de:40:d3:7d:4f:44:c7:f0:d8:77:d6:8f:22:57:29:58:
f1:62:6b:b5:11:9d:22:64:bf:d1:2e:10:8e:32:86:08:bf:f3:
6c:e0:06:99:fb:37:40:de:1c:b7:fc:d4:95:ae:57:54:10:0c:
b6:93:23:ea:db:1f:ba:fe:18:f8:d8:2d:4d:6a:f3:cf:62:97:
e9:8c:d0:73:19:e9:85:61:2a:cb:bd:58:b2:14:ac:28:c2:32:
5f:ea:93:8b:93:3a:11:53:05:32:b6:40:f3:1e:d7:f3:f1:f0:
10:73:70:f8:7b:21:e0:be:00:09:36:00:66:bf:05:10:80:6b:
34:46:6b:1c:5d:32:47:70:1d:ec:02:96:2f:06:ef:f9:f7:a5:
33:bd:2f:02:d9:be:34:cd:8e:6e:d1:c6:49:ee:38:28:0b:a9:
c3:e1:c2:51:78:a0:96:de:b3:c8:e6:3c:a3:17:58:c1:5a:62:
0b:a1:70:a8:1b:c2:c6:c7:1e:6f:13:8f:4c:83:00:a4:23:a4:
82:22:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:08:14 2026 by rpki-client