This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft File: 3B1029D44B93CA0397DA506FE1E2147503641EC6.mft (raw, json) Hash identifier: bRdiUzKDPrzv3GCmr/qxVUap+anhvooDDf3N/53IDaI= Subject key identifier: B8:4A:E5:6A:ED:3F:B0:6B:7B:91:A0:96:07:2E:B2:3B:77:42:76:3F Authority key identifier: 3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 Certificate issuer: /CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Certificate serial: 2F98D1B8A2280F47D26F4E55BFEA802E5D59013B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft Manifest number: 01DF Signing time: Sat 24 Jan 2026 00:50:48 +0000 Manifest this update: Sat 24 Jan 2026 00:45:48 +0000 Manifest next update: Tue 27 Jan 2026 07:12:48 +0000 Files and hashes: 1: 3B1029D44B93CA0397DA506FE1E2147503641EC6.crl (hash: mq7xuXXojGvG4KYvBWDqoafDVZ0bZMcJvysKT/VxvQ0=) 2: 3130332e38312e3235322e302f32332d3233203d3e20313530353337.roa (hash: bY09S58JuRMnRZFg/qJz8l2GALj8CEukiohA16BsJD4=) 3: 3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (hash: fEJQJx/Txzr+vMmd8tCh4JvmoJuakGNPJHf3zsUQTcY=) 4: 3130332e38312e3235322e302f32342d3234203d3e20313530353337.roa (hash: woe8wTOCkgzw1AhZmS0qc2WfDSk5Txn9xI0A9rGDrdg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:98:d1:b8:a2:28:0f:47:d2:6f:4e:55:bf:ea:80:2e:5d:59:01:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3B1029D44B93CA0397DA506FE1E2147503641EC6 Validity Not Before: Jan 24 00:45:48 2026 GMT Not After : Jan 27 07:12:48 2026 GMT Subject: CN=B84AE56AED3FB06B7B91A096072EB23B7742763F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:bd:99:98:89:38:59:82:72:9e:98:ff:7c: 04:f0:29:2c:b6:a8:d9:67:5b:b3:b8:37:e2:e0:92: 6c:33:ad:c3:78:21:74:80:98:35:c9:1a:6b:15:ff: 76:da:62:6e:77:39:56:63:f9:6b:ff:45:3c:7b:5a: e7:5d:78:c9:3a:76:97:87:80:24:74:42:ff:35:72: 8b:d2:22:94:b0:80:bd:34:d8:07:da:b3:1d:0a:5b: 89:1e:2f:fe:0a:bd:b7:80:26:45:7c:09:e7:7b:67: 47:f3:55:b2:11:fd:37:c3:17:27:14:e7:c8:c1:c2: 4b:d7:db:78:87:ec:b4:98:61:e3:47:33:61:19:f5: 80:15:02:bb:12:66:bd:f9:37:9e:90:c5:6b:a8:bc: 01:ed:3a:bb:62:41:b0:3b:d5:64:7b:05:a2:93:5c: 7b:52:1e:a9:0d:96:cd:9d:b2:e3:53:10:61:5a:40: d7:76:95:b2:4c:41:8f:79:67:ad:b9:96:17:7c:4f: 5e:53:8c:b2:8d:4a:eb:ba:2b:82:8a:e4:e6:33:20: 8e:72:42:59:8b:b3:9d:aa:31:c8:85:8a:e5:30:91: 2e:d9:18:86:91:95:cb:ae:d8:f3:d2:e0:ca:47:fc: 20:ed:7c:19:ac:18:36:d0:c1:8e:c1:4d:31:a1:37: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:E5:6A:ED:3F:B0:6B:7B:91:A0:96:07:2E:B2:3B:77:42:76:3F X509v3 Authority Key Identifier: keyid:3B:10:29:D4:4B:93:CA:03:97:DA:50:6F:E1:E2:14:75:03:64:1E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3B1029D44B93CA0397DA506FE1E2147503641EC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B1029D44B93CA0397DA506FE1E2147503641EC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e4:32:27:a2:6c:42:d8:89:8c:d4:63:5d:df:09:49:a8:de: 39:dc:b1:34:cc:98:0a:4f:fb:ce:e0:73:7b:25:35:ca:b6:65: 38:36:5a:a0:41:ef:59:9e:cf:0e:c6:60:78:03:2d:9d:52:8d: bf:4d:9c:78:5d:36:ed:7d:88:ed:45:77:05:23:fc:97:e3:73: fa:7c:30:f7:b3:3e:bf:33:c0:3f:d8:06:09:a8:44:5b:5b:8f: 34:18:f2:a5:8c:82:42:6d:41:97:c4:ac:e8:b7:63:f4:0e:05: a2:3e:3e:38:f2:4f:1c:3f:f1:77:26:94:fc:31:9e:dd:93:03: ad:ef:26:4b:ab:07:ea:f1:c4:09:dd:bd:90:ba:67:25:9c:94: d3:a0:ef:3b:c8:d6:0d:12:79:16:1c:fc:45:4c:ba:af:40:7a: 8c:86:2b:3e:51:d1:3b:3c:d7:38:31:21:18:63:c2:9a:90:5d: 8c:28:8c:d5:4d:be:76:ca:af:51:4f:6b:fc:81:68:71:86:0f: ce:2f:ee:98:0a:c2:e2:33:5d:7f:ba:5e:8c:6d:e9:6b:b3:aa: 50:f0:87:f5:a3:0e:64:3c:d9:fb:29:ef:1b:30:5a:13:85:4e: db:fb:47:74:dc:34:b4:2f:8f:4f:f2:13:93:a0:99:43:b9:1b: 61:48:e2:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5jRuKIoD0fSb05Vv+qALl1ZATswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUw MzY0MUVDNjAeFw0yNjAxMjQwMDQ1NDhaFw0yNjAxMjcwNzEyNDhaMDMxMTAvBgNV BAMTKEI4NEFFNTZBRUQzRkIwNkI3QjkxQTA5NjA3MkVCMjNCNzc0Mjc2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyL2ZmIk4WYJynpj/fATwKSy2 qNlnW7O4N+LgkmwzrcN4IXSAmDXJGmsV/3baYm53OVZj+Wv/RTx7WuddeMk6dpeH gCR0Qv81covSIpSwgL002Afasx0KW4keL/4KvbeAJkV8Ced7Z0fzVbIR/TfDFycU 58jBwkvX23iH7LSYYeNHM2EZ9YAVArsSZr35N56QxWuovAHtOrtiQbA71WR7BaKT XHtSHqkNls2dsuNTEGFaQNd2lbJMQY95Z625lhd8T15TjLKNSuu6K4KK5OYzII5y QlmLs52qMciFiuUwkS7ZGIaRlcuu2PPS4MpH/CDtfBmsGDbQwY7BTTGhN2UDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuErlau0/sGt7kaCWBy6yO3dCdj8wHwYDVR0j BBgwFoAUOxAp1EuTygOX2lBv4eIUdQNkHsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzBkNDBiYy05M2M4LTQxNWItYjZhOC1hZWYwODhkN2Y0ZDQvMC8zQjEwMjlENDRC OTNDQTAzOTdEQTUwNkZFMUUyMTQ3NTAzNjQxRUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0NzUwMzY0 MUVDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwZDQwYmMtOTNjOC00MTViLWI2 YTgtYWVmMDg4ZDdmNGQ0LzAvM0IxMDI5RDQ0QjkzQ0EwMzk3REE1MDZGRTFFMjE0 NzUwMzY0MUVDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPkMieibELYiYzUY13fCUmo3jncsTTMmApP +87gc3slNcq2ZTg2WqBB71mezw7GYHgDLZ1Sjb9NnHhdNu19iO1FdwUj/Jfjc/p8 MPezPr8zwD/YBgmoRFtbjzQY8qWMgkJtQZfErOi3Y/QOBaI+PjjyTxw/8XcmlPwx nt2TA63vJkurB+rxxAndvZC6ZyWclNOg7zvI1g0SeRYc/EVMuq9AeoyGKz5R0Ts8 1zgxIRhjwpqQXYwojNVNvnbKr1FPa/yBaHGGD84v7pgKwuIzXX+6Xoxt6WuzqlDw h/WjDmQ82fsp7xswWhOFTtv7R3TcNLQvj0/yE5OgmUO5G2FI4k8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:33 2026 by rpki-client