This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json)
Hash identifier: eiKSUSCP7393PHD0jU70XAJjT0Pw6I/A+I8W/kNlt+A=
Subject key identifier: 6B:44:55:F3:48:48:84:F0:E9:68:B7:2D:FC:73:5E:21:10:61:53:B5
Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Certificate serial: 23DC72D63C9DFDC90C71AB257D74D975FD4D76BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
Manifest number: 0553
Signing time: Sun 25 Jan 2026 15:42:23 +0000
Manifest this update: Sun 25 Jan 2026 15:37:23 +0000
Manifest next update: Wed 28 Jan 2026 23:55:23 +0000
Files and hashes: 1: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=)
2: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: U0q/gVCZ94R8Z7FI869rfQaxYh+GACcxzdn8plx2qyk=)
3: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=)
4: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=)
5: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=)
6: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=)
7: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:dc:72:d6:3c:9d:fd:c9:0c:71:ab:25:7d:74:d9:75:fd:4d:76:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0
Validity
Not Before: Jan 25 15:37:23 2026 GMT
Not After : Jan 28 23:55:23 2026 GMT
Subject: CN=6B4455F3484884F0E968B72DFC735E21106153B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:d6:e6:f1:4b:71:1f:7a:4f:46:64:e5:a3:
34:51:7e:74:59:6a:b5:79:d8:71:2d:bb:82:59:69:
37:04:47:b5:ee:c8:a4:dc:ed:6c:a5:19:5c:c4:68:
64:e8:c5:24:61:69:f4:09:8e:ed:4f:d6:9e:9e:a8:
39:70:8c:86:0d:03:96:a4:bc:05:c4:db:53:7b:96:
46:57:85:9b:eb:2b:ac:72:cc:c8:b1:c0:25:b6:cb:
fa:47:6d:22:8e:c4:1d:a7:1d:b6:c9:22:02:f4:ab:
38:82:51:3e:42:29:7e:e9:54:29:1e:31:4c:da:b4:
77:f7:d6:9a:c5:61:29:d3:e5:c0:e9:0a:64:56:d4:
ed:6e:e9:8d:05:7a:39:f4:f5:40:94:9e:cf:89:39:
07:77:6a:a3:54:45:3f:07:a3:2a:25:ba:29:9b:0c:
fc:ed:a2:08:3f:94:03:c8:f4:40:e2:cd:28:77:91:
97:aa:05:83:7e:18:d2:1d:06:38:01:fc:92:ca:81:
36:6b:6f:6f:88:91:7b:9f:4a:15:55:13:bf:5a:92:
a7:87:93:74:a8:42:94:29:31:e6:65:90:13:9a:76:
97:55:04:15:4e:28:d8:71:f8:b3:74:6a:35:72:bc:
98:bf:15:d9:32:90:47:e8:be:71:d4:58:f5:97:9f:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:44:55:F3:48:48:84:F0:E9:68:B7:2D:FC:73:5E:21:10:61:53:B5
X509v3 Authority Key Identifier:
keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e8:d2:90:50:1c:50:8c:62:f1:90:96:27:40:17:a7:ff:c6:
aa:66:dc:c7:56:38:f9:b3:ab:a1:2c:4a:10:14:f3:68:eb:5d:
8e:08:ab:32:b0:67:d5:17:45:74:24:f8:88:c2:04:d6:58:16:
09:1b:d4:e5:e0:91:32:f9:df:af:78:d8:f0:1b:dc:f0:1c:60:
ca:a6:6a:5c:df:3d:19:e3:6d:7f:ed:87:27:6b:04:ff:53:af:
0b:bd:d8:57:f5:5b:da:89:98:13:8a:45:88:8a:88:ba:14:90:
98:1d:42:48:5a:45:3a:ec:b5:da:46:da:5b:b3:97:4f:5e:39:
a1:e6:b1:9f:82:4c:5f:04:44:68:49:5b:87:91:68:42:0b:c5:
8b:62:bb:2e:3d:82:32:7d:07:71:99:1d:54:fa:08:2a:55:16:
06:c5:f2:45:c7:87:c2:4f:4f:9e:05:9b:4e:f9:1b:6b:92:10:
f6:9a:c2:f9:d6:69:f8:5a:fa:54:76:16:e7:04:17:b9:61:82:
71:8f:c5:55:01:b6:7c:a4:de:41:1f:f0:18:0a:29:39:af:48:
b7:24:6d:8f:14:41:fd:38:49:4d:23:e8:bc:7f:01:bf:5a:a5:
4c:e6:4f:e1:30:cc:7a:00:47:60:0a:99:5a:64:7a:0b:35:02:
4c:94:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:37 2026 by rpki-client