This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json)
Hash identifier: wpb0Tk6aUMwY67/aA5r2qMXQnnvAuqDc1dtxGya7Ehk=
Subject key identifier: 0C:CE:EC:81:CE:CA:FC:5B:C5:B3:80:CB:EB:02:31:14:83:81:5E:6A
Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Certificate serial: 6D0FD4EA535D1B2BD586B6F8F4D9FB21F8CCD280
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
Manifest number: 012B
Signing time: Sat 24 Jan 2026 07:50:56 +0000
Manifest this update: Sat 24 Jan 2026 07:45:56 +0000
Manifest next update: Tue 27 Jan 2026 17:43:56 +0000
Files and hashes: 1: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: kr+ZnzMgCcAECeSRCQpvnmrr1WodtZDg13XiBjlH34A=)
2: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=)
3: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=)
4: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 17:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0f:d4:ea:53:5d:1b:2b:d5:86:b6:f8:f4:d9:fb:21:f8:cc:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB
Validity
Not Before: Jan 24 07:45:56 2026 GMT
Not After : Jan 27 17:43:56 2026 GMT
Subject: CN=0CCEEC81CECAFC5BC5B380CBEB02311483815E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:71:eb:18:9d:1c:1f:13:f1:08:da:64:91:99:
0e:5d:39:64:30:3c:9c:20:7e:33:f9:84:38:b4:5f:
65:c3:a0:65:af:d4:87:fe:59:6e:ab:49:39:48:9c:
0b:79:68:23:e4:29:15:92:a9:c2:b6:69:1a:d5:d9:
a0:d2:74:69:ac:2b:a8:36:92:56:30:e7:fb:e2:94:
94:af:c4:64:cb:15:84:fa:dd:40:98:81:72:3c:7e:
4d:fe:6c:43:02:f8:d1:24:7f:d4:e3:85:af:66:36:
ad:2b:b8:e8:ee:21:f6:9d:b8:7c:88:ea:71:42:0b:
21:e5:d5:20:6d:5f:37:ba:4a:11:6e:40:23:1a:f0:
9d:e9:b1:d3:7a:2b:fd:1e:7f:5d:ef:17:ce:a2:f1:
99:08:78:cb:e0:41:77:b1:78:cc:cf:d4:2c:66:36:
4c:c3:15:e7:9c:26:71:52:7f:22:9a:51:85:7a:68:
d5:6e:a1:7b:b5:6a:e7:25:ac:65:b4:86:08:d6:a1:
6f:f9:7a:c9:ba:44:72:a8:d6:54:90:4e:2e:ad:04:
e8:59:54:aa:5b:f8:3d:a1:d7:48:fe:25:e3:ab:f2:
c2:6d:fd:a4:2f:20:19:da:0c:1e:17:f4:9e:ad:70:
4d:0d:0c:2a:df:b4:b2:4e:e2:b3:ae:84:a2:f1:cc:
de:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CE:EC:81:CE:CA:FC:5B:C5:B3:80:CB:EB:02:31:14:83:81:5E:6A
X509v3 Authority Key Identifier:
keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:ac:b0:15:a6:d3:6a:8f:f0:bb:d7:e3:f1:8c:d1:a3:04:
b1:b4:e8:e3:60:a5:b3:a8:ac:b2:4b:0a:b3:1e:7e:de:6a:32:
8a:91:a9:03:6f:55:00:04:98:b0:ac:8d:30:c4:6e:e2:de:fd:
f7:82:bf:62:fe:50:55:a6:57:b7:a2:19:91:ee:e9:10:37:d8:
70:e6:5d:9d:13:45:5d:60:f4:e1:19:b7:5d:78:6f:a8:e2:28:
02:bc:a0:25:2f:b0:6c:3a:4e:43:88:36:5f:ca:e5:65:e0:d6:
dd:cd:3a:eb:07:43:2b:fd:ff:95:9b:5e:49:46:f7:13:3b:97:
6b:a5:d6:a0:1e:4b:f3:a7:08:9d:8e:7a:eb:2e:73:14:b9:ff:
f5:af:86:d0:b8:a8:d1:39:0e:30:fc:c9:87:c9:25:ec:9a:6d:
60:9c:aa:f1:4e:84:4b:ba:d6:23:9b:51:b3:86:25:cf:77:ff:
cd:11:b3:3c:7c:f0:15:fe:d8:76:6b:f7:02:c1:69:7b:5f:ab:
19:83:b8:be:09:69:d2:34:47:c2:a6:58:35:71:25:94:cb:d7:
b4:50:40:36:9e:9a:9c:32:d3:3e:cf:4c:ac:07:cc:00:e6:ba:
c1:85:07:83:61:6c:e8:a1:ef:04:17:78:da:7c:ff:a4:21:30:
a9:70:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:23:55 2026 by rpki-client