This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: HK4oPWYurtEIW/WExnJDAalvBs+/i8Vk/Fc5BbdUSS4= Subject key identifier: A1:BE:79:40:5A:7A:4E:55:EF:32:58:77:A6:A4:0D:9A:86:7D:A2:AF Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 6F2B94B97DCDC85B3B6545F796B93C4B8027EC86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01BF Signing time: Sun 25 Jan 2026 04:42:27 +0000 Manifest this update: Sun 25 Jan 2026 04:37:27 +0000 Manifest next update: Wed 28 Jan 2026 09:50:27 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: rm58D+h1e3veLMJv2Cx+VBTSXgtZPBxaN13JWXBfU/w=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: MpJlquu9LJ3WndZX88XrCsW96PgjuhRStmt6Lgc1shw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2b:94:b9:7d:cd:c8:5b:3b:65:45:f7:96:b9:3c:4b:80:27:ec:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jan 25 04:37:27 2026 GMT Not After : Jan 28 09:50:27 2026 GMT Subject: CN=A1BE79405A7A4E55EF325877A6A40D9A867DA2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:9f:42:f4:8e:db:d8:a7:cd:9c:e7:6e:2f: 56:82:d7:0c:4b:3f:af:6e:30:31:d4:70:b1:90:32: 9d:e7:94:41:ec:d8:9e:72:01:6f:b3:82:03:86:4d: 5c:0e:0f:d3:5b:1e:ba:39:c5:11:9d:f8:00:3c:99: b3:b8:84:f0:b6:7a:33:24:f0:04:31:90:59:64:1e: 64:5d:ec:46:4c:be:ae:2d:d3:cf:77:7d:8d:8f:de: b5:0c:29:52:28:1d:00:45:b0:43:26:5a:97:d5:1e: 9d:4a:4d:75:b5:9f:d3:52:38:32:6c:38:d9:47:d3: e3:27:69:e2:2c:5f:b0:5a:85:35:a4:26:8b:e8:57: 40:15:09:47:f9:e5:16:87:40:8f:87:4b:ca:aa:e5: 3e:a3:8d:43:e2:26:18:9a:03:f0:d9:aa:5b:30:5c: 9e:04:2b:6f:f1:02:06:73:7b:e5:9e:b9:00:b0:d6: 9a:fa:a9:ca:35:56:79:c2:3c:fa:e8:b8:92:c0:15: 0a:48:54:c8:4d:df:f8:8e:cf:e7:e0:9e:61:be:93: ff:b0:70:28:60:c7:1d:d2:d2:66:c8:50:cc:1a:b8: ac:d2:f5:4a:6e:36:b9:0a:ca:f6:d1:10:33:b3:ff: c5:bd:27:db:74:b1:7f:15:bc:4b:f9:be:fa:9f:7e: 47:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BE:79:40:5A:7A:4E:55:EF:32:58:77:A6:A4:0D:9A:86:7D:A2:AF X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:20:65:2b:e4:33:0e:55:ba:0d:f8:c7:f8:d8:67:47:f4:55: 85:eb:5a:6b:c3:00:cf:04:1d:ee:57:44:03:91:d6:6c:6f:9e: 90:1e:a3:4d:e7:12:28:0e:2d:11:c3:96:40:f3:ee:6e:97:63: bf:b7:ce:0e:04:a3:73:c7:88:d9:42:cf:ad:60:e8:da:cb:6b: 43:80:d8:75:fd:7f:d0:38:a7:02:72:3a:90:d2:9e:ec:aa:ad: af:77:db:bc:0e:9b:7d:24:1a:1f:30:36:ba:ad:ec:50:b8:09: ae:e5:0b:33:41:6c:46:34:2c:43:36:8a:17:bd:02:97:2c:1b: e5:74:17:78:cb:e4:13:48:f6:3b:ff:4a:6a:a7:dc:8e:18:c1: 02:7a:47:6c:ff:9a:a8:c5:b9:b4:7f:fb:50:1a:5e:32:d8:2f: ca:cc:d4:82:03:11:77:d3:fd:5e:f4:8c:27:03:ab:a1:0e:9e: 82:6c:41:91:63:24:ed:48:88:d7:44:9a:7b:82:67:a1:21:2c: 77:8a:81:c6:03:45:7e:44:12:30:34:a0:5e:b3:d1:30:62:b1: d0:b3:44:c8:d7:dc:a2:17:7b:26:82:fd:30:70:16:7a:58:59: 4c:37:ec:29:87:a3:db:93:f1:4c:fc:f4:02:f3:1e:70:1b:d1: 3d:1d:8c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyuUuX3NyFs7ZUX3lrk8S4An7IYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNjAxMjUwNDM3MjdaFw0yNjAxMjgwOTUwMjdaMDMxMTAvBgNV BAMTKEExQkU3OTQwNUE3QTRFNTVFRjMyNTg3N0E2QTQwRDlBODY3REEyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8059C9I7b2KfNnOduL1aC1wxL P69uMDHUcLGQMp3nlEHs2J5yAW+zggOGTVwOD9NbHro5xRGd+AA8mbO4hPC2ejMk 8AQxkFlkHmRd7EZMvq4t0893fY2P3rUMKVIoHQBFsEMmWpfVHp1KTXW1n9NSODJs ONlH0+MnaeIsX7BahTWkJovoV0AVCUf55RaHQI+HS8qq5T6jjUPiJhiaA/DZqlsw XJ4EK2/xAgZze+WeuQCw1pr6qco1VnnCPProuJLAFQpIVMhN3/iOz+fgnmG+k/+w cChgxx3S0mbIUMwauKzS9UpuNrkKyvbREDOz/8W9J9t0sX8VvEv5vvqffkcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUob55QFp6TlXvMlh3pqQNmoZ9oq8wHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIgZSvkMw5Vug34x/jYZ0f0VYXrWmvDAM8E He5XRAOR1mxvnpAeo03nEigOLRHDlkDz7m6XY7+3zg4Eo3PHiNlCz61g6NrLa0OA 2HX9f9A4pwJyOpDSnuyqra9327wOm30kGh8wNrqt7FC4Ca7lCzNBbEY0LEM2ihe9 ApcsG+V0F3jL5BNI9jv/Smqn3I4YwQJ6R2z/mqjFubR/+1AaXjLYL8rM1IIDEXfT /V70jCcDq6EOnoJsQZFjJO1IiNdEmnuCZ6EhLHeKgcYDRX5EEjA0oF6z0TBisdCz RMjX3KIXeyaC/TBwFnpYWUw37CmHo9uT8Uz89ALzHnAb0T0djC4= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:58 2026 by rpki-client