This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: B0uRF3QJ7+JUSq+WEN6c4rf5GRUDiAcNOrxZvxyA60o= Subject key identifier: 24:27:73:CA:F0:29:52:58:E3:38:6C:22:81:EB:66:F2:F6:79:D8:BA Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 1A7BB9C05D273E9802B216CC2F18848EDB5B147A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 0370 Signing time: Sun 25 Jan 2026 00:01:45 +0000 Manifest this update: Sat 24 Jan 2026 23:56:45 +0000 Manifest next update: Wed 28 Jan 2026 00:46:45 +0000 Files and hashes: 1: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: RHEVAe9iiLo/L8jYsXwkOiW5ft4aAr8BjzkahRsgC9c=) 2: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 3: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7b:b9:c0:5d:27:3e:98:02:b2:16:cc:2f:18:84:8e:db:5b:14:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Jan 24 23:56:45 2026 GMT Not After : Jan 28 00:46:45 2026 GMT Subject: CN=242773CAF0295258E3386C2281EB66F2F679D8BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:94:cf:88:bb:7e:d0:e6:b7:f9:3a:dd:f8:0c: b4:38:7e:bf:5a:ae:d4:71:07:c4:dd:26:c1:e5:e4: 5e:31:67:5e:23:ef:c6:ec:f0:b6:dc:84:e8:e8:67: a4:41:76:29:57:c7:ae:c3:52:09:81:8c:5a:f7:0e: d6:bd:bb:d4:00:2c:dc:63:77:ce:ed:45:7c:88:84: 52:7d:e3:ed:1b:a4:f1:4b:67:e5:26:85:c8:81:db: c8:88:ac:4e:14:cc:97:ba:40:66:17:98:88:2d:22: c5:cf:4d:c5:7c:3b:53:5a:7d:d1:a9:98:9d:90:d8: a7:81:76:ef:25:b6:f4:29:3a:bc:b9:c8:d3:0a:78: c9:fa:ac:f4:1e:90:f7:f8:7d:c7:af:a0:24:6a:c0: 41:b3:f2:b7:04:aa:69:54:b7:74:4c:a7:5a:9b:f6: 0a:3b:fa:46:ac:42:78:69:68:9f:d5:ab:c0:9f:70: a3:a0:ec:b2:fa:03:c1:ef:32:e0:ec:d9:f0:6e:06: 68:ea:94:5e:86:3c:26:dc:d4:e0:a2:6d:8d:8c:53: e3:f6:80:22:23:16:c8:f6:5e:86:ba:42:f3:b8:91: 1c:12:9e:c9:2c:b4:dd:57:85:ca:bf:5a:09:0d:7a: 9c:ad:1f:d1:61:f4:05:9f:fd:ba:2d:df:95:7e:81: 4f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:73:CA:F0:29:52:58:E3:38:6C:22:81:EB:66:F2:F6:79:D8:BA X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:1c:5d:76:74:db:a3:3e:0f:b6:52:75:0a:8e:c7:ef:86:4c: f5:ab:01:6d:2f:8d:21:66:d2:0f:61:ce:3f:36:fa:23:25:f6: 9f:5d:c0:98:de:b9:33:6c:78:80:f4:9f:1d:fc:68:55:34:8e: 79:1d:df:9c:89:c1:4d:15:2e:82:f2:2e:d2:d2:69:2a:0e:e3: 02:66:bb:d8:72:2a:bf:53:73:84:6d:8a:ef:08:64:bf:7e:e1: f6:36:69:86:84:7b:65:07:4d:87:b4:cc:50:ff:d3:3e:31:6b: 25:8b:19:e8:07:6b:3a:2e:4e:88:e6:cd:2e:54:3c:0c:b1:8e: 57:9f:e2:b0:0d:5a:8c:ba:57:c6:ea:e2:c7:ff:03:0f:5f:f0: 50:46:4a:02:b9:a0:88:f0:35:60:1c:90:fe:fe:e8:0e:3e:fc: 4a:c1:b0:21:6b:42:f1:a0:6d:b7:6f:65:f3:7e:e8:33:29:30: 82:3c:25:32:a7:1e:5b:16:73:c5:ec:a6:22:60:ba:92:eb:57: 98:df:d8:67:46:79:8c:32:9f:ef:a9:c6:c7:b4:9b:fc:56:7a: 13:dd:96:7a:32:c5:ba:4a:98:34:55:6d:a2:d9:6b:13:8c:dd: cc:0e:8a:ff:b7:cd:cc:c1:b9:8b:7e:4d:3c:fb:74:a8:70:8e: b2:ce:c9:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnu5wF0nPpgCshbMLxiEjttbFHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNjAxMjQyMzU2NDVaFw0yNjAxMjgwMDQ2NDVaMDMxMTAvBgNV BAMTKDI0Mjc3M0NBRjAyOTUyNThFMzM4NkMyMjgxRUI2NkYyRjY3OUQ4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvlM+Iu37Q5rf5Ot34DLQ4fr9a rtRxB8TdJsHl5F4xZ14j78bs8LbchOjoZ6RBdilXx67DUgmBjFr3Dta9u9QALNxj d87tRXyIhFJ94+0bpPFLZ+UmhciB28iIrE4UzJe6QGYXmIgtIsXPTcV8O1NafdGp mJ2Q2KeBdu8ltvQpOry5yNMKeMn6rPQekPf4fcevoCRqwEGz8rcEqmlUt3RMp1qb 9go7+kasQnhpaJ/Vq8CfcKOg7LL6A8HvMuDs2fBuBmjqlF6GPCbc1OCibY2MU+P2 gCIjFsj2Xoa6QvO4kRwSnskstN1Xhcq/WgkNepytH9Fh9AWf/bot35V+gU+pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJCdzyvApUljjOGwigetm8vZ52LowHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIcXXZ026M+D7ZSdQqOx++GTPWrAW0vjSFm 0g9hzj82+iMl9p9dwJjeuTNseID0nx38aFU0jnkd35yJwU0VLoLyLtLSaSoO4wJm u9hyKr9Tc4Rtiu8IZL9+4fY2aYaEe2UHTYe0zFD/0z4xayWLGegHazouTojmzS5U PAyxjlef4rANWoy6V8bq4sf/Aw9f8FBGSgK5oIjwNWAckP7+6A4+/ErBsCFrQvGg bbdvZfN+6DMpMII8JTKnHlsWc8XspiJgupLrV5jf2GdGeYwyn++pxse0m/xWehPd lnoyxbpKmDRVbaLZaxOM3cwOiv+3zczBuYt+TTz7dKhwjrLOyYw= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:49 2026 by rpki-client