This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft File: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft (raw, json) Hash identifier: BvB92cVrPTjgYt1MjSp+RMYzZPgqyBtYwlqRO7NwuWg= Subject key identifier: 88:F3:CB:27:36:65:EA:9E:83:31:EF:AF:D9:37:72:83:B0:1B:C8:47 Authority key identifier: 3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 Certificate issuer: /CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Certificate serial: 51E1EC94272358481A81BBD79843108818E756DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft Manifest number: 03F1 Signing time: Sun 25 Jan 2026 18:22:20 +0000 Manifest this update: Sun 25 Jan 2026 18:17:20 +0000 Manifest next update: Wed 28 Jan 2026 19:34:20 +0000 Files and hashes: 1: 3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl (hash: G2ml1Dfc+4sZG12YVG/gZvZCKOnNM51KXc2UGrZkV94=) 2: 3130332e38342e342e302f32322d3234203d3e20313332363431.roa (hash: ApcZEcO0CdRpriMpjZ8NMdcvm7zZPBlUASlOFKPUlhU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e1:ec:94:27:23:58:48:1a:81:bb:d7:98:43:10:88:18:e7:56:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836 Validity Not Before: Jan 25 18:17:20 2026 GMT Not After : Jan 28 19:34:20 2026 GMT Subject: CN=88F3CB273665EA9E8331EFAFD9377283B01BC847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:75:8b:be:58:b8:5d:ed:d3:5f:8f:9a:51:cb: 96:e2:62:05:10:cd:fc:6c:41:33:de:9e:9a:5d:3c: 96:00:f2:bf:14:5a:9c:67:94:c2:1d:7c:cc:bd:d3: 91:46:7e:12:9a:cb:6f:b8:ae:71:61:65:0d:52:07: 5b:20:15:dc:fa:50:ae:27:1d:3f:20:e3:82:ee:da: 46:37:a0:12:72:95:be:16:0c:b9:78:e8:df:9f:34: 65:39:c2:7d:87:90:5f:f1:0f:fb:30:3e:93:9d:5f: 42:a9:ec:52:87:93:3d:29:fe:cf:5f:97:5a:df:ad: b9:28:a1:50:e1:4c:a5:95:76:c1:a0:3e:71:bb:2e: 25:96:9e:04:1b:fd:7d:92:fc:3a:5e:72:b3:21:95: 79:34:5e:46:ff:85:66:3d:2b:30:91:1e:49:0d:e6: ca:47:3e:32:6a:a1:71:4d:e1:34:ab:cd:46:2c:ea: 50:7a:f7:98:c8:79:32:5d:61:d4:1b:91:8c:61:b6: 55:a3:a3:e4:a6:d8:76:04:45:89:10:bc:53:ad:d7: 1e:43:ce:3b:ca:04:6a:7a:4b:3c:b9:11:23:0a:64: 78:f2:4f:dd:d0:9b:c7:93:1c:f1:12:57:eb:bf:1e: 39:bd:0e:62:ca:60:09:15:e3:99:ee:9e:ef:13:66: 21:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F3:CB:27:36:65:EA:9E:83:31:EF:AF:D9:37:72:83:B0:1B:C8:47 X509v3 Authority Key Identifier: keyid:3C:03:CF:95:17:81:97:0C:6D:0A:DB:E8:FA:CF:EC:6A:4C:DD:78:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f614cee0-5df6-4b2b-bb3d-f683213e7c33/0/3C03CF951781970C6D0ADBE8FACFEC6A4CDD7836.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:37:3f:eb:95:b5:d1:1a:88:11:91:d1:97:43:9b:1f:4a:88: 42:cc:cf:1f:be:2b:5d:1c:27:50:9c:75:33:ed:8a:b3:6f:36: 3d:9f:54:de:3e:3e:8f:af:81:38:f5:d7:84:be:1a:62:e4:a5: 91:01:92:23:6d:10:3d:9a:37:c8:b4:a1:c1:0e:b8:40:98:f3: ab:42:79:e1:65:d7:25:4e:6d:2a:26:9c:03:23:e1:fd:21:25: 12:27:cf:a2:da:4b:53:36:bc:b5:3b:ef:25:5c:1b:d4:29:e8: 20:32:04:22:e7:a1:f1:a2:b6:54:ec:de:ab:2d:26:1d:37:6a: ab:15:68:ea:df:dd:58:1a:31:1e:0c:41:2c:f9:de:c7:73:6a: 8d:86:da:7c:c9:ea:76:5d:6f:69:02:2d:72:eb:bd:b4:6d:5f: 54:35:14:f8:c0:e3:0b:c1:a5:94:50:4a:5c:c5:e4:75:7d:57: a6:3e:e7:40:36:e8:32:49:29:45:8e:ca:c2:db:69:79:51:72: 43:c4:29:fa:61:bf:ef:ed:2e:f4:e8:03:23:67:69:3b:9d:b3: fc:bb:dc:2c:ab:13:eb:46:e5:d1:0a:a2:39:ce:a3:f0:db:b4: 58:a1:31:d2:b2:fa:5a:3c:d4:93:ab:6d:1d:96:e8:70:38:45: 4c:10:ba:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUeHslCcjWEgagbvXmEMQiBjnVtowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0 Q0RENzgzNjAeFw0yNjAxMjUxODE3MjBaFw0yNjAxMjgxOTM0MjBaMDMxMTAvBgNV BAMTKDg4RjNDQjI3MzY2NUVBOUU4MzMxRUZBRkQ5Mzc3MjgzQjAxQkM4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdYu+WLhd7dNfj5pRy5biYgUQ zfxsQTPenppdPJYA8r8UWpxnlMIdfMy905FGfhKay2+4rnFhZQ1SB1sgFdz6UK4n HT8g44Lu2kY3oBJylb4WDLl46N+fNGU5wn2HkF/xD/swPpOdX0Kp7FKHkz0p/s9f l1rfrbkooVDhTKWVdsGgPnG7LiWWngQb/X2S/DpecrMhlXk0Xkb/hWY9KzCRHkkN 5spHPjJqoXFN4TSrzUYs6lB695jIeTJdYdQbkYxhtlWjo+Sm2HYERYkQvFOt1x5D zjvKBGp6Szy5ESMKZHjyT93Qm8eTHPESV+u/Hjm9DmLKYAkV45nunu8TZiEDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiPPLJzZl6p6DMe+v2Tdyg7AbyEcwHwYDVR0j BBgwFoAUPAPPlReBlwxtCtvo+s/sakzdeDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NjE0Y2VlMC01ZGY2LTRiMmItYmIzZC1mNjgzMjEzZTdjMzMvMC8zQzAzQ0Y5NTE3 ODE5NzBDNkQwQURCRThGQUNGRUM2QTRDREQ3ODM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVDNkE0Q0RE NzgzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjYxNGNlZTAtNWRmNi00YjJiLWJi M2QtZjY4MzIxM2U3YzMzLzAvM0MwM0NGOTUxNzgxOTcwQzZEMEFEQkU4RkFDRkVD NkE0Q0RENzgzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU3P+uVtdEaiBGR0ZdDmx9KiELMzx++K10c J1CcdTPtirNvNj2fVN4+Po+vgTj114S+GmLkpZEBkiNtED2aN8i0ocEOuECY86tC eeFl1yVObSomnAMj4f0hJRInz6LaS1M2vLU77yVcG9Qp6CAyBCLnofGitlTs3qst Jh03aqsVaOrf3VgaMR4MQSz53sdzao2G2nzJ6nZdb2kCLXLrvbRtX1Q1FPjA4wvB pZRQSlzF5HV9V6Y+50A26DJJKUWOysLbaXlRckPEKfphv+/tLvToAyNnaTuds/y7 3CyrE+tG5dEKojnOo/DbtFihMdKy+lo81JOrbR2W6HA4RUwQuvg= -----END CERTIFICATE-----Generated at Mon Jan 26 01:09:58 2026 by rpki-client