This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
File: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft (raw, json)
Hash identifier: wfUJLzNknPJdywB3rV4+cipzzlLu0HoUE72if3DBcs8=
Subject key identifier: D1:DF:BF:B0:AD:52:A1:B6:D8:5D:F8:CA:71:DB:D1:AC:BB:08:0E:7E
Authority key identifier: 3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
Certificate issuer: /CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
Certificate serial: 3B7207B0D79826FC4866A10623799FB26E92F3BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
Manifest number: 0136
Signing time: Sun 25 Jan 2026 00:22:11 +0000
Manifest this update: Sun 25 Jan 2026 00:17:11 +0000
Manifest next update: Wed 28 Jan 2026 01:32:11 +0000
Files and hashes: 1: 323430343a663630303a3a2f33322d3438203d3e203234323037.roa (hash: E0CjFn5U/9BTQeO2HTeXnXZQvzamSjcjllnOK42R05A=)
2: 3232322e3136352e3139322e302f31382d3234203d3e203234323037.roa (hash: kkiTIIYSjBTKRfHlWaLnjPTQdK1oEnXuZHdGsrSz9QU=)
3: 3230332e3135332e39362e302f32302d3234203d3e203234323037.roa (hash: rg9lpQpQ+ZgL/aBtSdpzREEnhOBkrouF51BUGtJjEn0=)
4: 3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl (hash: gKQiVjJhc2yC0g0WAKC0jVc1MuJlkjBwJ4LogONrcVo=)
5: 3230332e3135332e3131322e302f32312d3234203d3e203234323037.roa (hash: mRxvTYWPyY4uCFeQDxVkCJFWfVPhlAl1Ny0mi+/MyiE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl
rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 01:32:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:72:07:b0:d7:98:26:fc:48:66:a1:06:23:79:9f:b2:6e:92:f3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C790FE4AB82A2C15017D265714B1245BF0AFB0F
Validity
Not Before: Jan 25 00:17:11 2026 GMT
Not After : Jan 28 01:32:11 2026 GMT
Subject: CN=D1DFBFB0AD52A1B6D85DF8CA71DBD1ACBB080E7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:a5:db:35:a3:1a:be:f5:1c:2e:17:4a:1b:
98:15:0d:1b:3d:4f:b1:d3:d5:d4:0a:a4:8b:9d:78:
bc:12:be:74:c0:98:a8:d7:a8:4a:ad:99:90:dd:33:
82:2d:63:e7:83:2a:52:64:3a:c9:3d:54:67:f8:91:
56:f2:45:e6:c1:d6:49:a2:f1:a1:0e:20:fd:6c:6a:
91:e2:4f:92:88:dd:52:bc:16:4b:8d:f7:74:6a:4e:
0d:0d:d7:4c:9a:38:eb:2d:ca:e3:c8:cb:2b:82:73:
17:32:6c:c0:29:da:4a:31:2a:10:74:d8:0c:6f:b5:
a1:99:dd:58:5e:0d:3e:db:70:08:02:2b:2b:a9:51:
82:4b:ad:63:5d:a6:6f:4b:41:f1:39:df:d4:21:ef:
b0:58:3c:97:1a:08:d9:57:a0:01:b6:6e:fa:0a:50:
b5:8c:84:38:8c:f8:6d:37:f5:67:67:eb:d6:83:1f:
38:cf:28:4d:cd:e4:f7:84:e2:e2:55:31:d0:73:b4:
d7:33:20:04:26:49:5b:cf:62:20:58:fd:cf:36:1e:
41:70:e9:e7:0e:2d:43:5f:50:96:cf:b5:29:21:b9:
49:bf:30:bd:bc:19:79:ce:46:aa:81:21:ac:c6:3e:
58:06:56:1e:5f:b6:9a:ec:85:b2:a7:fe:33:68:dd:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:BF:B0:AD:52:A1:B6:D8:5D:F8:CA:71:DB:D1:AC:BB:08:0E:7E
X509v3 Authority Key Identifier:
keyid:3C:79:0F:E4:AB:82:A2:C1:50:17:D2:65:71:4B:12:45:BF:0A:FB:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7e8081-63af-49e7-9646-76c25a5e97ca/0/3C790FE4AB82A2C15017D265714B1245BF0AFB0F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:05:f2:dc:a8:2f:b2:7c:d5:86:c7:c6:a7:13:d2:30:af:d6:
80:fb:3e:4d:41:90:59:9f:e0:d2:37:ac:7a:09:21:8c:1b:dc:
cb:1f:47:b4:f7:a3:39:da:9f:e4:f3:57:62:63:e3:89:71:6d:
e9:f1:91:85:dc:7b:ef:7f:f7:5b:7b:e9:ca:15:96:8c:d8:7c:
43:49:3f:61:df:63:52:f8:bc:3b:69:4f:ca:a4:05:12:f2:92:
2f:58:e2:bf:61:bd:58:46:86:c9:5d:98:6e:1e:53:8d:3d:91:
51:bf:24:2e:22:4b:5d:0e:6e:98:39:b1:e4:bb:54:55:c4:1a:
95:00:4c:5d:59:95:f6:2b:c3:08:fd:e8:2d:f7:3b:8e:1b:9e:
04:a6:ab:fb:a8:96:31:19:5f:e8:dd:f0:8a:02:c9:3c:09:a2:
33:ac:99:96:72:7c:ff:72:bc:d4:e4:af:ff:6e:ae:10:fc:62:
03:a4:ee:9d:8f:87:df:bf:c8:c1:ad:e5:f1:60:b5:92:ee:f2:
39:c8:7c:9b:bc:17:b8:95:61:ca:e4:fe:ec:2d:a5:7e:25:55:
b0:2b:13:27:55:dd:55:81:8d:4e:17:21:c6:5a:bc:67:67:c1:
a2:bf:35:dd:a2:06:36:b6:a4:80:82:a3:a8:f1:2b:e8:ac:80:
b0:0c:ca:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:34:01 2026 by rpki-client