This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
File: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft (raw, json)
Hash identifier: FZVQI0iqTzroSAFuz6dhNN7p22sxN6UL4UdAUJKu1bI=
Subject key identifier: 78:A0:89:9D:50:D3:C6:7E:C1:23:D0:DD:CA:23:62:4F:B1:B1:B3:1E
Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
Certificate issuer: /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Certificate serial: 2D8804504FAC158649E639EF844520604692459A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
Manifest number: 032F
Signing time: Sun 25 Jan 2026 11:12:20 +0000
Manifest this update: Sun 25 Jan 2026 11:07:20 +0000
Manifest next update: Wed 28 Jan 2026 18:48:20 +0000
Files and hashes: 1: 3130332e3137352e38322e302f32332d3234203d3e20313338303634.roa (hash: KB67q4SCRzcFv43ZUJG/KADzbe2hXV8kny5lP7t0r80=)
2: 3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl (hash: iiip8D4tjuvFjcOnmfq4zztwqpeKWEAbZqDBDQqYu4I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl
rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:88:04:50:4f:ac:15:86:49:e6:39:ef:84:45:20:60:46:92:45:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Validity
Not Before: Jan 25 11:07:20 2026 GMT
Not After : Jan 28 18:48:20 2026 GMT
Subject: CN=78A0899D50D3C67EC123D0DDCA23624FB1B1B31E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:62:f0:87:33:d5:8f:4b:8e:e6:74:ed:5b:
35:cc:e9:35:ee:0a:c8:b1:0e:b5:ae:9c:c3:b1:54:
c1:62:20:63:d9:0e:f7:10:58:7a:f1:9b:fb:c2:42:
f2:ef:ab:59:ba:61:7c:1e:ee:5a:3d:ef:d1:ca:e2:
2e:b5:c5:80:d4:80:ef:fd:db:a6:4a:46:34:78:37:
41:f2:c2:c2:5a:f6:5c:59:90:dc:02:0c:9d:35:5d:
84:ed:31:b8:20:2e:b4:ec:f7:c3:7b:62:39:91:9f:
de:fd:4b:03:ce:dc:29:ee:d3:00:74:47:f1:f9:8b:
3f:44:fa:1c:6c:d6:d6:63:a1:a2:1c:7a:f2:82:77:
6c:7c:eb:e5:98:62:6d:d1:46:f2:fc:b6:70:68:d3:
2d:e2:9f:53:09:26:58:84:25:dc:aa:a7:b4:cc:24:
df:83:21:37:ff:2f:ad:bb:fd:a4:5a:12:85:4b:54:
57:69:15:cd:20:0f:e0:a8:45:a4:4f:9e:df:3c:11:
a7:cc:10:5b:7b:65:5e:c5:4e:91:3c:6c:bd:ea:a4:
db:54:da:92:02:f7:a6:7e:3c:08:22:22:02:95:23:
52:09:33:b6:b1:70:bc:45:40:f0:96:f5:d7:0f:60:
6e:bf:a4:49:bc:2c:b5:7c:65:dc:38:c8:9a:04:ce:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A0:89:9D:50:D3:C6:7E:C1:23:D0:DD:CA:23:62:4F:B1:B1:B3:1E
X509v3 Authority Key Identifier:
keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:25:76:42:d0:bb:46:bb:13:52:48:3f:72:1e:81:b9:18:10:
a8:16:04:82:27:49:b0:a9:68:0f:9c:f4:3e:6e:52:be:81:80:
d6:e8:87:61:f8:0d:82:e5:1b:97:8d:a0:9c:cf:ec:68:a5:ab:
b4:8f:a8:82:ad:d7:ad:06:e3:2d:af:3a:e1:71:a5:4f:65:e1:
d1:3d:21:95:a1:3e:c0:8a:3c:24:85:6d:8e:d3:f0:9d:f0:de:
4e:78:fa:63:3a:95:7d:be:49:c4:64:32:e0:38:72:a5:7b:7d:
14:02:6d:f4:b2:37:60:5f:4f:85:58:9a:53:c7:72:26:65:ff:
a6:c9:99:66:81:9a:a3:ca:4d:08:7d:0d:48:84:99:f2:4e:57:
4c:f1:c3:23:36:7b:20:dc:4a:5e:73:03:21:ef:bb:7d:4e:7b:
ca:94:49:e8:fa:77:4c:0e:8f:47:76:6a:75:3f:fe:f8:18:d3:
83:64:d1:ee:55:b3:3e:1a:91:65:89:d2:8f:ed:6e:e2:79:15:
82:ba:bf:cf:e5:b4:eb:a6:08:55:b9:22:06:e4:92:14:c6:f8:
d2:b4:40:cd:de:18:e7:0b:f6:19:c4:cb:a6:75:f6:0a:2e:c5:
d0:c8:e5:3c:cd:10:8a:f7:52:f9:d6:a0:1a:31:45:4b:1f:a2:
a1:6e:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:04 2026 by rpki-client