This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: H3Ddunw4rY4KjsgsXi08Rc8cWJT3sUkTOXgk3Mr3pOo= Subject key identifier: 99:D1:1F:85:ED:E5:B3:90:3D:9E:F4:63:69:02:64:9A:1F:1D:17:0A Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 65DD161CAD0B21224F485AB1FC18DC7AC53A74F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 024C Signing time: Thu 08 Jan 2026 18:40:03 +0000 Manifest this update: Thu 08 Jan 2026 18:35:03 +0000 Manifest next update: Sun 11 Jan 2026 22:53:03 +0000 Files and hashes: 1: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 2: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: LrlQuCKm6n8gxQd15UZdAsY0b0/EXDzmz8VgiarMUv4=) 3: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) 4: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 22:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:dd:16:1c:ad:0b:21:22:4f:48:5a:b1:fc:18:dc:7a:c5:3a:74:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Jan 8 18:35:03 2026 GMT Not After : Jan 11 22:53:03 2026 GMT Subject: CN=99D11F85EDE5B3903D9EF4636902649A1F1D170A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d8:55:77:3f:cb:91:e1:b4:b8:27:b4:65:b1: aa:28:db:32:6a:15:86:c9:f9:10:21:1a:ef:c3:96: e6:ff:d8:b0:e4:e0:7f:7e:02:d6:80:ae:73:aa:c8: 38:10:4e:9d:a4:da:c7:49:59:27:a0:5f:86:ee:7a: c3:05:19:0b:94:6d:49:7f:ea:9b:21:56:4e:27:bd: 94:3f:c5:60:af:eb:c9:06:34:7a:c3:de:e9:f5:11: b0:89:cc:c7:cf:b0:77:68:32:28:a1:42:0c:07:1f: fd:5b:12:24:9e:c9:bd:d2:ee:14:99:0a:48:22:0a: bf:ae:b2:0b:82:c5:56:4b:2d:7c:8f:7a:7b:41:a7: 92:32:05:ec:27:99:c5:5a:86:8a:85:06:7f:27:67: f3:8a:d7:93:fd:f7:c4:fc:74:13:13:c2:1a:dd:f5: 12:26:91:91:65:9a:bc:af:b8:e3:52:6f:1a:c1:3a: 97:db:65:1e:bd:6f:fa:b1:69:13:9e:38:3f:d4:ef: 57:f2:76:c4:fc:36:ad:b6:39:0a:24:c2:75:f1:87: 14:d8:e7:e7:3d:95:e4:8a:43:fd:46:22:17:c3:27: 11:34:33:61:5b:35:e9:eb:ad:a9:be:ec:d9:b6:cf: 6c:74:b4:a0:d8:57:5c:d2:d8:42:4a:6f:7b:d0:d4: dd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D1:1F:85:ED:E5:B3:90:3D:9E:F4:63:69:02:64:9A:1F:1D:17:0A X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8d:a5:a9:c6:3e:7e:d8:72:f4:8e:4f:fd:bd:4d:ae:dc:d2: f5:1c:79:20:87:09:d1:47:cf:dd:40:78:9f:9f:0a:13:4e:e2: 59:f0:6e:11:a3:10:1a:03:9e:19:95:8c:9a:16:1e:16:bf:a4: f6:92:2a:e7:a3:8d:b2:7a:f8:45:41:a0:6f:af:a3:32:5a:09: c6:5c:e7:69:d3:34:9f:b0:69:1f:8c:2c:b6:15:d5:c6:59:78: 0f:f4:8d:21:b7:e2:eb:a6:73:61:52:8a:e0:3a:6d:a8:e7:f3: 0e:1d:cb:1a:62:14:45:8c:f4:ea:26:09:f1:90:5d:1b:dd:fc: 20:12:45:a9:29:5b:9e:bb:aa:b3:df:6a:2c:f0:46:e4:6c:cd: cf:e2:ec:2f:0b:6e:d1:6b:7c:d5:bc:e9:6d:ed:74:c9:10:b2: 84:89:ba:69:ff:6e:42:a6:ba:74:4d:7d:6d:f4:86:3a:5c:19: d3:0a:92:85:ae:58:c4:bc:a0:d2:d0:ee:94:67:aa:5b:03:a7: 7b:57:25:ea:a0:0d:15:db:e9:9a:44:7a:c8:dd:3b:a0:96:df: 7f:36:79:67:3a:70:b5:bc:9e:6a:50:b1:0b:8b:9b:81:28:ef: 25:65:65:ef:60:7a:bf:9d:ff:b5:22:a4:87:a7:0c:5c:4f:e7: b9:08:94:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZd0WHK0LISJPSFqx/BjcesU6dPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNjAxMDgxODM1MDNaFw0yNjAxMTEyMjUzMDNaMDMxMTAvBgNV BAMTKDk5RDExRjg1RURFNUIzOTAzRDlFRjQ2MzY5MDI2NDlBMUYxRDE3MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ2FV3P8uR4bS4J7Rlsaoo2zJq FYbJ+RAhGu/Dlub/2LDk4H9+AtaArnOqyDgQTp2k2sdJWSegX4buesMFGQuUbUl/ 6pshVk4nvZQ/xWCv68kGNHrD3un1EbCJzMfPsHdoMiihQgwHH/1bEiSeyb3S7hSZ CkgiCr+usguCxVZLLXyPentBp5IyBewnmcVahoqFBn8nZ/OK15P998T8dBMTwhrd 9RImkZFlmryvuONSbxrBOpfbZR69b/qxaROeOD/U71fydsT8Nq22OQokwnXxhxTY 5+c9leSKQ/1GIhfDJxE0M2FbNenrram+7Nm2z2x0tKDYV1zS2EJKb3vQ1N2hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmdEfhe3ls5A9nvRjaQJkmh8dFwowHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKNpanGPn7YcvSOT/29Ta7c0vUceSCHCdFH z91AeJ+fChNO4lnwbhGjEBoDnhmVjJoWHha/pPaSKuejjbJ6+EVBoG+vozJaCcZc 52nTNJ+waR+MLLYV1cZZeA/0jSG34uumc2FSiuA6bajn8w4dyxpiFEWM9OomCfGQ XRvd/CASRakpW567qrPfaizwRuRszc/i7C8LbtFrfNW86W3tdMkQsoSJumn/bkKm unRNfW30hjpcGdMKkoWuWMS8oNLQ7pRnqlsDp3tXJeqgDRXb6ZpEesjdO6CW3382 eWc6cLW8nmpQsQuLm4Eo7yVlZe9ger+d/7UipIenDFxP57kIlN0= -----END CERTIFICATE-----Generated at Fri Jan 9 18:33:00 2026 by rpki-client