This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft File: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft (raw, json) Hash identifier: tlU3ylhFXbbsANuSbFEYEwAfvxO0WO0elz4yukzoCfs= Subject key identifier: 35:63:A5:EC:28:48:D6:81:1D:03:BA:7E:4A:AE:1F:00:F8:DD:E5:B1 Authority key identifier: 3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 Certificate issuer: /CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Certificate serial: 2177B58869AD63CE347C835DA228B2E88F6F99F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft Manifest number: 0101 Signing time: Wed 21 Jan 2026 14:42:30 +0000 Manifest this update: Wed 21 Jan 2026 14:37:30 +0000 Manifest next update: Sat 24 Jan 2026 15:45:30 +0000 Files and hashes: 1: 3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl (hash: QPidNo2pkR48nQ+A+wu1V7kb85/93db6maUMqsHxc3A=) 2: 323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (hash: Sfdp2ETmAB6FU1WSvmecpTzRs2Nz0Rf6LLcGShnuuzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 13:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:77:b5:88:69:ad:63:ce:34:7c:83:5d:a2:28:b2:e8:8f:6f:99:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6 Validity Not Before: Jan 21 14:37:30 2026 GMT Not After : Jan 24 15:45:30 2026 GMT Subject: CN=3563A5EC2848D6811D03BA7E4AAE1F00F8DDE5B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:dd:bf:79:09:a5:46:e0:2e:d1:98:1a:24: 1b:0a:6b:95:9e:ef:bb:1c:6f:97:98:f2:1b:d1:1a: e5:fe:72:01:0e:4a:5e:25:e4:d9:84:09:13:46:57: a9:12:2f:e4:b1:01:4b:a2:c3:2c:97:5d:61:23:fc: cc:cf:82:48:05:47:d6:8d:92:d7:95:52:46:75:5b: 17:19:91:31:5f:ed:ae:33:60:0c:92:08:5e:1f:8e: 77:4b:07:60:1d:05:4d:f7:14:e8:67:5e:1b:ae:ee: 9b:9c:00:d8:f6:a7:ae:8b:d9:46:86:e9:f3:58:4f: b2:ec:ab:b3:b6:a4:69:2d:2a:7b:6d:8c:1a:10:7d: ca:8e:78:2c:7a:3a:44:51:ba:9d:f3:b8:bf:01:d8: 87:65:b2:65:e3:4e:02:3e:6a:06:8c:e9:0a:1a:4a: 81:44:c9:d1:09:57:94:d6:aa:02:0d:3f:9d:f1:a9: e3:2e:dd:4b:9f:46:0e:de:8f:45:f0:ca:6c:91:26: 90:45:c3:35:10:a6:6f:e8:d7:9c:90:7c:41:99:a9: e1:f5:a2:0d:20:8f:e6:1b:1b:7b:5c:f3:d5:79:1d: ec:92:34:a5:b4:b8:ba:87:04:f3:59:f1:01:84:6e: c9:b5:cd:9b:7d:6e:e6:d1:3a:ef:60:d1:78:1f:a1: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:63:A5:EC:28:48:D6:81:1D:03:BA:7E:4A:AE:1F:00:F8:DD:E5:B1 X509v3 Authority Key Identifier: keyid:3F:FD:C5:02:E9:0A:F8:E6:6F:DD:CD:0A:6D:F3:1D:16:8F:38:BA:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16da0e82-0764-45d3-aed9-fd258e72b6e2/1/3FFDC502E90AF8E66FDDCD0A6DF31D168F38BAA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0a:62:c4:31:c5:17:61:52:5d:6d:35:d2:ca:29:95:7a:eb: 6a:f7:06:a7:54:d7:8e:73:0c:a2:b4:0b:00:3c:6e:c9:96:c1: 6a:45:5b:85:2d:cf:d3:cc:98:a5:1e:32:a9:bf:41:df:e1:2b: 45:26:72:c1:72:9b:57:5d:96:bc:2b:56:b8:a8:e2:ab:a7:ee: 11:56:c8:b5:ed:85:45:dd:ed:80:e9:25:01:e2:f5:88:ae:0d: 62:74:a4:b6:7d:e5:dd:a1:a3:54:dc:1e:21:07:3f:5f:76:ba: 12:a9:b3:82:d0:a8:19:fb:36:df:9c:fb:94:4f:5c:73:fc:59: 26:d6:e2:0b:df:5b:19:f4:6a:09:e3:5a:8f:51:79:55:82:f2: fa:1c:85:5b:a2:79:7d:7c:cf:bd:fc:8c:21:a9:3c:e2:90:c0: d0:3f:14:bd:fc:53:f9:7f:b6:86:1e:6b:d3:e7:1b:00:5e:06: b2:6c:0e:12:f1:c5:23:56:ff:16:82:c3:56:95:42:a6:ae:a0: 97:a6:50:d4:0f:4c:c6:99:6e:d4:8c:d3:d2:27:41:ee:e6:ee: f9:94:cc:30:7e:5d:f5:8b:98:fe:60:77:f0:5c:c8:2f:4c:aa: 5a:7e:a3:23:48:c7:cd:fa:ac:33:9c:ca:4e:14:c5:0f:64:83: 86:a2:1b:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXe1iGmtY840fINdoiiy6I9vmfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4 RjM4QkFBNjAeFw0yNjAxMjExNDM3MzBaFw0yNjAxMjQxNTQ1MzBaMDMxMTAvBgNV BAMTKDM1NjNBNUVDMjg0OEQ2ODExRDAzQkE3RTRBQUUxRjAwRjhEREU1QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ft2/eQmlRuAu0ZgaJBsKa5We 77scb5eY8hvRGuX+cgEOSl4l5NmECRNGV6kSL+SxAUuiwyyXXWEj/MzPgkgFR9aN kteVUkZ1WxcZkTFf7a4zYAySCF4fjndLB2AdBU33FOhnXhuu7pucANj2p66L2UaG 6fNYT7Lsq7O2pGktKnttjBoQfcqOeCx6OkRRup3zuL8B2IdlsmXjTgI+agaM6Qoa SoFEydEJV5TWqgINP53xqeMu3UufRg7ej0XwymyRJpBFwzUQpm/o15yQfEGZqeH1 og0gj+YbG3tc89V5HeySNKW0uLqHBPNZ8QGEbsm1zZt9bubROu9g0XgfoUj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWOl7ChI1oEdA7p+Sq4fAPjd5bEwHwYDVR0j BBgwFoAUP/3FAukK+OZv3c0KbfMdFo84uqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmRhMGU4Mi0wNzY0LTQ1ZDMtYWVkOS1mZDI1OGU3MmI2ZTIvMS8zRkZEQzUwMkU5 MEFGOEU2NkZERENEMEE2REYzMUQxNjhGMzhCQUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFEMTY4RjM4 QkFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkYTBlODItMDc2NC00NWQzLWFl ZDktZmQyNThlNzJiNmUyLzEvM0ZGREM1MDJFOTBBRjhFNjZGRERDRDBBNkRGMzFE MTY4RjM4QkFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMKYsQxxRdhUl1tNdLKKZV662r3BqdU145z DKK0CwA8bsmWwWpFW4Utz9PMmKUeMqm/Qd/hK0UmcsFym1ddlrwrVrio4qun7hFW yLXthUXd7YDpJQHi9YiuDWJ0pLZ95d2ho1TcHiEHP192uhKps4LQqBn7Nt+c+5RP XHP8WSbW4gvfWxn0agnjWo9ReVWC8vochVuieX18z738jCGpPOKQwNA/FL38U/l/ toYea9PnGwBeBrJsDhLxxSNW/xaCw1aVQqauoJemUNQPTMaZbtSM09InQe7m7vmU zDB+XfWLmP5gd/BcyC9Mqlp+oyNIx836rDOcyk4UxQ9kg4aiG2Q= -----END CERTIFICATE-----Generated at Wed Jan 21 17:54:48 2026 by rpki-client