This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft (raw, json) Hash identifier: l9fbB3AspwhxWTpajYN/OqS4qtbfkf5C1+1j5kWI9/o= Subject key identifier: 19:58:2B:4B:B4:13:D2:68:E9:30:73:90:6B:C2:70:F2:AC:8C:FB:4E Authority key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Certificate issuer: /CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Certificate serial: 7027B5F038B91C040261EF0C04FD1434EFC8831B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft Manifest number: CD Signing time: Sat 31 Jan 2026 05:20:57 +0000 Manifest this update: Sat 31 Jan 2026 05:15:57 +0000 Manifest next update: Tue 03 Feb 2026 16:45:57 +0000 Files and hashes: 1: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl (hash: JKeJXFk6ziiQQbsCehiHO7aKE228P5m3f8rloYmFiCg=) 2: 33362e35302e34342e302f32332d3234203d3e20313532303130.roa (hash: homg5w1o8Ac7RkByH0/Fbb96kiXTeJPDkxjgg7Q4x1k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 16:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:27:b5:f0:38:b9:1c:04:02:61:ef:0c:04:fd:14:34:ef:c8:83:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Validity Not Before: Jan 31 05:15:57 2026 GMT Not After : Feb 3 16:45:57 2026 GMT Subject: CN=19582B4BB413D268E93073906BC270F2AC8CFB4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0c:ae:5a:c0:ff:7c:2a:a2:6b:d0:5c:28:64: 0d:bf:f8:01:9b:6f:e6:cb:c0:88:00:f9:61:db:c8: 4b:58:5e:a9:a3:84:6d:ee:87:01:63:c0:c5:97:33: d5:60:36:a2:db:32:5c:24:bb:e3:0f:02:b3:98:29: ab:b0:a3:50:dd:40:b1:88:d3:ca:dd:12:ec:db:38: e6:15:06:1c:03:a8:aa:25:30:0b:a3:be:95:f4:d4: 0a:8c:73:fa:20:c0:01:c0:4d:38:92:2f:e5:2e:4e: 99:31:b5:4a:22:10:5e:6e:3c:11:8e:a3:64:89:55: a7:85:32:52:49:fd:07:70:d0:92:94:55:20:e9:27: 95:2a:3e:e0:cf:46:00:f4:cf:35:dd:32:86:02:e5: 99:98:bd:b9:d3:b0:d7:c6:0d:8c:89:22:55:c5:ca: 76:0a:ef:08:08:39:5c:ff:74:d5:4a:6e:71:bc:ad: cf:26:e2:4f:e0:a9:fa:db:74:68:8b:59:dc:fb:e7: 27:bd:28:01:cc:66:d3:61:07:5a:2a:b9:8f:62:bb: 76:c5:86:45:cf:de:b0:5f:6d:10:5b:58:13:70:3d: 33:ec:0e:90:bc:0a:c3:94:d4:f0:74:18:1f:29:42: 9e:58:59:44:c1:1c:a0:78:23:60:09:07:74:cb:ac: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:2B:4B:B4:13:D2:68:E9:30:73:90:6B:C2:70:F2:AC:8C:FB:4E X509v3 Authority Key Identifier: keyid:3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:13:b2:4e:80:6a:7b:6a:6e:3d:52:52:29:80:b8:9d:f3:e7: a2:b1:33:9c:c3:25:06:f4:c1:0d:e8:17:72:36:54:d3:fc:ec: c5:35:3d:bb:71:a5:17:d2:55:91:c9:a0:7d:6d:60:ef:94:3d: 74:e0:82:72:8d:1e:05:53:be:ae:92:7e:90:96:2d:1e:52:52: ad:31:c9:ce:75:83:0d:f1:22:fc:55:81:bb:03:5b:5a:07:2c: ab:91:b2:4e:d9:86:ab:98:06:8a:6c:e3:fb:cb:82:8d:2c:9f: 75:6b:5d:18:1b:9b:5f:f3:84:01:10:03:19:cd:f1:b9:09:e8: af:95:2a:60:9d:d7:f2:cd:cb:e7:11:73:01:84:3b:d2:dc:0b: d7:56:e9:34:86:95:96:21:b0:c8:9c:ff:88:a6:72:58:31:0d: 99:93:ca:48:da:8e:60:b4:ba:de:23:cd:83:c4:a4:04:a5:6b: 9c:dd:c5:32:67:34:69:2f:42:2f:6f:f8:bc:3a:c0:2a:d0:5f: 8f:9d:27:37:55:f5:9e:04:a5:c1:ff:b8:b2:a9:2e:d6:3a:3f: 42:16:55:b1:1c:9a:02:75:48:99:3d:f8:35:ee:1f:fc:6d:21: b3:fc:dc:74:f1:e9:fd:d0:4d:7c:e2:eb:d0:2e:d8:99:8f:ca: ab:f6:3a:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcCe18Di5HAQCYe8MBP0UNO/IgxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVF OUUwN0JGNDAeFw0yNjAxMzEwNTE1NTdaFw0yNjAyMDMxNjQ1NTdaMDMxMTAvBgNV BAMTKDE5NTgyQjRCQjQxM0QyNjhFOTMwNzM5MDZCQzI3MEYyQUM4Q0ZCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1DK5awP98KqJr0FwoZA2/+AGb b+bLwIgA+WHbyEtYXqmjhG3uhwFjwMWXM9VgNqLbMlwku+MPArOYKauwo1DdQLGI 08rdEuzbOOYVBhwDqKolMAujvpX01AqMc/ogwAHATTiSL+UuTpkxtUoiEF5uPBGO o2SJVaeFMlJJ/Qdw0JKUVSDpJ5UqPuDPRgD0zzXdMoYC5ZmYvbnTsNfGDYyJIlXF ynYK7wgIOVz/dNVKbnG8rc8m4k/gqfrbdGiLWdz75ye9KAHMZtNhB1oquY9iu3bF hkXP3rBfbRBbWBNwPTPsDpC8CsOU1PB0GB8pQp5YWUTBHKB4I2AJB3TLrJVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVgrS7QT0mjpMHOQa8Jw8qyM+04wHwYDVR0j BBgwFoAUPOympdKxOPXgXOgV1qnZBenge/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMC8zQ0VDQTZBNUQy QjEzOEY1RTA1Q0U4MTVENkE5RDkwNUU5RTA3QkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5MDVFOUUw N0JGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQ4ZWM1ZWItMDM1NC00ZDg3LWIy YmUtMDhmZmFkNGFhMDZhLzAvM0NFQ0E2QTVEMkIxMzhGNUUwNUNFODE1RDZBOUQ5 MDVFOUUwN0JGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0Tsk6Aantqbj1SUimAuJ3z56KxM5zDJQb0 wQ3oF3I2VNP87MU1PbtxpRfSVZHJoH1tYO+UPXTggnKNHgVTvq6SfpCWLR5SUq0x yc51gw3xIvxVgbsDW1oHLKuRsk7ZhquYBops4/vLgo0sn3VrXRgbm1/zhAEQAxnN 8bkJ6K+VKmCd1/LNy+cRcwGEO9LcC9dW6TSGlZYhsMic/4imclgxDZmTykjajmC0 ut4jzYPEpASla5zdxTJnNGkvQi9v+Lw6wCrQX4+dJzdV9Z4EpcH/uLKpLtY6P0IW VbEcmgJ1SJk9+DXuH/xtIbP83HTx6f3QTXzi69Au2JmPyqv2Oss= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:07 2026 by rpki-client