This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft File: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft (raw, json) Hash identifier: pIBdQKpDavkVybsoaAbOnljZC21aLlWPcwxOBM2TPLY= Subject key identifier: D7:52:F4:63:4B:D9:F7:2E:82:00:DA:3C:58:A1:07:56:8B:95:DF:C4 Authority key identifier: 3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A Certificate issuer: /CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Certificate serial: 74AE7C77F06279BF5D7BB3F5B4F973318881C4D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft Manifest number: 0276 Signing time: Sun 01 Feb 2026 15:51:59 +0000 Manifest this update: Sun 01 Feb 2026 15:46:59 +0000 Manifest next update: Thu 05 Feb 2026 00:10:59 +0000 Files and hashes: 1: 3130332e3138342e3132322e302f32342d3234203d3e20313439373035.roa (hash: Iu3jqOF1OKCYSUkajjnPtBWzUDppzjUa82PRV4A9qHs=) 2: 3130332e3138342e3132332e302f32342d3234203d3e20313439373035.roa (hash: DTS/Msv2+J+yWcCmX3IMnnNepiaqaJENVR2ewyRj56c=) 3: 3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl (hash: RBvfLLIU6fEi2HJU9wGMv33hcEesm1lLv/zjf0ZCnI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 00:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ae:7c:77:f0:62:79:bf:5d:7b:b3:f5:b4:f9:73:31:88:81:c4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A Validity Not Before: Feb 1 15:46:59 2026 GMT Not After : Feb 5 00:10:59 2026 GMT Subject: CN=D752F4634BD9F72E8200DA3C58A107568B95DFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1b:51:03:14:b9:58:cb:5c:72:2f:42:6d:e9: 7e:43:52:f7:79:cc:58:84:f8:60:47:27:08:5d:27: ee:b9:d2:f4:eb:da:40:8d:b6:85:ac:93:7c:c2:77: 71:e1:d0:ca:ab:30:04:f7:2d:0c:06:df:22:fc:86: 9b:6d:c7:00:cf:f5:47:18:0b:37:be:6d:4c:7f:93: d2:8e:4e:71:90:03:cd:14:7e:22:da:82:ba:92:e8: e1:d1:5c:77:60:29:bc:62:3b:1d:56:f3:23:0d:87: 71:f3:47:e2:3a:d9:cf:78:bf:38:97:c1:fd:6a:79: 3e:56:31:8f:ba:c3:5f:68:3b:a3:24:53:d5:6e:37: 12:53:47:c6:16:bc:38:9e:4e:08:a2:f0:2e:f4:9d: f2:56:19:fb:79:89:67:db:72:f0:76:a4:60:4c:1c: 87:70:4c:c8:16:ce:d6:d7:e4:e0:34:93:bc:35:ab: 36:c7:0f:48:07:0a:e2:29:ab:ef:ff:99:1a:d6:95: e9:06:1c:c2:f5:6a:af:eb:14:54:79:29:8d:38:fe: 59:62:3d:60:f6:ed:b7:78:59:df:da:09:a3:b7:40: 59:f9:6c:ed:5b:34:48:4b:b0:f0:41:9f:85:fe:c7: 01:bb:9a:ea:49:0d:04:d6:3a:a1:82:32:6c:12:18: b0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:52:F4:63:4B:D9:F7:2E:82:00:DA:3C:58:A1:07:56:8B:95:DF:C4 X509v3 Authority Key Identifier: keyid:3F:D6:EB:17:E6:7A:CC:40:60:F7:77:F5:A4:E3:F9:A0:27:AB:3F:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29226948-b1a1-4294-9150-6af0e0bebfb8/0/3FD6EB17E67ACC4060F777F5A4E3F9A027AB3F9A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:61:3a:8c:95:98:3d:7f:87:9b:5b:f9:a8:94:fb:ec:e1:5c: 33:9b:9a:09:5f:1e:a4:1b:0d:67:6e:45:40:34:7c:e4:bf:bd: d0:34:bb:ba:90:15:7e:76:07:41:26:4b:ff:ee:77:2e:9a:90: f2:7f:3b:04:6d:3e:d2:8c:e6:46:42:0e:33:07:f6:d9:bd:4b: 32:96:d0:26:e3:95:77:2e:13:37:5b:ef:84:22:02:16:75:80: 35:11:79:22:58:92:d9:ab:da:58:4f:f7:89:2c:59:1f:bb:bc: 02:7c:5f:30:41:55:d8:02:8b:ac:84:92:a7:4d:79:4a:03:a7: 20:b9:25:cd:1e:d9:cc:31:9d:3f:6e:6a:63:3b:1f:f0:90:7f: 4d:e6:1a:7d:1e:18:33:3e:dd:60:49:31:0f:19:19:f0:93:3a: 70:f6:d2:c0:b7:15:e2:ef:43:05:6a:68:ae:8c:f9:9c:c7:6b: d3:ec:af:b2:90:a6:8d:10:13:99:90:52:ee:10:79:c8:2c:54: ec:60:d9:67:06:67:ed:be:60:1a:c2:97:bd:a8:18:11:7d:5f: 3f:83:fe:6d:33:8e:79:d6:50:46:81:da:ad:15:12:33:5d:ba: 2c:ef:7b:21:aa:15:0b:36:94:cb:7e:df:4d:c7:41:1c:77:d5: 13:04:95:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdK58d/Bieb9de7P1tPlzMYiBxNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAy N0FCM0Y5QTAeFw0yNjAyMDExNTQ2NTlaFw0yNjAyMDUwMDEwNTlaMDMxMTAvBgNV BAMTKEQ3NTJGNDYzNEJEOUY3MkU4MjAwREEzQzU4QTEwNzU2OEI5NURGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHG1EDFLlYy1xyL0Jt6X5DUvd5 zFiE+GBHJwhdJ+650vTr2kCNtoWsk3zCd3Hh0MqrMAT3LQwG3yL8hpttxwDP9UcY Cze+bUx/k9KOTnGQA80UfiLagrqS6OHRXHdgKbxiOx1W8yMNh3HzR+I62c94vziX wf1qeT5WMY+6w19oO6MkU9VuNxJTR8YWvDieTgii8C70nfJWGft5iWfbcvB2pGBM HIdwTMgWztbX5OA0k7w1qzbHD0gHCuIpq+//mRrWlekGHML1aq/rFFR5KY04/lli PWD27bd4Wd/aCaO3QFn5bO1bNEhLsPBBn4X+xwG7mupJDQTWOqGCMmwSGLBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11L0Y0vZ9y6CANo8WKEHVouV38QwHwYDVR0j BBgwFoAUP9brF+Z6zEBg93f1pOP5oCerP5owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTIyNjk0OC1iMWExLTQyOTQtOTE1MC02YWYwZTBiZWJmYjgvMC8zRkQ2RUIxN0U2 N0FDQzQwNjBGNzc3RjVBNEUzRjlBMDI3QUIzRjlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5QTAyN0FC M0Y5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjkyMjY5NDgtYjFhMS00Mjk0LTkx NTAtNmFmMGUwYmViZmI4LzAvM0ZENkVCMTdFNjdBQ0M0MDYwRjc3N0Y1QTRFM0Y5 QTAyN0FCM0Y5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZhOoyVmD1/h5tb+aiU++zhXDObmglfHqQb DWduRUA0fOS/vdA0u7qQFX52B0EmS//udy6akPJ/OwRtPtKM5kZCDjMH9tm9SzKW 0CbjlXcuEzdb74QiAhZ1gDUReSJYktmr2lhP94ksWR+7vAJ8XzBBVdgCi6yEkqdN eUoDpyC5Jc0e2cwxnT9uamM7H/CQf03mGn0eGDM+3WBJMQ8ZGfCTOnD20sC3FeLv QwVqaK6M+ZzHa9Psr7KQpo0QE5mQUu4QecgsVOxg2WcGZ+2+YBrCl72oGBF9Xz+D /m0zjnnWUEaB2q0VEjNduizveyGqFQs2lMt+303HQRx31RMElaQ= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:01 2026 by rpki-client