This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft (raw, json) Hash identifier: 05D7W46zxC4NzcgFhQW18D4THwv0hc+f1waQ2tlVjZA= Subject key identifier: 82:05:BB:30:A5:C9:31:06:F1:B1:FF:07:68:48:66:E2:B1:40:97:CE Authority key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Certificate issuer: /CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Certificate serial: 0FEF0D2C379E46FB4B5C05A66D4C83A680D1B03C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft Manifest number: 0114 Signing time: Mon 19 Jan 2026 20:02:27 +0000 Manifest this update: Mon 19 Jan 2026 19:57:27 +0000 Manifest next update: Thu 22 Jan 2026 20:29:27 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: xAoPpGiqJPKLajKP9A6xSCK7J0LB9rX24Vj8odXUlPU=) 2: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl (hash: Li5I9pyegVLFrX6TFx/HnXwSiVtkNFjqZTy7QiZzOgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 20:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:0d:2c:37:9e:46:fb:4b:5c:05:a6:6d:4c:83:a6:80:d1:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Validity Not Before: Jan 19 19:57:27 2026 GMT Not After : Jan 22 20:29:27 2026 GMT Subject: CN=8205BB30A5C93106F1B1FF07684866E2B14097CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:e4:fc:99:35:bb:ce:e1:46:1f:ad:c6:b7: 83:6f:3b:21:4d:30:1e:c8:f4:94:1b:1f:77:5b:f6: 8f:d0:ac:7b:a8:89:68:7e:a2:ba:0f:72:6d:39:4a: 9e:bc:a5:26:0a:c3:99:2d:69:0b:92:a7:b8:13:5e: 95:7d:4f:18:e0:a8:73:ee:73:29:76:7b:5f:fb:8d: 10:7a:a4:ff:13:fd:db:75:df:d6:0a:9b:65:bf:49: 56:be:2c:0d:8a:14:30:63:af:81:c4:69:0c:aa:d4: 80:e1:69:59:24:59:b2:44:ae:f5:de:b1:ee:19:bc: 39:fe:6e:6d:39:94:9b:fe:42:ad:82:be:d1:a1:ea: a4:70:ba:8b:b5:d7:cd:95:be:99:32:d4:d0:bd:07: 13:fb:45:22:22:11:2f:ec:9b:25:9e:6b:aa:3f:f5: bc:4c:bf:75:3c:98:26:bb:77:c5:40:83:2a:dc:05: d6:fd:38:74:b0:57:95:0a:98:2b:50:c6:34:35:a4: 0b:66:0c:f8:d6:5d:c1:1c:f0:32:75:cb:0c:b1:3d: dc:48:03:ac:ae:ee:f7:ac:9b:cb:50:ba:95:39:e6: 08:dd:65:cf:32:52:ea:40:6d:f6:16:48:b5:1f:a8: 23:87:b3:b1:db:64:5c:6f:71:db:77:8e:db:0f:77: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:05:BB:30:A5:C9:31:06:F1:B1:FF:07:68:48:66:E2:B1:40:97:CE X509v3 Authority Key Identifier: keyid:34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:e6:ff:ec:8c:47:3c:f3:27:f0:0a:ac:17:d2:84:07:6f:eb: 1a:75:98:43:c4:24:22:76:ce:6a:5c:b7:26:4f:6c:25:ec:03: a1:d5:ce:e2:47:bd:be:e8:37:6e:8c:7f:1f:84:92:8a:01:4b: 30:1b:a6:fe:cb:3c:ec:3c:d4:e7:cb:ae:92:5a:3b:bd:c7:d2: 98:62:db:98:b5:97:41:4a:58:35:cb:ba:79:de:09:46:61:3d: 4e:54:2c:11:ed:da:90:8e:ac:78:2f:ff:70:9f:b1:4b:23:a0: aa:c0:6f:df:a6:c2:a6:3d:06:fb:36:be:dc:f9:23:c4:fc:7f: 57:2e:6c:44:f3:57:ea:15:1a:35:47:4d:aa:09:0e:de:a3:df: b4:04:a1:05:ba:81:3e:d7:99:2e:61:fb:4a:92:3f:19:15:ab: 47:fd:e8:53:e7:3e:96:e9:a4:73:7a:23:05:96:d6:e9:1e:5b: fa:df:1d:2c:05:c9:bd:21:3d:d9:d2:40:70:f7:89:75:0f:4b: 09:a0:8a:39:47:29:fe:ce:a1:36:87:42:b2:c0:ed:33:6f:b3: 79:74:af:df:6b:44:d4:12:62:2c:0e:59:60:a9:ba:ac:c0:2c: a9:45:9b:b6:45:a5:ba:fe:bb:85:41:d2:15:a4:6c:12:53:b5: 4b:ec:11:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+8NLDeeRvtLXAWmbUyDpoDRsDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJE RDNDQTI5NTAeFw0yNjAxMTkxOTU3MjdaFw0yNjAxMjIyMDI5MjdaMDMxMTAvBgNV BAMTKDgyMDVCQjMwQTVDOTMxMDZGMUIxRkYwNzY4NDg2NkUyQjE0MDk3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK+T8mTW7zuFGH63Gt4NvOyFN MB7I9JQbH3db9o/QrHuoiWh+oroPcm05Sp68pSYKw5ktaQuSp7gTXpV9TxjgqHPu cyl2e1/7jRB6pP8T/dt139YKm2W/SVa+LA2KFDBjr4HEaQyq1IDhaVkkWbJErvXe se4ZvDn+bm05lJv+Qq2CvtGh6qRwuou1182Vvpky1NC9BxP7RSIiES/smyWea6o/ 9bxMv3U8mCa7d8VAgyrcBdb9OHSwV5UKmCtQxjQ1pAtmDPjWXcEc8DJ1ywyxPdxI A6yu7vesm8tQupU55gjdZc8yUupAbfYWSLUfqCOHs7HbZFxvcdt3jtsPd1URAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggW7MKXJMQbxsf8HaEhm4rFAl84wHwYDVR0j BBgwFoAUNAqYwelqOQnOsL61iMQM+908opUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMC8zNDBBOThDMUU5 NkEzOTA5Q0VCMEJFQjU4OEM0MENGQkREM0NBMjk1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBDRkJERDND QTI5NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvMzQwQTk4QzFFOTZBMzkwOUNFQjBCRUI1ODhDNDBD RkJERDNDQTI5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPm/+yMRzzzJ/AKrBfShAdv6xp1mEPEJCJ2 zmpctyZPbCXsA6HVzuJHvb7oN26Mfx+EkooBSzAbpv7LPOw81OfLrpJaO73H0phi 25i1l0FKWDXLunneCUZhPU5ULBHt2pCOrHgv/3CfsUsjoKrAb9+mwqY9Bvs2vtz5 I8T8f1cubETzV+oVGjVHTaoJDt6j37QEoQW6gT7XmS5h+0qSPxkVq0f96FPnPpbp pHN6IwWW1ukeW/rfHSwFyb0hPdnSQHD3iXUPSwmgijlHKf7OoTaHQrLA7TNvs3l0 r99rRNQSYiwOWWCpuqzALKlFm7ZFpbr+u4VB0hWkbBJTtUvsEQI= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:21 2026 by rpki-client