This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft (raw, json) Hash identifier: 2XLYOoHZx7qt6CX/Sa7sUPGEuW/aBULUWSv/D06VnfA= Subject key identifier: E8:4C:70:C7:71:E2:EC:A3:E0:D5:BD:68:7D:A0:EB:3B:4A:90:09:E8 Authority key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Certificate issuer: /CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Certificate serial: 0BDCF9F373137CEB30EB4715A76DF9998868E665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft Manifest number: 0393 Signing time: Sat 31 Jan 2026 13:12:26 +0000 Manifest this update: Sat 31 Jan 2026 13:07:26 +0000 Manifest next update: Tue 03 Feb 2026 18:08:26 +0000 Files and hashes: 1: 3130332e3136382e3134382e302f32342d3234203d3e20313432333530.roa (hash: MTg1tuijanT/fwfxdf3hwp8GNR+2Cd4sBdhUtmiigzQ=) 2: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl (hash: lVnl0aGqrGSnYtTDd07CHi2hmgrXVAajfSZKS7dwc7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:dc:f9:f3:73:13:7c:eb:30:eb:47:15:a7:6d:f9:99:88:68:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Validity Not Before: Jan 31 13:07:26 2026 GMT Not After : Feb 3 18:08:26 2026 GMT Subject: CN=E84C70C771E2ECA3E0D5BD687DA0EB3B4A9009E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:ff:0a:ff:6c:82:7a:e6:ce:46:7f:73:62: 03:21:aa:d3:e0:fe:64:e2:c2:51:ec:4d:a2:c2:d0: aa:c9:50:4f:15:73:d4:be:2e:41:e5:51:92:c8:6f: d7:08:07:36:1d:f1:83:2c:45:cc:cf:84:47:55:c9: 53:7a:5f:b6:5f:60:94:e3:cd:61:70:da:90:a9:59: 30:53:54:25:99:ff:07:79:59:8b:89:75:1d:3a:bd: eb:ff:c3:92:02:f0:0a:7e:fc:83:8d:82:78:f0:3b: b9:74:6c:b6:cf:5f:fa:0f:66:7e:6f:ef:a6:36:2a: 3e:92:6e:ab:4c:09:04:bd:43:31:ea:be:12:0b:11: f7:f1:93:fc:70:31:18:bc:33:ae:e6:b1:20:10:f2: f3:1f:36:ab:31:79:5c:4f:38:5d:81:24:16:f6:eb: 07:d7:08:80:98:4d:e4:0c:37:9a:7f:3f:0b:12:aa: df:0b:31:0f:8e:8f:17:27:b4:90:70:19:4d:f3:65: 7a:9a:04:44:4b:f0:de:a4:3d:a3:1e:2f:7f:41:7a: 1d:5c:3d:b6:57:3a:92:b9:23:4a:86:b1:13:22:dc: 2d:e1:3c:76:62:1f:3d:69:61:31:b3:24:b7:81:16: f7:68:39:ff:71:0c:10:a7:46:81:3a:32:01:42:c0: d7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4C:70:C7:71:E2:EC:A3:E0:D5:BD:68:7D:A0:EB:3B:4A:90:09:E8 X509v3 Authority Key Identifier: keyid:C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:f9:f6:7b:dc:a9:fb:9e:59:e2:26:f7:11:db:b4:5b:3c:92: c4:0e:71:fc:74:4e:b8:d4:0a:d2:76:be:9a:aa:d4:2b:0e:40: 2e:d1:aa:a6:bd:be:03:0b:2f:1d:06:61:a1:83:41:95:36:d5: 97:63:21:7b:f9:e4:88:ad:cd:0d:4c:83:41:9b:c2:df:5b:10: e5:20:1f:da:b1:1d:ba:1c:b9:4e:e4:b3:c2:5e:e1:33:a9:e7: 00:b8:b6:17:1b:74:33:b2:54:8a:1e:a4:7b:d4:ff:ab:b9:75: a2:4e:a5:1f:2c:47:c4:cb:00:3a:bb:98:2c:fa:87:44:67:25: 7a:b9:07:39:da:c1:6c:1a:81:e7:db:ff:66:8c:16:91:89:33: 6a:0c:de:70:39:be:2f:e4:13:fd:1c:d3:db:90:b5:c3:72:da: f7:65:13:24:70:f5:2c:24:b7:4e:91:72:f5:0f:8b:38:de:f1: 41:40:5f:7c:74:d8:16:15:25:74:b8:91:df:18:96:a1:7a:8c: b4:4b:1f:bd:c5:e8:75:12:db:dc:19:35:5f:3f:5e:24:e2:c8: 7f:ea:25:42:a8:60:c4:6c:9f:e1:2f:74:00:86:24:07:79:11: 62:f5:ac:fd:7f:b4:6c:ec:85:55:80:42:02:fa:c3:df:08:d6: e8:4d:2c:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9z583MTfOsw60cVp235mYho5mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzky Mjg2MzFGNzAeFw0yNjAxMzExMzA3MjZaFw0yNjAyMDMxODA4MjZaMDMxMTAvBgNV BAMTKEU4NEM3MEM3NzFFMkVDQTNFMEQ1QkQ2ODdEQTBFQjNCNEE5MDA5RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yf8K/2yCeubORn9zYgMhqtPg /mTiwlHsTaLC0KrJUE8Vc9S+LkHlUZLIb9cIBzYd8YMsRczPhEdVyVN6X7ZfYJTj zWFw2pCpWTBTVCWZ/wd5WYuJdR06vev/w5IC8Ap+/IONgnjwO7l0bLbPX/oPZn5v 76Y2Kj6SbqtMCQS9QzHqvhILEffxk/xwMRi8M67msSAQ8vMfNqsxeVxPOF2BJBb2 6wfXCICYTeQMN5p/PwsSqt8LMQ+OjxcntJBwGU3zZXqaBERL8N6kPaMeL39Beh1c PbZXOpK5I0qGsRMi3C3hPHZiHz1pYTGzJLeBFvdoOf9xDBCnRoE6MgFCwNcvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Exwx3Hi7KPg1b1ofaDrO0qQCegwHwYDVR0j BBgwFoAUwwo3cezl92LW+m2HKPTAySKGMfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMC9DMzBBMzc3MUVD RTVGNzYyRDZGQTZEODcyOEY0QzBDOTIyODYzMUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMwQzkyMjg2 MzFGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExZjYyOTktYjE1NS00MjEyLWI1 ZTEtOWY1NzAzY2QwOTg5LzAvQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2RDg3MjhGNEMw QzkyMjg2MzFGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL59nvcqfueWeIm9xHbtFs8ksQOcfx0TrjU CtJ2vpqq1CsOQC7Rqqa9vgMLLx0GYaGDQZU21ZdjIXv55IitzQ1Mg0Gbwt9bEOUg H9qxHbocuU7ks8Je4TOp5wC4thcbdDOyVIoepHvU/6u5daJOpR8sR8TLADq7mCz6 h0RnJXq5BznawWwagefb/2aMFpGJM2oM3nA5vi/kE/0c09uQtcNy2vdlEyRw9Swk t06RcvUPizje8UFAX3x02BYVJXS4kd8YlqF6jLRLH73F6HUS29wZNV8/XiTiyH/q JUKoYMRsn+EvdACGJAd5EWL1rP1/tGzshVWAQgL6w98I1uhNLOo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:48:41 2026 by rpki-client