This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft File: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft (raw, json) Hash identifier: hHMjCXJRzhNJ92Wtr+gBcP3aiaH9E1iJvwwLVhJwzvg= Subject key identifier: D3:47:FE:F6:B0:81:F2:60:C1:84:28:F5:C4:89:45:CC:4A:2A:A8:15 Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 Certificate issuer: /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Certificate serial: 3BFE9D4205DAEAE6DF529888896777E3398E99CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject info access: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft Manifest number: 011D Signing time: Sun 01 Feb 2026 10:00:51 +0000 Manifest this update: Sun 01 Feb 2026 09:55:51 +0000 Manifest next update: Wed 04 Feb 2026 17:03:51 +0000 Files and hashes: 1: 323030313a6466333a393534303a3a2f34382d3438203d3e203539313333.roa (hash: uNvfe2ZCHzFGvzYFtsLF+sYRLp4842+xlOIuBK7yD8w=) 2: 3130332e3234332e3234372e302f32342d3234203d3e203539313333.roa (hash: p4y1Kid4bua3BAmOQsrU62lGS5brjVvxzb0i5nn8dXA=) 3: 3130332e3234332e3234362e302f32342d3234203d3e203539313333.roa (hash: StNWQakFfq+xNmXH8bq9LSFQ0fxal73j8fqHU2pjLfE=) 4: 3130332e34332e302e302f32342d3234203d3e203539313333.roa (hash: jTpS8CTg/g1oQKfqki6RqrjxzFhYFUCSre3OSQ6nGQI=) 5: 34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl (hash: PzLUgJ0BwJL4XmDNhVKwaYaN8sowxc0hln359jPUMDg=) 6: 3130332e34332e312e302f32342d3234203d3e203539313333.roa (hash: DLWclu8uy8JSlK6YCxN5IXWbtmAWhKFu/en0aAcy1Mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fe:9d:42:05:da:ea:e6:df:52:98:88:89:67:77:e3:39:8e:99:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869 Validity Not Before: Feb 1 09:55:51 2026 GMT Not After : Feb 4 17:03:51 2026 GMT Subject: CN=D347FEF6B081F260C18428F5C48945CC4A2AA815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:5f:11:b0:53:d9:e8:83:6d:58:66:9f:63: 86:e4:b6:89:a7:9e:d0:c8:98:58:a3:30:c4:96:ca: 3a:af:9e:f4:d4:e0:e8:d4:25:aa:65:65:53:7f:93: e4:75:2d:3c:99:53:9a:9b:3c:40:e3:e8:72:96:d0: bd:4b:e7:8c:14:56:e0:62:4c:8e:b6:e3:73:cb:de: 76:d7:a2:fe:fd:73:84:29:16:98:a4:67:18:e2:df: 51:3f:11:26:84:f5:75:f6:4a:c0:39:03:3d:52:6e: c9:59:10:ec:d0:7d:47:05:dd:95:ea:ee:7d:fc:bf: c9:f0:21:6b:fb:ac:71:df:bd:69:b0:64:7c:96:81: 8e:37:76:88:22:32:4b:58:92:b2:0b:58:45:3a:9e: 5c:9d:0a:5a:a7:2c:6a:d8:7c:e4:82:07:68:ce:f7: cb:13:e4:93:48:b2:3c:f9:b7:25:af:38:4e:50:05: 9e:94:1b:54:d8:0c:04:9d:86:83:cd:5e:9a:56:85: b1:91:db:db:6a:ca:f8:ae:e2:ba:d9:46:4e:a0:67: 03:40:e2:c9:d2:5e:fd:ee:85:ce:e5:31:5a:bf:71: 1b:ee:83:24:86:9c:92:3a:83:c9:98:07:88:50:59: f1:54:65:2b:2c:13:e0:18:95:e3:b6:4b:e7:1b:0c: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:47:FE:F6:B0:81:F2:60:C1:84:28:F5:C4:89:45:CC:4A:2A:A8:15 X509v3 Authority Key Identifier: keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:6f:b6:a4:99:27:9c:2a:a1:0e:3a:c8:99:b6:4e:cb:6b:e1: 88:51:a0:30:51:7e:3b:83:15:fb:9e:27:c8:d1:49:84:54:ac: 4b:a3:33:f6:27:8c:59:d7:a1:86:42:cc:83:e8:63:fc:1d:d4: 0c:c9:e4:05:75:58:be:91:42:1a:7e:b6:dd:a2:39:78:e8:b9: fc:0c:1f:ae:70:c9:8b:c2:3c:4c:73:03:85:72:a2:70:56:ed: 5a:a3:d3:94:6f:69:e8:3c:78:0a:8f:6f:6e:6f:14:9b:08:61: 94:af:8d:0d:86:39:25:10:87:88:11:f7:f2:e4:fc:1c:64:26: 1f:8c:18:e6:5c:50:e7:e5:ad:56:a9:0f:0b:fe:33:10:71:88: 94:47:06:d3:3b:7f:d6:77:7f:fb:31:ba:40:d3:8d:c4:31:62: 1f:98:a0:f7:00:7c:61:a6:3b:73:17:ac:f3:6b:a8:1a:12:3b: 76:12:64:dc:5d:cf:d5:d6:40:d6:17:11:c7:5d:1a:4f:73:2c: 07:d9:0f:9d:78:4d:6e:e9:f8:2a:7b:0f:db:31:6e:19:7a:79: b1:87:a2:73:db:97:c9:eb:49:60:41:2c:fe:25:08:c0:07:be: 1e:a7:d6:0a:39:47:42:79:05:08:71:0d:33:80:c8:cc:b0:99: eb:cb:52:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/6dQgXa6ubfUpiIiWd34zmOmcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2 RkEzMTg2OTAeFw0yNjAyMDEwOTU1NTFaFw0yNjAyMDQxNzAzNTFaMDMxMTAvBgNV BAMTKEQzNDdGRUY2QjA4MUYyNjBDMTg0MjhGNUM0ODk0NUNDNEEyQUE4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFpl8RsFPZ6INtWGafY4bktomn ntDImFijMMSWyjqvnvTU4OjUJaplZVN/k+R1LTyZU5qbPEDj6HKW0L1L54wUVuBi TI6243PL3nbXov79c4QpFpikZxji31E/ESaE9XX2SsA5Az1SbslZEOzQfUcF3ZXq 7n38v8nwIWv7rHHfvWmwZHyWgY43dogiMktYkrILWEU6nlydClqnLGrYfOSCB2jO 98sT5JNIsjz5tyWvOE5QBZ6UG1TYDASdhoPNXppWhbGR29tqyviu4rrZRk6gZwNA 4snSXv3uhc7lMVq/cRvugySGnJI6g8mYB4hQWfFUZSssE+AYleO2S+cbDOYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00f+9rCB8mDBhCj1xIlFzEoqqBUwHwYDVR0j BBgwFoAUNMR+zI7fqgXv/0H7/w9qRm+jGGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDBlYzQzYi00MzNkLTQwN2QtYmRlZS1lZWE2MjE2YTZmZjQvMC8zNEM0N0VDQzhF REZBQTA1RUZGRjQxRkJGRjBGNkE0NjZGQTMxODY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZBNDY2RkEz MTg2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAwZWM0M2ItNDMzZC00MDdkLWJk ZWUtZWVhNjIxNmE2ZmY0LzAvMzRDNDdFQ0M4RURGQUEwNUVGRkY0MUZCRkYwRjZB NDY2RkEzMTg2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9vtqSZJ5wqoQ46yJm2Tstr4YhRoDBRfjuD FfueJ8jRSYRUrEujM/YnjFnXoYZCzIPoY/wd1AzJ5AV1WL6RQhp+tt2iOXjoufwM H65wyYvCPExzA4VyonBW7Vqj05Rvaeg8eAqPb25vFJsIYZSvjQ2GOSUQh4gR9/Lk /BxkJh+MGOZcUOflrVapDwv+MxBxiJRHBtM7f9Z3f/sxukDTjcQxYh+YoPcAfGGm O3MXrPNrqBoSO3YSZNxdz9XWQNYXEcddGk9zLAfZD514TW7p+Cp7D9sxbhl6ebGH onPbl8nrSWBBLP4lCMAHvh6n1go5R0J5BQhxDTOAyMywmevLUh4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:18 2026 by rpki-client