This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
File: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft (raw, json)
Hash identifier: divDW4G4Iubq3SDFKqdNuhwAXZivG0LDdcX7KFgJ2v8=
Subject key identifier: 59:4A:B5:7F:D0:D7:F9:F3:92:28:E7:CB:67:96:F0:F8:96:50:FC:4B
Authority key identifier: 3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
Certificate issuer: /CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Certificate serial: 7F1A2BEE716E561CECEE74C25E095504C200CDB5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
Manifest number: 0218
Signing time: Sat 31 Jan 2026 19:01:43 +0000
Manifest this update: Sat 31 Jan 2026 18:56:43 +0000
Manifest next update: Tue 03 Feb 2026 19:31:43 +0000
Files and hashes: 1: 3130332e32382e38302e302f32342d3234203d3e203435373233.roa (hash: sVFI8Cp5vLICzsv5e4/4WyRHUaJ0f+3GFM/qswBcdHg=)
2: 3130332e32382e38302e302f32322d3232203d3e203435373233.roa (hash: iXcg9I4Oyy6EsqPXrnC6OWS/dn/agjkU6nPGqXChu7c=)
3: 3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl (hash: lDkmHruAjyUvQzDsicFeeUKsCQpY24gaJHJ+K4O1V9U=)
4: 3230322e312e3233362e302f32342d3234203d3e203435373233.roa (hash: BHHFTjLTNMFtSq5idTfwLT9M3wuRjM3mExKv2SVRdKc=)
5: 323430333a316130303a343a3a2f34372d3437203d3e203435373233.roa (hash: xiMw3g54rwkg5pTrfUcRFVEPY6CzUbv7I+jMZseSJVM=)
6: 3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (hash: KCBeNM9Sn0PIpboyPHdjgvvuRVmSaWYIbnHGh3xSCK0=)
7: 3130332e32382e38332e302f32342d3234203d3e203435373233.roa (hash: O+nmvl+UTnkLZegrbIISQHYGfoEA7BPCfhSW9p3DWUc=)
8: 3130332e32382e38322e302f32342d3234203d3e203435373233.roa (hash: JiNSNBx/NJVCb9CW8exTEdCGa2EMUTZlCI+5UgveOhE=)
9: 3130332e32382e38312e302f32342d3234203d3e203435373233.roa (hash: ugWQkuQ0uRRyYTj1KpvBULv0Xx0kJB9LyC15wGfuroA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 19:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1a:2b:ee:71:6e:56:1c:ec:ee:74:c2:5e:09:55:04:c2:00:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25
Validity
Not Before: Jan 31 18:56:43 2026 GMT
Not After : Feb 3 19:31:43 2026 GMT
Subject: CN=594AB57FD0D7F9F39228E7CB6796F0F89650FC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:60:c5:47:40:1d:82:ec:ac:65:39:5d:7a:
99:20:e5:1a:1f:f6:74:42:22:26:0c:72:fc:28:e9:
63:dd:07:88:ec:f7:cf:93:b3:29:33:d6:f5:c7:73:
ab:3e:83:e6:7a:21:f6:70:b1:aa:8e:14:7b:ec:79:
f9:d9:75:53:5d:a9:ee:c9:cc:b3:0b:43:08:4e:cd:
b4:f1:ec:dc:5b:c4:65:44:ef:e3:60:15:6a:14:73:
20:ac:d0:aa:ef:7f:22:ef:22:b2:29:8e:c9:c9:68:
9f:ff:c2:5a:6e:d6:c2:8b:9d:ba:b2:5a:5c:b0:63:
12:0b:ff:e4:86:e4:ee:8c:e4:39:79:59:7d:90:1f:
c9:8c:99:e3:31:3e:ef:84:1f:4d:b9:38:44:9a:81:
15:6d:0a:4d:c0:87:3a:f1:af:b4:b7:ce:4c:c5:b2:
0c:7d:a7:eb:18:a0:04:41:65:d5:7a:f7:03:90:c2:
cb:78:c2:24:79:0e:12:09:dd:e3:47:ba:1e:8b:a8:
87:af:f9:94:dd:08:b4:cc:4e:47:4f:4a:4d:84:80:
fb:ba:94:b6:17:c4:4d:21:e4:77:3f:63:83:ac:84:
27:59:6c:2e:1d:d1:5a:3d:2b:1c:18:d2:0c:56:d1:
29:9e:4e:90:f8:04:c3:7b:8f:a4:48:00:eb:a1:e6:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:B5:7F:D0:D7:F9:F3:92:28:E7:CB:67:96:F0:F8:96:50:FC:4B
X509v3 Authority Key Identifier:
keyid:3F:6E:9B:C5:F1:6F:1C:3A:B5:FD:63:6E:7D:E0:6F:DD:64:89:2C:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3F6E9BC5F16F1C3AB5FD636E7DE06FDD64892C25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ad:b7:31:8f:d8:02:fd:28:67:96:80:f0:c2:73:7b:db:65:
7c:b4:fe:d0:29:56:8e:89:fc:7b:1f:39:04:23:93:12:b6:14:
72:82:58:71:c5:d9:e9:ef:df:ff:a5:8e:b0:9b:2f:19:cd:0a:
b4:b2:ad:13:f4:17:3c:28:04:ac:21:4f:06:6e:e2:ca:8f:61:
47:dd:26:63:a6:21:33:59:1a:df:52:4c:62:99:3f:96:62:86:
ed:5e:5c:1a:3f:43:98:62:d8:2e:22:c8:43:9b:17:f2:7f:f8:
ec:e7:9f:e3:58:51:3b:b6:84:3a:2a:96:23:f2:25:35:24:2e:
f6:33:9a:0c:f9:29:c3:2e:ad:11:f6:c5:8b:4b:ef:b7:8e:2d:
77:0e:75:83:41:5f:8f:bf:f9:05:fc:b8:32:e9:0c:b9:95:05:
e4:cd:9d:f7:f2:0f:ce:a9:e6:11:69:40:41:b6:ef:e9:49:40:
c3:5a:76:d0:e3:3e:ed:ea:e1:fb:da:3d:9b:bc:e5:a7:54:f2:
1b:78:fa:d6:fa:2c:96:fd:d6:81:55:17:cd:e0:f8:b5:e2:e1:
e6:c9:4d:22:a0:53:3f:d6:f7:be:d2:15:ad:07:fc:a0:ac:2a:
cb:84:84:fb:62:65:24:5f:22:2f:a6:b5:c5:62:3f:83:16:50:
31:3d:8a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:45:09 2026 by rpki-client