This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft (raw, json) Hash identifier: eevcREY8iN5fg4bL5tVBq2SGTL1POQSE03OIkx8HVww= Subject key identifier: 61:36:EB:9B:B3:5D:0F:6A:A7:04:8F:CF:C6:C9:B8:1C:32:6B:E5:25 Authority key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Certificate issuer: /CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Certificate serial: 462214C6171635F7E8E3C685734349FD040F5AC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft Manifest number: 0226 Signing time: Sat 31 Jan 2026 03:30:58 +0000 Manifest this update: Sat 31 Jan 2026 03:25:58 +0000 Manifest next update: Tue 03 Feb 2026 10:07:58 +0000 Files and hashes: 1: 3130332e32382e3136332e302f32342d3234203d3e203536323539.roa (hash: NAFqFIaSAImXyE9eWh33YjJ4/n4BJqvDNhOBlZ2+l28=) 2: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl (hash: g6dHBcVNwPLuhvF6mcL4beuIlLQv41Z3d1NbQUxIZIU=) 3: 3130332e31302e3235332e302f32342d3234203d3e203536323539.roa (hash: HvzvMBj5qU+NExWSjTWqrdpmvH/WBtBrlcSKkhbhERc=) 4: 3130332e36352e39362e302f32332d3234203d3e203536323539.roa (hash: GJQ3NUFsB2nVnSk1uRZagjtzrc7ng31cjwY1HHOp2FQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 10:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:14:c6:17:16:35:f7:e8:e3:c6:85:73:43:49:fd:04:0f:5a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Validity Not Before: Jan 31 03:25:58 2026 GMT Not After : Feb 3 10:07:58 2026 GMT Subject: CN=6136EB9BB35D0F6AA7048FCFC6C9B81C326BE525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:94:74:4b:23:9e:f2:86:9c:c4:a4:72:e8: 81:68:f1:9d:ae:df:9b:e7:e5:fa:be:d4:3c:d9:55: e7:76:66:3f:bf:b7:a8:62:22:60:71:18:25:1f:9e: 97:c1:2e:83:bb:d8:f4:00:0c:a8:fa:f0:62:b9:9c: 8c:1c:5d:24:f9:16:85:2b:3e:25:90:ea:a6:d5:34: b6:a2:3a:cc:9a:0b:2f:03:03:f4:70:ea:3a:7c:11: 1d:24:ee:57:f4:e0:96:28:50:38:f1:1c:ca:91:e2: 41:62:1e:67:30:ff:fd:3f:b7:f9:e7:81:b5:59:f2: 24:3c:9c:d5:95:ae:c3:23:fa:bc:b6:3d:32:3a:75: 5d:87:24:4f:c2:ab:fd:2b:42:ab:fb:b1:42:fb:08: 86:58:99:e4:8d:45:72:e8:b0:07:2b:c2:b3:9c:b3: bf:19:69:ba:e4:a8:09:0a:a9:81:e0:b6:d2:9a:ba: 66:5e:0e:2b:54:6b:57:6f:d8:98:e8:0e:42:0e:f0: 1e:91:af:ea:28:64:0f:34:20:ef:20:6f:56:61:a9: dc:ea:97:af:6e:54:54:fb:d9:99:e0:33:cb:6a:40: 8f:6e:3a:9c:36:43:ed:8d:57:45:07:84:02:62:05: 53:c1:9d:8a:c5:a7:7c:a0:2f:b3:ad:14:4e:5d:4c: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:EB:9B:B3:5D:0F:6A:A7:04:8F:CF:C6:C9:B8:1C:32:6B:E5:25 X509v3 Authority Key Identifier: keyid:3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:6e:9b:3c:a3:96:fa:90:fd:9f:60:b7:6f:f8:53:9c:16:ea: a2:ac:cb:e7:5c:d3:b5:a4:de:11:28:24:68:a2:ca:0e:72:f9: ce:f5:7d:9f:41:66:2e:47:9a:67:92:82:04:bf:fa:97:6d:87: 1a:82:f3:84:21:54:b2:52:fe:73:1e:99:ba:9d:a4:dd:07:90: c8:71:e2:3f:a8:1b:a3:c2:13:27:c2:e2:73:9c:75:8f:30:35: d6:0f:a1:6e:52:bb:af:1c:15:31:90:07:4c:44:9c:d6:be:6e: 31:42:4c:8d:a7:d3:e5:d5:be:e1:fb:8c:9f:67:9f:00:9d:80: a5:9f:ce:42:15:5f:99:e2:8d:cc:77:53:b1:67:92:b9:47:0c: 99:c1:9c:61:f0:2d:7c:38:a3:35:17:02:ca:6f:8b:7c:51:40: d3:78:b9:a4:b4:e5:58:ce:61:58:56:ca:53:04:ab:e3:76:cd: 4d:da:6d:ee:9e:5f:d6:af:94:0f:69:6a:e2:4a:72:1d:16:7c: 87:d4:c2:4f:ac:9d:e7:73:8c:de:65:09:0a:cb:fe:c8:0f:43: c6:2a:d5:d6:2d:c3:b6:c2:a8:0e:62:f2:a1:0e:39:2e:ac:8b: d2:63:05:50:23:3f:e8:9b:3c:3e:a5:95:08:a2:db:2a:31:5f: d5:19:13:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiIUxhcWNffo48aFc0NJ/QQPWsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4 NUMzNUU0RjAeFw0yNjAxMzEwMzI1NThaFw0yNjAyMDMxMDA3NThaMDMxMTAvBgNV BAMTKDYxMzZFQjlCQjM1RDBGNkFBNzA0OEZDRkM2QzlCODFDMzI2QkU1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4ZR0SyOe8oacxKRy6IFo8Z2u 35vn5fq+1DzZVed2Zj+/t6hiImBxGCUfnpfBLoO72PQADKj68GK5nIwcXST5FoUr PiWQ6qbVNLaiOsyaCy8DA/Rw6jp8ER0k7lf04JYoUDjxHMqR4kFiHmcw//0/t/nn gbVZ8iQ8nNWVrsMj+ry2PTI6dV2HJE/Cq/0rQqv7sUL7CIZYmeSNRXLosAcrwrOc s78ZabrkqAkKqYHgttKaumZeDitUa1dv2JjoDkIO8B6Rr+ooZA80IO8gb1Zhqdzq l69uVFT72ZngM8tqQI9uOpw2Q+2NV0UHhAJiBVPBnYrFp3ygL7OtFE5dTLejAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYTbrm7NdD2qnBI/Pxsm4HDJr5SUwHwYDVR0j BBgwFoAUPXifr19+vmk4xMcj3NLu14XDXk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMC8zRDc4OUZBRjVG N0VCRTY5MzhDNEM3MjNEQ0QyRUVENzg1QzM1RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVFRDc4NUMz NUU0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ5NzAwMzItMDhlYS00ODkwLWJk YmEtNjMwOWE0OTc5MTdkLzAvM0Q3ODlGQUY1RjdFQkU2OTM4QzRDNzIzRENEMkVF RDc4NUMzNUU0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFumzyjlvqQ/Z9gt2/4U5wW6qKsy+dc07Wk 3hEoJGiiyg5y+c71fZ9BZi5HmmeSggS/+pdthxqC84QhVLJS/nMembqdpN0HkMhx 4j+oG6PCEyfC4nOcdY8wNdYPoW5Su68cFTGQB0xEnNa+bjFCTI2n0+XVvuH7jJ9n nwCdgKWfzkIVX5nijcx3U7FnkrlHDJnBnGHwLXw4ozUXAspvi3xRQNN4uaS05VjO YVhWylMEq+N2zU3abe6eX9avlA9pauJKch0WfIfUwk+snedzjN5lCQrL/sgPQ8Yq 1dYtw7bCqA5i8qEOOS6si9JjBVAjP+ibPD6llQii2yoxX9UZE4k= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:48 2026 by rpki-client