This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft File: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft (raw, json) Hash identifier: kPYMR/AsPHlE53EMeK0O9eqAptxmS892/SndqsS21pA= Subject key identifier: E5:DB:85:E5:10:3F:86:5F:27:90:6B:14:E4:F5:FC:8B:BE:F0:66:CD Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 Certificate issuer: /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Certificate serial: 7A0938152E9DDBAAF923F1A508EC30595229873B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft Manifest number: 0151 Signing time: Sat 31 Jan 2026 23:21:25 +0000 Manifest this update: Sat 31 Jan 2026 23:16:25 +0000 Manifest next update: Wed 04 Feb 2026 03:11:25 +0000 Files and hashes: 1: 3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl (hash: OwkLxwyWKGMwoM0ZxKU+RpD9c87bsKA5uru/vN631n4=) 2: 3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (hash: WyVvseBUv5X8ksDjsVqSJfve5PyMPgdJn+/FGNUqcmk=) 3: 3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (hash: fcE9nxP4F/tonEL2jLycsAVcDyzYWrh05xw29/4haAg=) 4: 3130332e3133322e3233302e302f32342d3234203d3e20313338313237.roa (hash: FC4YL6B+zkeYZOTJZ5N7Yi4YIq94WZ3uKMPO/1YmBIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 03:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:09:38:15:2e:9d:db:aa:f9:23:f1:a5:08:ec:30:59:52:29:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3 Validity Not Before: Jan 31 23:16:25 2026 GMT Not After : Feb 4 03:11:25 2026 GMT Subject: CN=E5DB85E5103F865F27906B14E4F5FC8BBEF066CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:a1:82:60:e0:80:a7:95:9e:3b:0d:b2:bc: 00:5e:9f:60:a9:7d:c0:6e:49:cc:7e:10:09:c4:3e: 37:5e:bc:d9:dd:ed:1a:52:38:9f:1b:ae:2a:27:c4: 5e:a7:78:a6:9a:33:84:79:ca:82:16:c6:1d:62:33: 56:58:78:cc:d4:ee:37:d6:0f:ef:a4:fe:6d:5f:ef: 4a:32:fb:62:81:f8:fd:82:ba:63:32:dc:d2:84:e1: 73:ac:82:8e:36:38:19:fa:22:f9:01:f0:17:39:1c: 15:0f:b0:24:d1:33:94:c2:04:16:1e:b0:06:f9:2c: 2f:3f:38:88:60:85:1b:d1:a7:e0:c9:04:25:4d:1b: 1e:45:12:72:e3:3d:56:4c:f8:86:02:72:3b:b3:08: 45:82:2c:67:69:1f:77:a9:c8:5a:b1:9a:ca:3f:cc: 60:a1:1a:3b:06:44:18:eb:a5:77:87:e6:a5:12:9a: 8a:2f:36:c3:a7:4e:44:16:a6:29:7f:21:92:ec:d4: 53:39:df:78:20:5c:53:3a:bd:8b:9d:e9:27:83:9b: 86:59:64:cd:3b:7c:84:fe:88:f3:6e:20:3c:56:05: 76:c9:1b:d4:1e:de:09:d5:d4:8a:c6:6c:4f:8b:0a: 14:cb:2f:9b:50:0c:ec:b8:c8:25:25:47:ca:2e:4d: c8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DB:85:E5:10:3F:86:5F:27:90:6B:14:E4:F5:FC:8B:BE:F0:66:CD X509v3 Authority Key Identifier: keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:31:e5:4f:20:15:ea:aa:da:0f:73:a7:fe:be:31:68:ba:4a: 3d:36:df:41:bf:11:e2:e1:11:d6:55:64:4e:52:e8:c9:78:a4: e3:12:bc:16:26:25:27:02:bb:bd:af:b6:4e:46:6f:ff:d9:fd: 0e:cb:9f:10:21:d3:e3:4a:53:e7:9d:26:b2:1d:77:85:70:57: 19:9f:b7:a7:e9:52:f0:5e:58:a2:c6:20:2d:c3:4c:f1:fe:5c: c0:1d:c9:b5:ed:6a:eb:59:a0:a4:2f:d3:81:18:e2:6d:b5:f8: 61:b7:17:dd:2b:8c:fb:0d:92:66:d5:67:93:2d:20:b4:04:3e: 16:75:3f:36:c3:32:dc:1e:03:fb:be:93:6e:ac:3b:73:8b:73: 84:03:f9:18:4e:9f:52:6c:d5:bd:e5:4d:37:90:cf:bb:d2:50: 77:c2:59:4a:b6:5f:27:36:f9:06:94:0b:c8:6b:f8:f3:49:41: ce:1e:6d:fa:2d:e6:41:0b:5f:72:33:9a:c5:42:fe:91:de:c8: 12:8c:26:62:b4:36:a5:d1:29:b8:2b:3c:35:a8:b1:d3:35:3e: 95:c8:9b:d4:f5:ae:a0:1e:18:7c:77:35:66:00:13:4e:1d:32: 42:22:59:5a:15:f2:82:cc:b2:f4:86:59:f9:61:21:4f:da:0b: 35:86:76:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegk4FS6d26r5I/GlCOwwWVIphzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3 MjM3OEJGMzAeFw0yNjAxMzEyMzE2MjVaFw0yNjAyMDQwMzExMjVaMDMxMTAvBgNV BAMTKEU1REI4NUU1MTAzRjg2NUYyNzkwNkIxNEU0RjVGQzhCQkVGMDY2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+6GCYOCAp5WeOw2yvABen2Cp fcBuScx+EAnEPjdevNnd7RpSOJ8brionxF6neKaaM4R5yoIWxh1iM1ZYeMzU7jfW D++k/m1f70oy+2KB+P2CumMy3NKE4XOsgo42OBn6IvkB8Bc5HBUPsCTRM5TCBBYe sAb5LC8/OIhghRvRp+DJBCVNGx5FEnLjPVZM+IYCcjuzCEWCLGdpH3epyFqxmso/ zGChGjsGRBjrpXeH5qUSmoovNsOnTkQWpil/IZLs1FM533ggXFM6vYud6SeDm4ZZ ZM07fIT+iPNuIDxWBXbJG9Qe3gnV1IrGbE+LChTLL5tQDOy4yCUlR8ouTcjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5duF5RA/hl8nkGsU5PX8i77wZs0wHwYDVR0j BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4 MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3 OEJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGVkYzllNGYtODE4MC00MWQ2LWIw OGQtOGVlNWE4YTcwYTA1LzAvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5 M0M3MjM3OEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQx5U8gFeqq2g9zp/6+MWi6Sj0230G/EeLh EdZVZE5S6Ml4pOMSvBYmJScCu72vtk5Gb//Z/Q7LnxAh0+NKU+edJrIdd4VwVxmf t6fpUvBeWKLGIC3DTPH+XMAdybXtautZoKQv04EY4m21+GG3F90rjPsNkmbVZ5Mt ILQEPhZ1PzbDMtweA/u+k26sO3OLc4QD+RhOn1Js1b3lTTeQz7vSUHfCWUq2Xyc2 +QaUC8hr+PNJQc4ebfot5kELX3IzmsVC/pHeyBKMJmK0NqXRKbgrPDWosdM1PpXI m9T1rqAeGHx3NWYAE04dMkIiWVoV8oLMsvSGWflhIU/aCzWGdpo= -----END CERTIFICATE-----Generated at Mon Feb 2 10:04:23 2026 by rpki-client