This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
File: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft (raw, json)
Hash identifier: SxUA0LODHIFxHikVz4VaO/Zebq2DdmeNbvGDmHGpBxA=
Subject key identifier: EB:32:42:54:C4:98:EE:69:14:8D:A9:9D:83:20:B1:A4:C8:49:6F:16
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Certificate issuer: /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial: 43ADA4C6BF5076FAEA4C02BA7EDFDE27C989A731
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
Manifest number: 0272
Signing time: Mon 02 Feb 2026 03:52:21 +0000
Manifest this update: Mon 02 Feb 2026 03:47:21 +0000
Manifest next update: Thu 05 Feb 2026 05:51:21 +0000
Files and hashes: 1: 323430343a666563303a333a3a2f34382d3438203d3e20313338383636.roa (hash: KM8HCAE941ny+NeclcPdlUg9VIqsSih6MjHoa5IqXb8=)
2: 3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (hash: FWaIS2C5y+tF+eXrrfhUKvMiaO2hbKHJ6PXu+XjlFjU=)
3: 3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl (hash: fQiyA6SCRMWAsmgAAwOyY4LUFqIArJcPCKsBq0ErqD0=)
4: 323430343a666563303a343a3a2f34382d3438203d3e20313338383636.roa (hash: C6l6zdsNHMzfA4VroXv38wYjaYdlZyMXfkyZpHinjgQ=)
5: 323430343a666563303a3a2f33322d3438203d3e20313338383636.roa (hash: znbfpwqo/RqJTtKokVQJprWVfIE6ZeyWhe8h0U97wlw=)
6: 323430343a666563303a313a3a2f34382d3438203d3e20313338383636.roa (hash: /v/t0LVvwP8ItAgvAEV4d3ird2OFydIuyNvk7Hjv9rU=)
7: 323430343a666563303a3235303a3a2f34382d3438203d3e20313338383636.roa (hash: sYsKqli8EUEzTvSQXavM3oM1AVTdmnNeXY5Ib9nTkXk=)
8: 323430343a666563303a373037313a3a2f34382d3438203d3e20313338383636.roa (hash: wr6UHliebQd7p9YyHhYQ444oA44R+pMzEhtNFNELTlg=)
9: 3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (hash: cJFNfS5UPmik4Tu/P1Y8olkkeC16bO4wOvGv71A6WXE=)
10: 3130332e3134302e3133302e302f32342d3234203d3e20313338383636.roa (hash: naME29BjJNXWcG5xS5OYZKvtjsmmITu0eSf0OkwWWqI=)
11: 323430343a666563303a353a3a2f34382d3438203d3e20313338383636.roa (hash: QBM9H9rd8+lS4gn1TV/zjjSpwBwL7sSfYx4yVL1I50s=)
12: 323430343a666563303a323a3a2f34382d3438203d3e20313338383636.roa (hash: oP5w04R+DVBIXz7VN32/pUudJby5Bdnn9OzpJHzqMrY=)
13: 323430343a666563303a3a2f33322d3332203d3e20313338383636.roa (hash: 7h+0gopoSFJ2M48QEyz8CL99eJtVxfcZjzTpUAYVTZo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ad:a4:c6:bf:50:76:fa:ea:4c:02:ba:7e:df:de:27:c9:89:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Validity
Not Before: Feb 2 03:47:21 2026 GMT
Not After : Feb 5 05:51:21 2026 GMT
Subject: CN=EB324254C498EE69148DA99D8320B1A4C8496F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:0f:74:eb:47:7a:9c:42:43:08:ff:2d:0f:
fd:76:ef:44:5e:53:05:74:fe:9c:12:c3:e4:54:2c:
10:bd:ac:71:b3:33:84:ec:77:ed:e2:25:ed:1e:fc:
e7:57:9d:e3:1c:16:eb:7d:e2:ac:2b:9d:1f:8f:de:
eb:78:49:db:84:92:a0:b3:4a:61:1a:aa:da:2c:a1:
3b:8e:7a:16:70:79:63:0a:f1:ab:54:48:2f:ac:6b:
01:6f:7d:de:f0:70:c2:75:06:09:ad:99:c9:38:a3:
64:55:04:e0:5e:1e:e5:f8:40:ec:4f:2c:0c:87:95:
42:3d:b9:c7:a4:ad:70:72:ad:25:4e:da:87:30:9f:
b4:10:da:a8:c0:8f:6b:09:df:3b:58:52:a9:10:80:
1a:da:bb:dd:36:c0:11:fa:b1:69:fb:c4:a2:63:d9:
9c:89:a1:cd:e5:fe:74:26:5d:2b:e1:02:d1:98:cb:
81:5d:10:52:ed:66:24:5a:5b:72:97:11:f0:15:9d:
73:12:09:34:e3:23:5e:bb:83:4a:8e:57:d4:37:d0:
86:ce:c3:19:75:6f:21:30:33:8d:cb:de:8f:6e:98:
27:31:79:bd:30:31:4d:3f:f7:b6:bb:d0:4f:00:eb:
a5:b3:13:04:97:a4:cc:35:50:00:4b:61:d1:e3:26:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:32:42:54:C4:98:EE:69:14:8D:A9:9D:83:20:B1:A4:C8:49:6F:16
X509v3 Authority Key Identifier:
keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:53:6d:5a:48:4e:32:c7:8f:be:9f:4d:a6:98:44:f2:a7:aa:
5a:75:48:b2:00:a6:df:4c:42:62:c7:6d:dc:9f:e7:cd:13:7a:
d2:b8:db:a0:0b:86:bf:8b:33:9d:8a:63:89:74:dd:ad:f4:ae:
16:26:1a:05:13:21:fc:09:23:13:82:e2:01:1a:e5:4b:fe:e0:
09:04:45:02:f7:b5:e7:d2:22:1c:a3:af:6c:c2:5f:43:20:33:
dc:5e:04:a6:53:72:85:8c:2e:0e:f0:a4:ad:21:6d:e0:eb:fd:
9b:e2:0d:af:e5:27:be:c4:b0:bf:0a:21:67:11:cf:82:7d:73:
a3:cd:a8:b7:43:3d:dc:34:01:e5:06:be:9f:0e:82:4f:f5:b0:
66:6d:78:e2:90:d1:38:c5:fc:ec:11:e0:f4:8c:4c:74:98:ba:
67:55:e6:2b:79:80:35:08:94:17:d7:2c:f2:0e:20:c3:9e:ca:
8f:dd:86:32:89:ce:85:a3:80:56:8f:37:c6:21:e0:91:2d:17:
b0:3a:40:26:1a:d7:3d:d1:55:4c:08:9b:e1:88:4e:6c:34:fa:
bd:aa:09:47:aa:79:5d:f1:99:5a:a5:c2:b9:78:60:c0:bf:e4:
dd:f3:69:52:96:47:66:be:2f:39:4c:1c:da:4c:f1:31:78:3a:
6d:1d:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:41 2026 by rpki-client