This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: UYcOi72CSQnWVBozbkDrkhSaZ8hjB9wYk2QqK/BECDc= Subject key identifier: 66:DF:FC:01:AB:9D:77:BD:BA:8D:2C:87:A1:9E:91:41:E6:11:F6:1B Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 0AF742F20374CAD25F60E531AE642BB065453D6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 02F4 Signing time: Sun 01 Feb 2026 05:01:24 +0000 Manifest this update: Sun 01 Feb 2026 04:56:24 +0000 Manifest next update: Wed 04 Feb 2026 15:35:24 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: Cm0IwFSr3Z495Ks8lZ7uX7Ia0Jt01JPByiBl/OyHLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 15:35:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f7:42:f2:03:74:ca:d2:5f:60:e5:31:ae:64:2b:b0:65:45:3d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Feb 1 04:56:24 2026 GMT Not After : Feb 4 15:35:24 2026 GMT Subject: CN=66DFFC01AB9D77BDBA8D2C87A19E9141E611F61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ac:cb:00:7a:5a:8a:4a:1c:a0:72:7e:73:a6: ad:8a:bb:fb:4d:59:0f:62:5b:79:e8:07:02:11:c4: a6:35:bb:cf:a7:22:f8:46:af:0c:d7:d4:90:09:62: 46:d7:4f:bc:93:e8:b0:8d:d8:2c:c6:ce:e8:06:13: 8f:27:29:eb:95:3d:0d:c2:c2:58:91:91:a9:a2:4e: 1e:6d:71:a3:46:26:e5:1e:8d:f8:1e:59:18:8d:e0: 79:ec:78:90:0a:d4:4c:5b:4c:1c:50:a3:25:eb:79: 9a:93:37:15:d8:b7:82:1b:9c:06:c1:71:f0:7a:54: 28:b0:fc:da:f5:d5:14:2e:c1:4b:6f:3b:83:5f:33: c6:fd:5a:be:bc:4b:5c:fa:ed:44:4a:20:3b:e2:f0: 5f:a1:e8:f7:c2:09:b4:43:17:06:e0:e8:1a:f1:de: 33:73:d1:bb:cb:01:73:12:10:b7:de:bd:5a:e1:f6: 91:91:2f:a8:6f:88:62:b5:ee:91:c8:71:c9:78:7f: 62:dc:d3:55:2e:af:86:16:bc:11:b7:04:f1:40:29: 62:6b:40:63:74:2f:eb:49:f2:4c:b8:a5:7e:87:ba: 66:9a:f9:7f:68:bd:d4:13:ff:ab:19:a6:2a:58:3d: 88:6f:25:25:82:d3:b4:e6:cd:03:2d:14:c1:47:f8: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:FC:01:AB:9D:77:BD:BA:8D:2C:87:A1:9E:91:41:E6:11:F6:1B X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0b:02:66:43:a8:ca:4c:16:b7:84:b8:08:fc:3b:c5:f7:8e: 17:96:58:7e:be:7f:52:d1:44:40:51:e9:1d:29:8c:32:08:cc: de:c6:86:23:79:7c:1a:4d:3d:bf:61:b0:17:00:e4:c8:3c:78: ea:4b:6d:a7:8e:b0:6d:44:09:15:53:9f:ff:93:08:8b:13:72: 7f:34:e8:84:5a:fb:f3:5d:4c:11:4b:a1:b9:f5:93:4e:94:bc: 66:3e:0f:1f:e3:77:b1:84:c3:eb:d1:a2:65:0d:fa:60:ff:fd: fb:24:c1:fa:8e:96:40:b6:fc:5f:b0:4c:c4:db:fd:13:23:8f: 72:10:c5:e9:44:f9:67:88:2e:a5:50:20:38:5a:dc:4e:6c:2f: f3:ea:c4:f0:af:5e:b1:4e:14:d4:5a:64:3b:67:00:35:91:43: c5:6f:be:7d:f3:26:f1:b8:d7:d5:9b:4e:24:a6:71:4b:ac:c1: 8a:fd:82:a7:92:91:49:73:95:85:de:e6:53:30:60:3b:67:7d: 64:af:ac:fe:ee:b7:c3:cd:dc:bc:ba:1d:ee:00:1d:5c:6f:6c: e5:84:7d:09:b0:0c:c4:3e:15:85:be:5b:7b:f3:74:13:32:1e: 58:2b:58:cc:f8:ea:dc:ce:de:e3:52:e8:75:15:86:3c:22:dd: 75:28:51:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvdC8gN0ytJfYOUxrmQrsGVFPW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNjAyMDEwNDU2MjRaFw0yNjAyMDQxNTM1MjRaMDMxMTAvBgNV BAMTKDY2REZGQzAxQUI5RDc3QkRCQThEMkM4N0ExOUU5MTQxRTYxMUY2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUrMsAelqKShygcn5zpq2Ku/tN WQ9iW3noBwIRxKY1u8+nIvhGrwzX1JAJYkbXT7yT6LCN2CzGzugGE48nKeuVPQ3C wliRkamiTh5tcaNGJuUejfgeWRiN4HnseJAK1ExbTBxQoyXreZqTNxXYt4IbnAbB cfB6VCiw/Nr11RQuwUtvO4NfM8b9Wr68S1z67URKIDvi8F+h6PfCCbRDFwbg6Brx 3jNz0bvLAXMSELfevVrh9pGRL6hviGK17pHIccl4f2Lc01Uur4YWvBG3BPFAKWJr QGN0L+tJ8ky4pX6Humaa+X9ovdQT/6sZpipYPYhvJSWC07TmzQMtFMFH+BxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZt/8Aaudd726jSyHoZ6RQeYR9hswHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoLAmZDqMpMFreEuAj8O8X3jheWWH6+f1LR REBR6R0pjDIIzN7GhiN5fBpNPb9hsBcA5Mg8eOpLbaeOsG1ECRVTn/+TCIsTcn80 6IRa+/NdTBFLobn1k06UvGY+Dx/jd7GEw+vRomUN+mD//fskwfqOlkC2/F+wTMTb /RMjj3IQxelE+WeILqVQIDha3E5sL/PqxPCvXrFOFNRaZDtnADWRQ8Vvvn3zJvG4 19WbTiSmcUuswYr9gqeSkUlzlYXe5lMwYDtnfWSvrP7ut8PN3Ly6He4AHVxvbOWE fQmwDMQ+FYW+W3vzdBMyHlgrWMz46tzO3uNS6HUVhjwi3XUoUTU= -----END CERTIFICATE-----Generated at Mon Feb 2 12:51:44 2026 by rpki-client