This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft File: 3E6F306418455683DBA0AC95B4FD41E1846476AB.mft (raw, json) Hash identifier: QjkaedDRvJnNju5/3SBhso1pG11BbdVTX2drO0Z1dik= Subject key identifier: 97:F8:1A:64:E4:A7:72:3F:23:C6:0C:3B:73:4A:D7:6C:95:D7:42:4A Authority key identifier: 3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB Certificate issuer: /CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Certificate serial: 565FBD2D038D18B4B71D3242870824771D9D9F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft Manifest number: 0535 Signing time: Sun 01 Feb 2026 02:40:55 +0000 Manifest this update: Sun 01 Feb 2026 02:35:55 +0000 Manifest next update: Wed 04 Feb 2026 10:14:55 +0000 Files and hashes: 1: 323430323a383263303a3a2f33322d3438203d3e203138303536.roa (hash: kYbld2hWxaqdjy59r1rp8P7rlOtH3HOAxyt3iwa4uDg=) 2: 3230322e34362e3134342e302f32322d3234203d3e203138303536.roa (hash: pWSLLsfuqLMss5goT0TCm2Xrlt+/JZKU0FLP/cfm62g=) 3: 3E6F306418455683DBA0AC95B4FD41E1846476AB.crl (hash: OnkQAYK+q6VZcnS4YSC6BULf1BbVodRf8s10S12x0Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 10:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5f:bd:2d:03:8d:18:b4:b7:1d:32:42:87:08:24:77:1d:9d:9f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E6F306418455683DBA0AC95B4FD41E1846476AB Validity Not Before: Feb 1 02:35:55 2026 GMT Not After : Feb 4 10:14:55 2026 GMT Subject: CN=97F81A64E4A7723F23C60C3B734AD76C95D7424A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:e9:10:ef:9c:16:9a:d2:05:fd:c2:77:76: 42:e6:1f:02:0c:08:c1:6e:2f:f9:e0:33:16:85:a9: f4:3d:63:e9:49:2e:41:74:32:3f:9f:69:53:39:67: b3:79:26:39:4d:e3:cd:63:1f:14:46:06:51:3e:2e: 54:02:7d:aa:16:29:40:61:eb:64:a1:c8:f0:67:c7: eb:95:22:bb:84:9f:89:47:1a:5c:0f:86:37:7a:63: 46:41:b6:11:32:22:10:88:f5:4c:8b:b5:79:48:e1: 20:b8:e9:f6:8e:2b:51:f4:19:04:dc:8e:43:b0:53: 8b:4e:a3:f1:11:93:3a:4e:b8:86:bc:68:1e:eb:d8: 46:82:7d:cb:88:56:0f:2b:46:33:df:c3:66:57:22: 10:0b:7a:1c:32:5d:c5:5b:88:77:78:1d:38:f5:ae: 79:9a:d5:63:0c:96:3a:d5:62:9e:a0:cd:b1:30:b1: 6d:2e:89:47:d6:7e:76:58:49:53:20:44:ee:a7:7c: 51:77:8d:6c:b0:a9:71:42:3e:6c:ea:fd:d5:88:a6: 57:ea:c9:ba:ab:7f:ab:fb:92:58:c5:3f:bd:91:28: 46:f2:db:1e:1e:86:b9:d8:6f:9b:18:2c:3c:7d:55: 89:ae:48:d4:74:d5:89:34:b8:9b:ec:07:e7:ca:b6: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F8:1A:64:E4:A7:72:3F:23:C6:0C:3B:73:4A:D7:6C:95:D7:42:4A X509v3 Authority Key Identifier: keyid:3E:6F:30:64:18:45:56:83:DB:A0:AC:95:B4:FD:41:E1:84:64:76:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E6F306418455683DBA0AC95B4FD41E1846476AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64f7eb4f-7924-4db6-b6d6-394d83b392fc/0/3E6F306418455683DBA0AC95B4FD41E1846476AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:27:29:b1:77:89:c7:2c:ef:fb:a6:1f:e5:f1:3d:af:b7:fc: 50:0e:97:14:08:16:9a:55:e4:ea:a0:2f:7d:8e:f2:bc:21:b6: ed:a2:f3:04:df:58:63:42:4a:ae:0f:1f:73:34:36:47:28:9c: 01:ca:ce:7f:f0:d0:f9:0b:89:11:34:0c:f9:90:d3:7c:ac:e8: 3c:e0:dd:df:93:27:6f:a8:7c:cf:72:25:7c:1d:99:1c:cf:c1: 13:19:0e:d8:6c:37:ce:b6:86:a6:c1:0f:b5:4e:16:4f:ac:e6: 27:3e:8c:17:07:38:eb:d2:f5:f4:8d:7a:75:c9:52:a2:0c:a2: 2b:f4:d0:ce:80:7c:2a:87:89:03:14:a7:c1:62:23:75:de:a4: a2:9c:48:a0:8b:23:9a:88:3f:14:64:2e:4a:6e:db:0f:5f:31: c9:8a:33:83:31:cb:93:f1:20:08:81:ba:5d:19:1a:e3:80:d6: 96:c3:53:7e:3a:40:db:5b:27:55:61:bb:fb:5d:f7:11:fa:02: d5:9b:2f:c6:2d:e2:6c:62:1d:a6:38:3b:b9:a5:a5:35:16:46: 58:bd:4f:b1:28:83:5b:f3:51:0d:cd:46:2c:86:8b:7d:fb:cc: ff:82:61:22:46:47:bf:92:ae:24:d8:1b:6e:43:0b:f6:98:00: 39:93:7f:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVl+9LQONGLS3HTJChwgkdx2dn4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4 NDY0NzZBQjAeFw0yNjAyMDEwMjM1NTVaFw0yNjAyMDQxMDE0NTVaMDMxMTAvBgNV BAMTKDk3RjgxQTY0RTRBNzcyM0YyM0M2MEMzQjczNEFENzZDOTVENzQyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNukQ75wWmtIF/cJ3dkLmHwIM CMFuL/ngMxaFqfQ9Y+lJLkF0Mj+faVM5Z7N5JjlN481jHxRGBlE+LlQCfaoWKUBh 62ShyPBnx+uVIruEn4lHGlwPhjd6Y0ZBthEyIhCI9UyLtXlI4SC46faOK1H0GQTc jkOwU4tOo/ERkzpOuIa8aB7r2EaCfcuIVg8rRjPfw2ZXIhALehwyXcVbiHd4HTj1 rnma1WMMljrVYp6gzbEwsW0uiUfWfnZYSVMgRO6nfFF3jWywqXFCPmzq/dWIplfq ybqrf6v7kljFP72RKEby2x4ehrnYb5sYLDx9VYmuSNR01Yk0uJvsB+fKtrjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl/gaZOSncj8jxgw7c0rXbJXXQkowHwYDVR0j BBgwFoAUPm8wZBhFVoPboKyVtP1B4YRkdqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGY3ZWI0Zi03OTI0LTRkYjYtYjZkNi0zOTRkODNiMzkyZmMvMC8zRTZGMzA2NDE4 NDU1NjgzREJBMEFDOTVCNEZENDFFMTg0NjQ3NkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQxRTE4NDY0 NzZBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRmN2ViNGYtNzkyNC00ZGI2LWI2 ZDYtMzk0ZDgzYjM5MmZjLzAvM0U2RjMwNjQxODQ1NTY4M0RCQTBBQzk1QjRGRDQx RTE4NDY0NzZBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwnKbF3iccs7/umH+XxPa+3/FAOlxQIFppV 5OqgL32O8rwhtu2i8wTfWGNCSq4PH3M0NkconAHKzn/w0PkLiRE0DPmQ03ys6Dzg 3d+TJ2+ofM9yJXwdmRzPwRMZDthsN862hqbBD7VOFk+s5ic+jBcHOOvS9fSNenXJ UqIMoiv00M6AfCqHiQMUp8FiI3XepKKcSKCLI5qIPxRkLkpu2w9fMcmKM4Mxy5Px IAiBul0ZGuOA1pbDU346QNtbJ1Vhu/td9xH6AtWbL8Yt4mxiHaY4O7mlpTUWRli9 T7Eog1vzUQ3NRiyGi337zP+CYSJGR7+SriTYG25DC/aYADmTf1o= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:39 2026 by rpki-client