This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft File: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft (raw, json) Hash identifier: 33tnh0pxm2SwMWCS8Q5CBR4elgzufOxMMU69ouWPrE8= Subject key identifier: 76:2E:6A:C8:79:B3:A3:3D:2C:31:3C:79:5A:A1:EA:FE:F8:2C:B6:C7 Authority key identifier: 03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 Certificate issuer: /CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Certificate serial: 3BCE2919F734F93293F0A26944F4AAE9E50E23E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft Manifest number: 01DB Signing time: Sun 18 Jan 2026 05:21:31 +0000 Manifest this update: Sun 18 Jan 2026 05:16:31 +0000 Manifest next update: Wed 21 Jan 2026 14:55:31 +0000 Files and hashes: 1: 3130332e39362e35332e302f32342d3234203d3e20323135373237.roa (hash: I1eMGkofitxFBUkKIJAAEKHOmSas6t5BDo8K12fS+ps=) 2: 0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl (hash: uqQnmceIxR/REH5+nO9mrbFtH21zhrCcICcH38MlTnw=) 3: 3130332e39362e35322e302f32332d3233203d3e20313534343130.roa (hash: I1xGBGbMoTpFLIbjNVesHP5LRYPwXtpfc+9MFkqpZXg=) 4: 3130332e39362e35322e302f32342d3234203d3e20313530393232.roa (hash: 2ugfUbs5cJ20pMlsi1Lpn48hHyXGtkrzKxCtrqkovSE=) 5: 323030313a6466323a6634303a3a2f34382d3438203d3e20313530393232.roa (hash: C3HGpl1ThenH4EorAZEJtVKi4KUYV7opK2C6bqklYfw=) 6: 3130332e39362e35322e302f32342d3234203d3e20323135373237.roa (hash: 0krbsaRXLF7hhh/0+kJdsVsdN97iwgE+irNWTCAqAI8=) 7: 3130332e39362e35322e302f32342d3234203d3e20313534343130.roa (hash: G0ILmU3zG9dk4y3Amsp/ANA86e6j9AhzItyGctPkHC0=) 8: 3130332e39362e35332e302f32342d3234203d3e20313534343130.roa (hash: q5hea4w5eW+1JC2efAtWBTto0TQU50ClmJGUcfUe31c=) 9: 3130332e39362e35322e302f32332d3233203d3e20323135373237.roa (hash: 1aKuOLZIAFfW1+Cqdr1xm8xWMdWqMvn5lk2N7M8OzCk=) 10: 3130332e39362e35332e302f32342d3234203d3e20313530393232.roa (hash: gP7psFKFA2RfBnHhdOuG7ZGFzw3Cq/MLVUDPQT38lCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Jan 2026 14:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ce:29:19:f7:34:f9:32:93:f0:a2:69:44:f4:aa:e9:e5:0e:23:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79 Validity Not Before: Jan 18 05:16:31 2026 GMT Not After : Jan 21 14:55:31 2026 GMT Subject: CN=762E6AC879B3A33D2C313C795AA1EAFEF82CB6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:c1:c0:98:3b:01:1d:ce:87:be:1f:bf:56: 74:50:5c:b7:3b:a1:b5:e9:12:41:c8:cc:cf:b5:56: f5:06:29:8d:f1:2d:b6:7c:08:fd:d2:40:35:77:f8: e0:9d:1c:68:69:36:51:ed:0a:6a:f1:ec:34:f6:b8: 1d:db:56:8f:98:4d:f1:a4:cf:df:c5:c0:97:d3:8e: 28:85:9e:34:e3:8f:b0:b9:48:a2:82:16:25:fe:14: d4:8a:1b:13:b9:cd:bc:1c:37:de:ab:c4:28:66:4b: c2:d3:af:03:97:a0:1b:49:5c:c9:a8:27:6e:a7:fb: 40:6e:da:20:06:78:b3:1a:75:89:2c:db:c1:ea:22: 49:a3:80:98:e4:0e:6d:52:42:b1:4e:d2:51:10:a2: 77:9c:f8:90:08:b0:09:e7:a1:94:a3:79:b2:ac:9b: 5a:26:68:b0:79:8d:e4:c1:b0:6a:16:0f:1a:49:32: a8:d6:88:e9:b7:d5:b7:a1:61:d0:fa:a2:de:0c:a5: d5:ee:52:6d:ba:53:fd:36:cd:a8:3d:4d:fb:99:52: bb:25:30:b2:21:0d:9d:26:28:22:c7:85:c5:a4:89: 01:bd:92:48:2b:5e:e2:92:ab:7c:c5:88:ed:70:5b: f2:c1:86:f4:c7:17:6d:11:e2:4d:e6:91:19:b4:68: 5c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2E:6A:C8:79:B3:A3:3D:2C:31:3C:79:5A:A1:EA:FE:F8:2C:B6:C7 X509v3 Authority Key Identifier: keyid:03:21:C8:92:A6:AA:C0:A6:EA:4A:30:35:D8:8C:A6:BC:68:67:BF:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a1c4c1f-7141-47d6-a7f8-e35ffe117404/0/0321C892A6AAC0A6EA4A3035D88CA6BC6867BF79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:d9:48:4c:56:97:51:bc:f6:f5:e4:1b:58:7a:f2:b7:cb: 15:c6:fe:f1:9c:17:44:5b:82:ef:c6:e2:eb:94:bd:76:c0:a8: 3d:bc:ee:77:18:b4:6c:e5:00:3b:41:08:92:98:eb:89:65:09: 57:02:6d:77:f3:e0:dc:bf:bc:1f:ad:ce:b0:d4:8a:72:d0:cf: c7:8a:7f:ea:1f:c8:82:04:23:af:bc:c5:de:e0:66:51:f0:6c: 18:80:db:47:5b:42:7d:96:b6:85:db:15:6d:f1:5d:70:df:64: 3e:97:72:66:a6:da:84:3a:f3:36:83:88:82:08:cc:a4:44:66: a0:fe:e2:7b:c9:7d:e3:1b:42:9b:89:ed:b2:e5:9c:3c:05:a2: 53:54:3d:75:ce:fd:b7:a6:e8:33:08:b7:a6:6e:0f:a8:85:c9: 00:d0:af:00:4e:fb:ee:1a:a1:23:ea:40:b4:78:16:a9:b3:9b: ab:61:20:fe:dc:90:6c:e9:2e:88:cc:79:b5:c8:bc:87:f9:b2: de:a7:28:73:35:c4:3f:b0:35:82:27:03:ac:30:09:84:33:5c: 00:ef:52:04:59:81:b6:7c:79:be:e4:a9:52:ab:67:4d:d4:c6: 4b:d7:fc:12:cc:4b:a3:90:97:48:52:23:92:73:dd:59:b2:8c: ca:b9:82:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO84pGfc0+TKT8KJpRPSq6eUOI+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2 ODY3QkY3OTAeFw0yNjAxMTgwNTE2MzFaFw0yNjAxMjExNDU1MzFaMDMxMTAvBgNV BAMTKDc2MkU2QUM4NzlCM0EzM0QyQzMxM0M3OTVBQTFFQUZFRjgyQ0I2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJsHAmDsBHc6Hvh+/VnRQXLc7 obXpEkHIzM+1VvUGKY3xLbZ8CP3SQDV3+OCdHGhpNlHtCmrx7DT2uB3bVo+YTfGk z9/FwJfTjiiFnjTjj7C5SKKCFiX+FNSKGxO5zbwcN96rxChmS8LTrwOXoBtJXMmo J26n+0Bu2iAGeLMadYks28HqIkmjgJjkDm1SQrFO0lEQonec+JAIsAnnoZSjebKs m1omaLB5jeTBsGoWDxpJMqjWiOm31behYdD6ot4MpdXuUm26U/02zag9TfuZUrsl MLIhDZ0mKCLHhcWkiQG9kkgrXuKSq3zFiO1wW/LBhvTHF20R4k3mkRm0aFw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdi5qyHmzoz0sMTx5WqHq/vgstscwHwYDVR0j BBgwFoAUAyHIkqaqwKbqSjA12IymvGhnv3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTFjNGMxZi03MTQxLTQ3ZDYtYTdmOC1lMzVmZmUxMTc0MDQvMC8wMzIxQzg5MkE2 QUFDMEE2RUE0QTMwMzVEODhDQTZCQzY4NjdCRjc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2QkM2ODY3 QkY3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ExYzRjMWYtNzE0MS00N2Q2LWE3 ZjgtZTM1ZmZlMTE3NDA0LzAvMDMyMUM4OTJBNkFBQzBBNkVBNEEzMDM1RDg4Q0E2 QkM2ODY3QkY3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxs2UhMVpdRvPb15BtYevK3yxXG/vGcF0Rb gu/G4uuUvXbAqD287ncYtGzlADtBCJKY64llCVcCbXfz4Ny/vB+tzrDUinLQz8eK f+ofyIIEI6+8xd7gZlHwbBiA20dbQn2WtoXbFW3xXXDfZD6Xcmam2oQ68zaDiIII zKREZqD+4nvJfeMbQpuJ7bLlnDwFolNUPXXO/bem6DMIt6ZuD6iFyQDQrwBO++4a oSPqQLR4Fqmzm6thIP7ckGzpLojMebXIvIf5st6nKHM1xD+wNYInA6wwCYQzXADv UgRZgbZ8eb7kqVKrZ03UxkvX/BLMS6OQl0hSI5Jz3VmyjMq5gg8= -----END CERTIFICATE-----Generated at Mon Jan 19 20:03:11 2026 by rpki-client