This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft File: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft (raw, json) Hash identifier: JIx77pt64BExTGCFrSe0lK41HcvaDA30KhmpMVJuIzE= Subject key identifier: 3C:E5:58:23:73:03:9A:A0:07:31:A1:89:99:77:D4:65:05:56:CA:2A Authority key identifier: 3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 Certificate issuer: /CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Certificate serial: 6743F1B2C3AF4A86306CCA40991CAF6683694976 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft Manifest number: 0154 Signing time: Mon 02 Feb 2026 06:41:15 +0000 Manifest this update: Mon 02 Feb 2026 06:36:15 +0000 Manifest next update: Thu 05 Feb 2026 16:45:15 +0000 Files and hashes: 1: 3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl (hash: yhM7a/87fRlFSAbFFhh9DqaHFAmDz/M7R7wQcqdtDBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:43:f1:b2:c3:af:4a:86:30:6c:ca:40:99:1c:af:66:83:69:49:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D95B729FF923CD2442549B7702A6D7C2F78DE85 Validity Not Before: Feb 2 06:36:15 2026 GMT Not After : Feb 5 16:45:15 2026 GMT Subject: CN=3CE5582373039AA00731A1899977D4650556CA2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:90:71:8d:67:74:7d:b2:38:ab:e2:24:ff: 1a:f0:94:75:6b:91:09:90:0b:55:86:46:df:5c:b0: 6a:9c:14:c8:dd:ee:a0:41:ed:0e:aa:9c:b2:50:a5: 2f:cb:94:e2:fc:c3:20:09:f8:ad:98:4d:45:b8:f5: eb:d7:85:b1:d6:b5:de:24:e7:83:a0:ef:09:96:1d: 72:eb:49:4b:3a:af:46:9b:ad:f8:07:2a:fe:85:90: ec:60:9d:67:47:4a:97:8b:e4:9e:3e:0e:cd:53:86: 04:df:16:89:2a:65:df:03:09:dd:37:c0:65:76:43: 78:08:af:42:35:55:7f:5f:76:ce:ff:08:6e:13:78: ad:94:32:9f:ce:fc:c8:56:34:d5:f7:31:e2:eb:04: 6c:83:27:97:a3:21:c7:60:97:14:54:5d:87:f5:bf: 86:8f:d5:7b:74:e5:99:33:74:c9:ac:42:4c:bc:26: e0:5a:cd:43:a6:04:72:1a:68:a1:29:56:bb:23:f5: 55:34:d3:dd:73:f2:f3:d4:19:9e:27:b5:fb:6c:77: df:d7:b4:ee:ab:1a:f7:d5:a2:dc:dc:82:5c:8c:ac: 6a:66:9b:c9:3a:48:12:08:8f:54:22:4b:ad:30:27: 05:b0:65:73:3e:dc:65:bb:b8:50:75:b1:1b:05:4a: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E5:58:23:73:03:9A:A0:07:31:A1:89:99:77:D4:65:05:56:CA:2A X509v3 Authority Key Identifier: keyid:3D:95:B7:29:FF:92:3C:D2:44:25:49:B7:70:2A:6D:7C:2F:78:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D95B729FF923CD2442549B7702A6D7C2F78DE85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c8c46fb-b6c1-4a69-83fb-90e7d5c326de/0/3D95B729FF923CD2442549B7702A6D7C2F78DE85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d6:3f:ec:55:79:a3:eb:13:f8:7d:34:3b:6b:bb:d8:d8:4b: 36:88:8a:7d:3b:0f:e3:df:d4:33:f7:f9:b4:4b:c5:43:43:90: 54:4d:f8:7f:6b:ea:57:07:69:d8:73:d3:4e:48:a1:3b:84:48: f0:e4:a6:f9:5f:72:11:88:54:1e:b3:ef:62:23:d4:5f:86:8c: f7:2f:29:3f:26:f3:dd:6c:54:5e:70:22:e1:e1:4a:d2:6f:f9: f9:f5:97:42:ae:46:f3:7c:21:08:cb:7c:78:1f:43:4f:d5:14: cc:b6:e4:16:eb:53:03:18:2c:ce:c5:77:8f:12:58:07:09:67: ed:87:05:a6:db:fb:0f:aa:c9:46:2e:2e:33:44:7e:78:be:f9: 6f:c4:78:67:35:89:7a:31:48:c7:f4:b1:b9:cd:da:47:4d:7f: 93:fc:8f:0c:5d:54:2b:ac:5d:4f:62:3a:b0:75:f7:8f:42:9d: 79:37:bc:7f:0b:62:53:12:8a:ec:7a:f2:ed:60:59:9c:04:e9: ad:03:02:28:d8:ed:4c:ed:74:55:42:b6:17:82:6a:cd:34:b6: 0f:e0:77:65:10:8e:b5:e8:c6:f8:8d:fe:7e:a6:93:11:f1:77: 18:fc:8a:d3:c3:01:0c:46:80:62:59:07:29:29:7e:b3:89:71: d8:97:65:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0PxssOvSoYwbMpAmRyvZoNpSXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0My Rjc4REU4NTAeFw0yNjAyMDIwNjM2MTVaFw0yNjAyMDUxNjQ1MTVaMDMxMTAvBgNV BAMTKDNDRTU1ODIzNzMwMzlBQTAwNzMxQTE4OTk5NzdENDY1MDU1NkNBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEpBxjWd0fbI4q+Ik/xrwlHVr kQmQC1WGRt9csGqcFMjd7qBB7Q6qnLJQpS/LlOL8wyAJ+K2YTUW49evXhbHWtd4k 54Og7wmWHXLrSUs6r0abrfgHKv6FkOxgnWdHSpeL5J4+Ds1ThgTfFokqZd8DCd03 wGV2Q3gIr0I1VX9fds7/CG4TeK2UMp/O/MhWNNX3MeLrBGyDJ5ejIcdglxRUXYf1 v4aP1Xt05ZkzdMmsQky8JuBazUOmBHIaaKEpVrsj9VU0091z8vPUGZ4ntftsd9/X tO6rGvfVotzcglyMrGpmm8k6SBIIj1QiS60wJwWwZXM+3GW7uFB1sRsFShBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPOVYI3MDmqAHMaGJmXfUZQVWyiowHwYDVR0j BBgwFoAUPZW3Kf+SPNJEJUm3cCptfC943oUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzhjNDZmYi1iNmMxLTRhNjktODNmYi05MGU3ZDVjMzI2ZGUvMC8zRDk1QjcyOUZG OTIzQ0QyNDQyNTQ5Qjc3MDJBNkQ3QzJGNzhERTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZEN0MyRjc4 REU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M4YzQ2ZmItYjZjMS00YTY5LTgz ZmItOTBlN2Q1YzMyNmRlLzAvM0Q5NUI3MjlGRjkyM0NEMjQ0MjU0OUI3NzAyQTZE N0MyRjc4REU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjWP+xVeaPrE/h9NDtru9jYSzaIin07D+Pf 1DP3+bRLxUNDkFRN+H9r6lcHadhz005IoTuESPDkpvlfchGIVB6z72Ij1F+GjPcv KT8m891sVF5wIuHhStJv+fn1l0KuRvN8IQjLfHgfQ0/VFMy25BbrUwMYLM7Fd48S WAcJZ+2HBabb+w+qyUYuLjNEfni++W/EeGc1iXoxSMf0sbnN2kdNf5P8jwxdVCus XU9iOrB1949CnXk3vH8LYlMSiux68u1gWZwE6a0DAijY7UztdFVCtheCas00tg/g d2UQjrXoxviN/n6mkxHxdxj8itPDAQxGgGJZBykpfrOJcdiXZcw= -----END CERTIFICATE-----Generated at Mon Feb 2 10:03:38 2026 by rpki-client