This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json)
Hash identifier: si/cCvdEqhnuwQmcbS/NK2aLySQ5Rkla6io5JFR8Bq8=
Subject key identifier: 69:B6:50:C5:97:B9:1A:2D:42:DF:40:3B:6D:0F:ED:D4:C9:66:7A:CB
Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744
Certificate serial: 1471D9D23B69417BD731B95782E31520AFCE6622
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
Manifest number: 01C9
Signing time: Sat 31 Jan 2026 12:00:06 +0000
Manifest this update: Sat 31 Jan 2026 11:55:06 +0000
Manifest next update: Tue 03 Feb 2026 20:22:06 +0000
Files and hashes: 1: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: Q7l9088g74cyAOX6H9IF5efU/M/VWIjoHRjpfnhFTJw=)
2: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: vsN1OTkR8m1lFSQXsHTMmn/Q2Wvlgspy4E6gfdPGIrI=)
3: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: qmdGYePJd+wN/ivsAkmPcsWhCMrqFbcUBgTD/u1jg9I=)
4: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: L/T+m/yJ1Buc0w1osVIInT5sZ71zV7/a+aiKjsgJiso=)
5: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: SKukxQ79pDKG9sTP8P7RFVTK2iNUABU8DA3sUqU7E6U=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 20:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:71:d9:d2:3b:69:41:7b:d7:31:b9:57:82:e3:15:20:af:ce:66:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA10823C279932D7573B930625CD2884433C744
Validity
Not Before: Jan 31 11:55:06 2026 GMT
Not After : Feb 3 20:22:06 2026 GMT
Subject: CN=69B650C597B91A2D42DF403B6D0FEDD4C9667ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:52:da:c1:b2:83:b6:ad:ac:98:9c:17:b8:
2d:77:1f:b0:2e:a9:10:13:21:5f:da:e2:41:fd:a8:
54:4c:54:a6:8d:9e:a6:a9:b9:5c:97:51:10:da:d0:
ca:8e:cb:1f:ba:8b:c3:93:e7:2e:8c:a9:ec:b2:7b:
f4:c1:d7:cc:c5:3e:0f:85:b6:bf:d5:42:82:14:bb:
d9:45:9c:db:30:7f:27:3d:8b:40:d9:f3:9b:43:82:
fc:6b:1b:03:ea:dd:ad:1b:0d:e0:a5:14:85:7b:0e:
6e:6b:6f:1c:50:7e:1b:81:cc:82:30:14:f4:26:72:
6a:4b:39:8b:80:68:8c:58:18:83:d6:8e:f2:78:f8:
88:90:40:02:c9:42:74:4d:0e:5b:c9:d0:37:7f:dd:
42:80:cf:fe:c5:45:25:e1:0f:53:06:33:d4:4a:d9:
1d:20:96:dd:88:ea:92:54:6c:f8:e3:88:76:c8:65:
5c:38:6c:e8:04:fb:b5:77:61:bc:96:d6:fa:c1:a7:
6f:de:e5:3b:db:f4:0e:a8:27:2e:f3:d7:1e:7e:cc:
a2:1e:b6:a0:fa:ae:04:98:e9:2d:ac:96:1a:a2:77:
76:c0:16:18:d6:03:49:37:47:2e:4b:e0:f6:71:5c:
20:ec:f2:c2:ab:93:e3:d6:e8:33:6b:f1:d4:a5:2b:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:50:C5:97:B9:1A:2D:42:DF:40:3B:6D:0F:ED:D4:C9:66:7A:CB
X509v3 Authority Key Identifier:
keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1a:31:2a:d3:aa:5f:85:34:59:b9:48:e7:3c:c6:87:a2:45:
ad:0e:f2:97:05:99:e1:ff:f8:29:04:13:ab:48:44:56:c9:9d:
b8:39:6f:25:f9:4b:8f:57:a6:39:5b:52:5d:bb:67:2c:cb:fd:
49:bb:14:c9:7f:36:e9:4f:2a:e0:4a:06:e9:56:28:82:95:22:
03:9a:90:e7:01:26:1f:98:ed:99:67:23:15:72:1e:e2:13:89:
82:22:43:6d:b3:0b:d6:2d:97:0d:17:77:c2:d2:b7:b8:a1:c7:
39:09:76:79:70:38:9e:99:4e:dd:8c:59:e9:d2:8a:47:10:1d:
71:da:aa:0f:53:1d:62:f8:1a:b6:44:d2:c8:d6:91:b3:90:98:
d9:95:97:f7:8f:b5:8a:30:02:f6:89:5d:8a:1e:28:60:3a:3f:
d2:ea:2c:67:e0:1d:20:3d:02:c9:6d:8d:9d:f2:55:02:40:14:
73:ca:9d:0f:ea:26:7d:88:9f:f3:3d:81:3b:ec:34:58:0d:a3:
e8:95:4b:20:96:2a:c8:b6:e3:91:77:f4:cd:b5:f6:ab:3a:ef:
24:04:5a:2d:e2:f7:14:48:b8:39:70:19:82:ef:6e:ae:8d:a6:
dd:82:fb:ad:65:cd:8f:e9:66:27:10:5a:5f:c2:d0:8e:35:92:
de:cc:34:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:48:04 2026 by rpki-client