This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json)
Hash identifier: xmjmI75o9YrX7KvJebURvwx+Nkz0urXcagexsERXxLo=
Subject key identifier: F9:1A:F1:0D:D7:4D:D6:5E:FB:4C:C6:5F:CE:08:CF:74:B2:A0:E7:93
Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Certificate serial: 791BA005418A7C78494F25283335B18EFAEEEA61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
Manifest number: 01F6
Signing time: Sun 01 Feb 2026 13:00:44 +0000
Manifest this update: Sun 01 Feb 2026 12:55:44 +0000
Manifest next update: Wed 04 Feb 2026 13:05:44 +0000
Files and hashes: 1: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=)
2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: nC07tyEw1BbUbV+cbqb+kerBMaIB/5acY/PZUbeqxKk=)
3: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: 4d1ijz/rU+DejuJXb/c4cK45ZvNx5vBw0rsE3pI0Nk8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 13:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1b:a0:05:41:8a:7c:78:49:4f:25:28:33:35:b1:8e:fa:ee:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B
Validity
Not Before: Feb 1 12:55:44 2026 GMT
Not After : Feb 4 13:05:44 2026 GMT
Subject: CN=F91AF10DD74DD65EFB4CC65FCE08CF74B2A0E793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:65:ba:d2:a6:e8:74:e1:b6:05:ed:12:54:
38:7b:0b:7f:94:07:d0:2a:cd:50:f2:e6:e9:04:c1:
58:c8:78:45:b2:8c:64:25:6f:31:b9:b5:fb:59:a1:
80:c7:2a:f2:0a:0c:fc:49:8a:f3:a3:02:f7:08:51:
4f:9a:d9:76:00:f2:ff:2b:b7:2f:8c:c0:11:29:a7:
91:e5:b4:00:97:d7:c5:a2:a9:85:b3:72:ae:76:b4:
9d:f9:12:58:57:40:ff:aa:a3:d2:48:a6:cf:70:3b:
01:3c:13:1e:38:22:7f:42:c6:1f:fb:57:8e:c0:9c:
8e:6c:35:b8:69:7b:ef:12:fa:ff:8f:f6:98:db:a7:
3f:f4:f1:36:18:4e:b1:ac:b1:84:9f:79:de:bf:c5:
a3:7a:15:7c:40:1d:a8:bb:9b:46:d9:02:d7:f4:5a:
79:fb:a3:f9:9a:e6:e3:4e:12:4a:57:4b:82:91:20:
37:b8:36:64:f3:64:9f:0a:48:94:58:96:8a:d2:3c:
0e:19:95:73:17:6a:4b:12:47:3c:35:dd:7a:d7:c6:
3f:ab:fa:91:68:59:fe:ac:8b:3b:14:cb:22:0e:2d:
06:ea:63:cf:9d:d3:a3:58:f3:be:b2:e4:d0:2c:6e:
d1:03:01:a8:b0:ee:d7:7e:aa:d6:59:5b:e2:4f:a6:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1A:F1:0D:D7:4D:D6:5E:FB:4C:C6:5F:CE:08:CF:74:B2:A0:E7:93
X509v3 Authority Key Identifier:
keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8d:7e:ce:fe:d9:ce:fa:30:46:36:26:80:03:62:5c:b9:b3:
44:b0:93:5e:7b:97:41:16:02:88:d8:c0:62:81:89:91:be:7a:
38:ec:2c:59:ea:d7:7d:3c:df:c8:44:f5:c3:43:32:ac:03:87:
64:1d:41:87:00:f4:ce:98:1a:ce:9f:50:5c:f7:33:dc:e3:22:
dc:a5:8a:46:e2:2e:9b:cc:2d:d3:1c:a1:b7:95:9f:1a:76:3f:
de:9b:4a:42:a2:4c:69:93:44:c6:78:0c:c0:31:c0:78:9f:e3:
49:81:08:60:ac:59:b0:3b:6e:80:42:92:93:76:24:18:45:5c:
2c:1f:cc:fb:ec:5a:08:c1:8c:65:5b:51:e1:fd:45:f0:df:9e:
45:a2:0c:aa:c5:8c:0e:0d:76:89:58:61:a1:64:1e:f8:28:51:
03:34:26:3c:7a:24:db:81:ef:bc:bb:91:2d:2f:d7:e3:0b:52:
b7:94:a4:5c:be:f1:42:bb:bc:15:d0:d0:33:5d:87:04:dd:45:
71:2e:40:13:2a:fb:de:c7:58:ca:17:96:9c:5a:fa:a9:52:b7:
72:3e:7a:b6:02:2f:cc:23:e2:86:b0:b9:5c:f2:94:e9:73:f8:
f9:f2:9e:92:a0:32:27:cf:6f:53:97:70:f3:d6:33:bf:93:b8:
11:c8:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:43 2026 by rpki-client