This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft File: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft (raw, json) Hash identifier: g5AizYS8CiOa1NQhXLgsteFb1+wWHQgfByLda8inlsQ= Subject key identifier: FE:D6:7A:55:95:1A:3C:3E:E3:03:D8:C4:60:F8:48:83:78:9A:EA:CC Authority key identifier: 34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB Certificate issuer: /CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Certificate serial: 03126D54500E0F9B7FFE0BC3B7C8757BC3CCDE14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft Manifest number: 0242 Signing time: Sun 01 Feb 2026 10:01:05 +0000 Manifest this update: Sun 01 Feb 2026 09:56:05 +0000 Manifest next update: Wed 04 Feb 2026 21:46:05 +0000 Files and hashes: 1: 3130332e3139312e35362e302f32342d3234203d3e20313331373433.roa (hash: YfWdCVoIH1DQu9Nb8zknsBq3gjAx6STdl7+GflAiVVY=) 2: 3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl (hash: 7Bng6ed3ABJnEfbPxEcerebPlFAOUiF2e2ce0J7lFpo=) 3: 3130332e3139312e35372e302f32342d3234203d3e20313331373433.roa (hash: 5ODCvpJsl+XnXZcZjU6a9g5frNriLFm4lEWGxVY15JQ=) 4: 3130332e3139312e35362e302f32332d3233203d3e20313331373433.roa (hash: 6pWVSpFXVKH6EqJrCt3rmPa2Bj+n9pO/wL1SNQ2qvtg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 21:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:12:6d:54:50:0e:0f:9b:7f:fe:0b:c3:b7:c8:75:7b:c3:cc:de:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB Validity Not Before: Feb 1 09:56:05 2026 GMT Not After : Feb 4 21:46:05 2026 GMT Subject: CN=FED67A55951A3C3EE303D8C460F84883789AEACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:d8:10:42:e2:24:47:e8:73:7e:2c:a9:30: d6:15:fd:7f:ae:07:7e:05:0f:a8:66:00:9a:31:43: 8f:b1:83:70:9a:8c:05:61:77:71:af:a5:4f:e6:95: 7f:4e:89:65:a8:23:98:26:79:e7:eb:0d:72:55:9d: 9b:40:d9:c0:42:4d:95:94:79:13:e9:4a:c6:49:28: 06:bd:2f:4b:93:cd:94:e5:49:10:de:d1:15:6c:54: 13:ae:de:37:cc:03:1b:65:b2:f2:99:b4:45:be:16: bf:d9:3f:4c:76:03:c7:e8:cf:ba:f0:fc:1e:c5:35: 3f:ac:91:cc:6b:37:d4:d3:8a:1e:4a:f0:a7:b2:24: 35:0a:13:f2:31:c9:f4:d2:67:c9:2e:52:4a:76:f7: 3d:8b:35:c2:86:59:ed:68:c0:0b:a9:dc:80:ce:70: 97:5d:b7:99:97:81:2f:b3:6e:ab:4b:e3:f5:92:47: c5:d6:2c:ed:64:4e:00:5d:48:60:48:a8:24:d5:e0: 2c:d0:cf:7a:28:42:5d:fc:10:70:38:52:c3:69:42: b6:9e:74:a2:5e:94:00:e0:31:02:f6:a8:21:61:66: 40:0c:d9:8e:05:28:f8:ff:5b:99:69:32:4f:85:d2: fe:a9:0f:04:71:75:04:57:7b:3b:5f:c5:be:cf:9b: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D6:7A:55:95:1A:3C:3E:E3:03:D8:C4:60:F8:48:83:78:9A:EA:CC X509v3 Authority Key Identifier: keyid:34:48:C8:4D:DF:F9:B9:91:2D:9D:17:49:3F:EB:DB:9F:BA:0B:39:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9229ca50-e95c-45bb-9c30-63e12af7a5e1/0/3448C84DDFF9B9912D9D17493FEBDB9FBA0B39BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5d:b2:15:6a:f0:ed:31:f9:3e:2f:35:7d:ba:8f:9b:3e:5e: f7:a9:69:30:07:62:c1:e7:6f:a3:89:13:d8:96:04:1a:d4:8e: 85:a7:42:71:fc:67:ed:8b:b2:95:6e:0b:50:96:95:5f:46:5b: 49:39:5c:65:a6:f3:63:31:8e:24:a1:2d:61:25:61:4d:e5:02: 1d:ac:3c:e6:a1:91:6d:4d:ad:ee:a4:53:34:87:1e:c6:c5:6f: a2:fc:ce:f8:0d:40:c0:b2:ed:5a:02:2e:86:8a:e4:63:ab:a0: 45:4d:d5:88:f2:e7:d3:a5:fd:66:29:fa:58:69:0e:7c:46:cc: d1:ff:7b:34:c7:aa:14:1c:47:3e:c0:5e:c5:72:ff:c7:6f:8b: d0:89:5f:a6:7c:1d:6d:f2:1b:04:53:16:88:e5:2f:2f:9e:f7: ae:a7:c2:c8:42:38:d7:0f:ff:de:fa:87:9d:07:c7:8c:7f:c4: bd:9d:cb:3f:20:19:61:67:01:f9:55:2e:ac:86:9c:82:11:e5: 18:d6:83:bd:ae:82:67:97:39:f5:48:87:a5:03:bc:91:52:08: 07:da:a5:b4:e7:73:01:bc:e9:42:41:00:7d:a1:d1:f5:8f:9b: cd:c7:bf:7e:40:91:84:7b:4c:58:ed:df:ff:60:aa:3c:1b:32: c1:fb:a1:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxJtVFAOD5t//gvDt8h1e8PM3hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZC QTBCMzlCQjAeFw0yNjAyMDEwOTU2MDVaFw0yNjAyMDQyMTQ2MDVaMDMxMTAvBgNV BAMTKEZFRDY3QTU1OTUxQTNDM0VFMzAzRDhDNDYwRjg0ODgzNzg5QUVBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVNgQQuIkR+hzfiypMNYV/X+u B34FD6hmAJoxQ4+xg3CajAVhd3GvpU/mlX9OiWWoI5gmeefrDXJVnZtA2cBCTZWU eRPpSsZJKAa9L0uTzZTlSRDe0RVsVBOu3jfMAxtlsvKZtEW+Fr/ZP0x2A8foz7rw /B7FNT+skcxrN9TTih5K8KeyJDUKE/IxyfTSZ8kuUkp29z2LNcKGWe1owAup3IDO cJddt5mXgS+zbqtL4/WSR8XWLO1kTgBdSGBIqCTV4CzQz3ooQl38EHA4UsNpQrae dKJelADgMQL2qCFhZkAM2Y4FKPj/W5lpMk+F0v6pDwRxdQRXeztfxb7Pm5tHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/tZ6VZUaPD7jA9jEYPhIg3ia6swwHwYDVR0j BBgwFoAUNEjITd/5uZEtnRdJP+vbn7oLObswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjI5Y2E1MC1lOTVjLTQ1YmItOWMzMC02M2UxMmFmN2E1ZTEvMC8zNDQ4Qzg0RERG RjlCOTkxMkQ5RDE3NDkzRkVCREI5RkJBMEIzOUJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRCOUZCQTBC MzlCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTIyOWNhNTAtZTk1Yy00NWJiLTlj MzAtNjNlMTJhZjdhNWUxLzAvMzQ0OEM4NERERkY5Qjk5MTJEOUQxNzQ5M0ZFQkRC OUZCQTBCMzlCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpdshVq8O0x+T4vNX26j5s+XvepaTAHYsHn b6OJE9iWBBrUjoWnQnH8Z+2LspVuC1CWlV9GW0k5XGWm82MxjiShLWElYU3lAh2s POahkW1Nre6kUzSHHsbFb6L8zvgNQMCy7VoCLoaK5GOroEVN1Yjy59Ol/WYp+lhp DnxGzNH/ezTHqhQcRz7AXsVy/8dvi9CJX6Z8HW3yGwRTFojlLy+e966nwshCONcP /976h50Hx4x/xL2dyz8gGWFnAflVLqyGnIIR5RjWg72ugmeXOfVIh6UDvJFSCAfa pbTncwG86UJBAH2h0fWPm83Hv35AkYR7TFjt3/9gqjwbMsH7ofE= -----END CERTIFICATE-----Generated at Mon Feb 2 17:30:15 2026 by rpki-client