This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: PQsJLz15IXfTOhfpm0uHX7m2ioFnX7DY7OZfhXa1urc= Subject key identifier: 8B:F9:99:3C:C4:AF:03:09:A8:4A:D6:13:83:80:13:9C:5C:F0:9A:55 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 0C2A04BC365BA20A9510062A5E6EB4F4F4D96A09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0111 Signing time: Mon 19 Jan 2026 20:02:25 +0000 Manifest this update: Mon 19 Jan 2026 19:57:25 +0000 Manifest next update: Thu 22 Jan 2026 20:23:25 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 4: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: iVi2JGtNsXjLKDZRCcMZKY9j4iE1nM57vgWFiP6ChP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 20:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2a:04:bc:36:5b:a2:0a:95:10:06:2a:5e:6e:b4:f4:f4:d9:6a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Jan 19 19:57:25 2026 GMT Not After : Jan 22 20:23:25 2026 GMT Subject: CN=8BF9993CC4AF0309A84AD6138380139C5CF09A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:db:90:fc:2c:dc:ce:f8:85:13:8b:40:4e: 37:ae:33:d2:a9:43:72:8e:b5:9e:f6:ca:47:7f:01: 43:4e:da:e2:64:73:7a:ff:4b:f8:30:88:62:40:0c: ac:48:db:08:48:f6:f8:48:5a:44:30:fc:4c:86:6f: 34:62:b9:b9:9d:4d:a3:74:0a:a2:92:88:6b:0c:ae: 66:6a:5c:97:32:7e:d1:41:75:d5:ce:53:a3:fc:05: 93:25:19:84:5e:4a:99:f8:f2:99:d7:f6:b8:bd:63: 8b:42:3d:16:05:30:14:91:c5:cb:69:ae:d3:e0:6b: 67:43:90:05:b0:54:f0:c7:d6:3e:f2:da:e6:85:dd: 5f:9a:b1:bf:67:5c:b5:b5:14:45:50:48:9f:03:82: 7d:d9:93:d7:3a:31:d8:75:e6:2c:26:e8:40:92:4b: d0:1d:34:22:d8:96:9e:9b:39:01:b9:91:1d:48:ee: 7e:fe:54:27:c9:c5:53:15:8b:b3:27:ae:8e:9b:05: 61:67:46:1b:e6:72:b2:bf:b1:ea:b9:6b:67:8f:7c: 48:a2:30:08:f4:90:f6:6c:00:db:a6:f3:e0:ad:62: b1:85:56:cf:e3:e5:2f:f2:9c:e8:39:f8:32:78:1f: 37:c7:fc:de:5a:32:09:fb:a0:09:75:4a:db:f5:c5: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F9:99:3C:C4:AF:03:09:A8:4A:D6:13:83:80:13:9C:5C:F0:9A:55 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6e:9f:22:bb:3b:36:c8:30:cc:a8:25:64:95:a3:10:bb:9c: b9:6d:e5:a5:5c:c6:38:f6:a5:71:41:df:89:4e:64:7c:25:ce: fb:e3:5e:1c:db:89:d3:88:8c:8b:37:21:b6:68:61:9d:c5:18: 24:a7:a4:bd:37:3a:f2:39:50:f2:7e:38:30:66:13:45:90:0a: 94:be:d4:f2:37:ac:4e:7b:b2:2a:1b:d1:91:4a:e2:82:54:7a: 1a:46:53:9b:91:19:16:fa:86:18:b1:df:46:73:ec:ba:36:08: aa:00:20:da:4a:4c:6c:fb:38:ca:ec:da:29:02:85:e6:c6:98: c6:ff:a4:19:3c:15:fd:76:a6:0e:95:4c:d9:1e:19:8b:af:d7: 03:1d:a6:46:cb:03:b5:9e:e8:76:ad:45:64:e4:1f:04:9d:74: 66:ec:1c:a8:41:10:a9:b3:1a:60:d4:2a:51:1a:dd:88:4f:e8: 26:33:3a:b8:db:01:db:74:3a:4b:22:93:86:00:09:f4:4b:08: 70:7d:c8:3b:22:cf:7c:74:60:49:2c:91:1e:96:9b:9a:0d:67: 0b:f0:aa:f6:fa:e9:7f:4f:d8:9d:8b:b0:c8:08:a3:9d:af:63: 02:de:a8:a0:60:f9:d8:3f:33:27:cc:80:06:a5:94:af:07:ed: 97:4b:3c:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDCoEvDZbogqVEAYqXm609PTZagkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjAxMTkxOTU3MjVaFw0yNjAxMjIyMDIzMjVaMDMxMTAvBgNV BAMTKDhCRjk5OTNDQzRBRjAzMDlBODRBRDYxMzgzODAxMzlDNUNGMDlBNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvp9uQ/CzczviFE4tATjeuM9Kp Q3KOtZ72ykd/AUNO2uJkc3r/S/gwiGJADKxI2whI9vhIWkQw/EyGbzRiubmdTaN0 CqKSiGsMrmZqXJcyftFBddXOU6P8BZMlGYReSpn48pnX9ri9Y4tCPRYFMBSRxctp rtPga2dDkAWwVPDH1j7y2uaF3V+asb9nXLW1FEVQSJ8Dgn3Zk9c6Mdh15iwm6ECS S9AdNCLYlp6bOQG5kR1I7n7+VCfJxVMVi7Mnro6bBWFnRhvmcrK/seq5a2ePfEii MAj0kPZsANum8+CtYrGFVs/j5S/ynOg5+DJ4HzfH/N5aMgn7oAl1Stv1xZ6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/mZPMSvAwmoStYTg4ATnFzwmlUwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJunyK7OzbIMMyoJWSVoxC7nLlt5aVcxjj2 pXFB34lOZHwlzvvjXhzbidOIjIs3IbZoYZ3FGCSnpL03OvI5UPJ+ODBmE0WQCpS+ 1PI3rE57siob0ZFK4oJUehpGU5uRGRb6hhix30Zz7Lo2CKoAINpKTGz7OMrs2ikC hebGmMb/pBk8Ff12pg6VTNkeGYuv1wMdpkbLA7We6HatRWTkHwSddGbsHKhBEKmz GmDUKlEa3YhP6CYzOrjbAdt0Oksik4YACfRLCHB9yDsiz3x0YEkskR6Wm5oNZwvw qvb66X9P2J2LsMgIo52vYwLeqKBg+dg/MyfMgAallK8H7ZdLPG4= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:22 2026 by rpki-client