This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft File: 34D90463B7D23555C6F77AA2464E508E3F913994.mft (raw, json) Hash identifier: MX/nggvdzszbZrY3ocVhQodrFEC3bDltiscR5xxK3Sg= Subject key identifier: A6:B0:9D:0A:94:DE:0A:A3:9B:65:3E:0D:33:B2:AB:1C:52:73:ED:88 Authority key identifier: 34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 Certificate issuer: /CN=34D90463B7D23555C6F77AA2464E508E3F913994 Certificate serial: 2360808CC98ADEAF9108FFFB8F655441930D1CAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft Manifest number: 02B6 Signing time: Mon 02 Feb 2026 05:32:00 +0000 Manifest this update: Mon 02 Feb 2026 05:27:00 +0000 Manifest next update: Thu 05 Feb 2026 16:51:00 +0000 Files and hashes: 1: 34D90463B7D23555C6F77AA2464E508E3F913994.crl (hash: wbPFbrjTqBRD5mNCTKb7cqQlOmg207gSmMMomrXFlQM=) 2: 3130332e3137392e32362e302f32332d3233203d3e20313439333333.roa (hash: MEONMuL54EAbEAUoaiSgV585kNAslwniyqpv61OptMo=) 3: 3130332e3137392e32362e302f32342d3234203d3e20313439333333.roa (hash: DnFQxeSrKL32fiBvrRyv5yZ2kaczcvfgXwu5w2UY/dM=) 4: 3130332e3137392e32372e302f32342d3234203d3e20313439333333.roa (hash: CA6BkOUxy6RzqVUPo5k4/nE9lMWi4FuR3B6V59PMkHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:60:80:8c:c9:8a:de:af:91:08:ff:fb:8f:65:54:41:93:0d:1c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D90463B7D23555C6F77AA2464E508E3F913994 Validity Not Before: Feb 2 05:27:00 2026 GMT Not After : Feb 5 16:51:00 2026 GMT Subject: CN=A6B09D0A94DE0AA39B653E0D33B2AB1C5273ED88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:55:5d:97:1d:3b:b6:cb:49:bc:28:84:2d:0b: 40:93:41:e3:2b:c1:bc:fd:20:b7:5d:34:61:09:24: 72:da:54:5b:d0:44:b7:55:f4:cb:60:eb:d5:37:02: 51:ab:91:ea:59:ce:1a:a5:7e:51:95:42:aa:00:ea: 1b:5a:a8:cb:05:6b:81:e9:22:e7:36:63:e7:cf:b8: 10:54:c8:99:b8:ef:a5:be:68:e7:13:57:59:cf:a4: a1:12:9d:9e:5f:e6:c2:2f:78:a8:7e:3d:cf:98:dd: ca:33:09:bc:24:e9:55:3b:55:af:36:c7:2f:f4:80: 99:a8:11:78:93:e2:da:c7:96:3e:ad:15:fa:fb:cf: 6a:d7:75:89:26:a0:d7:5f:ea:7a:1a:dc:ab:0a:98: c5:da:0b:1f:95:9b:d7:6b:e1:8b:10:29:7c:23:c1: 60:d6:dd:43:11:25:79:39:9a:b4:c2:87:1d:31:d2: 2b:ad:8a:d3:f2:c1:6f:e7:d6:a5:1a:94:bc:f4:33: e7:15:91:51:f7:8d:63:7c:2b:65:93:2f:c4:d1:28: f7:c8:e0:a8:6c:8c:c9:05:b0:69:c9:f7:a7:28:cd: 8d:6a:ff:0d:87:a2:5f:89:9d:03:d9:e3:b1:7a:45: db:bf:5e:61:ea:91:1e:16:e7:4e:d7:d4:42:d6:c1: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:9D:0A:94:DE:0A:A3:9B:65:3E:0D:33:B2:AB:1C:52:73:ED:88 X509v3 Authority Key Identifier: keyid:34:D9:04:63:B7:D2:35:55:C6:F7:7A:A2:46:4E:50:8E:3F:91:39:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D90463B7D23555C6F77AA2464E508E3F913994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998b3549-e253-4fd9-a704-296944e5a063/0/34D90463B7D23555C6F77AA2464E508E3F913994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:db:82:75:5b:ba:e6:96:12:b9:f5:6e:63:b9:68:58:a5:ef: 08:99:78:6f:07:32:d1:f2:43:cb:7d:bd:82:db:c2:b9:26:3a: 3d:f8:c6:34:4e:48:b0:ab:e8:68:53:da:3c:64:cb:ae:1a:44: cb:b6:8c:4f:ff:50:b1:d1:77:55:b2:57:8b:41:28:15:38:33: ce:53:23:16:14:60:93:20:5d:de:52:cb:c0:33:c4:0f:ff:20: 72:bd:ae:90:d1:99:9b:67:4d:b0:aa:b0:52:de:a0:7b:f8:39: 41:e8:8a:9f:6d:bf:eb:99:d1:7c:fb:29:12:96:6a:a1:2a:83: 9a:35:b3:f0:96:7d:1b:c1:3e:99:c4:ff:bb:39:04:eb:81:6a: d5:ca:b8:b6:05:af:12:16:7a:11:e0:f4:cf:16:cc:7a:90:8f: 47:d9:39:c1:67:90:42:2b:7b:48:d8:9c:9b:bd:1b:6a:f0:30: 71:20:09:30:34:e1:06:95:52:d7:9a:9e:20:ae:11:07:1f:c7: f2:7d:ec:aa:e1:32:55:42:4d:53:0c:17:fc:f6:b6:86:68:a9: a1:27:c1:2c:b9:ae:97:a2:ea:3e:31:99:1f:5e:e1:f0:7b:a6: 55:40:92:ad:cf:60:21:ad:b9:29:28:ca:a7:99:c5:ed:8e:81: 1f:4e:8f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2CAjMmK3q+RCP/7j2VUQZMNHK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUz RjkxMzk5NDAeFw0yNjAyMDIwNTI3MDBaFw0yNjAyMDUxNjUxMDBaMDMxMTAvBgNV BAMTKEE2QjA5RDBBOTRERTBBQTM5QjY1M0UwRDMzQjJBQjFDNTI3M0VEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VV2XHTu2y0m8KIQtC0CTQeMr wbz9ILddNGEJJHLaVFvQRLdV9Mtg69U3AlGrkepZzhqlflGVQqoA6htaqMsFa4Hp Iuc2Y+fPuBBUyJm476W+aOcTV1nPpKESnZ5f5sIveKh+Pc+Y3cozCbwk6VU7Va82 xy/0gJmoEXiT4trHlj6tFfr7z2rXdYkmoNdf6noa3KsKmMXaCx+Vm9dr4YsQKXwj wWDW3UMRJXk5mrTChx0x0iutitPywW/n1qUalLz0M+cVkVH3jWN8K2WTL8TRKPfI 4KhsjMkFsGnJ96cozY1q/w2Hol+JnQPZ47F6Rdu/XmHqkR4W507X1ELWwVs7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprCdCpTeCqObZT4NM7KrHFJz7YgwHwYDVR0j BBgwFoAUNNkEY7fSNVXG93qiRk5Qjj+ROZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OThiMzU0OS1lMjUzLTRmZDktYTcwNC0yOTY5NDRlNWEwNjMvMC8zNEQ5MDQ2M0I3 RDIzNTU1QzZGNzdBQTI0NjRFNTA4RTNGOTEzOTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUwOEUzRjkx Mzk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4YjM1NDktZTI1My00ZmQ5LWE3 MDQtMjk2OTQ0ZTVhMDYzLzAvMzREOTA0NjNCN0QyMzU1NUM2Rjc3QUEyNDY0RTUw OEUzRjkxMzk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvbgnVbuuaWErn1bmO5aFil7wiZeG8HMtHy Q8t9vYLbwrkmOj34xjROSLCr6GhT2jxky64aRMu2jE//ULHRd1WyV4tBKBU4M85T IxYUYJMgXd5Sy8AzxA//IHK9rpDRmZtnTbCqsFLeoHv4OUHoip9tv+uZ0Xz7KRKW aqEqg5o1s/CWfRvBPpnE/7s5BOuBatXKuLYFrxIWehHg9M8WzHqQj0fZOcFnkEIr e0jYnJu9G2rwMHEgCTA04QaVUteaniCuEQcfx/J97KrhMlVCTVMMF/z2toZoqaEn wSy5rpei6j4xmR9e4fB7plVAkq3PYCGtuSkoyqeZxe2OgR9Oj9Q= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:12 2026 by rpki-client