This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft File: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft (raw, json) Hash identifier: MkHkbvkxO2+/q8i/Jop81fDYsT4Z7w0NTlkMasXD5sU= Subject key identifier: DF:99:CF:DB:B5:18:C1:D3:0D:D7:8D:22:89:76:C6:13:DB:97:53:32 Authority key identifier: 3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE Certificate issuer: /CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Certificate serial: 4C37347BA415D9D396061E37E46BE6B879A41428 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft Manifest number: 0547 Signing time: Sun 01 Feb 2026 08:30:40 +0000 Manifest this update: Sun 01 Feb 2026 08:25:40 +0000 Manifest next update: Wed 04 Feb 2026 13:24:40 +0000 Files and hashes: 1: 3130332e38352e3134382e302f32322d3234203d3e203137393935.roa (hash: /Wu0u/CMc+T4gs0PJO0n7WC2osLR58ve83c3OfRxI5E=) 2: 3132342e3135382e3134342e302f32302d3234203d3e203137393935.roa (hash: zsg0MYUUul8ZWAz6HoeSnMP9CkNtx4CP6l+n2iyt5ns=) 3: 3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl (hash: FVZX7TcrOt1Q+0Y7M6equvsNje9Ni+wTP0XHwd7Knas=) 4: 3138322e31362e3136302e302f31392d3234203d3e203137393935.roa (hash: CAAPflKpErYbCedoGMTZLOsCI6lepdBfa5oWuKRRZqA=) 5: 3230322e35312e39362e302f31392d3234203d3e203137393935.roa (hash: VPDdfzNp/Tnip1mpiin5tv4VXeLj0MdK1eiLLlQll+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 13:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:37:34:7b:a4:15:d9:d3:96:06:1e:37:e4:6b:e6:b8:79:a4:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EDBB7844714C545CED724120ED0E5A34EFB45EE Validity Not Before: Feb 1 08:25:40 2026 GMT Not After : Feb 4 13:24:40 2026 GMT Subject: CN=DF99CFDBB518C1D30DD78D228976C613DB975332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:8b:92:cb:2a:3b:e7:8d:c6:71:b9:19:20: 50:33:38:3f:3a:e2:03:d7:ca:f0:4e:41:e2:b2:6f: 3f:b8:b6:88:44:65:90:de:67:70:43:70:d7:5f:0e: a4:0d:44:1b:36:69:ee:07:f2:85:ce:7d:50:90:99: 36:47:f7:12:78:dd:4f:ff:9f:48:f2:c9:85:c0:3c: e4:77:0b:9e:8b:4c:7b:c3:cd:4d:65:07:75:23:51: 8e:51:23:a3:55:4f:ff:35:a8:c4:36:9a:03:64:59: f2:c8:a3:67:50:15:c5:88:06:3b:42:17:a5:84:44: aa:38:4e:19:a8:15:94:7a:fc:3c:50:4a:85:be:03: f6:af:bf:a3:c9:3a:6f:04:80:9f:02:0e:28:3c:19: 14:38:b0:10:0a:b6:88:d6:11:8c:af:66:d9:c9:1e: 7e:ef:b9:6e:e5:2e:ed:8d:3b:18:dd:54:f4:c7:d2: 4e:16:c6:0b:18:ba:12:6b:32:1e:96:5b:db:b6:43: 7a:2a:5d:56:6f:df:68:50:ec:04:c3:f1:93:77:12: f0:09:14:fa:b2:78:90:8d:12:51:e7:09:17:23:49: 09:4e:76:76:8c:b5:bf:ec:72:2f:3d:d1:11:4d:79: e2:da:4b:61:c4:cb:3a:b3:f6:4e:0d:09:ba:97:30: be:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:99:CF:DB:B5:18:C1:D3:0D:D7:8D:22:89:76:C6:13:DB:97:53:32 X509v3 Authority Key Identifier: keyid:3E:DB:B7:84:47:14:C5:45:CE:D7:24:12:0E:D0:E5:A3:4E:FB:45:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3EDBB7844714C545CED724120ED0E5A34EFB45EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ed955c8-e6d3-49c2-abd8-e0f92c081247/0/3EDBB7844714C545CED724120ED0E5A34EFB45EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:b6:a1:27:be:3d:61:e3:3a:57:6a:27:53:ad:77:20:f1: cd:86:4b:40:0c:a0:22:63:e1:dc:e2:f1:6c:00:66:54:60:a4: b2:89:af:de:8b:1f:1a:ee:02:a8:1d:a4:7f:70:08:12:69:d3: b0:6b:bd:e3:64:7d:62:a4:02:91:37:67:67:58:a0:22:86:da: cd:a3:f2:35:f1:11:3d:c7:d5:f9:28:56:d7:9e:5a:24:ef:a9: 35:c1:3c:37:ed:84:ee:b2:4b:25:d8:a3:a1:79:d1:3c:ee:18: 51:c1:e5:da:41:81:c1:d0:24:d8:65:3c:9f:ac:13:69:e7:16: 92:ab:6b:ac:66:f7:f3:49:59:dd:ad:92:9a:5a:11:f0:b4:75: 61:c6:b8:ac:45:72:4a:1d:41:1e:61:f1:ec:d3:04:90:f0:e3: e8:7c:5d:4b:af:9d:47:bb:3b:44:92:37:ae:0d:7e:56:2a:12: c7:a1:43:20:d7:65:01:5f:e2:ed:66:32:27:d5:31:1c:06:c0: 80:69:73:59:44:c4:c1:21:cc:58:24:22:00:c2:bf:d2:90:2b: c0:f1:5a:f7:e8:a8:c5:48:e3:48:95:1e:7d:8a:e2:dc:76:bb: c2:0f:8d:06:03:b8:e2:a3:2d:33:8d:e2:38:54:09:3f:d3:d9: 98:39:b8:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDc0e6QV2dOWBh435GvmuHmkFCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0 RUZCNDVFRTAeFw0yNjAyMDEwODI1NDBaFw0yNjAyMDQxMzI0NDBaMDMxMTAvBgNV BAMTKERGOTlDRkRCQjUxOEMxRDMwREQ3OEQyMjg5NzZDNjEzREI5NzUzMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6YuSyyo7543GcbkZIFAzOD86 4gPXyvBOQeKybz+4tohEZZDeZ3BDcNdfDqQNRBs2ae4H8oXOfVCQmTZH9xJ43U// n0jyyYXAPOR3C56LTHvDzU1lB3UjUY5RI6NVT/81qMQ2mgNkWfLIo2dQFcWIBjtC F6WERKo4ThmoFZR6/DxQSoW+A/avv6PJOm8EgJ8CDig8GRQ4sBAKtojWEYyvZtnJ Hn7vuW7lLu2NOxjdVPTH0k4WxgsYuhJrMh6WW9u2Q3oqXVZv32hQ7ATD8ZN3EvAJ FPqyeJCNElHnCRcjSQlOdnaMtb/sci890RFNeeLaS2HEyzqz9k4NCbqXML67AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU35nP27UYwdMN140iiXbGE9uXUzIwHwYDVR0j BBgwFoAUPtu3hEcUxUXO1yQSDtDlo077Re4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWQ5NTVjOC1lNmQzLTQ5YzItYWJkOC1lMGY5MmMwODEyNDcvMC8zRURCQjc4NDQ3 MTRDNTQ1Q0VENzI0MTIwRUQwRTVBMzRFRkI0NUVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1QTM0RUZC NDVFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVkOTU1YzgtZTZkMy00OWMyLWFi ZDgtZTBmOTJjMDgxMjQ3LzAvM0VEQkI3ODQ0NzE0QzU0NUNFRDcyNDEyMEVEMEU1 QTM0RUZCNDVFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMOtqEnvj1h4zpXaidTrXcg8c2GS0AMoCJj 4dzi8WwAZlRgpLKJr96LHxruAqgdpH9wCBJp07BrveNkfWKkApE3Z2dYoCKG2s2j 8jXxET3H1fkoVteeWiTvqTXBPDfthO6ySyXYo6F50TzuGFHB5dpBgcHQJNhlPJ+s E2nnFpKra6xm9/NJWd2tkppaEfC0dWHGuKxFckodQR5h8ezTBJDw4+h8XUuvnUe7 O0SSN64NflYqEsehQyDXZQFf4u1mMifVMRwGwIBpc1lExMEhzFgkIgDCv9KQK8Dx WvfoqMVI40iVHn2K4tx2u8IPjQYDuOKjLTON4jhUCT/T2Zg5uLI= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:25 2026 by rpki-client