This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft File: 3FFB3838E6BD431731306308CFEC299A86723365.mft (raw, json) Hash identifier: QdqGQ/ZVfXNsKpcQHFqQdunrI4WfCyaYTD41GIlZ0jQ= Subject key identifier: A0:31:64:42:04:74:F3:45:EE:CC:A2:D1:81:EE:55:0E:34:45:A9:E9 Authority key identifier: 3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 Certificate issuer: /CN=3FFB3838E6BD431731306308CFEC299A86723365 Certificate serial: 1BB698EA17D089BC57CF4038796805FB892E9776 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft Manifest number: 01D0 Signing time: Thu 15 Jan 2026 18:51:39 +0000 Manifest this update: Thu 15 Jan 2026 18:46:39 +0000 Manifest next update: Mon 19 Jan 2026 06:02:39 +0000 Files and hashes: 1: 3130332e39362e3134342e302f32332d3234203d3e20313530393134.roa (hash: gDJkwQ9gyZKkFYwdRFTy7wrHGMBa5YbgBo4hYHB8PGU=) 2: 3130332e39362e3134352e302f32342d3234203d3e20313338313238.roa (hash: V1qL9KpXi+aM0YLlOgcpxWGtKpt9u3OXh+uh8SzOfxo=) 3: 3130332e39362e3134342e302f32342d3234203d3e2034383030.roa (hash: CV24SqbvkbSixkw/z0Fm5hevRc2j9on8+yOAVNVWp6c=) 4: 3FFB3838E6BD431731306308CFEC299A86723365.crl (hash: YlSF8U8V1WVR7idapjy0UecEqbKvuX1BooaqwTny/s0=) 5: 3130332e39362e3134352e302f32342d3234203d3e20313338383834.roa (hash: Fqn9pPcHWwZKysUIYt5AzoYTYKUkmk/oFAlI41zCFg0=) 6: 3130332e39362e3134342e302f32332d3234203d3e203137393232.roa (hash: In7/y6k0tKU1onXjk4QJUAhlh710hxTg1r3tOp5IDjs=) 7: 3130332e39362e3134342e302f32332d3234203d3e2034373631.roa (hash: 89uLp70du3ndPcZNl1H5Nk2O6ZHn9JMvGjuVHTSWLsE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 06:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:98:ea:17:d0:89:bc:57:cf:40:38:79:68:05:fb:89:2e:97:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FFB3838E6BD431731306308CFEC299A86723365 Validity Not Before: Jan 15 18:46:39 2026 GMT Not After : Jan 19 06:02:39 2026 GMT Subject: CN=A03164420474F345EECCA2D181EE550E3445A9E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:5c:f3:ca:a9:6c:e8:82:b9:85:6a:a6:02: a8:e5:8c:3c:44:48:ca:04:7c:f4:61:6f:b8:40:20: cf:75:21:ea:ae:8c:b3:0a:a0:5e:9f:44:3d:99:3e: 79:65:8c:9c:3c:43:f0:84:2e:4d:30:4b:55:47:52: 27:60:63:00:73:51:7d:4d:25:fd:a0:73:39:bc:f6: f5:6a:46:f8:97:73:62:92:49:90:a8:a4:f4:fa:7a: 05:d8:b0:3b:77:58:d6:4f:5a:5a:54:95:81:95:60: 27:11:05:99:80:14:ae:78:e7:14:5a:55:8d:0d:c8: d0:07:00:13:35:aa:cc:37:be:32:31:7b:d6:aa:ae: 4e:6f:40:d7:48:36:a7:b6:2b:9c:b6:e9:75:20:78: b6:fd:e8:11:3a:cd:be:aa:ce:97:af:ef:ac:a3:6e: f4:3d:b1:95:22:76:cb:0d:84:0d:c8:f8:4c:e2:17: 24:88:34:89:61:35:e6:75:5d:2c:6b:33:3d:e6:19: 57:05:59:eb:2f:ef:91:4a:55:d3:61:ee:7c:78:ac: 1b:0f:9b:5a:7e:10:f1:d2:a8:65:0b:d7:6c:39:f2: 94:43:56:a1:84:91:05:39:87:33:0e:15:07:7e:48: 6e:de:71:8c:38:d4:a9:d3:4b:f4:d3:29:19:77:bc: a4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:31:64:42:04:74:F3:45:EE:CC:A2:D1:81:EE:55:0E:34:45:A9:E9 X509v3 Authority Key Identifier: keyid:3F:FB:38:38:E6:BD:43:17:31:30:63:08:CF:EC:29:9A:86:72:33:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FFB3838E6BD431731306308CFEC299A86723365.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8261c37-59a5-4369-91e5-4b1366010c6d/0/3FFB3838E6BD431731306308CFEC299A86723365.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:bf:3c:83:5c:45:58:88:4d:c3:b6:a1:37:31:f1:04:3d:de: af:77:ce:5f:a5:44:24:8a:57:33:dc:f4:3b:29:34:7c:6b:08: a5:da:41:7f:c7:56:d6:e8:81:b2:9f:7a:09:db:4f:bc:c3:03: 41:1b:57:a0:a8:57:2c:57:76:f6:f4:54:c0:65:7f:1c:29:3f: 70:ec:83:e1:41:13:ee:8f:78:53:38:6d:63:c4:93:70:93:03: f9:44:45:2d:ab:ab:f5:b9:e2:8b:3a:1d:46:e3:30:9f:2b:61: d0:5d:77:de:17:5a:79:64:7c:38:a3:5a:a4:f6:d5:a1:a4:9b: 1c:78:b6:7b:4c:0c:34:b3:79:7f:5c:b5:c4:1b:db:b5:69:dc: 9f:45:40:27:5a:fc:b5:5a:c6:69:1c:c6:43:98:ef:6f:fb:92: 1e:48:90:6b:db:06:47:23:75:9e:ef:d8:ba:99:88:6e:ab:28: 9a:ac:c2:d0:df:e1:fd:27:a2:da:24:ad:f5:b7:9e:73:7a:78: 2e:af:6b:4c:47:b8:5a:9d:0e:80:2b:17:3b:61:9a:54:14:33: 33:5b:34:e8:21:94:15:b4:2e:a6:05:21:46:da:70:4e:50:2b: 3b:68:63:39:bd:44:d0:ad:c9:86:d4:3a:ae:63:e9:dd:ee:89: df:5c:59:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7aY6hfQibxXz0A4eWgF+4kul3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4 NjcyMzM2NTAeFw0yNjAxMTUxODQ2MzlaFw0yNjAxMTkwNjAyMzlaMDMxMTAvBgNV BAMTKEEwMzE2NDQyMDQ3NEYzNDVFRUNDQTJEMTgxRUU1NTBFMzQ0NUE5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ+Fzzyqls6IK5hWqmAqjljDxE SMoEfPRhb7hAIM91IequjLMKoF6fRD2ZPnlljJw8Q/CELk0wS1VHUidgYwBzUX1N Jf2gczm89vVqRviXc2KSSZCopPT6egXYsDt3WNZPWlpUlYGVYCcRBZmAFK545xRa VY0NyNAHABM1qsw3vjIxe9aqrk5vQNdINqe2K5y26XUgeLb96BE6zb6qzpev76yj bvQ9sZUidssNhA3I+EziFySINIlhNeZ1XSxrMz3mGVcFWesv75FKVdNh7nx4rBsP m1p+EPHSqGUL12w58pRDVqGEkQU5hzMOFQd+SG7ecYw41KnTS/TTKRl3vKSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoDFkQgR080XuzKLRge5VDjRFqekwHwYDVR0j BBgwFoAUP/s4OOa9QxcxMGMIz+wpmoZyM2UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODI2MWMzNy01OWE1LTQzNjktOTFlNS00YjEzNjYwMTBjNmQvMC8zRkZCMzgzOEU2 QkQ0MzE3MzEzMDYzMDhDRkVDMjk5QTg2NzIzMzY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5OUE4Njcy MzM2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyNjFjMzctNTlhNS00MzY5LTkx ZTUtNGIxMzY2MDEwYzZkLzAvM0ZGQjM4MzhFNkJENDMxNzMxMzA2MzA4Q0ZFQzI5 OUE4NjcyMzM2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2/PINcRViITcO2oTcx8QQ93q93zl+lRCSK VzPc9DspNHxrCKXaQX/HVtbogbKfegnbT7zDA0EbV6CoVyxXdvb0VMBlfxwpP3Ds g+FBE+6PeFM4bWPEk3CTA/lERS2rq/W54os6HUbjMJ8rYdBdd94XWnlkfDijWqT2 1aGkmxx4tntMDDSzeX9ctcQb27Vp3J9FQCda/LVaxmkcxkOY72/7kh5IkGvbBkcj dZ7v2LqZiG6rKJqswtDf4f0notokrfW3nnN6eC6va0xHuFqdDoArFzthmlQUMzNb NOghlBW0LqYFIUbacE5QKztoYzm9RNCtyYbUOq5j6d3uid9cWT8= -----END CERTIFICATE-----Generated at Fri Jan 16 17:28:43 2026 by rpki-client