This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft File: 03832B38693F0F23EF49480775A2493B9E3F7FA0.mft (raw, json) Hash identifier: 7HKUen+jG7OmTyZqrxYMmifeaKpsNM3hk6P5/7cHDgA= Subject key identifier: 40:A0:3A:C3:F2:73:0E:9B:AC:4C:C1:75:E0:C7:1C:61:61:29:8D:BD Authority key identifier: 03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 Certificate issuer: /CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Certificate serial: 25EE4DBE10F556FF7CB860F71A0F0C0A2C5E77D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft Manifest number: 035D Signing time: Thu 08 Jan 2026 01:00:54 +0000 Manifest this update: Thu 08 Jan 2026 00:55:54 +0000 Manifest next update: Sun 11 Jan 2026 04:12:54 +0000 Files and hashes: 1: 03832B38693F0F23EF49480775A2493B9E3F7FA0.crl (hash: VvRcdosTfOyH9AcsULWoWkPXAfmZEDtnedoj1DnoI1U=) 2: 3130332e3135352e3235302e302f32332d3234203d3e203137383834.roa (hash: C109hu1BJkl1pWWKKoRbk9sf7Lmm7AwONWDQ76EwY1Q=) 3: 323030313a6466343a646638303a3a2f34382d3438203d3e20313431303730.roa (hash: pmzgckCGAS5Ljr2SgdcTD9JmH8nize0p1NnNdSRs+P0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Jan 2026 04:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ee:4d:be:10:f5:56:ff:7c:b8:60:f7:1a:0f:0c:0a:2c:5e:77:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03832B38693F0F23EF49480775A2493B9E3F7FA0 Validity Not Before: Jan 8 00:55:54 2026 GMT Not After : Jan 11 04:12:54 2026 GMT Subject: CN=40A03AC3F2730E9BAC4CC175E0C71C6161298DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d0:0f:db:60:54:7e:06:31:86:3a:36:a2:d5: 4c:90:c1:36:4a:82:4b:01:ed:7f:b6:1a:14:7d:78: 86:8b:ae:a9:09:71:d7:73:78:61:c5:2e:08:7e:fd: 53:6b:c2:64:4f:2a:26:63:a2:d9:dd:10:a4:58:75: 48:83:14:a1:6d:9c:c9:8b:b9:89:47:0d:73:05:03: f6:09:19:5b:5b:64:a8:8b:a5:8e:1e:e8:dc:ea:9d: ae:bc:85:b5:a1:ab:85:ba:8e:4d:b0:67:13:ac:ce: 70:c5:3f:3d:be:88:9e:ac:5e:b9:32:4a:b7:e2:07: 9b:8c:e7:17:58:05:e7:ae:3d:c3:ea:f6:cb:e3:c2: e8:46:1e:6e:d7:f4:c8:5f:e4:10:7d:ab:cf:7d:33: 73:7e:2a:5a:a1:a6:a5:13:4f:a2:93:e4:02:a3:22: 01:ae:4e:ff:84:73:cf:d0:04:db:b5:03:e4:20:0d: 92:62:0a:13:78:00:fe:2c:86:7a:c3:a2:fc:d9:58: e7:b8:d4:32:4a:81:af:10:6a:bf:80:7b:93:da:11: bd:be:a1:21:2e:1d:2e:9d:c4:62:fc:89:62:c4:16: 1a:46:df:3d:40:b1:c1:b6:45:8d:8c:2b:83:02:11: ea:5a:63:1c:fe:ea:da:b1:41:b1:5c:7a:89:21:bd: 57:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A0:3A:C3:F2:73:0E:9B:AC:4C:C1:75:E0:C7:1C:61:61:29:8D:BD X509v3 Authority Key Identifier: keyid:03:83:2B:38:69:3F:0F:23:EF:49:48:07:75:A2:49:3B:9E:3F:7F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03832B38693F0F23EF49480775A2493B9E3F7FA0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6ed0584-ac2d-4664-bc11-d026ddbfaf7c/0/03832B38693F0F23EF49480775A2493B9E3F7FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f2:d4:70:23:78:48:06:7b:84:ae:34:2a:6f:1b:c7:92:31: ef:21:90:90:f1:c1:9d:8d:7d:e8:6d:74:00:21:1e:b7:a9:de: d1:84:e9:56:df:a4:5b:cb:45:c6:f6:cc:5b:cf:61:9d:a3:ad: 2b:d3:7d:cb:8d:dd:c4:39:5e:e7:1d:80:e1:37:c3:ce:2b:1f: ae:2e:a8:75:ee:99:1c:37:ce:2f:78:24:08:b7:f9:6f:66:c8: e0:14:ad:97:69:63:3c:e2:6c:52:d2:9a:f0:5d:79:09:a3:9e: b9:50:b5:79:a4:b1:34:ed:ad:5d:de:ac:f8:d3:3b:7c:da:4d: b2:19:2f:ae:3a:7f:7e:a0:12:01:9e:a7:04:b9:6b:4a:1b:9a: 08:54:fe:18:24:3a:38:cc:19:ab:20:26:b3:75:49:4d:d5:07: 6f:01:cc:22:01:59:3e:7f:63:8d:4f:24:f2:55:10:89:ed:1b: 61:b8:e7:7d:9b:fa:4c:09:ae:51:9d:b2:55:e8:63:b9:a9:ac: 9d:e1:15:2d:cc:9a:38:4e:a9:05:d3:9a:57:fc:f6:7f:26:67: 99:fe:06:a9:6c:30:7e:8a:1f:bb:3d:07:ef:d8:f3:c2:ae:72: dc:d5:b0:a8:d7:f6:5c:53:ef:d0:ce:ea:66:b5:f9:4b:cf:20: df:6e:bc:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJe5NvhD1Vv98uGD3Gg8MCixed9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5 RTNGN0ZBMDAeFw0yNjAxMDgwMDU1NTRaFw0yNjAxMTEwNDEyNTRaMDMxMTAvBgNV BAMTKDQwQTAzQUMzRjI3MzBFOUJBQzRDQzE3NUUwQzcxQzYxNjEyOThEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00A/bYFR+BjGGOjai1UyQwTZK gksB7X+2GhR9eIaLrqkJcddzeGHFLgh+/VNrwmRPKiZjotndEKRYdUiDFKFtnMmL uYlHDXMFA/YJGVtbZKiLpY4e6Nzqna68hbWhq4W6jk2wZxOsznDFPz2+iJ6sXrky SrfiB5uM5xdYBeeuPcPq9svjwuhGHm7X9Mhf5BB9q899M3N+KlqhpqUTT6KT5AKj IgGuTv+Ec8/QBNu1A+QgDZJiChN4AP4shnrDovzZWOe41DJKga8Qar+Ae5PaEb2+ oSEuHS6dxGL8iWLEFhpG3z1AscG2RY2MK4MCEepaYxz+6tqxQbFceokhvVdHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKA6w/JzDpusTMF14MccYWEpjb0wHwYDVR0j BBgwFoAUA4MrOGk/DyPvSUgHdaJJO54/f6AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmVkMDU4NC1hYzJkLTQ2NjQtYmMxMS1kMDI2ZGRiZmFmN2MvMC8wMzgzMkIzODY5 M0YwRjIzRUY0OTQ4MDc3NUEyNDkzQjlFM0Y3RkEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5M0I5RTNG N0ZBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlZDA1ODQtYWMyZC00NjY0LWJj MTEtZDAyNmRkYmZhZjdjLzAvMDM4MzJCMzg2OTNGMEYyM0VGNDk0ODA3NzVBMjQ5 M0I5RTNGN0ZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXy1HAjeEgGe4SuNCpvG8eSMe8hkJDxwZ2N fehtdAAhHrep3tGE6VbfpFvLRcb2zFvPYZ2jrSvTfcuN3cQ5XucdgOE3w84rH64u qHXumRw3zi94JAi3+W9myOAUrZdpYzzibFLSmvBdeQmjnrlQtXmksTTtrV3erPjT O3zaTbIZL646f36gEgGepwS5a0obmghU/hgkOjjMGasgJrN1SU3VB28BzCIBWT5/ Y41PJPJVEIntG2G4532b+kwJrlGdslXoY7mprJ3hFS3MmjhOqQXTmlf89n8mZ5n+ BqlsMH6KH7s9B+/Y88KuctzVsKjX9lxT79DO6ma1+UvPIN9uvMU= -----END CERTIFICATE-----Generated at Sat Jan 10 04:40:00 2026 by rpki-client