This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft File: 3E788037924369AA3B8E52A5857804BE5D285FA2.mft (raw, json) Hash identifier: DYe9EP3ylvPS1W6pq8GSpsAJprcPu3DNseAEQexPBV4= Subject key identifier: C2:54:69:F3:EE:06:CF:A0:E7:A8:77:60:08:67:3E:8A:BF:88:F9:E6 Authority key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Certificate issuer: /CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Certificate serial: 742007B18A5E68EA776495A75CB3E1E5DB36A0E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft Manifest number: 02B9 Signing time: Sun 01 Feb 2026 22:32:03 +0000 Manifest this update: Sun 01 Feb 2026 22:27:03 +0000 Manifest next update: Thu 05 Feb 2026 04:15:03 +0000 Files and hashes: 1: 3130332e3137392e3131372e302f32342d3234203d3e20313431363435.roa (hash: ilhPhYMwxjxcNC74Yon3xYNd0uQUNUNF+7YCYR6VBOw=) 2: 3130332e3136322e35342e302f32342d3234203d3e20313431363435.roa (hash: T+TvJ8L62bCZqFmpIphffr8c4LXSlLo4atPH9poDMJ0=) 3: 3E788037924369AA3B8E52A5857804BE5D285FA2.crl (hash: 9t8g26Y4pHf56d6cAlpwO+jIj6n3w4IPh5BdtOuqL38=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 04:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:20:07:b1:8a:5e:68:ea:77:64:95:a7:5c:b3:e1:e5:db:36:a0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Validity Not Before: Feb 1 22:27:03 2026 GMT Not After : Feb 5 04:15:03 2026 GMT Subject: CN=C25469F3EE06CFA0E7A8776008673E8ABF88F9E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:cb:d0:cd:a8:f2:6e:d5:ef:fe:dd:d1:ce: 12:2f:0e:19:69:2b:11:ed:1f:91:e6:f0:c6:38:3f: 8a:f8:df:58:e1:d2:a7:fc:9e:a2:7e:15:44:6a:57: 6b:f0:8e:78:77:7a:5b:52:ba:41:8e:b7:ba:0f:cf: cb:93:aa:49:20:60:57:e8:3a:ad:5e:3a:9a:f8:a3: 13:1e:43:19:f9:9f:e2:77:fc:65:a4:cb:ec:d6:39: 35:7f:49:6f:06:59:84:a6:a2:2c:5a:85:09:97:d8: 84:ea:a6:a4:d6:ce:38:08:7c:3d:24:06:95:f5:de: fe:c7:53:19:2c:eb:20:39:7e:06:ab:ba:6a:04:e0: d4:81:af:db:10:cd:fe:e4:6a:ad:fa:e9:99:d3:ba: 0d:f7:87:b6:9e:74:68:b1:b3:17:39:de:48:8f:26: df:dd:65:8c:78:cf:23:69:90:cc:6c:05:ad:86:2e: d1:96:d5:6a:7e:7f:be:5d:cf:01:4f:b2:48:ca:87: a4:8e:0a:3a:e6:74:85:f1:f1:df:7b:39:76:20:43: 6e:7a:d2:71:51:75:bf:ab:c1:00:c2:14:a0:6b:a4: 80:2c:6a:9b:54:76:2f:6a:ce:cf:e5:52:8d:59:f4: 6d:89:da:7d:31:f3:59:57:4d:e6:ff:4e:ab:9b:3b: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:54:69:F3:EE:06:CF:A0:E7:A8:77:60:08:67:3E:8A:BF:88:F9:E6 X509v3 Authority Key Identifier: keyid:3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:63:48:fb:12:4d:ec:e2:3f:6a:85:47:2d:c7:cf:45:11:4d: 43:ab:9e:1c:15:4f:45:a5:c5:d4:f6:bc:55:ea:8e:d6:14:f3: c2:bd:e6:c2:92:8c:51:f4:d5:66:30:2f:32:96:29:23:5c:e5: 49:21:c9:1e:b7:c4:91:54:6f:8f:9a:a0:61:3f:a0:61:55:04: b9:fd:7d:c4:16:bb:10:c4:d6:5b:8d:3d:b9:13:3f:20:c6:93: b0:47:2a:95:eb:f2:5e:dd:aa:c2:c4:38:51:99:5d:6d:31:60: a4:d5:9b:09:02:00:48:b5:df:80:4d:0a:3d:23:e4:11:8b:d1: e5:42:15:76:5e:74:97:88:4b:b2:a1:37:80:d6:b0:95:ae:6f: c7:a4:38:92:c9:88:88:a6:c3:1b:bc:36:9c:e2:13:08:fa:ee: ff:70:cd:38:8c:be:b2:0f:ae:66:98:1d:cb:4b:c9:1e:18:b7: 17:b3:7f:28:02:3c:9b:37:3f:d9:71:5d:68:61:eb:bd:65:c2: 0b:6d:49:6a:c0:01:ab:fa:c9:86:fb:a1:65:8d:03:ac:59:52: f2:5b:66:b8:a5:f9:70:98:3b:bd:f9:83:e1:a0:ac:3e:07:3a: 31:3b:1b:29:b4:ed:0b:a3:12:c7:a2:82:2f:eb:ba:6c:49:27: 12:81:ac:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCAHsYpeaOp3ZJWnXLPh5ds2oOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1 RDI4NUZBMjAeFw0yNjAyMDEyMjI3MDNaFw0yNjAyMDUwNDE1MDNaMDMxMTAvBgNV BAMTKEMyNTQ2OUYzRUUwNkNGQTBFN0E4Nzc2MDA4NjczRThBQkY4OEY5RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVhMvQzajybtXv/t3RzhIvDhlp KxHtH5Hm8MY4P4r431jh0qf8nqJ+FURqV2vwjnh3eltSukGOt7oPz8uTqkkgYFfo Oq1eOpr4oxMeQxn5n+J3/GWky+zWOTV/SW8GWYSmoixahQmX2ITqpqTWzjgIfD0k BpX13v7HUxks6yA5fgarumoE4NSBr9sQzf7kaq366ZnTug33h7aedGixsxc53kiP Jt/dZYx4zyNpkMxsBa2GLtGW1Wp+f75dzwFPskjKh6SOCjrmdIXx8d97OXYgQ256 0nFRdb+rwQDCFKBrpIAsaptUdi9qzs/lUo1Z9G2J2n0x81lXTeb/TqubO575AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlRp8+4Gz6DnqHdgCGc+ir+I+eYwHwYDVR0j BBgwFoAUPniAN5JDaao7jlKlhXgEvl0oX6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMC8zRTc4ODAzNzky NDM2OUFBM0I4RTUyQTU4NTc4MDRCRTVEMjg1RkEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0QkU1RDI4 NUZBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1M2FmZGQtMmUwOS00NzczLThi ZTQtNmZkMGVlOTBiMDQwLzAvM0U3ODgwMzc5MjQzNjlBQTNCOEU1MkE1ODU3ODA0 QkU1RDI4NUZBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChjSPsSTeziP2qFRy3Hz0URTUOrnhwVT0Wl xdT2vFXqjtYU88K95sKSjFH01WYwLzKWKSNc5UkhyR63xJFUb4+aoGE/oGFVBLn9 fcQWuxDE1luNPbkTPyDGk7BHKpXr8l7dqsLEOFGZXW0xYKTVmwkCAEi134BNCj0j 5BGL0eVCFXZedJeIS7KhN4DWsJWub8ekOJLJiIimwxu8NpziEwj67v9wzTiMvrIP rmaYHctLyR4YtxezfygCPJs3P9lxXWhh671lwgttSWrAAav6yYb7oWWNA6xZUvJb Zril+XCYO735g+GgrD4HOjE7Gym07QujEseigi/rumxJJxKBrAk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:51:08 2026 by rpki-client