This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft (raw, json)
Hash identifier: uukbawVXcjXXqMFagKPzDcEcjsOAGPMc874opFTYX24=
Subject key identifier: A7:1A:63:50:38:C8:BC:15:D7:94:50:C3:F0:41:5E:29:69:21:9C:FA
Authority key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
Certificate issuer: /CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Certificate serial: 46235AF25E8D83E3B9030B8A09C7A913C39CFA35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
Manifest number: 03B5
Signing time: Sun 01 Feb 2026 16:01:34 +0000
Manifest this update: Sun 01 Feb 2026 15:56:34 +0000
Manifest next update: Thu 05 Feb 2026 02:23:34 +0000
Files and hashes: 1: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl (hash: h3Rn2TDlyizzYwQ9Dfg9zoBEcFL0Y5x7M0df1wT8Kzs=)
2: 3130332e3135302e33322e302f32332d3234203d3e20313430333930.roa (hash: bCvMUKBD1daiWYxfMpvvCvPQpiutcpLYOl2BrVG0MuA=)
3: 323430353a666134303a3a2f33322d3438203d3e20313430333930.roa (hash: SUyxlS+K2vXIzcn7l84Tc7WrZ0T2jVK8F2AGYsMMKAg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 02:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:23:5a:f2:5e:8d:83:e3:b9:03:0b:8a:09:c7:a9:13:c3:9c:fa:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9
Validity
Not Before: Feb 1 15:56:34 2026 GMT
Not After : Feb 5 02:23:34 2026 GMT
Subject: CN=A71A635038C8BC15D79450C3F0415E2969219CFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:b0:8a:ca:a5:db:c9:a7:0f:44:43:e3:ed:
e3:77:8b:69:d4:61:99:e2:5d:5e:47:3c:60:36:23:
e1:1d:5f:e0:33:31:94:17:19:fe:79:38:71:61:b9:
d2:59:ff:d2:7c:17:36:2b:43:13:e6:60:3e:9f:47:
90:3b:c0:19:c1:7a:a7:37:13:5c:32:3c:d4:08:16:
8a:20:cd:93:0d:fe:20:2e:7c:27:75:d8:2e:14:51:
79:25:4a:7f:de:b3:dc:77:77:92:67:f1:20:23:df:
0e:6b:07:ff:e5:f4:65:03:f9:72:47:ed:e9:e0:68:
6f:45:98:d7:a9:2f:b9:50:0d:e5:20:99:d3:32:b5:
7b:28:a1:5b:0e:20:e3:18:08:95:b0:3c:10:cd:bf:
68:a1:56:ef:f6:41:88:2d:e0:7d:58:5e:d5:f9:bf:
ed:e4:d3:db:c8:be:eb:49:e7:c7:5e:73:11:98:3b:
42:e2:ff:68:a4:75:2d:10:d7:75:c7:7e:90:74:f3:
f6:32:99:26:a1:74:95:97:ec:ab:ba:30:06:dc:ed:
22:26:2b:6f:da:da:9c:26:ac:a1:40:b1:3b:07:87:
4d:f7:9d:9f:e5:5c:22:73:b1:9f:33:ae:be:03:00:
9a:09:53:dd:8e:58:4d:8a:39:aa:1f:71:90:61:1b:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:63:50:38:C8:BC:15:D7:94:50:C3:F0:41:5E:29:69:21:9C:FA
X509v3 Authority Key Identifier:
keyid:03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:32:66:7e:c5:d3:0c:fa:6e:e0:2d:aa:56:de:fc:bc:0a:d4:
52:c5:ff:22:03:2f:da:52:55:f3:76:37:99:15:ad:7f:9c:3e:
0d:90:95:58:eb:76:2a:75:f1:20:4e:df:64:a3:49:0f:cf:09:
b6:72:c4:c5:30:41:9a:a4:1d:bc:a9:11:1b:18:b4:d5:a9:d6:
1e:8f:67:1c:e2:35:ba:0f:f7:8b:dc:14:96:c9:4b:94:26:2b:
c8:b2:99:27:cd:2a:3f:52:db:4a:3f:81:f3:1c:93:9c:5d:b4:
3f:53:59:68:c1:9e:df:40:23:a1:da:d3:ff:d8:28:5e:b4:70:
db:6f:66:40:bc:26:66:eb:8f:f0:d7:48:0c:11:72:61:7e:ae:
51:ad:73:a3:fd:9d:71:d9:a7:de:16:e4:b5:a9:a4:4a:85:09:
b5:98:0d:34:33:d3:75:39:c8:46:d4:d5:0e:43:3b:41:27:e0:
6d:15:21:97:2c:03:e9:c1:f0:8b:c3:6c:51:39:12:25:fb:cb:
be:39:c3:5c:5c:26:08:56:cf:c1:af:b6:4d:1b:7f:86:58:a1:
11:9d:c4:85:cf:f8:59:5b:88:4e:41:56:46:27:65:73:7d:9e:
52:e1:c2:99:35:cc:33:7c:22:e0:87:ee:13:92:c6:cc:5d:bc:
c0:91:54:e0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIURiNa8l6Ng+O5AwuKCcepE8Oc+jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2
MzUyREZGOTAeFw0yNjAyMDExNTU2MzRaFw0yNjAyMDUwMjIzMzRaMDMxMTAvBgNV
BAMTKEE3MUE2MzUwMzhDOEJDMTVENzk0NTBDM0YwNDE1RTI5NjkyMTlDRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ibCKyqXbyacPREPj7eN3i2nU
YZniXV5HPGA2I+EdX+AzMZQXGf55OHFhudJZ/9J8FzYrQxPmYD6fR5A7wBnBeqc3
E1wyPNQIFoogzZMN/iAufCd12C4UUXklSn/es9x3d5Jn8SAj3w5rB//l9GUD+XJH
7engaG9FmNepL7lQDeUgmdMytXsooVsOIOMYCJWwPBDNv2ihVu/2QYgt4H1YXtX5
v+3k09vIvutJ58decxGYO0Li/2ikdS0Q13XHfpB08/YymSahdJWX7Ku6MAbc7SIm
K2/a2pwmrKFAsTsHh033nZ/lXCJzsZ8zrr4DAJoJU92OWE2KOaofcZBhG2vbAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpxpjUDjIvBXXlFDD8EFeKWkhnPowHwYDVR0j
BBgwFoAUA04PpbbBtOFWSSTO4Ny2oWNS3/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMC8wMzRFMEZBNUI2
QzFCNEUxNTY0OTI0Q0VFMERDQjZBMTYzNTJERkY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2QTE2MzUy
REZGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FmNTAzODMtN2QwNC00N2M4LWFh
ZWItZjdlNzY2OTM3NzMxLzAvMDM0RTBGQTVCNkMxQjRFMTU2NDkyNENFRTBEQ0I2
QTE2MzUyREZGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEIyZn7F0wz6buAtqlbe/LwK1FLF/yIDL9pS
VfN2N5kVrX+cPg2QlVjrdip18SBO32SjSQ/PCbZyxMUwQZqkHbypERsYtNWp1h6P
ZxziNboP94vcFJbJS5QmK8iymSfNKj9S20o/gfMck5xdtD9TWWjBnt9AI6Ha0//Y
KF60cNtvZkC8Jmbrj/DXSAwRcmF+rlGtc6P9nXHZp94W5LWppEqFCbWYDTQz03U5
yEbU1Q5DO0En4G0VIZcsA+nB8IvDbFE5EiX7y745w1xcJghWz8Gvtk0bf4ZYoRGd
xIXP+FlbiE5BVkYnZXN9nlLhwpk1zDN8IuCH7hOSxsxdvMCRVOA=
-----END CERTIFICATE-----
Generated at Mon Feb 2 10:06:37 2026 by rpki-client