This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft (raw, json) Hash identifier: KDRPA3xKxzNvHPxCHDU+lbP0N4bxMI4v9RqzmpOQt78= Subject key identifier: 9C:61:E5:BF:66:F4:CC:49:8E:E9:B5:B2:7F:84:A7:41:3F:54:1D:09 Authority key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Certificate issuer: /CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Certificate serial: 29E73B3DFAD411F3F6A8BBC6ACDC17D33C24CAEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft Manifest number: 0556 Signing time: Sun 01 Feb 2026 14:42:21 +0000 Manifest this update: Sun 01 Feb 2026 14:37:21 +0000 Manifest next update: Wed 04 Feb 2026 20:01:21 +0000 Files and hashes: 1: 3130332e3133332e36312e302f32342d3234203d3e20313338313334.roa (hash: fEqrWk5yzRrIfC/NwZzR4O5o8YjE++0relBMS0Qsam4=) 2: 3130332e3133332e36302e302f32322d3232203d3e20313338313334.roa (hash: 1FGJd6AqSTK9oY+Kf0u0bGP0qcgnLzetRfPl9A2Bh4w=) 3: 3130332e3133332e36332e302f32342d3234203d3e20313338313334.roa (hash: M4zMEE4gM9B2z9mzotuldgSgaCKFtNvfP7tGSiFjQks=) 4: 3130332e3133332e36302e302f32342d3234203d3e20313338313334.roa (hash: amdqV6lzMAC4zxO9RwYxm18VuzSqbFKiq2hPtX/elIw=) 5: 3130332e3133332e36322e302f32342d3234203d3e20313338313334.roa (hash: hXWJa8fVoj0vzNayNv76Qv76zEys5r5KfZWHwpWNqSA=) 6: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl (hash: JuqKGZ7fetjpK53xFuo10c4ktn+7pEtL8EC5csHHKkc=) 7: 323430343a343863303a3a2f33322d3332203d3e20313338313334.roa (hash: /uE3RoNjstpZuWvkeLBYaDpbs3/pa2JGUNOwerwb9Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:e7:3b:3d:fa:d4:11:f3:f6:a8:bb:c6:ac:dc:17:d3:3c:24:ca:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Validity Not Before: Feb 1 14:37:21 2026 GMT Not After : Feb 4 20:01:21 2026 GMT Subject: CN=9C61E5BF66F4CC498EE9B5B27F84A7413F541D09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:62:ff:0a:12:76:fc:fa:d3:9e:a7:2d:98: 46:cc:f6:e5:7b:0a:e2:ec:7d:ad:33:de:44:45:a2: 59:30:6b:5b:a3:f8:d2:54:ab:da:71:3f:27:7c:b1: 53:61:6c:a7:08:8a:88:71:00:e2:b9:21:3e:06:fe: b9:a5:3c:5b:b1:e9:fd:68:45:4d:12:08:b2:14:48: 15:fe:50:6d:5c:5d:53:63:b0:9e:1a:35:b6:14:f4: ce:b0:ff:2e:bf:6a:69:29:50:e0:29:cc:94:b5:66: 55:9b:4f:2c:df:99:e9:b2:44:4f:6a:c3:e3:f6:6b: cd:fb:b9:a3:f4:d4:08:9e:b2:8c:b5:cc:a3:57:38: 19:c3:38:19:96:7d:83:de:c5:bf:1a:8d:89:6d:e6: cf:26:28:a2:a7:9b:6e:2f:0a:2a:14:dc:14:9e:a0: 38:e1:08:2f:11:c9:f8:06:f8:8c:fa:c7:e1:b2:df: 6f:f5:b2:73:8b:b1:d6:f1:28:7c:fd:76:88:d2:29: f4:22:3b:04:56:c7:c4:a4:82:e4:54:81:74:4b:2b: 64:5f:c3:9a:bf:60:11:83:75:d9:d6:80:4f:f2:84: 46:01:2f:80:21:25:ea:88:6a:27:6e:3a:51:f6:ec: 98:8c:32:ef:36:67:9d:63:0c:e3:9a:da:ae:56:b6: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:61:E5:BF:66:F4:CC:49:8E:E9:B5:B2:7F:84:A7:41:3F:54:1D:09 X509v3 Authority Key Identifier: keyid:C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:58:d1:d2:8c:b8:4a:5f:ed:e1:66:ce:5e:09:13:e9:71:67: e2:85:f5:dd:e2:6a:3d:42:2b:0d:65:33:18:cd:cb:ba:23:0b: 04:0a:1b:8d:5b:f9:dd:1c:b5:29:9d:a2:02:9c:46:af:fa:11: 77:0b:17:6a:fe:1f:20:d4:7d:20:b6:7f:c9:8f:06:e2:d9:3c: db:c0:4f:56:0c:b8:9a:80:11:a3:bf:7d:1e:35:f1:63:a8:49: 41:a7:fe:47:54:7c:2d:04:10:26:d5:5e:f3:38:86:a0:23:54: 0b:d7:4e:e9:8d:00:db:6a:ad:50:49:8f:69:44:78:e3:01:49: 50:b1:07:6c:92:60:03:20:17:e0:d3:8f:80:d7:56:b6:30:1f: 2f:15:d3:97:9e:fd:96:7a:86:3a:07:61:f9:7d:1a:89:f5:0c: 14:c8:19:50:90:3c:0a:36:4d:08:eb:5d:75:da:b5:78:5a:f8: 4a:27:0a:e1:00:98:9c:3e:6f:c5:6e:4f:2e:50:7e:f5:72:ba: 27:f3:09:ab:13:bd:9b:84:80:56:fa:e8:17:21:9d:bc:40:ed: 2b:45:f3:8c:22:10:45:11:ad:d0:51:00:08:1d:14:5d:dc:dd: e8:e4:cf:ac:86:80:f3:4e:7c:0f:f9:c5:87:9e:d1:f5:ea:72: 57:57:be:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKec7PfrUEfP2qLvGrNwX0zwkyu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZC RkNEREJCMDAeFw0yNjAyMDExNDM3MjFaFw0yNjAyMDQyMDAxMjFaMDMxMTAvBgNV BAMTKDlDNjFFNUJGNjZGNENDNDk4RUU5QjVCMjdGODRBNzQxM0Y1NDFEMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IWL/ChJ2/PrTnqctmEbM9uV7 CuLsfa0z3kRFolkwa1uj+NJUq9pxPyd8sVNhbKcIiohxAOK5IT4G/rmlPFux6f1o RU0SCLIUSBX+UG1cXVNjsJ4aNbYU9M6w/y6/amkpUOApzJS1ZlWbTyzfmemyRE9q w+P2a837uaP01Aiesoy1zKNXOBnDOBmWfYPexb8ajYlt5s8mKKKnm24vCioU3BSe oDjhCC8RyfgG+Iz6x+Gy32/1snOLsdbxKHz9dojSKfQiOwRWx8SkguRUgXRLK2Rf w5q/YBGDddnWgE/yhEYBL4AhJeqIaiduOlH27JiMMu82Z51jDOOa2q5WtjWdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGHlv2b0zEmO6bWyf4SnQT9UHQkwHwYDVR0j BBgwFoAUw/gKNcHGh3u+SXGbkI0Cn7/N27AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMC9DM0Y4MEEzNUMx QzY4NzdCQkU0OTcxOUI5MDhEMDI5RkJGQ0REQkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAyOUZCRkNE REJCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmNjhhYmEtOTUxNS00ZDEyLWFh YzItOGNlZTVkYjJhNDhmLzAvQzNGODBBMzVDMUM2ODc3QkJFNDk3MTlCOTA4RDAy OUZCRkNEREJCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpY0dKMuEpf7eFmzl4JE+lxZ+KF9d3iaj1C Kw1lMxjNy7ojCwQKG41b+d0ctSmdogKcRq/6EXcLF2r+HyDUfSC2f8mPBuLZPNvA T1YMuJqAEaO/fR418WOoSUGn/kdUfC0EECbVXvM4hqAjVAvXTumNANtqrVBJj2lE eOMBSVCxB2ySYAMgF+DTj4DXVrYwHy8V05ee/ZZ6hjoHYfl9Gon1DBTIGVCQPAo2 TQjrXXXatXha+EonCuEAmJw+b8VuTy5QfvVyuifzCasTvZuEgFb66BchnbxA7StF 84wiEEURrdBRAAgdFF3c3ejkz6yGgPNOfA/5xYee0fXqcldXviY= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:18 2026 by rpki-client