This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft (raw, json) Hash identifier: 0ss8eSOVrhNLLdyntBKUNhH2xviI62/kdwmLFzfPHmI= Subject key identifier: 95:5F:6B:E0:AF:12:EC:93:31:E4:F3:52:58:3E:24:9B:BE:24:10:12 Authority key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Certificate issuer: /CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Certificate serial: 274A62DF536C2DEF1F733786568655085B9BFD4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft Manifest number: 0129 Signing time: Mon 19 Jan 2026 16:20:59 +0000 Manifest this update: Mon 19 Jan 2026 16:15:59 +0000 Manifest next update: Thu 22 Jan 2026 19:45:59 +0000 Files and hashes: 1: 3135372e32302e3135382e302f32342d3234203d3e20313431313230.roa (hash: YasvvxbCzsiYxjm39PQuEFNka/y9AUBvJZG9vLwVOCc=) 2: 3135372e32302e3135392e302f32342d3234203d3e20313431313230.roa (hash: gfWNy9lIc/MVIMgNjSxC32IkW0PrSYj/0GoqdaAmvtI=) 3: 3135372e32302e3135382e302f32332d3233203d3e20313431313230.roa (hash: uyjSRskgL9BJCMKxVifWZ7TJaXQpE36bCbtIhaZsOr4=) 4: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl (hash: 9aQO2Dn34vUspIbydVBtF4dHtuMRQXN+01tc8zxhMEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Jan 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4a:62:df:53:6c:2d:ef:1f:73:37:86:56:86:55:08:5b:9b:fd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Validity Not Before: Jan 19 16:15:59 2026 GMT Not After : Jan 22 19:45:59 2026 GMT Subject: CN=955F6BE0AF12EC9331E4F352583E249BBE241012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b8:d0:d0:40:5a:8e:ca:39:2d:44:02:57:4f: cf:ba:dc:da:d5:27:5a:6d:eb:c8:8b:c0:4b:24:27: 60:03:12:ce:ec:d7:5b:70:64:9b:13:28:33:9f:c7: 84:96:d4:1f:91:88:93:dd:34:2f:08:62:ed:82:e1: f3:10:74:f1:35:3f:a3:1f:9c:62:d4:e2:00:91:41: 27:6f:40:48:b7:bb:d2:0c:60:eb:c2:7b:49:68:05: 4a:6b:0c:68:ae:56:ab:bf:4c:21:b0:ea:09:d7:30: a0:92:44:11:c0:0a:48:0c:f8:23:6a:91:ea:e6:2c: 73:43:f1:91:cd:29:aa:80:fd:c8:76:7a:fe:30:88: 27:86:f6:24:ca:d7:b2:67:45:37:81:bd:2d:e5:48: b9:d3:f2:83:52:71:c5:28:29:8d:47:b7:8d:12:96: e3:7d:88:df:73:51:14:01:29:85:71:64:68:07:e7: 0a:c1:97:ab:48:73:73:21:d6:bb:0b:fd:16:ee:36: f7:3e:3f:0f:b8:8d:30:1f:c8:26:5b:3e:a0:ff:48: a6:81:5e:44:4c:dc:be:03:94:ef:9a:e6:6d:88:12: 0b:91:2a:57:10:79:3f:90:ce:20:58:5f:8b:6b:b5: d9:fd:e8:59:16:7b:85:f9:5a:2d:2b:e3:42:00:46: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:6B:E0:AF:12:EC:93:31:E4:F3:52:58:3E:24:9B:BE:24:10:12 X509v3 Authority Key Identifier: keyid:3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:03:0a:57:41:17:cf:9c:35:b2:51:89:ec:9c:42:0d:2d:de: 94:53:fe:58:99:98:10:a3:8d:80:3f:bc:0f:f5:a6:5d:b5:85: 3a:48:3f:d0:96:e4:eb:95:d8:fe:f2:0a:6c:ca:2c:02:17:f2: 7e:06:97:b2:be:f0:f0:ed:ba:a6:94:bf:a8:2e:e7:ef:52:e6: 8f:a5:30:e5:06:58:0e:d6:e5:d4:ba:bc:04:f7:69:b7:e7:39: 8c:54:cc:98:f2:47:a6:71:70:6a:74:3f:9f:4d:a3:69:14:ef: 1c:ef:0d:37:df:3d:88:5b:9f:36:03:fe:2d:d7:3a:7e:e0:1e: b2:98:b3:43:5a:10:3b:78:fe:3b:c4:cf:a5:2b:b0:5e:01:65: e0:56:ce:51:89:c2:8b:06:f1:f9:b2:d0:60:4e:7d:dc:77:9e: b8:9b:db:bf:ec:17:68:a9:02:14:50:6a:a1:7c:cd:43:32:32: 03:00:1d:81:cd:dd:12:59:54:ea:f3:54:cf:bb:0e:93:5d:67: 4f:3e:79:a6:43:02:dc:d9:c2:42:5b:4d:80:18:22:86:87:be: 5f:44:b3:0f:2a:37:24:b4:4a:1c:ca:32:08:9e:3a:71:78:e9: bc:0e:76:3f:54:89:4d:31:8c:ab:c4:d9:e5:3e:7e:45:e7:dd: 97:cf:c9:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0pi31NsLe8fczeGVoZVCFub/UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBF MzREMjlBQjAeFw0yNjAxMTkxNjE1NTlaFw0yNjAxMjIxOTQ1NTlaMDMxMTAvBgNV BAMTKDk1NUY2QkUwQUYxMkVDOTMzMUU0RjM1MjU4M0UyNDlCQkUyNDEwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4uNDQQFqOyjktRAJXT8+63NrV J1pt68iLwEskJ2ADEs7s11twZJsTKDOfx4SW1B+RiJPdNC8IYu2C4fMQdPE1P6Mf nGLU4gCRQSdvQEi3u9IMYOvCe0loBUprDGiuVqu/TCGw6gnXMKCSRBHACkgM+CNq kermLHND8ZHNKaqA/ch2ev4wiCeG9iTK17JnRTeBvS3lSLnT8oNSccUoKY1Ht40S luN9iN9zURQBKYVxZGgH5wrBl6tIc3Mh1rsL/RbuNvc+Pw+4jTAfyCZbPqD/SKaB XkRM3L4DlO+a5m2IEguRKlcQeT+QziBYX4trtdn96FkWe4X5Wi0r40IARi9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlV9r4K8S7JMx5PNSWD4km74kEBIwHwYDVR0j BBgwFoAUPG10hdYa1UImFS5dioE9cONNKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMC8zQzZENzQ4NUQ2 MUFENTQyMjYxNTJFNUQ4QTgxM0Q3MEUzNEQyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNENzBFMzRE MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE1OWEzNjItOTUwYy00NWMyLWFl Y2MtODJiMjE0YmNlNDc0LzAvM0M2RDc0ODVENjFBRDU0MjI2MTUyRTVEOEE4MTNE NzBFMzREMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4DCldBF8+cNbJRieycQg0t3pRT/liZmBCj jYA/vA/1pl21hTpIP9CW5OuV2P7yCmzKLAIX8n4Gl7K+8PDtuqaUv6gu5+9S5o+l MOUGWA7W5dS6vAT3abfnOYxUzJjyR6ZxcGp0P59No2kU7xzvDTffPYhbnzYD/i3X On7gHrKYs0NaEDt4/jvEz6UrsF4BZeBWzlGJwosG8fmy0GBOfdx3nrib27/sF2ip AhRQaqF8zUMyMgMAHYHN3RJZVOrzVM+7DpNdZ08+eaZDAtzZwkJbTYAYIoaHvl9E sw8qNyS0ShzKMgieOnF46bwOdj9UiU0xjKvE2eU+fkXn3ZfPyac= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:20 2026 by rpki-client