This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft (raw, json) Hash identifier: uFPL2s2HuW/m+fDBBz0Bn9UnIuYmGwYqx1cKpAv39aU= Subject key identifier: FD:2E:96:9E:3C:68:53:E4:D9:83:88:7E:EE:0C:84:D3:67:75:98:2D Authority key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Certificate issuer: /CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Certificate serial: 3C6B332F53184D4BCC10BAFA37F74C4D195C1A74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft Manifest number: 01C2 Signing time: Sat 31 Jan 2026 05:01:40 +0000 Manifest this update: Sat 31 Jan 2026 04:56:40 +0000 Manifest next update: Tue 03 Feb 2026 11:13:40 +0000 Files and hashes: 1: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl (hash: qZDJwcq524kc8z6hjILFpnb4LH9sLykwSFNe37e6KMc=) 2: 3130332e3231302e3232312e302f32342d3234203d3e20313530393433.roa (hash: ICnoqiEwX4K5+bPW5k+TuCD6FcA6NPx7U34EDJ/BnWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:6b:33:2f:53:18:4d:4b:cc:10:ba:fa:37:f7:4c:4d:19:5c:1a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Validity Not Before: Jan 31 04:56:40 2026 GMT Not After : Feb 3 11:13:40 2026 GMT Subject: CN=FD2E969E3C6853E4D983887EEE0C84D36775982D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:57:9b:5a:ba:af:41:e8:32:d3:66:58:d6: 8e:7f:8a:4d:70:c3:81:84:db:42:6d:30:6c:55:07: c6:04:d3:0f:5d:2a:d0:97:73:07:a0:72:c2:b5:29: 8b:2e:a5:e0:1f:36:e3:69:23:42:39:dc:e0:38:50: b8:29:cc:c5:e8:00:65:2d:85:3d:a7:d0:5b:01:c3: d7:b2:22:56:ae:db:80:58:8b:ec:1b:1a:19:52:23: 61:23:e0:54:d2:b1:f7:7e:0d:f1:79:bf:34:1c:33: ae:61:d0:30:0d:67:88:04:19:9f:3c:2d:f1:a6:8c: 0c:dd:2e:f2:c5:4b:b0:80:d3:12:bc:99:37:81:04: fc:3b:2a:e4:06:3d:fb:ff:a8:cd:6e:32:fc:29:e4: a5:6e:fb:b4:a4:5a:0f:fa:48:7e:59:fa:87:76:94: 6d:09:d1:dc:fd:cb:52:17:ee:d9:d4:c3:20:ba:7c: 19:57:49:7c:ad:5b:a4:d2:49:03:74:81:98:c8:87: f6:9b:c6:9f:d1:e8:c5:28:61:1b:1f:cb:ec:fc:6d: 7b:e8:89:72:95:6c:4e:cc:ca:cd:90:b1:34:6b:ab: 59:89:24:fb:0b:6d:fb:d5:28:a0:57:ff:60:49:27: 2b:b8:7d:f5:f4:a6:26:4b:76:20:54:e8:a1:8d:d3: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2E:96:9E:3C:68:53:E4:D9:83:88:7E:EE:0C:84:D3:67:75:98:2D X509v3 Authority Key Identifier: keyid:3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:38:27:b0:42:8a:8b:22:85:6e:fd:02:37:af:92:b9:4b:a8: 57:d5:93:34:c4:6e:ab:93:f1:9a:09:c9:95:68:a4:02:04:21: 3e:09:d4:a5:dc:3c:5b:f0:80:91:9a:9c:77:28:8c:1d:c8:97: 69:1e:92:8d:aa:a0:2a:b9:aa:c0:53:0b:54:db:83:6d:7f:7d: 8f:23:87:63:d2:9c:71:88:73:61:ce:ee:b6:ba:de:6e:bb:4a: 6d:72:15:4c:6e:61:88:6a:76:8f:4f:e4:8c:dd:e1:6c:c6:c9: 50:f3:8d:01:36:cb:82:44:bb:aa:61:74:d6:47:32:8e:b8:08: 20:45:71:15:75:ea:c9:db:cb:a2:5d:b9:cc:9a:9e:d9:96:50: 80:77:99:45:3a:52:8d:23:ca:77:38:e9:f8:da:e3:18:d5:9d: 1c:2d:b9:6e:08:ba:be:f4:87:27:ee:b7:40:1f:92:66:a4:a4: d1:b5:d9:2c:40:4e:e9:6c:7f:df:0e:0c:f3:b1:78:5c:7d:97: 73:93:79:68:8a:e8:a1:f1:ac:7b:9d:12:8c:19:85:d4:d5:8e: f4:d0:44:4e:bc:a2:9c:47:18:ac:34:28:70:d8:b3:4d:69:d5: b4:cd:95:5d:02:21:86:27:f5:64:09:b9:37:27:ce:60:4d:bc: c9:9d:6a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGszL1MYTUvMELr6N/dMTRlcGnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0 NzIxREI0NzAeFw0yNjAxMzEwNDU2NDBaFw0yNjAyMDMxMTEzNDBaMDMxMTAvBgNV BAMTKEZEMkU5NjlFM0M2ODUzRTREOTgzODg3RUVFMEM4NEQzNjc3NTk4MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym1ebWrqvQegy02ZY1o5/ik1w w4GE20JtMGxVB8YE0w9dKtCXcwegcsK1KYsupeAfNuNpI0I53OA4ULgpzMXoAGUt hT2n0FsBw9eyIlau24BYi+wbGhlSI2Ej4FTSsfd+DfF5vzQcM65h0DANZ4gEGZ88 LfGmjAzdLvLFS7CA0xK8mTeBBPw7KuQGPfv/qM1uMvwp5KVu+7SkWg/6SH5Z+od2 lG0J0dz9y1IX7tnUwyC6fBlXSXytW6TSSQN0gZjIh/abxp/R6MUoYRsfy+z8bXvo iXKVbE7Mys2QsTRrq1mJJPsLbfvVKKBX/2BJJyu4ffX0piZLdiBU6KGN0+9JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/S6WnjxoU+TZg4h+7gyE02d1mC0wHwYDVR0j BBgwFoAUOgnPMuxPbVxP0sg3oRdO00ch20cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMC8zQTA5Q0YzMkVD NEY2RDVDNEZEMkM4MzdBMTE3NEVEMzQ3MjFEQjQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRFRDM0NzIx REI0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDllZTIwOWEtMTE5My00ZDZmLTlk YmUtODc3N2JiODk4MGFhLzAvM0EwOUNGMzJFQzRGNkQ1QzRGRDJDODM3QTExNzRF RDM0NzIxREI0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQ4J7BCiosihW79AjevkrlLqFfVkzTEbquT 8ZoJyZVopAIEIT4J1KXcPFvwgJGanHcojB3Il2keko2qoCq5qsBTC1Tbg21/fY8j h2PSnHGIc2HO7ra63m67Sm1yFUxuYYhqdo9P5Izd4WzGyVDzjQE2y4JEu6phdNZH Mo64CCBFcRV16snby6JducyantmWUIB3mUU6Uo0jync46fja4xjVnRwtuW4Iur70 hyfut0AfkmakpNG12SxATulsf98ODPOxeFx9l3OTeWiK6KHxrHudEowZhdTVjvTQ RE68opxHGKw0KHDYs01p1bTNlV0CIYYn9WQJuTcnzmBNvMmdamw= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:08 2026 by rpki-client