This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft File: 34D127CE360B682CEC5998F9625C80D9C841DF3A.mft (raw, json) Hash identifier: gYedRqRTyfNOPfUAbd6KTjjBbdSaxe539RDBnzVIgO0= Subject key identifier: 95:7E:7C:89:5B:2D:8D:6F:4C:7F:36:46:B7:A5:9E:EC:C0:56:10:30 Authority key identifier: 34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A Certificate issuer: /CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Certificate serial: 17FFF213CFAACA51FD259439BA1A5FF26836D83B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft Manifest number: 0374 Signing time: Sat 31 Jan 2026 16:41:49 +0000 Manifest this update: Sat 31 Jan 2026 16:36:49 +0000 Manifest next update: Tue 03 Feb 2026 22:54:49 +0000 Files and hashes: 1: 323030313a6466303a386438303a3a2f34382d3438203d3e20313338393031.roa (hash: a3kFS1oWoqOKQ9pWCt27hqM+zPQA7qWPWdNpInoEdZg=) 2: 3130332e3133392e3138382e302f32332d3234203d3e20313338393031.roa (hash: sJvm9ZR9ZOVubZoa7Ap8enSsEwTTCatFlTVTVwgPW+k=) 3: 3130332e3133392e3138382e302f32332d3233203d3e20313338393031.roa (hash: vFkMCL/cjWQLJmOKn5KhnpFSkn7CbbeUlP5i2b/rVK0=) 4: 34D127CE360B682CEC5998F9625C80D9C841DF3A.crl (hash: h2bILrwBJCovSiWnWGagkKpckBztYc/8Zrd36vNl6+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ff:f2:13:cf:aa:ca:51:fd:25:94:39:ba:1a:5f:f2:68:36:d8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34D127CE360B682CEC5998F9625C80D9C841DF3A Validity Not Before: Jan 31 16:36:49 2026 GMT Not After : Feb 3 22:54:49 2026 GMT Subject: CN=957E7C895B2D8D6F4C7F3646B7A59EECC0561030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:f9:aa:06:96:c9:c4:5a:4b:92:57:51:82: f5:b6:62:cf:01:19:89:35:22:69:5d:40:88:60:7c: ad:7e:3a:8c:0e:89:be:cb:75:08:6e:e9:06:fa:26: c0:ed:10:30:a8:51:af:c0:11:e9:5c:3b:84:b3:28: ba:28:ac:ce:6e:1e:a3:5d:b3:32:27:e8:a7:d6:f7: 5f:b3:36:da:b9:1e:42:8c:ab:5e:ec:5e:84:8f:4d: 4f:a4:72:c6:3f:b1:79:a0:b4:59:9d:45:1e:e1:7e: b4:60:31:ce:2c:2c:75:e5:5b:c6:d7:46:75:0d:63: 39:0d:ee:59:9b:9b:a6:97:9b:1b:b5:06:6d:89:e6: 2e:1c:5c:b5:af:17:32:3c:f8:32:6a:80:dd:9f:99: 33:25:a0:53:6d:43:60:4a:f4:eb:13:c9:e7:dc:df: bf:60:37:b2:a8:72:80:e7:1a:ac:49:9d:5f:0a:e0: d4:98:16:42:94:c4:d8:81:c0:d8:b1:c1:40:66:85: 94:46:86:e7:dc:3a:d7:f6:5b:c1:1f:f3:54:5f:d2: 64:03:78:ac:88:55:2a:e7:f2:0f:3c:7d:e3:04:b7: 08:39:ac:ed:4a:b6:3c:5d:a5:56:9e:93:14:81:34: 78:c1:fc:bc:3a:87:1a:c7:cb:b6:42:17:ff:0c:89: 6b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7E:7C:89:5B:2D:8D:6F:4C:7F:36:46:B7:A5:9E:EC:C0:56:10:30 X509v3 Authority Key Identifier: keyid:34:D1:27:CE:36:0B:68:2C:EC:59:98:F9:62:5C:80:D9:C8:41:DF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34D127CE360B682CEC5998F9625C80D9C841DF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb799068-4ec8-4c36-8fa7-3e72aebceeb8/0/34D127CE360B682CEC5998F9625C80D9C841DF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c2:c5:db:84:23:f1:b4:51:d1:40:58:17:42:15:39:f5:58: 3b:91:06:db:b2:52:95:c5:b5:a3:e8:90:fc:bb:28:b0:3b:0d: dc:fb:9d:6a:74:1b:a8:26:58:df:d0:5f:aa:ce:56:ab:01:c8: 3d:5f:45:54:c0:1f:58:62:15:05:01:9d:3d:86:31:22:33:d4: 16:01:ae:5c:c7:6c:2d:a3:c1:02:f6:02:75:21:f1:02:b5:7a: c5:22:21:b3:be:65:29:18:9d:b7:8e:f3:e3:17:f2:16:9a:bf: b9:6c:4c:0b:94:46:83:62:6f:7a:71:cf:bb:4a:c7:d3:c1:4d: b6:72:06:3d:2b:19:c4:86:a1:e3:1c:e7:7f:04:ab:65:17:07: 7e:07:eb:c7:38:18:f3:18:c9:c6:3f:e8:d9:5b:6e:dc:88:9d: 26:0e:13:a3:a0:8a:45:a2:38:7b:91:b4:0a:cb:ff:08:77:78: a8:38:d4:a0:e6:46:1b:56:72:ee:84:ef:69:30:2a:71:6c:0e: c0:8e:d2:88:ed:90:1c:96:1e:8c:d8:ef:d7:a5:17:9b:e9:49: a0:33:72:57:19:7f:93:54:a6:17:7a:73:ba:7b:73:5f:db:1a: 67:ff:a8:10:02:94:c1:44:fc:da:f6:09:94:f5:b5:7c:32:93: 94:95:de:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF//yE8+qylH9JZQ5uhpf8mg22DswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlD ODQxREYzQTAeFw0yNjAxMzExNjM2NDlaFw0yNjAyMDMyMjU0NDlaMDMxMTAvBgNV BAMTKDk1N0U3Qzg5NUIyRDhENkY0QzdGMzY0NkI3QTU5RUVDQzA1NjEwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbfmqBpbJxFpLkldRgvW2Ys8B GYk1ImldQIhgfK1+OowOib7LdQhu6Qb6JsDtEDCoUa/AEelcO4SzKLoorM5uHqNd szIn6KfW91+zNtq5HkKMq17sXoSPTU+kcsY/sXmgtFmdRR7hfrRgMc4sLHXlW8bX RnUNYzkN7lmbm6aXmxu1Bm2J5i4cXLWvFzI8+DJqgN2fmTMloFNtQ2BK9OsTyefc 379gN7KocoDnGqxJnV8K4NSYFkKUxNiBwNixwUBmhZRGhufcOtf2W8Ef81Rf0mQD eKyIVSrn8g88feMEtwg5rO1KtjxdpVaekxSBNHjB/Lw6hxrHy7ZCF/8MiWvVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlX58iVstjW9MfzZGt6We7MBWEDAwHwYDVR0j BBgwFoAUNNEnzjYLaCzsWZj5YlyA2chB3zowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yjc5OTA2OC00ZWM4LTRjMzYtOGZhNy0zZTcyYWViY2VlYjgvMC8zNEQxMjdDRTM2 MEI2ODJDRUM1OTk4Rjk2MjVDODBEOUM4NDFERjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1QzgwRDlDODQx REYzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI3OTkwNjgtNGVjOC00YzM2LThm YTctM2U3MmFlYmNlZWI4LzAvMzREMTI3Q0UzNjBCNjgyQ0VDNTk5OEY5NjI1Qzgw RDlDODQxREYzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPCxduEI/G0UdFAWBdCFTn1WDuRBtuyUpXF taPokPy7KLA7Ddz7nWp0G6gmWN/QX6rOVqsByD1fRVTAH1hiFQUBnT2GMSIz1BYB rlzHbC2jwQL2AnUh8QK1esUiIbO+ZSkYnbeO8+MX8haav7lsTAuURoNib3pxz7tK x9PBTbZyBj0rGcSGoeMc538Eq2UXB34H68c4GPMYycY/6NlbbtyInSYOE6OgikWi OHuRtArL/wh3eKg41KDmRhtWcu6E72kwKnFsDsCO0ojtkByWHozY79elF5vpSaAz clcZf5NUphd6c7p7c1/bGmf/qBAClMFE/Nr2CZT1tXwyk5SV3gM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:09 2026 by rpki-client