This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft File: 3BB7346C991B689223BADC6F82DD19BE3B017704.mft (raw, json) Hash identifier: IcDeo+36KPuwikOeiKborNBvwFtJ7SPdIsDP5pjhlWQ= Subject key identifier: 8C:8D:56:88:A7:5B:C7:CD:16:8D:33:4D:4D:9D:E7:9A:45:C4:29:DB Authority key identifier: 3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 Certificate issuer: /CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Certificate serial: 76DF155C4A44DB283D2373A68F1030A9A566CCD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft Manifest number: 041C Signing time: Tue 20 Jan 2026 18:20:45 +0000 Manifest this update: Tue 20 Jan 2026 18:15:45 +0000 Manifest next update: Sat 24 Jan 2026 01:21:45 +0000 Files and hashes: 1: 323430343a326338303a3a2f33322d3438203d3e20313334363433.roa (hash: 9IhGsQ54tY2/cR1q0Xs6zMzTt5FF9c1oVfoMV5wVdC8=) 2: 3130332e3230372e39362e302f32322d3234203d3e20313430343730.roa (hash: LlPhblyPcezHXhcFqA+CZXrxHEMGvdt9TGaJB5yD+gY=) 3: 3BB7346C991B689223BADC6F82DD19BE3B017704.crl (hash: 5XWAZlMKTiSMl1OIvtkBzaXYtcJ3NXSjXrgiEW6PRmc=) 4: 3130332e3230372e39362e302f32322d3234203d3e20313334363433.roa (hash: lHTn8z38a4raxygkZHiK5olLO1hmwWy67YSOaXSHPY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Jan 2026 01:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:df:15:5c:4a:44:db:28:3d:23:73:a6:8f:10:30:a9:a5:66:cc:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BB7346C991B689223BADC6F82DD19BE3B017704 Validity Not Before: Jan 20 18:15:45 2026 GMT Not After : Jan 24 01:21:45 2026 GMT Subject: CN=8C8D5688A75BC7CD168D334D4D9DE79A45C429DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:fe:e8:a2:09:a7:53:cd:6b:2c:8d:6a:96: 69:c9:72:e7:35:45:c5:49:b2:42:f4:60:01:bb:ce: a3:b9:2e:9a:15:0f:7f:17:c7:5a:83:3c:13:38:3e: 8c:e6:72:11:b6:02:49:3a:68:78:f2:c9:08:7a:77: fe:88:9b:44:91:d5:b7:29:6c:3b:3a:2e:ab:85:af: 77:96:24:0f:91:85:0e:d8:52:99:fc:05:bc:c4:0c: 25:4d:fa:9e:35:3a:da:1f:d4:a6:7b:26:bb:35:6f: 78:10:b3:e0:6b:db:00:a3:1b:4f:35:fa:1c:5d:97: 17:6c:ba:5d:21:f6:5e:59:ad:6d:bd:8a:e9:f4:8b: e1:11:7e:f3:b9:81:8c:b9:56:e8:16:68:54:84:ea: 52:6e:a5:29:a4:6e:64:ff:03:b2:9b:22:01:ce:2b: 62:da:82:7c:3d:ae:ea:ec:f2:8e:54:79:8d:68:de: e4:ac:40:de:74:b6:ce:93:30:2b:3c:ae:63:9b:7c: 4a:a2:84:55:00:86:92:4f:0e:b7:85:48:68:0f:a6: a0:5f:cd:44:c6:19:ab:2d:d7:0d:a3:5d:dc:d0:ff: 84:34:f4:75:44:18:ad:fc:6e:f6:18:d2:f0:27:0d: 22:c9:8d:6b:c3:43:9b:05:23:e7:06:62:2e:28:bd: 71:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:56:88:A7:5B:C7:CD:16:8D:33:4D:4D:9D:E7:9A:45:C4:29:DB X509v3 Authority Key Identifier: keyid:3B:B7:34:6C:99:1B:68:92:23:BA:DC:6F:82:DD:19:BE:3B:01:77:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BB7346C991B689223BADC6F82DD19BE3B017704.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f26e4564-48f2-43b5-8505-93b498e7d8ab/0/3BB7346C991B689223BADC6F82DD19BE3B017704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7b:7e:78:02:d7:43:61:e4:1a:d8:2f:6f:4d:f0:ee:56:39: 3a:32:e5:8c:f1:2c:82:5b:d6:5a:9c:19:85:09:ce:90:b8:95: 25:11:0f:84:93:95:00:ce:62:2d:9d:87:da:6c:72:4c:93:bd: 1c:b6:77:6b:66:eb:1d:e1:04:96:f0:4d:60:b7:f3:0e:82:1e: e5:f1:44:c6:98:6e:24:39:1c:a4:13:c5:e2:32:7b:c7:e1:10: 06:7b:06:3c:19:21:c1:8d:9d:23:a7:42:48:81:9c:08:32:07: a1:e6:c0:46:71:fd:3e:a9:f1:55:b3:f2:69:52:d2:6f:f0:74: a4:81:ad:32:ea:0d:ea:2d:18:30:11:cd:55:03:66:c1:aa:47: 29:89:1f:25:80:e5:5b:60:05:71:7d:ed:83:2d:5e:f2:38:de: 44:04:66:9c:ba:db:42:32:21:59:df:4e:55:fd:7b:a4:88:90: 9e:76:bb:23:b1:d6:07:e3:84:1e:8f:8d:09:e8:35:c5:69:aa: ee:70:e3:98:5b:fb:0c:aa:52:7a:28:55:d6:22:87:a9:c9:ea: c8:f9:ff:cc:fb:4a:cc:79:95:54:ba:ba:eb:4a:a2:46:e5:e7: c0:c7:d2:52:08:f4:2a:7c:86:09:4b:d1:b7:65:be:e8:d9:52: 48:2c:13:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdt8VXEpE2yg9I3OmjxAwqaVmzNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUz QjAxNzcwNDAeFw0yNjAxMjAxODE1NDVaFw0yNjAxMjQwMTIxNDVaMDMxMTAvBgNV BAMTKDhDOEQ1Njg4QTc1QkM3Q0QxNjhEMzM0RDREOURFNzlBNDVDNDI5REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56/7oogmnU81rLI1qlmnJcuc1 RcVJskL0YAG7zqO5LpoVD38Xx1qDPBM4PozmchG2Akk6aHjyyQh6d/6Im0SR1bcp bDs6LquFr3eWJA+RhQ7YUpn8BbzEDCVN+p41Otof1KZ7Jrs1b3gQs+Br2wCjG081 +hxdlxdsul0h9l5ZrW29iun0i+ERfvO5gYy5VugWaFSE6lJupSmkbmT/A7KbIgHO K2Lagnw9rurs8o5UeY1o3uSsQN50ts6TMCs8rmObfEqihFUAhpJPDreFSGgPpqBf zUTGGast1w2jXdzQ/4Q09HVEGK38bvYY0vAnDSLJjWvDQ5sFI+cGYi4ovXFvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjI1WiKdbx80WjTNNTZ3nmkXEKdswHwYDVR0j BBgwFoAUO7c0bJkbaJIjutxvgt0ZvjsBdwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjZlNDU2NC00OGYyLTQzYjUtODUwNS05M2I0OThlN2Q4YWIvMC8zQkI3MzQ2Qzk5 MUI2ODkyMjNCQURDNkY4MkREMTlCRTNCMDE3NzA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5QkUzQjAx NzcwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjI2ZTQ1NjQtNDhmMi00M2I1LTg1 MDUtOTNiNDk4ZTdkOGFiLzAvM0JCNzM0NkM5OTFCNjg5MjIzQkFEQzZGODJERDE5 QkUzQjAxNzcwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACh7fngC10Nh5BrYL29N8O5WOToy5YzxLIJb 1lqcGYUJzpC4lSURD4STlQDOYi2dh9psckyTvRy2d2tm6x3hBJbwTWC38w6CHuXx RMaYbiQ5HKQTxeIye8fhEAZ7BjwZIcGNnSOnQkiBnAgyB6HmwEZx/T6p8VWz8mlS 0m/wdKSBrTLqDeotGDARzVUDZsGqRymJHyWA5VtgBXF97YMtXvI43kQEZpy620Iy IVnfTlX9e6SIkJ52uyOx1gfjhB6PjQnoNcVpqu5w45hb+wyqUnooVdYih6nJ6sj5 /8z7Ssx5lVS6uutKokbl58DH0lII9Cp8hglL0bdlvujZUkgsE70= -----END CERTIFICATE-----Generated at Wed Jan 21 17:55:55 2026 by rpki-client