This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: vDQwjXcrrhqT9TomTgKYZzd7oSrVTQ5QdETbBrokHhY= Subject key identifier: 85:48:A8:62:2E:DC:F3:FD:8C:53:B3:10:17:73:8E:51:AF:9A:CE:30 Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 72E1C5B506F4C1824AE29819E86E28FEAF2C3B1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 01D0 Signing time: Fri 05 Dec 2025 11:11:45 +0000 Manifest this update: Fri 05 Dec 2025 11:06:45 +0000 Manifest next update: Mon 08 Dec 2025 17:34:45 +0000 Files and hashes: 1: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: FhfZvyawKbvRW+uuoNejlOLQR3u0fbDAIuzsdskRHFA=) 2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=) 3: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=) 4: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=) 5: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:e1:c5:b5:06:f4:c1:82:4a:e2:98:19:e8:6e:28:fe:af:2c:3b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Dec 5 11:06:45 2025 GMT Not After : Dec 8 17:34:45 2025 GMT Subject: CN=8548A8622EDCF3FD8C53B31017738E51AF9ACE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:42:2f:e7:05:16:89:bb:ce:6d:c6:45:ef: dd:69:05:46:24:41:1a:03:6f:a2:93:88:50:7e:bb: c7:f8:f2:f2:1f:eb:72:75:9f:08:1f:07:16:ce:39: 30:a2:0c:f2:5f:91:c9:68:60:a6:09:5a:a6:cc:c0: b2:4d:ca:32:7a:f5:c0:b4:79:d7:77:2c:61:6a:40: 8d:89:00:ef:a9:42:de:ac:26:43:06:cd:86:a7:ce: 53:c0:6c:10:9e:11:7f:bb:d6:35:6f:50:16:d3:14: 86:42:81:93:79:a4:74:c3:5a:d6:52:fb:28:d0:0e: 18:ef:37:aa:0b:de:93:c9:fc:28:c6:07:2b:e7:f0: e7:e6:11:70:d4:ce:2a:63:bb:e4:05:f0:8e:91:b0: a7:fc:7c:bc:99:2e:47:7e:37:a2:8b:47:97:15:40: 26:00:e8:d1:f0:7c:72:be:74:3b:5e:a3:62:15:47: 11:c7:14:91:6d:9a:96:33:29:5d:6f:ce:7d:1a:d8: 1f:76:46:5c:10:c1:42:80:5c:b6:b7:99:49:eb:7c: 7a:9d:06:77:0b:44:0d:4f:24:ba:31:f2:38:84:68: f5:f8:94:06:02:27:a3:ca:08:f8:f4:78:f9:25:59: 0a:87:df:a9:b0:00:19:56:1c:67:a0:2b:3b:9a:47: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:48:A8:62:2E:DC:F3:FD:8C:53:B3:10:17:73:8E:51:AF:9A:CE:30 X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f3:4c:d1:83:96:1a:19:db:3b:e7:5e:98:1f:4e:21:25:0d: a8:ee:f6:3a:79:f2:32:da:b6:57:3c:e9:6e:06:26:9f:8d:54: d2:b1:f1:3a:1d:45:be:b8:91:7e:f0:19:85:86:cc:93:2b:0b: a8:0b:26:e5:39:58:13:dd:fa:a0:02:14:46:4a:61:dd:c0:63: 49:a6:6b:46:47:cb:e5:f5:e1:f0:ef:fd:de:56:d6:66:20:bb: f7:b6:a0:69:53:a3:84:1c:d2:8f:ae:0e:bb:ce:ce:d1:f0:43: 0c:cb:99:20:81:30:9c:4c:f5:15:cc:4b:62:ff:90:24:58:71: 14:77:e8:f5:e0:02:3c:04:98:a4:9c:78:78:d7:e0:2a:08:43: a5:96:e8:56:c0:9e:33:8f:f3:fb:51:7c:19:30:75:3d:f6:06: 43:df:82:37:86:24:2d:dd:27:38:ad:f4:ca:69:b8:9e:a4:93: 55:db:52:e4:64:15:54:23:75:a6:5c:c2:8c:bf:a3:c7:ad:85: 7f:df:62:de:3f:64:76:cb:48:93:23:5f:b5:12:58:14:a5:0b: 34:88:03:3e:cc:24:4e:63:41:ff:61:7f:92:fc:21:c7:dd:88: f1:bd:db:5e:1c:2e:67:13:94:f2:71:e9:01:c4:f9:aa:7a:1a: 17:50:ee:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuHFtQb0wYJK4pgZ6G4o/q8sOx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTEyMDUxMTA2NDVaFw0yNTEyMDgxNzM0NDVaMDMxMTAvBgNV BAMTKDg1NDhBODYyMkVEQ0YzRkQ4QzUzQjMxMDE3NzM4RTUxQUY5QUNFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFF0Iv5wUWibvObcZF791pBUYk QRoDb6KTiFB+u8f48vIf63J1nwgfBxbOOTCiDPJfkcloYKYJWqbMwLJNyjJ69cC0 edd3LGFqQI2JAO+pQt6sJkMGzYanzlPAbBCeEX+71jVvUBbTFIZCgZN5pHTDWtZS +yjQDhjvN6oL3pPJ/CjGByvn8OfmEXDUzipju+QF8I6RsKf8fLyZLkd+N6KLR5cV QCYA6NHwfHK+dDteo2IVRxHHFJFtmpYzKV1vzn0a2B92RlwQwUKAXLa3mUnrfHqd BncLRA1PJLox8jiEaPX4lAYCJ6PKCPj0ePklWQqH36mwABlWHGegKzuaR5KjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUioYi7c8/2MU7MQF3OOUa+azjAwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXzTNGDlhoZ2zvnXpgfTiElDaju9jp58jLa tlc86W4GJp+NVNKx8TodRb64kX7wGYWGzJMrC6gLJuU5WBPd+qACFEZKYd3AY0mm a0ZHy+X14fDv/d5W1mYgu/e2oGlTo4Qc0o+uDrvOztHwQwzLmSCBMJxM9RXMS2L/ kCRYcRR36PXgAjwEmKSceHjX4CoIQ6WW6FbAnjOP8/tRfBkwdT32BkPfgjeGJC3d Jzit9MppuJ6kk1XbUuRkFVQjdaZcwoy/o8ethX/fYt4/ZHbLSJMjX7USWBSlCzSI Az7MJE5jQf9hf5L8IcfdiPG9214cLmcTlPJx6QHE+ap6GhdQ7nU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:33 2025 by rpki-client