This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: 3ntjQOFc7svLXj3fjjMpZgwaTfTHjB0h1fC8zzamD1M= Subject key identifier: 40:A9:BD:3E:3A:EE:5A:27:37:98:95:02:64:D8:D3:99:11:7E:05:51 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 798A7446A69AEB4D17FE2C0A49A411DFE280A3FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 0203 Signing time: Sat 24 Jan 2026 02:50:48 +0000 Manifest this update: Sat 24 Jan 2026 02:45:48 +0000 Manifest next update: Tue 27 Jan 2026 14:19:48 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: tEawRgrsSOeFKvm9j0gMam+Y5nUbS/rLccSqOpQ/tOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8a:74:46:a6:9a:eb:4d:17:fe:2c:0a:49:a4:11:df:e2:80:a3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Jan 24 02:45:48 2026 GMT Not After : Jan 27 14:19:48 2026 GMT Subject: CN=40A9BD3E3AEE5A273798950264D8D399117E0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:28:ec:18:e2:a6:85:24:3e:b3:26:05:96:c4: 53:72:73:6f:b4:d1:d1:63:28:dc:07:8b:2c:48:75: b1:c9:22:9c:95:09:6f:3f:69:5c:db:a7:17:50:80: 21:98:14:5f:61:d5:40:71:59:a6:7c:7d:53:0b:13: d8:ea:3d:0f:90:47:cc:ed:e4:76:2c:74:f2:d9:63: 54:ed:a4:4d:56:86:7c:94:cd:61:e6:78:0c:21:00: 30:9d:e6:d7:ab:33:6c:a0:15:15:04:48:d3:9e:f6: b5:a2:56:8a:8a:ea:49:fe:cb:67:26:9c:74:e8:25: f7:35:b2:e0:85:05:a1:fc:82:30:8a:6f:7b:6c:98: f4:72:a8:7e:3c:c7:a8:87:65:6c:65:85:9a:0b:67: 51:6f:30:f0:c1:c9:84:cd:cc:be:97:47:67:dd:6a: ee:38:9b:a4:ce:12:1b:27:a5:e5:c9:7e:2d:86:99: bf:6c:10:fa:dd:34:6e:3c:da:42:36:f9:0f:bd:60: 75:6d:92:66:94:d1:90:1e:72:f2:53:1f:6e:5b:ad: 9e:73:e3:69:fa:9c:af:44:6b:4d:c9:ab:9c:e9:3e: 54:03:09:a1:b0:28:0c:68:dc:10:94:53:94:7b:74: 56:e6:38:34:6b:b5:32:5f:d8:3a:b4:04:64:e3:0f: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A9:BD:3E:3A:EE:5A:27:37:98:95:02:64:D8:D3:99:11:7E:05:51 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:72:06:13:cd:52:98:38:a1:0a:5d:ce:d5:b0:6f:03:68:e3: a0:bd:de:43:25:0c:b4:71:80:50:2a:4b:05:02:d8:2b:80:f3: 17:44:6e:40:ff:c6:5a:ef:46:39:14:e0:b6:8c:00:7f:5a:52: d5:f8:ec:0c:75:36:0a:58:97:d8:e0:05:de:be:51:17:e3:50: 42:73:ff:7f:80:df:09:6e:65:9f:63:88:4f:e9:21:11:84:25: b8:dd:bf:0e:c3:dc:1a:5e:fd:de:7f:d1:1a:6c:fd:fe:87:14: 28:45:7a:08:54:66:b4:ec:2c:97:67:1d:3f:34:bb:31:1e:27: 97:92:bf:ac:3e:4f:9e:0a:d5:2f:90:30:17:04:9f:d2:db:f9: 6b:8e:a4:5b:bd:90:ef:3e:ef:b1:a9:73:02:70:30:e9:13:3b: c2:84:74:94:86:ed:b6:e9:b1:80:cd:38:e1:37:9d:97:a3:53: aa:22:84:97:c3:53:23:16:1c:c4:c0:ba:62:6d:72:68:d7:a4: d1:55:b9:f4:86:e3:48:ed:1e:0f:3a:fc:dc:8d:17:70:1f:50: fa:f8:36:d7:00:dc:53:59:c7:78:ad:78:4b:a7:85:b9:cb:4e: 0a:02:56:3c:d3:0d:34:e8:89:26:bc:94:98:6e:f1:db:36:c2: bb:5d:c4:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYp0Rqaa600X/iwKSaQR3+KAo/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNjAxMjQwMjQ1NDhaFw0yNjAxMjcxNDE5NDhaMDMxMTAvBgNV BAMTKDQwQTlCRDNFM0FFRTVBMjczNzk4OTUwMjY0RDhEMzk5MTE3RTA1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiKOwY4qaFJD6zJgWWxFNyc2+0 0dFjKNwHiyxIdbHJIpyVCW8/aVzbpxdQgCGYFF9h1UBxWaZ8fVMLE9jqPQ+QR8zt 5HYsdPLZY1TtpE1WhnyUzWHmeAwhADCd5terM2ygFRUESNOe9rWiVoqK6kn+y2cm nHToJfc1suCFBaH8gjCKb3tsmPRyqH48x6iHZWxlhZoLZ1FvMPDByYTNzL6XR2fd au44m6TOEhsnpeXJfi2Gmb9sEPrdNG482kI2+Q+9YHVtkmaU0ZAecvJTH25brZ5z 42n6nK9Ea03Jq5zpPlQDCaGwKAxo3BCUU5R7dFbmODRrtTJf2Dq0BGTjDxI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKm9PjruWic3mJUCZNjTmRF+BVEwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRyBhPNUpg4oQpdztWwbwNo46C93kMlDLRx gFAqSwUC2CuA8xdEbkD/xlrvRjkU4LaMAH9aUtX47Ax1NgpYl9jgBd6+URfjUEJz /3+A3wluZZ9jiE/pIRGEJbjdvw7D3Bpe/d5/0Rps/f6HFChFeghUZrTsLJdnHT80 uzEeJ5eSv6w+T54K1S+QMBcEn9Lb+WuOpFu9kO8+77GpcwJwMOkTO8KEdJSG7bbp sYDNOOE3nZejU6oihJfDUyMWHMTAumJtcmjXpNFVufSG40jtHg86/NyNF3AfUPr4 NtcA3FNZx3iteEunhbnLTgoCVjzTDTToiSa8lJhu8ds2wrtdxDs= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:58 2026 by rpki-client