This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: 50rCuPgfGtl+GPMcTC9/5hwgsDFv1q7WuKXCELy5Kd4= Subject key identifier: 71:CA:93:72:B2:9D:D6:74:30:F3:84:75:5C:F3:8C:9D:F5:2E:3C:17 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 0B72EBBF5E031758022B9DCF23F762BBE492A078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01ED Signing time: Thu 04 Dec 2025 21:20:44 +0000 Manifest this update: Thu 04 Dec 2025 21:15:44 +0000 Manifest next update: Mon 08 Dec 2025 08:34:44 +0000 Files and hashes: 1: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: noXeHgjPsmVJI+bhDRC2k+x72vI+AyQrcvaZpx8EeJ8=) 2: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:72:eb:bf:5e:03:17:58:02:2b:9d:cf:23:f7:62:bb:e4:92:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Dec 4 21:15:44 2025 GMT Not After : Dec 8 08:34:44 2025 GMT Subject: CN=71CA9372B29DD67430F384755CF38C9DF52E3C17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:98:45:39:d1:27:5d:ae:b7:a9:a7:33:68:88: 05:3a:e7:fc:32:b1:29:ee:4e:e7:5b:8d:68:98:68: dc:e9:bd:d2:f7:1c:56:2a:83:a4:ad:9f:b1:0c:63: 8a:99:63:a7:97:59:c2:42:f6:cf:60:5f:41:7a:90: 5a:38:b7:d5:80:2b:a4:7f:ce:b3:bc:e9:15:c8:f1: 45:72:c0:5e:52:44:fa:9c:3b:3c:24:ce:18:9d:96: 8d:8a:d1:47:0d:da:a7:e6:c3:d6:79:ac:b1:81:d3: 62:da:07:47:55:00:6f:53:11:7a:70:ed:08:19:c3: c8:b7:ea:26:98:80:27:ae:1a:3c:f3:af:6f:48:7e: e1:84:71:4e:d0:8a:aa:91:2e:10:13:32:1c:80:71: bf:4b:de:4d:c0:90:d9:0b:15:0c:6d:87:25:93:62: f9:75:ee:00:65:21:3a:47:a6:f7:33:55:ce:3d:fa: c1:b7:c3:6f:4d:d3:1f:61:42:b1:07:92:40:d0:a5: ef:0e:a6:dd:88:09:44:79:74:68:eb:42:5a:f0:88: 03:49:89:cd:6f:e8:26:a1:93:65:ec:ca:d1:b8:93: 77:b6:9b:22:33:40:ce:bf:03:7c:6b:01:7e:c4:0b: 8a:a5:39:fb:79:01:38:c6:20:e3:4a:53:92:4c:1e: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CA:93:72:B2:9D:D6:74:30:F3:84:75:5C:F3:8C:9D:F5:2E:3C:17 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:cf:cc:5e:59:ad:b0:6c:82:e6:e8:11:7e:da:8a:82:a9:0e: fa:bc:d2:5d:e5:44:40:d2:cc:22:c0:7d:10:85:f0:84:0f:ca: cd:f9:93:72:8d:a9:db:67:30:9d:cb:50:7f:1e:25:c4:23:50: 1b:ee:9c:24:80:e2:fb:60:54:ed:a2:b9:07:2a:bb:51:1e:2d: 68:cd:b4:be:0c:6e:39:11:f0:de:9b:fc:37:be:5b:b6:bb:f4: af:79:52:a5:89:67:35:a9:93:d5:fe:45:ba:7e:1f:70:67:1d: 66:dd:a0:0e:7a:8f:f7:c3:46:ef:db:d9:d9:d5:fa:0b:ad:d3: 7d:c9:99:e3:84:31:cd:04:69:5f:06:98:87:8a:46:1a:db:8e: e8:a8:56:b0:27:a1:2e:14:25:b2:13:18:05:85:01:a4:7c:c8: 79:0e:98:ac:cd:65:ab:af:2a:bc:64:cc:50:c2:2f:06:06:97: ec:c8:10:33:c8:a9:d3:74:29:9e:77:76:cc:c0:f9:e3:20:f9: d2:b9:cf:3f:b1:15:fa:58:dc:1d:3a:09:f2:31:21:b4:23:f8: cb:cd:79:8e:ac:9b:8a:96:6f:8c:18:de:38:ca:b3:1d:7f:71: 77:a7:e1:68:eb:00:ec:89:d7:2e:1b:fd:d4:9a:5c:05:6e:1f: bd:27:67:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3Lrv14DF1gCK53PI/diu+SSoHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTEyMDQyMTE1NDRaFw0yNTEyMDgwODM0NDRaMDMxMTAvBgNV BAMTKDcxQ0E5MzcyQjI5REQ2NzQzMEYzODQ3NTVDRjM4QzlERjUyRTNDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmEU50SddrreppzNoiAU65/wy sSnuTudbjWiYaNzpvdL3HFYqg6Stn7EMY4qZY6eXWcJC9s9gX0F6kFo4t9WAK6R/ zrO86RXI8UVywF5SRPqcOzwkzhidlo2K0UcN2qfmw9Z5rLGB02LaB0dVAG9TEXpw 7QgZw8i36iaYgCeuGjzzr29IfuGEcU7QiqqRLhATMhyAcb9L3k3AkNkLFQxthyWT Yvl17gBlITpHpvczVc49+sG3w29N0x9hQrEHkkDQpe8Opt2ICUR5dGjrQlrwiANJ ic1v6Cahk2XsytG4k3e2myIzQM6/A3xrAX7EC4qlOft5ATjGIONKU5JMHukzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUccqTcrKd1nQw84R1XPOMnfUuPBcwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDPzF5ZrbBsguboEX7aioKpDvq80l3lREDS zCLAfRCF8IQPys35k3KNqdtnMJ3LUH8eJcQjUBvunCSA4vtgVO2iuQcqu1EeLWjN tL4MbjkR8N6b/De+W7a79K95UqWJZzWpk9X+Rbp+H3BnHWbdoA56j/fDRu/b2dnV +gut033JmeOEMc0EaV8GmIeKRhrbjuioVrAnoS4UJbITGAWFAaR8yHkOmKzNZauv KrxkzFDCLwYGl+zIEDPIqdN0KZ53dszA+eMg+dK5zz+xFfpY3B06CfIxIbQj+MvN eY6sm4qWb4wY3jjKsx1/cXen4WjrAOyJ1y4b/dSaXAVuH70nZ8o= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:15 2025 by rpki-client