This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: jdMMkQEWqQP5ZrlO8v4ytO9t2Q+2/MwvYy+mXH3R4q0= Subject key identifier: 6E:42:CD:2A:79:82:F8:A8:A3:07:D3:8B:67:A3:80:C2:B7:58:EF:0B Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 70122DCE686FCD2EB2AD92F1976A4BCA370A1503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 028D Signing time: Fri 05 Dec 2025 02:01:43 +0000 Manifest this update: Fri 05 Dec 2025 01:56:43 +0000 Manifest next update: Mon 08 Dec 2025 10:15:43 +0000 Files and hashes: 1: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=) 2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) 3: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=) 4: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: RJwxv0jkLVfbK6R9/Vout7K5H0wRhHx8TxkZwaArnsc=) 5: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=) 6: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) 7: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) 8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=) 9: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:12:2d:ce:68:6f:cd:2e:b2:ad:92:f1:97:6a:4b:ca:37:0a:15:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Dec 5 01:56:43 2025 GMT Not After : Dec 8 10:15:43 2025 GMT Subject: CN=6E42CD2A7982F8A8A307D38B67A380C2B758EF0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bd:48:d3:37:6b:f5:84:d9:96:34:78:88:d5: 4d:8d:06:86:1e:b9:05:58:37:4b:16:fb:84:f0:48: 16:a6:3c:2f:17:f0:ea:be:3c:4b:e4:ac:b7:3d:e3: 41:6c:87:84:b8:9f:c8:61:6d:06:c0:a0:b9:c5:81: b6:5e:03:43:4d:b4:06:c6:f3:f7:9b:a8:e4:7d:9c: f1:13:51:bc:33:a2:d1:4a:3b:b7:b9:74:50:70:56: aa:6f:86:24:e7:17:f9:da:e2:28:74:18:5f:b9:a7: 2b:7b:55:59:8b:f7:17:24:d9:5a:74:4a:a9:e4:5c: a1:51:b3:36:58:8d:8d:0e:93:83:f1:9c:0a:e7:d7: 68:bd:46:a0:94:78:67:56:5c:70:2c:35:2d:2a:e7: a0:04:f2:2e:cb:91:c8:a3:59:d7:e7:4e:55:6d:d7: 66:08:f9:ef:e4:16:78:56:3d:69:00:63:b8:e8:2e: 3c:a5:c1:b5:e5:60:40:92:6c:1e:54:60:d2:5b:be: 7e:ab:01:b4:65:a7:57:95:c8:fa:70:02:1d:18:80: 61:61:f6:4e:d5:e9:aa:e1:1b:f8:39:c9:14:8e:d6: 17:e2:f8:8d:f9:36:ab:7b:59:72:2f:8b:c2:bf:a5: 9c:31:b8:b5:cb:9c:1f:3c:b8:3d:0c:59:6b:9f:9a: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:42:CD:2A:79:82:F8:A8:A3:07:D3:8B:67:A3:80:C2:B7:58:EF:0B X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d0:77:d8:c6:f0:fb:5a:0f:5e:8c:fb:1b:5d:09:e9:14:85: 57:d6:bb:f2:7e:ea:ca:fb:06:a9:1a:ef:ce:07:9a:1d:c1:a2: 09:39:8a:da:5b:6d:85:e7:61:6d:de:45:5b:38:6f:87:12:ad: 2d:da:f0:11:f6:97:74:07:e4:56:0d:c5:08:ba:d8:f5:ce:9f: 0f:4e:3a:4c:07:77:2c:83:5d:a2:ae:55:c8:dd:82:b0:70:9d: 07:94:ef:09:2a:16:3d:63:88:4f:29:73:0d:b1:55:e2:5f:9b: be:c6:b7:31:8e:97:ed:d3:80:f2:cb:c9:c5:ea:aa:b5:15:a8: 05:3a:71:eb:f1:ca:3e:2b:45:1a:3b:fd:cd:14:32:f8:09:be: 94:d9:7e:9d:20:99:c2:c7:1d:88:ec:3d:84:a8:c8:30:4a:ff: d9:c6:2a:6e:f6:e9:7c:f8:87:c1:65:4a:2b:33:dc:f3:25:40: 67:07:e0:e6:ca:46:d9:38:a5:fd:82:77:35:29:ea:ab:b3:f5: 9d:1e:c8:0c:ba:b8:68:e1:53:c5:06:2d:95:f3:a9:3f:10:44: 22:d9:f8:f5:73:47:2e:bb:c6:12:e8:73:d4:ce:2b:45:3f:45: 89:ba:28:a4:25:2d:72:04:e6:14:fa:69:7f:52:28:6e:c0:ec: 3d:f4:10:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBItzmhvzS6yrZLxl2pLyjcKFQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTEyMDUwMTU2NDNaFw0yNTEyMDgxMDE1NDNaMDMxMTAvBgNV BAMTKDZFNDJDRDJBNzk4MkY4QThBMzA3RDM4QjY3QTM4MEMyQjc1OEVGMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChvUjTN2v1hNmWNHiI1U2NBoYe uQVYN0sW+4TwSBamPC8X8Oq+PEvkrLc940Fsh4S4n8hhbQbAoLnFgbZeA0NNtAbG 8/ebqOR9nPETUbwzotFKO7e5dFBwVqpvhiTnF/na4ih0GF+5pyt7VVmL9xck2Vp0 SqnkXKFRszZYjY0Ok4PxnArn12i9RqCUeGdWXHAsNS0q56AE8i7LkcijWdfnTlVt 12YI+e/kFnhWPWkAY7joLjylwbXlYECSbB5UYNJbvn6rAbRlp1eVyPpwAh0YgGFh 9k7V6arhG/g5yRSO1hfi+I35Nqt7WXIvi8K/pZwxuLXLnB88uD0MWWufmhyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbkLNKnmC+KijB9OLZ6OAwrdY7wswHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALQd9jG8PtaD16M+xtdCekUhVfWu/J+6sr7 Bqka784Hmh3Bogk5itpbbYXnYW3eRVs4b4cSrS3a8BH2l3QH5FYNxQi62PXOnw9O OkwHdyyDXaKuVcjdgrBwnQeU7wkqFj1jiE8pcw2xVeJfm77GtzGOl+3TgPLLycXq qrUVqAU6cevxyj4rRRo7/c0UMvgJvpTZfp0gmcLHHYjsPYSoyDBK/9nGKm726Xz4 h8FlSisz3PMlQGcH4ObKRtk4pf2CdzUp6quz9Z0eyAy6uGjhU8UGLZXzqT8QRCLZ +PVzRy67xhLoc9TOK0U/RYm6KKQlLXIE5hT6aX9SKG7A7D30EPU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:00 2025 by rpki-client