This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier: LmvEnHy2nR0tAft2+/B4U7NJMZyVxJRZCImlDjkq+Jk=
Subject key identifier: 96:C5:88:77:7A:17:EC:EE:FD:BE:36:EB:7A:76:01:7E:80:B0:FC:E0
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial: 16C001D08F5A9237A52E531104D628C22B69DF44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number: 02A3
Signing time: Sat 24 Jan 2026 16:51:40 +0000
Manifest this update: Sat 24 Jan 2026 16:46:40 +0000
Manifest next update: Tue 27 Jan 2026 19:11:40 +0000
Files and hashes: 1: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=)
2: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=)
3: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=)
4: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=)
5: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=)
6: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=)
7: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=)
8: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=)
9: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: UEDONtt91+wgTvPAbFG8ZnoPzccrrt4h/xyKKkS9T8Y=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 19:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c0:01:d0:8f:5a:92:37:a5:2e:53:11:04:d6:28:c2:2b:69:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Validity
Not Before: Jan 24 16:46:40 2026 GMT
Not After : Jan 27 19:11:40 2026 GMT
Subject: CN=96C588777A17ECEEFDBE36EB7A76017E80B0FCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:38:2b:d9:3f:f9:8e:1f:9b:a7:5e:bf:16:
b9:f4:7c:b6:91:ea:96:c2:ac:2e:3b:bb:ac:23:22:
90:b2:ac:97:65:62:ec:f6:3c:c2:66:0a:a5:42:bd:
59:3f:17:36:41:52:a9:e8:29:06:9b:d4:e9:93:24:
0b:40:a8:c4:36:e1:72:46:1f:6a:e6:fa:e6:b0:47:
e2:8e:b8:ea:02:9b:07:1a:69:56:87:12:fb:69:29:
5b:5d:83:30:cf:70:10:c4:7e:14:b0:3b:73:97:c9:
11:5e:24:42:8e:f2:51:cf:24:14:df:58:b9:1b:37:
04:82:1e:f4:76:ab:da:c5:b1:0b:78:c4:6f:71:8b:
03:db:59:55:b9:74:6f:67:19:59:25:1a:20:8f:1b:
52:f3:9f:d5:b5:f4:88:7b:94:e3:a2:42:e7:71:66:
07:d3:a2:e8:f1:8c:08:6c:a9:70:31:08:82:2a:73:
a2:04:0a:1c:04:8e:9f:73:ae:8e:03:38:8f:32:08:
c8:6e:19:5b:1e:29:f7:6d:ab:1e:b1:74:b2:e5:a4:
61:3d:d8:ff:89:82:ee:a2:6c:9f:52:a8:cf:78:ed:
ee:a9:22:25:b8:e4:53:18:e2:59:12:88:3a:b2:91:
c2:87:45:3f:8e:ce:c8:7f:14:6c:49:f0:ea:5e:a4:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:88:77:7A:17:EC:EE:FD:BE:36:EB:7A:76:01:7E:80:B0:FC:E0
X509v3 Authority Key Identifier:
keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d2:59:88:23:13:4d:ce:88:75:d6:53:ff:a8:42:28:38:ea:
1f:3e:29:39:78:d7:19:9c:e5:4c:03:da:12:2d:41:49:41:dc:
2a:60:92:1e:07:33:82:6e:1b:45:e7:90:3a:14:dc:d7:30:fa:
e7:ca:46:08:4d:53:d0:b9:dc:e9:f7:58:30:f6:5b:c3:b6:42:
ef:0e:84:ef:cc:2f:8f:88:c5:b6:fa:27:ff:52:ba:ef:98:dc:
c8:b2:1d:c3:b0:23:bc:7c:79:38:4c:a8:00:c0:84:ed:fb:5b:
20:7b:b4:84:04:d9:3b:a6:af:c0:fa:b7:d0:25:d3:29:e3:d2:
1e:7c:9f:a9:9e:38:28:5f:5f:15:e2:fe:54:a7:2a:e6:6f:83:
d0:3a:7d:0c:46:d0:ee:a7:f8:ea:81:61:4b:a6:f3:3b:11:2d:
f3:e7:33:5f:fa:0f:a4:44:45:0c:4d:55:e4:92:8a:ee:fa:40:
72:88:8a:1e:d1:0d:f7:67:44:97:af:d5:3b:74:25:34:c8:6a:
b7:a6:72:28:ef:25:eb:98:dc:f3:c6:33:77:70:35:b0:56:5b:
21:fb:a6:8b:24:1e:2c:2c:77:29:59:9a:95:55:90:e6:75:48:
a0:b1:2c:88:18:f6:8c:a4:bb:47:dc:e2:24:0d:30:61:70:6e:
6c:e0:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:44:28 2026 by rpki-client