This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: 0Nblmbnl2780OW2JIJrX81i6IyB6KhAsI46gqMxwBR8= Subject key identifier: BC:1D:B2:C8:D9:82:D4:D8:EE:C0:86:69:36:7F:5A:A0:DE:E3:0C:03 Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 6C76A1FE2284491D81F74895CFD560C820B80F31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 026F Signing time: Sat 24 Jan 2026 04:31:55 +0000 Manifest this update: Sat 24 Jan 2026 04:26:55 +0000 Manifest next update: Tue 27 Jan 2026 14:33:55 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 3: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: 2rfpl6LuZkgf3lJzYJ6+K8tE/r+qUNymXaDgaye9vM0=) 4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:76:a1:fe:22:84:49:1d:81:f7:48:95:cf:d5:60:c8:20:b8:0f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jan 24 04:26:55 2026 GMT Not After : Jan 27 14:33:55 2026 GMT Subject: CN=BC1DB2C8D982D4D8EEC08669367F5AA0DEE30C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9f:0a:43:5c:0f:b5:c7:43:a6:c0:61:21:e8: 37:54:7a:63:1c:2a:69:2d:a1:8a:3f:b3:c6:a3:d1: a8:33:c1:fe:39:c0:c0:7d:e6:95:8f:f9:3a:b8:09: d2:9e:9e:37:99:28:0c:40:28:ac:64:d3:11:78:29: 50:72:52:72:5b:d1:39:75:95:ef:5d:01:ff:55:f8: 33:20:bb:2e:b1:13:71:27:ab:70:94:13:6e:ca:fb: 48:c4:ca:3d:85:09:f7:01:bf:6d:e8:f4:19:d7:f7: f9:99:5a:95:1d:20:b5:a0:ef:98:9c:f3:fb:9e:a8: 29:fe:e0:b0:e8:f2:d2:2b:9f:3d:70:0c:42:3e:ea: 4a:fc:b0:1a:1c:6f:00:29:21:13:d2:fe:84:2c:0e: fc:59:49:ec:22:e3:a5:24:f2:53:f3:35:ab:25:bd: ab:b4:81:b6:57:bd:e6:5a:84:8e:86:f6:a1:c7:ce: ab:8f:4a:f6:5c:31:c6:da:2e:ea:8e:9b:ab:c3:73: 44:19:81:0a:63:3f:93:68:9e:70:fb:ea:f1:31:35: d9:9a:87:30:cd:f7:19:10:5d:16:7f:43:35:2d:40: 60:bd:ff:33:1b:cd:83:ee:e2:6d:10:58:0e:ba:92: a4:85:77:7c:85:7e:bf:9c:ee:d2:78:93:fe:5d:6f: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1D:B2:C8:D9:82:D4:D8:EE:C0:86:69:36:7F:5A:A0:DE:E3:0C:03 X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cb:2c:cc:21:a4:12:27:07:99:09:21:5c:88:97:88:1a:fc: ad:ed:10:76:37:42:02:a9:23:21:1b:cb:74:df:ef:fd:ac:41: 95:5c:50:4b:b1:13:47:58:c8:a5:06:f1:fd:61:cc:b0:c3:90: 35:6c:4d:77:00:e6:61:99:48:39:61:a0:c1:28:a5:50:c3:80: 3d:9a:5c:0b:ba:6e:1a:6e:11:a1:fd:49:e6:fb:e3:ec:bb:93: 45:1b:35:d8:c8:9a:ff:da:4a:27:84:a4:79:5a:15:c6:46:24: d2:7a:de:4b:15:81:5e:fd:e2:2d:d0:47:31:d0:47:9f:cd:f5: e0:c1:a1:74:4e:54:20:9e:55:c1:b9:1a:48:b3:38:d1:04:e3: a0:8f:02:8b:df:48:4f:96:ea:fe:96:a4:96:6e:ae:54:52:32: 83:d6:24:47:06:ba:9a:58:3a:30:97:29:2c:fc:b4:2b:ba:22: de:da:a1:13:cb:7f:54:a6:9e:64:d9:70:a9:e1:cc:e1:0e:7a: 10:9b:63:23:10:dc:43:40:af:b7:28:1c:a4:a4:37:c8:e5:e6: e4:a2:2c:44:ab:aa:4b:9e:5b:28:c4:e6:96:6e:9a:fa:d2:b0: d9:7a:20:78:b0:c2:c7:a9:0e:95:50:ce:1a:5c:8f:f2:0f:9c: 26:97:4f:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHah/iKESR2B90iVz9VgyCC4DzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNjAxMjQwNDI2NTVaFw0yNjAxMjcxNDMzNTVaMDMxMTAvBgNV BAMTKEJDMURCMkM4RDk4MkQ0RDhFRUMwODY2OTM2N0Y1QUEwREVFMzBDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVnwpDXA+1x0OmwGEh6DdUemMc KmktoYo/s8aj0agzwf45wMB95pWP+Tq4CdKenjeZKAxAKKxk0xF4KVByUnJb0Tl1 le9dAf9V+DMguy6xE3Enq3CUE27K+0jEyj2FCfcBv23o9BnX9/mZWpUdILWg75ic 8/ueqCn+4LDo8tIrnz1wDEI+6kr8sBocbwApIRPS/oQsDvxZSewi46Uk8lPzNasl vau0gbZXveZahI6G9qHHzquPSvZcMcbaLuqOm6vDc0QZgQpjP5NonnD76vExNdma hzDN9xkQXRZ/QzUtQGC9/zMbzYPu4m0QWA66kqSFd3yFfr+c7tJ4k/5db2bRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvB2yyNmC1NjuwIZpNn9aoN7jDAMwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHLLMwhpBInB5kJIVyIl4ga/K3tEHY3QgKp IyEby3Tf7/2sQZVcUEuxE0dYyKUG8f1hzLDDkDVsTXcA5mGZSDlhoMEopVDDgD2a XAu6bhpuEaH9Seb74+y7k0UbNdjImv/aSieEpHlaFcZGJNJ63ksVgV794i3QRzHQ R5/N9eDBoXROVCCeVcG5GkizONEE46CPAovfSE+W6v6WpJZurlRSMoPWJEcGuppY OjCXKSz8tCu6It7aoRPLf1SmnmTZcKnhzOEOehCbYyMQ3ENAr7coHKSkN8jl5uSi LESrqkueWyjE5pZumvrSsNl6IHiwwsepDpVQzhpcj/IPnCaXT34= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:51 2026 by rpki-client