This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: W1SbUwMRp4RdDQHeWpA5kTkqAVTgRV3nTZGZoSIqQiE= Subject key identifier: BA:70:7D:65:7F:C2:68:C4:17:1E:6C:F3:4A:93:C0:78:F2:A8:D8:E2 Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 790A99654DE99034ADEBA56213818A05133748AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01FC Signing time: Wed 07 Jan 2026 08:30:43 +0000 Manifest this update: Wed 07 Jan 2026 08:25:43 +0000 Manifest next update: Sat 10 Jan 2026 17:48:43 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: 4U5gbzD1ZL2Pax6dY6n57TGunWH+/rOrwJdCKf7i5DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Jan 2026 17:48:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:99:65:4d:e9:90:34:ad:eb:a5:62:13:81:8a:05:13:37:48:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Jan 7 08:25:43 2026 GMT Not After : Jan 10 17:48:43 2026 GMT Subject: CN=BA707D657FC268C4171E6CF34A93C078F2A8D8E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:c5:cc:09:9f:88:53:3b:9b:43:ff:03:db: f6:a6:98:f8:9b:e6:2b:44:07:20:97:8d:4b:5b:23: 99:12:35:a0:35:8d:3f:5e:a1:52:35:d2:4a:2e:73: 44:9f:90:6e:d3:54:78:0f:06:e9:b0:d5:5e:30:8c: e5:f4:1a:2b:8b:18:f9:b6:3b:6d:d0:67:0c:17:f0: 50:ac:ec:e8:26:82:3e:fc:60:74:17:a2:f7:a8:ab: 86:fa:6b:a4:17:88:d3:19:a9:96:fa:96:5e:5f:f1: 7f:e1:5e:8b:ae:1d:f3:4c:b3:dd:3f:28:04:ee:07: 99:44:ff:98:07:5f:e5:8b:38:89:83:b3:f0:c8:0e: d9:8f:c2:62:b2:66:08:3e:19:68:4e:be:39:34:d7: fb:bf:18:70:24:e5:a4:76:ad:c9:05:db:23:57:c6: b5:10:48:3f:17:6a:7a:dc:47:ed:02:6a:a5:0b:32: 5d:bc:bb:5f:5f:01:b2:9c:c5:c7:59:a4:c4:28:7c: 40:e5:27:5d:cd:9f:70:b9:11:61:71:23:cd:39:87: e7:58:cb:04:f0:98:44:a3:ff:a1:10:c5:86:9f:ed: 9a:02:21:15:99:dd:02:f8:01:b2:b6:31:cd:25:ea: 18:e9:1e:c4:98:1b:48:8f:66:a0:1d:32:b3:e8:2c: 68:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:7D:65:7F:C2:68:C4:17:1E:6C:F3:4A:93:C0:78:F2:A8:D8:E2 X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:2e:27:19:39:ab:6c:4a:66:a0:20:f3:fc:ca:a9:53:b9:bb: 61:6f:c2:c9:b5:2f:3b:8c:08:43:3e:d6:c6:70:78:a8:bf:65: 86:13:6f:28:56:93:fe:ec:f0:73:23:2f:65:41:8c:57:3e:b5: 1f:fc:5a:79:0f:9b:4d:be:54:2c:d5:9d:25:25:6d:c3:1d:01: 1f:d1:a1:58:95:54:dc:9c:f8:b3:ca:9f:74:46:12:a0:06:a3: df:e0:a0:b9:2b:c4:b2:0b:e9:b7:8c:66:5b:a8:80:ae:d7:6e: 7e:60:a8:8e:4c:49:51:98:af:df:f2:62:eb:43:51:18:b2:b3: 68:af:db:99:dd:71:f6:ec:72:70:cf:5c:a6:46:af:64:3c:0f: b5:7f:b0:a4:4d:82:78:20:02:e8:03:0d:f8:d7:3c:b9:f2:e3: e5:ce:01:f5:40:39:3c:c3:e1:11:3b:dc:03:85:f1:a8:54:a5: 7e:64:ff:5b:dd:34:70:cc:eb:f4:18:fa:e7:bb:1a:c4:2b:7d: 0b:02:01:a8:f8:31:d1:97:f4:34:75:34:f2:89:77:1d:92:d8: ee:1f:01:0d:22:af:f4:af:5d:5b:b8:b9:90:54:2b:04:7c:b7: 47:f6:7b:5c:ed:10:99:90:3d:90:c9:dc:cf:1c:26:7f:80:6a: 4d:23:1e:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQqZZU3pkDSt66ViE4GKBRM3SKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNjAxMDcwODI1NDNaFw0yNjAxMTAxNzQ4NDNaMDMxMTAvBgNV BAMTKEJBNzA3RDY1N0ZDMjY4QzQxNzFFNkNGMzRBOTNDMDc4RjJBOEQ4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DsXMCZ+IUzubQ/8D2/ammPib 5itEByCXjUtbI5kSNaA1jT9eoVI10kouc0SfkG7TVHgPBumw1V4wjOX0GiuLGPm2 O23QZwwX8FCs7Ogmgj78YHQXoveoq4b6a6QXiNMZqZb6ll5f8X/hXouuHfNMs90/ KATuB5lE/5gHX+WLOImDs/DIDtmPwmKyZgg+GWhOvjk01/u/GHAk5aR2rckF2yNX xrUQSD8XanrcR+0CaqULMl28u19fAbKcxcdZpMQofEDlJ13Nn3C5EWFxI805h+dY ywTwmESj/6EQxYaf7ZoCIRWZ3QL4AbK2Mc0l6hjpHsSYG0iPZqAdMrPoLGj7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUunB9ZX/CaMQXHmzzSpPAePKo2OIwHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkuJxk5q2xKZqAg8/zKqVO5u2Fvwsm1LzuM CEM+1sZweKi/ZYYTbyhWk/7s8HMjL2VBjFc+tR/8WnkPm02+VCzVnSUlbcMdAR/R oViVVNyc+LPKn3RGEqAGo9/goLkrxLIL6beMZluogK7Xbn5gqI5MSVGYr9/yYutD URiys2iv25ndcfbscnDPXKZGr2Q8D7V/sKRNgnggAugDDfjXPLny4+XOAfVAOTzD 4RE73AOF8ahUpX5k/1vdNHDM6/QY+ue7GsQrfQsCAaj4MdGX9DR1NPKJdx2S2O4f AQ0ir/SvXVu4uZBUKwR8t0f2e1ztEJmQPZDJ3M8cJn+Aak0jHtk= -----END CERTIFICATE-----Generated at Thu Jan 8 07:23:09 2026 by rpki-client