This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json)
Hash identifier: w570BCWGjrLGgyEjc1IYCKR/6vNJCeGLC+2oSDjZTV8=
Subject key identifier: 94:CB:5F:19:19:EE:E7:9B:46:64:FC:F0:F9:4A:CA:A8:15:9B:D2:67
Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Certificate serial: 3354A1F9E69297B81C93703238C257F1D27C9127
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
Manifest number: 01EA
Signing time: Sun 01 Feb 2026 09:01:47 +0000
Manifest this update: Sun 01 Feb 2026 08:56:47 +0000
Manifest next update: Wed 04 Feb 2026 15:36:47 +0000
Files and hashes: 1: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=)
2: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=)
3: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=)
4: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=)
5: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: XAQmzSJ/pdhIy9CZ3xrAVLKxQNMUQAEF6IAs/3evo4Q=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 15:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:54:a1:f9:e6:92:97:b8:1c:93:70:32:38:c2:57:f1:d2:7c:91:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B
Validity
Not Before: Feb 1 08:56:47 2026 GMT
Not After : Feb 4 15:36:47 2026 GMT
Subject: CN=94CB5F1919EEE79B4664FCF0F94ACAA8159BD267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:f0:a7:51:8b:e1:f0:f9:a0:eb:9f:49:98:
f6:43:ae:b4:1a:06:d6:b0:80:9c:85:83:8e:33:e2:
89:a0:5f:b2:81:62:d1:b0:5c:f7:dc:d2:b7:bc:e3:
6b:d2:93:96:2f:a1:74:7e:2e:be:96:bb:d1:b3:1e:
75:83:63:89:02:e3:27:bb:2e:ea:bc:8e:00:c1:d0:
41:da:dd:8d:e2:f9:e8:fe:18:dc:56:ac:fc:4d:03:
8a:99:d5:55:42:bf:6f:e2:f6:00:86:d7:d8:5c:36:
d2:2f:84:dc:c9:f7:34:e5:5d:94:85:a6:02:14:18:
d9:88:e5:7d:cb:59:a7:fc:7e:e5:1e:4c:a6:28:fb:
31:04:cf:ca:5d:a0:d0:fc:0a:11:a0:1e:84:fe:e0:
51:2b:39:79:3b:cc:0f:a7:07:87:ed:9a:bc:3f:d4:
07:01:8c:3b:6c:fb:6f:29:b2:d0:7e:5e:f5:b5:22:
8e:0e:9c:ef:14:12:97:e7:1a:f8:1e:34:10:90:0a:
fd:1a:e9:47:f1:f6:f7:3f:62:7f:98:d2:50:54:4c:
dc:3e:14:c5:69:0d:86:3a:16:19:4d:91:6c:f0:0d:
31:7b:71:94:d9:aa:1f:04:6d:b6:34:98:db:d2:a4:
82:33:32:12:8d:67:2e:f2:21:8e:7b:ea:ca:01:64:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:CB:5F:19:19:EE:E7:9B:46:64:FC:F0:F9:4A:CA:A8:15:9B:D2:67
X509v3 Authority Key Identifier:
keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2a:e1:59:2f:bb:6b:f9:71:5c:0c:3d:7d:55:28:cb:11:e1:
48:4b:6c:c2:1a:7d:2d:a0:08:c9:46:10:20:83:84:50:53:99:
1b:8a:b2:18:e0:ff:04:1f:b9:00:5f:96:20:9b:aa:1e:65:74:
3c:fe:95:1e:9b:b7:2d:47:c9:b7:24:c6:fa:e3:94:12:98:b7:
3e:97:cb:5d:39:1f:f2:e5:17:1a:4f:67:97:ae:ee:81:23:7d:
74:0b:9a:fc:40:b3:47:38:65:07:a0:4d:d9:81:68:3e:a9:dd:
a8:50:25:f3:f4:c1:e0:11:0f:c3:45:11:7a:b9:04:9a:5f:38:
26:0d:fa:01:b4:6f:c2:44:51:28:41:d1:7c:9c:06:12:0f:d5:
58:0a:bf:33:78:f7:a3:30:4f:45:b3:9b:1c:44:94:bc:d9:c7:
6b:5c:0d:f0:f8:5f:b4:0f:bb:c5:cc:a7:f6:89:e9:aa:d5:0b:
c8:40:33:09:4a:a8:7e:50:a5:0c:65:5e:d7:93:22:58:24:9f:
2d:6e:55:f8:8f:b4:12:28:11:78:5c:85:1b:e5:e1:8c:dc:b4:
65:07:80:46:fd:85:50:75:02:50:59:16:98:36:77:b3:e1:3e:
c9:60:b9:60:80:4d:0b:e3:a5:2e:e7:11:ac:b6:71:84:97:cc:
47:cb:d0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:03:44 2026 by rpki-client