This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft File: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft (raw, json) Hash identifier: 8brTtjdKF4KmFKZoF2sz/075lHWBC6nFC3VzOyOMJQM= Subject key identifier: 66:19:22:6E:20:8E:EB:B5:C6:94:6E:1B:C5:13:18:F5:21:35:8B:9C Authority key identifier: B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B Certificate issuer: /CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Certificate serial: 48EDD3519AFBC7688C8361BBBB52624C2871F29C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft Manifest number: 01CF Signing time: Wed 03 Dec 2025 06:01:44 +0000 Manifest this update: Wed 03 Dec 2025 05:56:44 +0000 Manifest next update: Sat 06 Dec 2025 11:04:44 +0000 Files and hashes: 1: 3230322e35302e3230302e302f32342d3234203d3e203535363936.roa (hash: xDKJWikIXrjRI36b2TRMfKejTlJpDCcq9wjDc5XqCoc=) 2: 3230322e35302e3230322e302f32342d3234203d3e203535363936.roa (hash: vBCBJKS7aCOhRSPKU9s9qcUQlRWVnHv7lYT5zRKMFaM=) 3: B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl (hash: D7M4uD1bPtAZItOm9OqzBIcjaqoG/aJkd768WTvSjVs=) 4: 3230322e35302e3230332e302f32342d3234203d3e203535363936.roa (hash: zWOcqVMAcvdgybeg3tAerJss4NCbaURqCYKirXQIAUM=) 5: 3230322e35302e3230312e302f32342d3234203d3e203535363936.roa (hash: MNHUQ7QT81FBqRqnX9kj5dwQrczKIpvm9q0UEC4tGfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ed:d3:51:9a:fb:c7:68:8c:83:61:bb:bb:52:62:4c:28:71:f2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B Validity Not Before: Dec 3 05:56:44 2025 GMT Not After : Dec 6 11:04:44 2025 GMT Subject: CN=6619226E208EEBB5C6946E1BC51318F521358B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:4c:c2:85:5c:34:9f:26:90:47:61:59:29: b2:af:4c:24:ad:3a:3f:ad:8e:60:a4:d5:a1:77:29: 27:87:24:70:4f:66:ad:80:6e:a7:0d:13:72:4e:50: 73:85:00:ac:67:e5:01:c3:0e:40:60:5d:a7:fc:2b: cc:ba:a3:fa:0a:02:db:03:29:cf:1a:aa:e2:d2:b0: 12:9a:79:7e:9d:52:a1:7c:9d:bc:09:62:cb:4d:87: 60:d7:5f:74:7c:44:90:25:ef:f6:d1:b1:04:05:a1: 73:f9:5b:f5:fd:4b:62:6d:4c:cf:32:a9:6b:20:50: 6e:18:f1:4e:2f:bd:99:3e:7e:67:45:e7:ab:b4:55: 51:55:cb:f3:b2:8d:f1:3c:53:18:6d:88:fa:29:a5: d7:ea:e6:15:f7:4d:0f:14:ef:56:88:21:da:59:de: 35:9c:fb:50:27:de:8d:ae:25:b4:9f:f5:71:cf:40: d4:d7:f6:01:1c:c7:f4:90:d4:f9:cc:3a:ab:4a:7a: 29:1a:5a:7e:a3:08:d8:da:13:7f:a5:f9:01:7b:a0: 9b:7d:86:4d:a6:fe:34:53:94:d1:44:53:71:aa:d6: 89:e9:59:f5:51:58:76:d1:0e:4b:03:17:7c:76:ae: 85:9f:3a:3b:e7:0d:5d:5b:89:c0:6c:1d:7e:6f:b4: ab:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:19:22:6E:20:8E:EB:B5:C6:94:6E:1B:C5:13:18:F5:21:35:8B:9C X509v3 Authority Key Identifier: keyid:B3:F1:DA:A6:77:09:A0:65:61:DC:9E:AC:5A:87:21:03:5E:EA:AB:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52880dee-7aa2-4be4-bf35-cdbd11d79507/0/B3F1DAA67709A06561DC9EAC5A8721035EEAAB5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7b:92:03:f2:98:36:66:15:9f:b3:78:4b:32:1d:3e:c8:fa: 7e:d1:96:19:df:9b:98:36:25:cd:13:a7:3b:6f:18:d2:1c:a2: 03:34:af:a0:90:12:b2:3c:03:7b:05:77:3e:c2:e8:cb:63:2a: 7a:14:8d:eb:28:80:a4:76:dd:61:6b:b3:e7:b8:9f:d7:da:dd: d2:e8:08:3e:fa:d8:f7:14:d0:20:e5:1a:01:f1:e3:f7:66:15: 33:90:83:37:3a:08:2d:fe:04:fd:62:e8:77:df:93:08:37:d3: ae:fd:59:b3:be:ed:85:a7:fc:b1:ae:fa:7b:cc:90:e9:a1:20: 97:13:80:d5:a6:17:ea:b7:e4:53:40:6b:4b:cc:da:a3:2c:0c: f9:57:c2:47:d6:42:fb:07:02:ac:cb:d1:3e:6b:84:f8:29:81: 44:56:0d:90:97:11:a8:31:f1:f4:37:ab:8e:94:14:c9:d6:87: d8:2d:c4:72:6a:1d:e0:3e:0e:be:ae:eb:5e:83:f3:92:92:8b: c1:6d:47:d4:ae:3a:cf:6e:4d:bf:8d:7e:12:e4:55:3f:d5:91: 4b:ed:e4:31:05:fd:92:d6:ee:c3:16:94:d8:6f:28:7b:53:e2: be:1a:31:95:2c:29:d3:a5:ac:49:18:91:0d:84:40:69:83:88: d1:c5:2d:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSO3TUZr7x2iMg2G7u1JiTChx8pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1 RUVBQUI1QjAeFw0yNTEyMDMwNTU2NDRaFw0yNTEyMDYxMTA0NDRaMDMxMTAvBgNV BAMTKDY2MTkyMjZFMjA4RUVCQjVDNjk0NkUxQkM1MTMxOEY1MjEzNThCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiD0zChVw0nyaQR2FZKbKvTCSt Oj+tjmCk1aF3KSeHJHBPZq2AbqcNE3JOUHOFAKxn5QHDDkBgXaf8K8y6o/oKAtsD Kc8aquLSsBKaeX6dUqF8nbwJYstNh2DXX3R8RJAl7/bRsQQFoXP5W/X9S2JtTM8y qWsgUG4Y8U4vvZk+fmdF56u0VVFVy/OyjfE8UxhtiPoppdfq5hX3TQ8U71aIIdpZ 3jWc+1An3o2uJbSf9XHPQNTX9gEcx/SQ1PnMOqtKeikaWn6jCNjaE3+l+QF7oJt9 hk2m/jRTlNFEU3Gq1onpWfVRWHbRDksDF3x2roWfOjvnDV1bicBsHX5vtKsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZhkibiCO67XGlG4bxRMY9SE1i5wwHwYDVR0j BBgwFoAUs/HapncJoGVh3J6sWochA17qq1swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Mjg4MGRlZS03YWEyLTRiZTQtYmYzNS1jZGJkMTFkNzk1MDcvMC9CM0YxREFBNjc3 MDlBMDY1NjFEQzlFQUM1QTg3MjEwMzVFRUFBQjVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIxMDM1RUVB QUI1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI4ODBkZWUtN2FhMi00YmU0LWJm MzUtY2RiZDExZDc5NTA3LzAvQjNGMURBQTY3NzA5QTA2NTYxREM5RUFDNUE4NzIx MDM1RUVBQUI1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN7kgPymDZmFZ+zeEsyHT7I+n7Rlhnfm5g2 Jc0TpztvGNIcogM0r6CQErI8A3sFdz7C6MtjKnoUjesogKR23WFrs+e4n9fa3dLo CD762PcU0CDlGgHx4/dmFTOQgzc6CC3+BP1i6Hffkwg30679WbO+7YWn/LGu+nvM kOmhIJcTgNWmF+q35FNAa0vM2qMsDPlXwkfWQvsHAqzL0T5rhPgpgURWDZCXEagx 8fQ3q46UFMnWh9gtxHJqHeA+Dr6u616D85KSi8FtR9SuOs9uTb+NfhLkVT/VkUvt 5DEF/ZLW7sMWlNhvKHtT4r4aMZUsKdOlrEkYkQ2EQGmDiNHFLX0= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:09 2025 by rpki-client