This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json) Hash identifier: 1apms+YxOQtrnoM7669iFEWT9PI8ctoWfcMEmwcpVFs= Subject key identifier: E1:CD:13:E2:CC:A7:D3:AF:9A:30:FB:43:77:45:21:81:CA:83:3C:D3 Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Certificate serial: 5CC7DBB8706490949335CAE5EDA2A3F9AF3EB13C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft Manifest number: 028C Signing time: Tue 02 Dec 2025 19:31:43 +0000 Manifest this update: Tue 02 Dec 2025 19:26:43 +0000 Manifest next update: Sat 06 Dec 2025 01:59:43 +0000 Files and hashes: 1: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=) 2: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=) 3: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: GaJGa0itWU45DlebcKRZmrJTNLf5axVyHZvx52PUZyc=) 4: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=) 5: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=) 6: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=) 7: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=) 8: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=) 9: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c7:db:b8:70:64:90:94:93:35:ca:e5:ed:a2:a3:f9:af:3e:b1:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Validity Not Before: Dec 2 19:26:43 2025 GMT Not After : Dec 6 01:59:43 2025 GMT Subject: CN=E1CD13E2CCA7D3AF9A30FB4377452181CA833CD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:1c:60:07:db:68:4a:79:6d:56:3d:25:b9: 86:ae:49:23:a4:cd:79:c8:75:14:82:05:8e:1a:17: 5f:e0:59:ea:c8:4a:83:f4:b9:3d:66:71:dd:c2:63: 28:88:c4:c4:ff:cd:2c:02:8f:1c:a8:23:01:ce:46: 69:6c:72:cc:04:4f:bb:7a:8d:6a:3f:42:4b:1b:e7: 67:10:2a:e5:27:a5:db:ff:5e:d2:50:7c:65:98:81: 27:e2:fa:f0:5f:e7:eb:f6:ed:83:4d:e1:12:75:50: 08:43:66:58:64:89:18:ea:d8:23:dd:50:2a:6b:4f: c4:aa:bc:1e:17:60:ac:8f:91:9f:d6:65:45:03:2c: c6:cd:a1:16:38:9a:20:da:88:12:4a:db:df:e5:3f: d2:16:99:bd:6e:be:b0:66:b1:d2:38:cb:fb:52:67: 52:f4:c9:96:93:93:24:6a:e4:59:77:0b:92:b7:ee: 7b:ec:08:d1:2e:e9:38:0c:9f:92:d8:4e:0c:34:8f: d2:de:8f:a0:bc:c9:4b:4d:e0:a9:d1:d7:53:b2:e4: 37:d9:92:d6:83:4c:da:64:5b:97:67:31:12:72:11: 0b:16:53:8f:48:1a:d7:e2:89:aa:13:94:40:47:58: 30:2f:3b:19:1b:c7:81:e0:c9:2a:c3:70:d8:e4:26: 61:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CD:13:E2:CC:A7:D3:AF:9A:30:FB:43:77:45:21:81:CA:83:3C:D3 X509v3 Authority Key Identifier: keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d8:e2:a7:27:0b:15:f4:c5:75:92:8b:17:36:77:9e:23:18: 5d:66:08:5f:25:90:a1:4b:17:38:dc:b1:24:e1:43:ab:cb:cf: 0e:ed:a2:ff:76:8d:ef:66:9d:32:5d:f5:c0:63:15:c4:37:7c: 5c:60:4e:bb:d7:16:26:a4:e0:dd:27:98:59:58:73:db:99:fa: c9:87:70:9d:56:ab:66:bb:1d:20:87:2b:6f:f3:7a:be:bc:79: 17:88:e7:5c:9e:dc:82:6d:0b:fd:b1:3e:b2:4f:1c:c6:c9:70: ae:17:a8:eb:05:4e:8e:43:b9:61:ac:d5:b5:2b:07:6f:61:31: 64:91:c1:bc:f3:f4:17:05:99:2b:02:14:cc:41:55:7a:7c:bb: 32:c8:9c:23:7b:15:a4:95:7d:0c:40:fa:66:8a:4b:31:f6:57: 18:7d:0d:e3:73:51:2c:02:f6:ff:3e:80:52:f7:3f:d4:94:5f: 74:05:1b:84:28:04:72:a9:6a:49:e4:71:af:1f:60:43:89:40: 11:4c:2c:09:f4:a5:74:72:15:fb:e5:62:0b:9c:be:b9:b7:25: aa:00:06:b9:d7:54:f9:96:11:5d:ce:26:aa:df:4c:c5:b5:8f: c3:c6:27:42:42:6c:90:95:88:fb:3f:b4:39:0f:e3:2b:85:49: 72:8e:31:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMfbuHBkkJSTNcrl7aKj+a8+sTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0 RDBFMTREQjAeFw0yNTEyMDIxOTI2NDNaFw0yNTEyMDYwMTU5NDNaMDMxMTAvBgNV BAMTKEUxQ0QxM0UyQ0NBN0QzQUY5QTMwRkI0Mzc3NDUyMTgxQ0E4MzNDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8VBxgB9toSnltVj0luYauSSOk zXnIdRSCBY4aF1/gWerISoP0uT1mcd3CYyiIxMT/zSwCjxyoIwHORmlscswET7t6 jWo/Qksb52cQKuUnpdv/XtJQfGWYgSfi+vBf5+v27YNN4RJ1UAhDZlhkiRjq2CPd UCprT8SqvB4XYKyPkZ/WZUUDLMbNoRY4miDaiBJK29/lP9IWmb1uvrBmsdI4y/tS Z1L0yZaTkyRq5Fl3C5K37nvsCNEu6TgMn5LYTgw0j9Lej6C8yUtN4KnR11Oy5DfZ ktaDTNpkW5dnMRJyEQsWU49IGtfiiaoTlEBHWDAvOxkbx4HgySrDcNjkJmG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4c0T4syn06+aMPtDd0UhgcqDPNMwHwYDVR0j BBgwFoAUs6loax6V3LaHcq2lW7E4rk0OFNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMC9CM0E5Njg2QjFF OTVEQ0I2ODc3MkFEQTU1QkIxMzhBRTREMEUxNERCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4QUU0RDBF MTREQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU4ZDZkY2EtNmQ3Yi00ODExLTg2 MmItMGRjNWQ1N2ZhMmQ5LzAvQjNBOTY4NkIxRTk1RENCNjg3NzJBREE1NUJCMTM4 QUU0RDBFMTREQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvY4qcnCxX0xXWSixc2d54jGF1mCF8lkKFL FzjcsSThQ6vLzw7tov92je9mnTJd9cBjFcQ3fFxgTrvXFiak4N0nmFlYc9uZ+smH cJ1Wq2a7HSCHK2/zer68eReI51ye3IJtC/2xPrJPHMbJcK4XqOsFTo5DuWGs1bUr B29hMWSRwbzz9BcFmSsCFMxBVXp8uzLInCN7FaSVfQxA+maKSzH2Vxh9DeNzUSwC 9v8+gFL3P9SUX3QFG4QoBHKpaknkca8fYEOJQBFMLAn0pXRyFfvlYgucvrm3JaoA BrnXVPmWEV3OJqrfTMW1j8PGJ0JCbJCViPs/tDkP4yuFSXKOMVU= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:27 2025 by rpki-client