This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: O5k55kBhS1iV8FeTxBOMAaMbPwHjIZLO7T294gb6+Ss= Subject key identifier: 9F:0B:61:BE:FD:0D:5C:C5:0C:7F:9D:D3:34:D6:78:E1:01:51:BF:4B Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 0D4AB6EF36BF43EEC8592A076E7E9C6BC0C3281F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 025D Signing time: Mon 15 Dec 2025 06:21:57 +0000 Manifest this update: Mon 15 Dec 2025 06:16:57 +0000 Manifest next update: Thu 18 Dec 2025 15:40:57 +0000 Files and hashes: 1: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: p5WkE4fgv+TFGx+sMRk/71g0/Scuy2rtB3nb/HTH4t4=) 2: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 15:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4a:b6:ef:36:bf:43:ee:c8:59:2a:07:6e:7e:9c:6b:c0:c3:28:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Dec 15 06:16:57 2025 GMT Not After : Dec 18 15:40:57 2025 GMT Subject: CN=9F0B61BEFD0D5CC50C7F9DD334D678E10151BF4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:ca:fc:98:14:d2:28:6d:ba:5d:12:0c:a2: 8d:b4:e0:66:36:91:7b:e3:3b:eb:5e:ed:bf:5e:4a: bc:80:a2:89:8a:38:a2:37:f1:56:b5:93:e7:15:f5: 0b:21:5c:e4:89:c7:00:e8:5b:e0:a8:27:35:e9:2d: 0c:8b:4d:98:ae:68:77:73:51:76:bf:c8:4b:bd:67: 0f:77:af:b7:63:e9:e2:6c:e8:fb:57:09:62:3e:b4: 90:1e:1a:a2:e1:0b:16:36:5c:06:3c:2b:fc:df:9d: 57:6b:00:40:62:a0:ab:91:fe:cf:0a:ac:a6:91:f1: 21:04:91:a0:bd:29:2f:a2:0c:07:74:52:d8:89:0c: 8d:21:68:ab:20:d1:4b:ab:04:5d:ac:a1:85:be:f1: 9e:97:e5:79:e6:6f:01:d2:df:eb:f5:ee:67:36:86: a1:5a:00:80:db:44:c3:09:be:fe:70:4a:f9:ee:05: e2:88:3b:27:d0:97:c7:44:09:c4:4b:30:84:4f:7a: d6:6d:2d:c3:2d:bb:ff:88:08:e4:7c:02:fb:c3:59: b9:a2:30:76:63:f8:1e:f8:6e:58:00:de:d4:e3:d5: f3:9e:22:5d:e8:ba:0e:c4:a2:3b:ce:f7:29:36:e3: b4:98:58:89:f2:97:20:49:30:d6:69:de:78:38:f3: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0B:61:BE:FD:0D:5C:C5:0C:7F:9D:D3:34:D6:78:E1:01:51:BF:4B X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:32:15:10:09:af:0c:a0:8c:17:14:d1:46:1f:1a:ce:dc:0b: b8:1f:ae:81:2c:36:71:9b:5f:b9:21:f2:9f:1e:be:7b:bb:b7: 3b:61:50:91:86:ca:1b:43:3b:29:82:3c:c4:c1:e6:9c:76:e3: 30:67:65:d4:c5:5a:32:ae:b5:c8:40:4b:dc:8c:c3:38:98:9c: 60:24:d5:a3:03:3b:18:c8:c5:65:bb:10:99:59:f3:9e:a2:ff: c2:17:e5:69:2b:e2:16:9f:34:18:b1:81:5a:bd:c8:5e:1d:11: 14:76:f1:ab:3b:aa:88:8f:32:d7:db:8a:9e:d6:27:5c:79:8d: fd:37:32:e2:46:e7:e0:fb:af:c9:63:67:d1:be:94:67:24:5a: 7e:cb:a3:83:1e:c7:1e:03:70:2e:54:c3:88:3b:11:22:91:c8: db:2e:49:c4:ca:d0:ae:eb:08:00:2f:b8:0b:8d:0a:af:27:7a: 87:02:91:7c:ea:05:6f:73:48:ec:4e:c7:8f:fa:06:f4:0e:5c: b4:d4:b5:1a:f2:e9:b3:99:32:07:ef:cc:9d:0e:38:13:04:0d: 1b:15:81:08:a4:ca:84:d0:98:f5:a3:b9:3e:de:ac:7e:56:b6: 27:8c:a4:e1:22:4e:9b:7c:fa:98:63:cd:5d:12:95:9d:ec:93: 9a:23:c2:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUq27za/Q+7IWSoHbn6ca8DDKB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTEyMTUwNjE2NTdaFw0yNTEyMTgxNTQwNTdaMDMxMTAvBgNV BAMTKDlGMEI2MUJFRkQwRDVDQzUwQzdGOUREMzM0RDY3OEUxMDE1MUJGNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf58r8mBTSKG26XRIMoo204GY2 kXvjO+te7b9eSryAoomKOKI38Va1k+cV9QshXOSJxwDoW+CoJzXpLQyLTZiuaHdz UXa/yEu9Zw93r7dj6eJs6PtXCWI+tJAeGqLhCxY2XAY8K/zfnVdrAEBioKuR/s8K rKaR8SEEkaC9KS+iDAd0UtiJDI0haKsg0UurBF2soYW+8Z6X5XnmbwHS3+v17mc2 hqFaAIDbRMMJvv5wSvnuBeKIOyfQl8dECcRLMIRPetZtLcMtu/+ICOR8AvvDWbmi MHZj+B74blgA3tTj1fOeIl3oug7EojvO9yk247SYWInylyBJMNZp3ng48/HjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnwthvv0NXMUMf53TNNZ44QFRv0swHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMyFRAJrwygjBcU0UYfGs7cC7gfroEsNnGb X7kh8p8evnu7tzthUJGGyhtDOymCPMTB5px24zBnZdTFWjKutchAS9yMwziYnGAk 1aMDOxjIxWW7EJlZ856i/8IX5Wkr4hafNBixgVq9yF4dERR28as7qoiPMtfbip7W J1x5jf03MuJG5+D7r8ljZ9G+lGckWn7Lo4Mexx4DcC5Uw4g7ESKRyNsuScTK0K7r CAAvuAuNCq8neocCkXzqBW9zSOxOx4/6BvQOXLTUtRry6bOZMgfvzJ0OOBMEDRsV gQikyoTQmPWjuT7erH5WtieMpOEiTpt8+phjzV0SlZ3sk5ojwu8= -----END CERTIFICATE-----Generated at Tue Dec 16 06:40:19 2025 by rpki-client