This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: LbMJmgBlOwnPAwqj0nxOS/xQ6WI6ot1l8G7HAVAhDl4= Subject key identifier: BC:92:DC:B9:F2:09:7F:B2:38:F1:D1:67:FA:41:5A:7A:86:AA:AA:7C Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 57F56B4A5623D12417F20FCC33644345F7B32DDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 0272 Signing time: Sat 31 Jan 2026 01:31:54 +0000 Manifest this update: Sat 31 Jan 2026 01:26:54 +0000 Manifest next update: Tue 03 Feb 2026 12:39:54 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 3: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 4: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: TGBLgGfhbRAPSXAf/EFgRXPCvXysC1pitCHm1fVyqqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 12:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f5:6b:4a:56:23:d1:24:17:f2:0f:cc:33:64:43:45:f7:b3:2d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Jan 31 01:26:54 2026 GMT Not After : Feb 3 12:39:54 2026 GMT Subject: CN=BC92DCB9F2097FB238F1D167FA415A7A86AAAA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:60:f9:30:2a:43:c7:b0:f7:f3:bb:8e:b1:1c: 9f:6c:b1:b2:c5:24:25:29:28:76:09:a7:59:02:08: 1e:88:96:22:47:37:56:21:35:1d:de:c2:09:13:92: 90:3b:b2:8c:ca:d9:8a:16:dc:ad:9b:8a:a6:cb:1b: 5b:f2:94:35:3e:b1:3c:08:84:e0:16:5f:64:7d:62: 9c:b1:81:9e:3f:1c:30:4f:c6:0a:70:66:57:f2:b9: be:cc:cb:06:8b:e0:47:d7:12:df:42:ff:3f:cb:35: 37:2f:77:96:8b:fd:67:21:33:e0:86:ff:dd:c5:12: 43:c8:41:e0:9f:73:94:69:a2:6c:f7:99:96:1d:bf: 16:43:5e:6d:ae:fc:7d:ef:13:db:0f:c5:48:b3:35: 4b:78:2a:46:73:e2:8f:06:e6:7c:a0:0a:b8:eb:90: c4:ec:89:3d:d3:f7:5a:dc:7b:bc:a3:69:b7:49:2d: a8:18:37:1e:13:1c:d2:d4:72:1e:a3:14:e2:e5:ad: 20:6b:9a:4b:f6:d8:33:cd:6c:48:9a:7a:56:21:90: ab:5d:4a:0e:00:b3:6f:73:ad:1b:cf:cb:21:96:ca: ce:dc:be:98:55:01:44:c2:05:4d:e3:5d:1c:5d:b3: e5:93:3e:97:35:99:fc:e6:1a:96:82:de:9a:2b:92: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:92:DC:B9:F2:09:7F:B2:38:F1:D1:67:FA:41:5A:7A:86:AA:AA:7C X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fa:5a:46:ca:5d:e8:2e:a5:0a:b6:5a:5e:cb:21:bf:0a:24: 92:ae:ae:3a:44:ca:85:c1:8a:e8:ee:02:0d:60:6d:99:81:a8: 0c:04:6a:0f:16:31:ad:df:57:ca:be:fc:1a:2e:73:60:49:fc: d4:4b:43:1b:bb:0c:d1:6a:e0:43:8f:65:24:21:c7:64:1a:3b: f4:a1:e2:3b:df:c2:41:6a:f9:6d:a6:89:e7:92:a7:45:31:ba: a9:62:d3:f9:fe:49:10:68:f3:68:d2:35:e2:db:56:fa:01:18: cb:dd:13:3d:ea:ce:dc:ce:0b:25:05:4b:09:34:5e:36:98:15: eb:b9:7c:db:ca:3a:87:26:f7:dc:4d:84:a4:04:4c:55:00:43: 50:cc:28:8a:65:63:48:93:6e:a8:65:fa:02:78:3b:ee:1f:5a: ab:71:ea:00:c4:8d:7a:12:ef:cc:fe:14:f6:e4:9b:20:33:b2: 09:bc:a6:ec:72:2f:a7:5d:5b:38:9d:d0:f3:ea:52:70:48:1d: b3:28:76:98:c5:b9:8f:eb:5f:51:21:87:5e:14:fb:72:60:bb: 5e:4e:13:e1:7e:e3:33:21:ff:55:36:84:1b:8f:96:71:57:35: 35:45:34:cf:99:8b:db:10:ba:13:d3:c7:5b:38:75:d3:f4:b2: a7:a7:05:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/VrSlYj0SQX8g/MM2RDRfezLdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNjAxMzEwMTI2NTRaFw0yNjAyMDMxMjM5NTRaMDMxMTAvBgNV BAMTKEJDOTJEQ0I5RjIwOTdGQjIzOEYxRDE2N0ZBNDE1QTdBODZBQUFBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUYPkwKkPHsPfzu46xHJ9ssbLF JCUpKHYJp1kCCB6IliJHN1YhNR3ewgkTkpA7sozK2YoW3K2biqbLG1vylDU+sTwI hOAWX2R9YpyxgZ4/HDBPxgpwZlfyub7MywaL4EfXEt9C/z/LNTcvd5aL/WchM+CG /93FEkPIQeCfc5Rpomz3mZYdvxZDXm2u/H3vE9sPxUizNUt4KkZz4o8G5nygCrjr kMTsiT3T91rce7yjabdJLagYNx4THNLUch6jFOLlrSBrmkv22DPNbEiaelYhkKtd Sg4As29zrRvPyyGWys7cvphVAUTCBU3jXRxds+WTPpc1mfzmGpaC3porkupFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJLcufIJf7I48dFn+kFaeoaqqnwwHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI76WkbKXegupQq2Wl7LIb8KJJKurjpEyoXB iujuAg1gbZmBqAwEag8WMa3fV8q+/Bouc2BJ/NRLQxu7DNFq4EOPZSQhx2QaO/Sh 4jvfwkFq+W2mieeSp0Uxuqli0/n+SRBo82jSNeLbVvoBGMvdEz3qztzOCyUFSwk0 XjaYFeu5fNvKOocm99xNhKQETFUAQ1DMKIplY0iTbqhl+gJ4O+4fWqtx6gDEjXoS 78z+FPbkmyAzsgm8puxyL6ddWzid0PPqUnBIHbModpjFuY/rX1Ehh14U+3Jgu15O E+F+4zMh/1U2hBuPlnFXNTVFNM+Zi9sQuhPTx1s4ddP0sqenBSA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client