This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft File: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft (raw, json) Hash identifier: FGyD9RyxOmIMlBvm6OgcKFrz6vsnXlS20zsVA8Newj0= Subject key identifier: 16:3E:04:EA:55:B2:CF:C2:22:29:47:35:B7:C4:FA:5B:DF:35:85:5F Authority key identifier: B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 Certificate issuer: /CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Certificate serial: 30645F4B2226A1B8684E6E54A5E532F585B6E307 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft Manifest number: 01F3 Signing time: Thu 18 Dec 2025 06:30:44 +0000 Manifest this update: Thu 18 Dec 2025 06:25:44 +0000 Manifest next update: Sun 21 Dec 2025 15:35:44 +0000 Files and hashes: 1: 3130332e3134372e3136342e302f32332d3234203d3e203137373639.roa (hash: cVFaX5vsSnlCiBXiYi7VFBsU8ifDtbmqTWAW0Jfdf/M=) 2: B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl (hash: 3CHUYVwET4VDwv8y91rT1OFCnzomolt9g4qcalcT7V0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:64:5f:4b:22:26:a1:b8:68:4e:6e:54:a5:e5:32:f5:85:b6:e3:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42 Validity Not Before: Dec 18 06:25:44 2025 GMT Not After : Dec 21 15:35:44 2025 GMT Subject: CN=163E04EA55B2CFC222294735B7C4FA5BDF35855F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:ea:11:35:7e:56:82:1a:7d:34:6a:aa:94: 26:81:b7:e0:b9:bb:63:51:41:af:d0:4e:2f:30:bb: d0:87:d0:e4:cc:85:e9:03:b5:46:65:71:ad:04:ab: 9e:2b:87:ac:9b:26:34:ed:18:c7:ee:45:c5:e5:c6: c7:c7:d7:ed:b9:de:27:ed:27:6b:55:17:59:68:3d: 13:97:e0:af:4e:22:a6:d1:c7:ab:45:7d:63:a3:d8: 96:59:c3:b9:6e:e2:60:f2:7c:b6:7d:c4:35:07:1a: 7a:13:f9:08:9d:f9:9c:45:23:97:cb:9d:d9:9b:a6: 71:0c:83:ea:b6:8e:dc:83:d1:2a:4d:06:81:94:cc: 33:e4:a8:70:dc:6b:00:1f:ac:28:5a:28:47:0f:c4: 99:4e:b1:b8:a7:ff:3b:b8:67:c8:5c:5b:e2:62:41: 94:b2:94:60:d0:52:8b:d2:4f:4c:f3:bc:6c:7d:75: ce:e3:03:72:a0:39:0d:ca:75:7d:b2:c7:42:61:cc: 4f:94:49:3d:33:17:be:31:ec:20:ae:8a:1c:1a:be: 64:4b:3b:71:f8:11:df:d4:6e:5d:66:7b:e5:f7:b6: e7:0b:a8:b3:3a:77:c7:cd:21:9c:f4:fa:83:95:58: 0b:19:a8:a3:53:ca:aa:90:4b:73:f9:37:5c:1e:f1: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3E:04:EA:55:B2:CF:C2:22:29:47:35:B7:C4:FA:5B:DF:35:85:5F X509v3 Authority Key Identifier: keyid:B3:B3:A1:DE:E0:9E:40:7B:C6:CE:08:EF:C7:CD:2B:AF:41:C7:BA:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e4c61ac-7b5c-4d94-a365-c4021c1709c7/0/B3B3A1DEE09E407BC6CE08EFC7CD2BAF41C7BA42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:aa:cc:20:55:6e:f6:ed:dc:0e:79:fa:40:92:14:34:d4:bd: 6c:06:26:10:6f:1b:24:da:3b:5a:c8:09:3d:85:f7:ed:63:55: 99:f8:fe:43:9d:e3:db:e9:8e:14:fa:9d:28:47:ba:53:5f:73: 73:28:94:25:bd:be:89:32:a3:e9:c0:b5:76:44:01:0d:78:0b: a2:35:e5:72:8d:27:47:e2:e6:31:bd:d4:50:47:56:3e:3e:3d: c7:bd:8f:42:a3:e5:e0:14:e8:1e:a0:88:07:a8:58:93:dc:a1: 3c:55:88:68:76:d8:7e:d9:42:8e:ee:d7:df:d3:95:c2:22:92: 0d:17:db:1f:f1:9a:94:01:1b:52:87:68:16:d7:b7:77:98:62: be:c3:ce:1e:5e:e2:70:8c:c4:43:e8:97:9a:20:ff:f5:cb:f0: 5a:32:33:0a:44:82:77:e6:5c:3b:e9:91:da:56:c6:e2:0a:f2: cf:a6:74:20:8f:42:f3:52:17:4b:8d:ba:7e:bb:fb:75:06:d7: be:cb:a5:2f:6a:d9:72:a0:4f:85:fe:ba:90:da:91:56:d4:20: c6:8c:5e:66:32:9a:7d:14:b3:22:59:d2:82:24:d8:8d:87:ca: af:1e:c6:3e:15:90:ba:a4:8d:04:9b:2f:86:8b:b3:5d:96:57: 75:b0:48:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGRfSyImobhoTm5UpeUy9YW24wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0 MUM3QkE0MjAeFw0yNTEyMTgwNjI1NDRaFw0yNTEyMjExNTM1NDRaMDMxMTAvBgNV BAMTKDE2M0UwNEVBNTVCMkNGQzIyMjI5NDczNUI3QzRGQTVCREYzNTg1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQOoRNX5Wghp9NGqqlCaBt+C5 u2NRQa/QTi8wu9CH0OTMhekDtUZlca0Eq54rh6ybJjTtGMfuRcXlxsfH1+253ift J2tVF1loPROX4K9OIqbRx6tFfWOj2JZZw7lu4mDyfLZ9xDUHGnoT+Qid+ZxFI5fL ndmbpnEMg+q2jtyD0SpNBoGUzDPkqHDcawAfrChaKEcPxJlOsbin/zu4Z8hcW+Ji QZSylGDQUovST0zzvGx9dc7jA3KgOQ3KdX2yx0JhzE+UST0zF74x7CCuihwavmRL O3H4Ed/Ubl1me+X3tucLqLM6d8fNIZz0+oOVWAsZqKNTyqqQS3P5N1we8dRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFj4E6lWyz8IiKUc1t8T6W981hV8wHwYDVR0j BBgwFoAUs7Oh3uCeQHvGzgjvx80rr0HHukIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTRjNjFhYy03YjVjLTRkOTQtYTM2NS1jNDAyMWMxNzA5YzcvMC9CM0IzQTFERUUw OUU0MDdCQzZDRTA4RUZDN0NEMkJBRjQxQzdCQTQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJCQUY0MUM3 QkE0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU0YzYxYWMtN2I1Yy00ZDk0LWEz NjUtYzQwMjFjMTcwOWM3LzAvQjNCM0ExREVFMDlFNDA3QkM2Q0UwOEVGQzdDRDJC QUY0MUM3QkE0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuqzCBVbvbt3A55+kCSFDTUvWwGJhBvGyTa O1rICT2F9+1jVZn4/kOd49vpjhT6nShHulNfc3MolCW9vokyo+nAtXZEAQ14C6I1 5XKNJ0fi5jG91FBHVj4+Pce9j0Kj5eAU6B6giAeoWJPcoTxViGh22H7ZQo7u19/T lcIikg0X2x/xmpQBG1KHaBbXt3eYYr7Dzh5e4nCMxEPol5og//XL8FoyMwpEgnfm XDvpkdpWxuIK8s+mdCCPQvNSF0uNun67+3UG177LpS9q2XKgT4X+upDakVbUIMaM XmYymn0UsyJZ0oIk2I2Hyq8exj4VkLqkjQSbL4aLs12WV3WwSOo= -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:32 2025 by rpki-client