This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
File: 3BA10823C279932D7573B930625CD2884433C744.mft (raw, json)
Hash identifier: ET/oEsr2LSTBVFItculT/oZjOZoQqAfh9Cf38ldPfHY=
Subject key identifier: 1E:42:76:2B:D4:BD:DB:AF:C5:F5:D7:FB:78:00:14:C7:0F:27:F2:6E
Authority key identifier: 3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
Certificate issuer: /CN=3BA10823C279932D7573B930625CD2884433C744
Certificate serial: 18C46B095BA86C6204EE96AAEA1CEB0697AD2EA0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
Manifest number: 01B6
Signing time: Tue 23 Dec 2025 17:43:00 +0000
Manifest this update: Tue 23 Dec 2025 17:38:00 +0000
Manifest next update: Sat 27 Dec 2025 04:44:00 +0000
Files and hashes: 1: 323030313a6466323a353463303a3a2f34382d3438203d3e20313432333638.roa (hash: ixLzAKntJwguG57KCkj7JdgNgdRNlMJvWELZH5FNYlE=)
2: 3BA10823C279932D7573B930625CD2884433C744.crl (hash: Pk6TXqhb4pS6rJDIKbFeBsm/IKN74x7J1xmM9eNSNG4=)
3: 3130332e3137302e39362e302f32342d3234203d3e20313432333638.roa (hash: w4V1rEatEsKd8iCkT+5VUEi6gaUfZgI24xqxd5TI3Io=)
4: 3130332e3137302e39362e302f32332d3233203d3e20313432333638.roa (hash: vxYEkSC9Nhj9Qwmzlp+zXc3eS9PpNRTtM0I668VgpCo=)
5: 3130332e3137302e39372e302f32342d3234203d3e20313432333638.roa (hash: KTRb8AUpIFgW2BgKsFuDBBnaCuIi/vxH3uLO0lAD6oo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 04:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c4:6b:09:5b:a8:6c:62:04:ee:96:aa:ea:1c:eb:06:97:ad:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BA10823C279932D7573B930625CD2884433C744
Validity
Not Before: Dec 23 17:38:00 2025 GMT
Not After : Dec 27 04:44:00 2025 GMT
Subject: CN=1E42762BD4BDDBAFC5F5D7FB780014C70F27F26E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:87:ac:36:6b:17:e6:6e:aa:ad:4e:53:97:
bb:d7:db:8f:b6:70:08:30:eb:ec:88:89:2f:8e:9c:
91:4a:a0:8b:51:e9:dc:55:0a:96:db:77:e9:5d:f3:
d3:0a:7b:dd:7e:79:38:c7:07:e0:74:48:88:a5:b5:
70:32:5d:5a:36:19:f4:4d:eb:74:36:57:39:46:1d:
f0:ec:ff:c7:8f:e9:23:45:c3:e1:04:76:2d:5d:36:
4f:a6:3e:b3:55:d6:d2:8d:1b:97:b4:94:cb:b9:03:
1a:61:14:97:e3:3e:26:6b:83:55:ee:42:7f:9a:88:
81:e9:a4:10:18:5b:e6:66:6c:59:6b:08:44:e4:32:
37:7b:81:18:25:93:f9:75:59:d0:e9:b8:7a:ef:0c:
dc:2f:b8:cd:a5:2a:9b:87:79:74:22:b5:36:03:45:
e7:08:dc:90:3a:87:e6:58:9b:5c:d5:11:19:b9:e3:
ab:c0:05:c8:6e:3e:97:07:cb:84:bf:96:5f:24:4c:
ce:20:a3:1f:42:44:4d:d9:3b:3e:c2:1f:03:b6:20:
b9:94:9f:21:9e:51:1d:62:6e:3d:f0:12:09:71:d0:
d8:90:b6:03:92:4f:e2:cd:48:fb:a2:40:7e:0c:e6:
bf:91:f6:27:ba:d7:20:51:ec:74:5b:de:58:32:35:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:76:2B:D4:BD:DB:AF:C5:F5:D7:FB:78:00:14:C7:0F:27:F2:6E
X509v3 Authority Key Identifier:
keyid:3B:A1:08:23:C2:79:93:2D:75:73:B9:30:62:5C:D2:88:44:33:C7:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA10823C279932D7573B930625CD2884433C744.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82d49179-4d8b-4d2d-abf4-43231deb5b01/0/3BA10823C279932D7573B930625CD2884433C744.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ba:da:c3:95:a2:c5:be:cc:e8:68:da:a5:12:38:17:27:ac:
fd:35:8e:8a:63:1a:cd:22:b6:9d:44:19:bc:0f:26:e4:6a:bd:
10:21:32:c8:33:af:6d:6c:86:d9:da:55:e8:9e:67:8d:95:80:
d2:c7:43:ce:41:bc:e0:34:44:dc:ef:bb:be:63:3e:b2:56:4f:
9d:9c:f3:e1:be:21:1f:99:5c:3f:4f:3b:4c:6b:8d:ae:5b:46:
e1:3e:90:65:d4:17:68:84:32:fc:04:2a:ee:18:b3:97:f9:70:
c2:6f:77:3d:62:70:36:56:f7:0f:03:f4:53:3a:7c:cd:05:90:
7a:8a:dd:af:8f:7d:2a:6b:3c:81:1d:30:e9:f0:b5:4a:9d:a4:
b0:66:d0:1e:ac:96:cf:aa:33:34:22:21:e9:8a:0e:67:1f:dc:
b3:a7:07:25:d2:ac:76:2c:9b:bf:c4:ea:5a:65:80:91:f5:be:
67:82:bc:e1:b3:3e:04:72:bb:b5:4d:14:36:68:00:ff:7b:3a:
35:6f:93:96:b6:86:81:14:c7:95:bc:76:df:07:65:10:18:33:
23:29:3c:85:54:be:56:62:f8:5a:01:62:6a:c9:b1:89:a3:db:
90:9a:c8:6c:3e:5a:b2:ea:4f:3a:4e:b0:30:26:d8:eb:d5:f4:
7d:36:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 22:10:52 2025 by rpki-client