This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft (raw, json)
Hash identifier: FPH+kl0tnYy6DbSXtvCdDGzuNYHbR/3MyMyqqcvzskk=
Subject key identifier: E2:E0:E8:61:D1:BB:63:01:87:61:8B:44:6C:DB:6F:D7:46:A9:5D:5D
Authority key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
Certificate issuer: /CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Certificate serial: 470E4C6358702D13F6758E610D076AA3B16E1D79
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
Manifest number: 0293
Signing time: Thu 18 Dec 2025 18:22:13 +0000
Manifest this update: Thu 18 Dec 2025 18:17:13 +0000
Manifest next update: Mon 22 Dec 2025 03:18:13 +0000
Files and hashes: 1: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl (hash: 8YhhYsGlmdjPpfKJoZM0pDee4ZS1AwTezBvNxcAf464=)
2: 3130332e3132352e31362e302f32332d3233203d3e20313338303837.roa (hash: Oqn/4hUIUai1+mMhRgpHuJU5fSEKD5vusBmxtK4Q6/8=)
3: 3130332e3132352e31372e302f32342d3234203d3e20313338303837.roa (hash: Zz17TQa2NJzEsR1WGPakO7j3yFYvZxiFyfeaOkhhBlE=)
4: 323430333a656134303a3a2f33322d3332203d3e20313338303837.roa (hash: xBq4u83ia6TOjUP4DGj4goi5YscW5lbRAoeEejloPEM=)
5: 3130332e3132352e31382e302f32332d3233203d3e20313338303837.roa (hash: WglNMON1uFXdqdZO+92FBvvihsTNbskJIYYFQnplXHc=)
6: 3130332e3132352e31392e302f32342d3234203d3e20313338303837.roa (hash: 8wTO/tBBvlV50rqLL/FsgrieuqraT8M5ri1ZF8sxwQY=)
7: 3130332e3132352e31362e302f32322d3232203d3e20313338303837.roa (hash: yVV5dswPF/JJinXwT/AnHMY4w0AFsBRTFOmucBW2KiU=)
8: 3130332e3132352e31362e302f32342d3234203d3e20313338303837.roa (hash: 1xj2l1iw+yAigEZVfk6qr5RUAjnT+Wu5eRzm3bKESvg=)
9: 3130332e3132352e31382e302f32342d3234203d3e20313338303837.roa (hash: csPdkdJcUUCAtCT9DXQEOSSDc2dcYO076Q+UqLNYO0k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 03:18:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:0e:4c:63:58:70:2d:13:f6:75:8e:61:0d:07:6a:a3:b1:6e:1d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB
Validity
Not Before: Dec 18 18:17:13 2025 GMT
Not After : Dec 22 03:18:13 2025 GMT
Subject: CN=E2E0E861D1BB630187618B446CDB6FD746A95D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:5e:ae:f4:c5:a9:56:48:bb:6f:60:84:e1:
fe:0b:41:de:06:09:2a:4a:01:b3:55:61:cc:4d:16:
94:e6:91:1d:51:a3:49:bf:3d:08:73:4e:b4:52:f0:
18:84:40:56:ee:f6:a1:b6:6c:78:65:1f:24:ea:72:
d8:fb:b9:7e:2b:97:0d:3e:83:19:cb:fd:8e:64:01:
fd:78:ed:8b:c6:8d:8b:ab:a8:83:03:65:16:6e:41:
d8:db:ad:3b:0d:09:66:4d:73:6f:99:64:1b:93:94:
00:22:4f:e6:5d:d7:73:e0:41:40:6b:94:13:5b:86:
4b:77:46:bb:92:35:7f:01:21:de:36:65:d9:2b:04:
d8:e0:9a:51:50:db:a3:0f:8e:cb:ac:4a:a3:22:52:
41:ac:6d:40:76:a4:fc:ec:ac:98:42:75:7a:0c:64:
67:3a:47:3a:c3:9f:f9:be:b1:30:db:eb:65:39:cb:
ed:c0:de:c1:12:7a:eb:55:d8:5b:a5:b5:9f:6d:5e:
86:53:cc:cd:83:40:cd:60:85:67:fc:64:9d:6b:bb:
d9:ca:bc:46:bc:0d:8c:f3:3b:ea:b8:14:fb:37:00:
ad:1c:ff:87:dc:b6:a1:a1:f3:5c:f7:0c:d1:ea:eb:
aa:f1:58:be:3d:eb:9e:9e:38:cf:9d:f3:35:ea:30:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E0:E8:61:D1:BB:63:01:87:61:8B:44:6C:DB:6F:D7:46:A9:5D:5D
X509v3 Authority Key Identifier:
keyid:B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2b:18:ca:24:b9:90:f8:8d:7e:6c:6c:de:39:f1:0e:a7:c3:
fa:f6:56:f8:4c:c1:34:09:ce:8c:df:c1:69:74:8b:59:d1:91:
70:61:a5:55:ff:3e:55:d8:3f:5b:45:f5:f6:82:aa:d9:d0:eb:
46:ea:a0:2a:fa:37:80:ce:d3:cd:e0:39:1c:a4:5e:ca:4c:21:
47:7d:87:c4:87:4c:1a:dd:20:25:14:bb:de:f9:bf:c0:f7:05:
cb:06:fd:65:9c:68:8c:dd:e0:d6:b3:29:c3:bc:0a:3a:b2:0d:
a3:d6:c9:05:c9:cc:d3:78:6b:6e:90:a7:eb:6e:d6:38:c3:10:
25:2a:48:89:fa:dc:16:bd:aa:a9:bf:f1:31:f7:11:83:1c:ea:
6f:c6:0d:d2:96:e8:ad:96:96:26:62:30:55:17:a5:33:66:2e:
cb:f4:8e:92:59:86:dc:41:e2:14:03:2e:58:9e:1b:b3:fc:4e:
bb:13:dd:56:03:74:43:40:ef:84:ee:70:e9:11:95:6e:88:6c:
55:f3:60:9d:ac:e9:b0:0c:7b:d8:6e:64:8e:61:0e:81:43:5c:
62:3f:8c:97:24:c7:81:0e:75:42:25:95:35:c9:d7:60:b9:ed:
3d:7d:1d:9f:51:a4:20:49:4f:4e:d3:fb:b3:e0:75:96:b1:dc:
ee:2f:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 11:19:00 2025 by rpki-client