This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft File: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft (raw, json) Hash identifier: urf+q+wEBBYSSv/SEna1XMpkPq6VNzqAzVaoB+wCCMo= Subject key identifier: 60:4B:62:23:D7:D4:B1:01:17:D5:C7:4A:20:BE:CE:87:35:0C:7F:5E Authority key identifier: B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A Certificate issuer: /CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Certificate serial: 5C2454EB0D1650BCA56CB6476B6CA46C406E8FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft Manifest number: 025E Signing time: Wed 17 Dec 2025 15:41:55 +0000 Manifest this update: Wed 17 Dec 2025 15:36:55 +0000 Manifest next update: Sat 20 Dec 2025 23:59:55 +0000 Files and hashes: 1: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: /DsY3RWbvLgClApMKck49bKbjnAomrxQ8ynXCHtST1E=) 2: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: 98jr9ba0etJ7YC2I63wg/TyglOKwqhFG0fLbXDFnlc4=) 3: B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl (hash: WEPnawxl1dPZ52tc2ov5gRkcy2Is/aEbZOFs/rMi+PQ=) 4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: Yz5m1gA54J/vh37G0a/gX3QgxeJVQ6PzjHugkp2fy5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:24:54:eb:0d:16:50:bc:a5:6c:b6:47:6b:6c:a4:6c:40:6e:8f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F3B9BC4A56B546AFCEF4780022D559E35D937A Validity Not Before: Dec 17 15:36:55 2025 GMT Not After : Dec 20 23:59:55 2025 GMT Subject: CN=604B6223D7D4B10117D5C74A20BECE87350C7F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:74:22:74:42:d1:2c:1a:ef:e7:10:63:ba: 9d:29:3a:94:a1:90:7c:f6:5a:fa:d2:29:0d:f8:9a: 3d:bc:b7:a6:76:7a:30:ec:39:f3:8f:e1:b1:e8:88: 9e:ea:64:8f:b3:34:42:16:7c:87:2c:af:8a:e8:9a: 19:11:d8:f4:0f:02:56:3d:16:2d:71:03:b1:b4:0d: c8:ca:c9:89:96:a6:47:7f:a5:f4:ae:39:9e:0b:2f: a8:ff:db:c6:3d:60:ba:75:ba:ae:2a:bd:18:b7:96: 39:5e:57:5a:aa:3e:61:77:86:bf:a9:31:8e:25:08: c8:84:02:ed:21:c2:b2:29:e2:25:8d:db:b9:ec:d2: 04:c8:a7:55:30:1c:6e:23:4a:61:f9:6e:1c:4a:1f: e7:8b:03:17:ca:8e:9c:26:49:9c:a0:11:a7:9c:2a: 2c:5b:69:24:b6:a2:78:2d:9b:0b:0b:e0:33:ec:3a: 3b:57:14:be:d2:7f:97:d9:f8:20:e2:a6:0c:91:dd: bb:4b:bd:c3:16:fa:55:bf:78:c6:7f:12:f2:95:97: 40:d3:24:91:30:9d:2b:ef:78:b0:69:03:15:21:ad: b0:de:97:e2:16:bf:a5:0e:e9:45:db:38:c2:a6:ed: af:29:b9:58:ee:9d:99:fa:28:29:47:84:f3:a7:b1: fc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:62:23:D7:D4:B1:01:17:D5:C7:4A:20:BE:CE:87:35:0C:7F:5E X509v3 Authority Key Identifier: keyid:B3:F3:B9:BC:4A:56:B5:46:AF:CE:F4:78:00:22:D5:59:E3:5D:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/B3F3B9BC4A56B546AFCEF4780022D559E35D937A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bb:58:fb:cc:91:24:13:32:41:40:15:b1:df:45:b5:fa:e5: b3:19:0a:67:62:84:6e:28:f9:ca:95:fe:df:f4:22:a3:c1:d8: ee:98:bc:b6:89:8b:e1:a1:83:d4:53:e8:36:d2:04:d1:8e:96: e0:e5:21:34:31:ad:35:cf:55:ad:fb:0f:61:6f:81:b8:18:47: d7:15:0c:d8:8b:98:3b:53:0f:02:7c:11:c0:ff:0c:0e:a5:5b: ac:ed:fe:e8:b4:13:07:87:0f:ca:c8:3b:76:a0:a9:03:27:1b: 14:5c:75:38:f8:6e:dc:1f:6a:56:34:a9:57:65:6c:aa:64:61: 7c:f4:c8:8a:5e:0a:f0:6f:65:9b:49:b3:fd:51:eb:48:b5:ea: 72:27:08:51:61:6d:fe:ed:16:cb:a7:af:08:33:13:35:c9:25: 9a:22:57:7b:ff:ac:9d:04:ea:0b:68:8b:03:e8:70:8b:98:e6: 6f:31:ce:24:79:4f:e0:28:54:0f:af:a3:46:a0:a4:f9:50:9d: a8:b6:1b:fa:23:0b:3f:11:07:f1:f5:83:e3:bf:2b:5f:c3:b7: 2f:a7:e6:80:09:84:b9:2b:de:0c:9f:4f:a3:85:0e:3f:1d:a8: 3e:86:e8:64:2d:b5:fc:15:b7:2e:05:b8:61:80:66:72:59:ce: 42:bc:30:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCRU6w0WULylbLZHa2ykbEBuj6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlF MzVEOTM3QTAeFw0yNTEyMTcxNTM2NTVaFw0yNTEyMjAyMzU5NTVaMDMxMTAvBgNV BAMTKDYwNEI2MjIzRDdENEIxMDExN0Q1Qzc0QTIwQkVDRTg3MzUwQzdGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYHQidELRLBrv5xBjup0pOpSh kHz2WvrSKQ34mj28t6Z2ejDsOfOP4bHoiJ7qZI+zNEIWfIcsr4romhkR2PQPAlY9 Fi1xA7G0DcjKyYmWpkd/pfSuOZ4LL6j/28Y9YLp1uq4qvRi3ljleV1qqPmF3hr+p MY4lCMiEAu0hwrIp4iWN27ns0gTIp1UwHG4jSmH5bhxKH+eLAxfKjpwmSZygEaec KixbaSS2ongtmwsL4DPsOjtXFL7Sf5fZ+CDipgyR3btLvcMW+lW/eMZ/EvKVl0DT JJEwnSvveLBpAxUhrbDel+IWv6UO6UXbOMKm7a8puVjunZn6KClHhPOnsfz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEtiI9fUsQEX1cdKIL7OhzUMf14wHwYDVR0j BBgwFoAUs/O5vEpWtUavzvR4ACLVWeNdk3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzdmMzUzMy0yMjc4LTQwZTEtYTI2Mi03ZTdlNDMxZWIyMzUvMC9CM0YzQjlCQzRB NTZCNTQ2QUZDRUY0NzgwMDIyRDU1OUUzNUQ5MzdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1NTlFMzVE OTM3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy NjItN2U3ZTQzMWViMjM1LzAvQjNGM0I5QkM0QTU2QjU0NkFGQ0VGNDc4MDAyMkQ1 NTlFMzVEOTM3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAG7WPvMkSQTMkFAFbHfRbX65bMZCmdihG4o +cqV/t/0IqPB2O6YvLaJi+Ghg9RT6DbSBNGOluDlITQxrTXPVa37D2FvgbgYR9cV DNiLmDtTDwJ8EcD/DA6lW6zt/ui0EweHD8rIO3agqQMnGxRcdTj4btwfalY0qVdl bKpkYXz0yIpeCvBvZZtJs/1R60i16nInCFFhbf7tFsunrwgzEzXJJZoiV3v/rJ0E 6gtoiwPocIuY5m8xziR5T+AoVA+vo0agpPlQnai2G/ojCz8RB/H1g+O/K1/Dty+n 5oAJhLkr3gyfT6OFDj8dqD6G6GQttfwVty4FuGGAZnJZzkK8MEU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:41 2025 by rpki-client