This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: 4gn/3k1y0B6P3ow3vTk/ZKYy840YBAMdK73OfIU1D3M= Subject key identifier: 18:6C:47:A9:5A:A2:14:0A:9F:95:36:38:A4:90:90:F8:06:1E:7B:BD Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 429471EA20176C811E7084B2482C360F0A0BB5AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 0239 Signing time: Sun 21 Dec 2025 21:21:32 +0000 Manifest this update: Sun 21 Dec 2025 21:16:32 +0000 Manifest next update: Thu 25 Dec 2025 08:01:32 +0000 Files and hashes: 1: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 2: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) 3: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 4: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: ZiJ4xQRTzHBRExTjL3I7FL6T1ZJgQ4hwV19A2rIpziM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 08:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:94:71:ea:20:17:6c:81:1e:70:84:b2:48:2c:36:0f:0a:0b:b5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Dec 21 21:16:32 2025 GMT Not After : Dec 25 08:01:32 2025 GMT Subject: CN=186C47A95AA2140A9F953638A49090F8061E7BBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5c:66:58:08:76:3f:fa:cc:27:98:8b:36:59: 77:47:d8:60:06:95:b3:da:9e:2b:39:e9:a4:a7:67: 82:43:98:9b:20:17:43:06:5c:54:f4:27:ce:86:6c: 26:f8:cd:0f:a3:31:25:56:15:87:a7:dc:bb:f7:bd: d6:d0:04:45:88:1e:18:0a:5a:d4:93:4b:13:e5:b0: 41:39:fd:85:af:57:35:b2:60:d2:00:a5:ac:a0:76: 88:92:02:3c:b0:f8:a8:99:06:6f:88:13:f8:60:e6: fc:50:47:71:35:56:2b:29:d3:28:56:63:63:d5:2e: 44:7f:35:83:7d:9d:ed:15:bf:12:75:dd:74:15:00: c8:da:13:c4:96:0d:4e:6e:02:cb:ae:fa:12:e4:df: c2:17:6a:31:09:08:63:ec:7a:3d:d4:40:d6:3d:f9: f9:22:f9:fa:9e:33:8a:6d:11:fd:36:c7:2b:e2:98: 38:5b:40:66:71:75:c7:00:13:f0:8c:ab:34:15:72: 01:e2:90:fd:f6:ae:1f:d1:8a:79:d9:f7:be:d8:23: 08:f6:b7:d2:46:b9:7a:87:c7:a6:93:50:b8:47:1f: 9b:da:d6:45:d8:3f:c1:ca:7c:90:63:21:01:c2:b7: e6:5e:49:43:6f:a1:c0:37:43:84:e8:4b:ea:06:80: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6C:47:A9:5A:A2:14:0A:9F:95:36:38:A4:90:90:F8:06:1E:7B:BD X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e9:b9:4c:dd:c5:06:99:e1:5f:b1:28:ed:39:6c:be:c2:b9: 9a:19:e8:26:c5:00:b1:e2:8c:74:0d:50:b8:35:ed:e4:57:41: 90:64:b7:20:2d:af:c7:c7:b3:6f:5d:87:a4:4d:b4:57:04:2e: e0:49:08:70:3c:cb:e9:b0:78:ee:21:3e:0d:f6:09:57:6d:8a: dc:0e:39:e3:36:9c:8e:e3:8e:ec:3a:bd:a2:ab:69:10:42:77: f0:c7:91:44:e7:34:04:27:09:ef:7f:7b:45:30:45:cf:02:1d: 70:ce:7a:0d:4e:02:37:3e:70:8b:fa:3a:62:c0:94:e7:2d:21: d0:d9:bc:12:3d:96:0a:ad:9e:59:03:36:ec:a2:ad:67:a6:da: 3f:85:93:c3:3a:27:27:db:40:e8:a2:40:5d:d3:97:fa:c1:5b: b1:25:4c:7d:6e:64:39:cf:6f:bd:d8:1a:6e:50:a9:06:9c:ec: 0b:a1:56:00:70:62:5a:f7:34:2d:95:5d:83:4f:53:54:9b:18: 75:b8:88:b6:69:df:f6:8c:74:22:c9:e2:06:01:50:f9:17:8d: b1:95:a8:0e:3a:2e:27:17:b3:75:fc:14:81:8c:a9:87:d6:76: a6:00:9d:80:08:c7:c0:9e:81:c2:39:7f:06:4c:31:f0:8e:0e: b6:8e:62:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQpRx6iAXbIEecISySCw2DwoLtaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTEyMjEyMTE2MzJaFw0yNTEyMjUwODAxMzJaMDMxMTAvBgNV BAMTKDE4NkM0N0E5NUFBMjE0MEE5Rjk1MzYzOEE0OTA5MEY4MDYxRTdCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXGZYCHY/+swnmIs2WXdH2GAG lbPanis56aSnZ4JDmJsgF0MGXFT0J86GbCb4zQ+jMSVWFYen3Lv3vdbQBEWIHhgK WtSTSxPlsEE5/YWvVzWyYNIApaygdoiSAjyw+KiZBm+IE/hg5vxQR3E1Visp0yhW Y2PVLkR/NYN9ne0VvxJ13XQVAMjaE8SWDU5uAsuu+hLk38IXajEJCGPsej3UQNY9 +fki+fqeM4ptEf02xyvimDhbQGZxdccAE/CMqzQVcgHikP32rh/RinnZ977YIwj2 t9JGuXqHx6aTULhHH5va1kXYP8HKfJBjIQHCt+ZeSUNvocA3Q4ToS+oGgGRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGxHqVqiFAqflTY4pJCQ+AYee70wHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjpuUzdxQaZ4V+xKO05bL7CuZoZ6CbFALHi jHQNULg17eRXQZBktyAtr8fHs29dh6RNtFcELuBJCHA8y+mweO4hPg32CVdtitwO OeM2nI7jjuw6vaKraRBCd/DHkUTnNAQnCe9/e0UwRc8CHXDOeg1OAjc+cIv6OmLA lOctIdDZvBI9lgqtnlkDNuyirWem2j+Fk8M6JyfbQOiiQF3Tl/rBW7ElTH1uZDnP b73YGm5QqQac7AuhVgBwYlr3NC2VXYNPU1SbGHW4iLZp3/aMdCLJ4gYBUPkXjbGV qA46LicXs3X8FIGMqYfWdqYAnYAIx8CegcI5fwZMMfCODraOYv4= -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:54 2025 by rpki-client