This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: RJBt68MROhXnF4bkefgNYzKSzz3zWO6zHaMmBTWzqW4= Subject key identifier: D3:45:3C:33:36:1C:4C:39:95:6C:5E:EF:FC:82:A7:C5:B5:9D:12:9D Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 0C9DFA471E046286F3AB1B93DF3F2C634377C5BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 023A Signing time: Wed 24 Dec 2025 08:03:01 +0000 Manifest this update: Wed 24 Dec 2025 07:58:01 +0000 Manifest next update: Sat 27 Dec 2025 17:27:01 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: KwzTk3ukdTAsCBVFY/kSau3c0Pyr6V+DayZbdDdpbWA=) 3: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) 4: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9d:fa:47:1e:04:62:86:f3:ab:1b:93:df:3f:2c:63:43:77:c5:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Dec 24 07:58:01 2025 GMT Not After : Dec 27 17:27:01 2025 GMT Subject: CN=D3453C33361C4C39956C5EEFFC82A7C5B59D129D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:21:96:79:fe:c8:d3:53:a0:c8:2e:93:8d: 6c:c2:22:a4:40:bb:8c:3d:39:a2:b2:4f:bf:c9:a5: c2:8f:cb:ac:ea:bf:a3:64:38:6c:0e:04:b9:32:39: d5:5d:ee:88:ee:39:54:83:7a:d4:ab:c3:81:c7:d4: 4a:f3:1d:cb:91:56:d1:0f:b7:b2:f3:15:31:23:81: ca:96:10:32:2d:de:c4:bc:71:8b:d5:1d:db:87:95: 24:70:fd:99:42:6e:03:bf:a8:e3:8b:fa:f8:44:54: 85:59:e9:73:d3:91:74:0d:e4:49:7e:c6:df:d6:96: 3c:78:f0:21:cd:c1:ee:81:4d:f8:d3:87:c7:84:f8: e9:5e:0c:63:20:f7:32:95:f4:fd:87:bf:67:cf:73: ee:da:d8:40:d4:31:fc:cf:0b:8b:58:7c:6a:cd:16: 8c:98:3b:66:18:62:6b:c5:be:23:0b:e0:a0:a1:40: bc:4a:62:5a:28:7e:f3:6d:ed:72:81:fb:cc:14:a2: dd:d1:cc:b6:ce:94:fc:b5:41:c1:8d:f0:bf:dc:db: 0a:12:d0:f6:fc:3a:04:c7:30:48:e2:5b:1a:8c:25: ae:b7:8b:3e:e9:70:14:36:10:1f:79:d7:7f:4c:a1: bf:70:ec:dc:20:96:fd:96:72:9c:15:9d:0d:3c:c6: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:45:3C:33:36:1C:4C:39:95:6C:5E:EF:FC:82:A7:C5:B5:9D:12:9D X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ca:1b:a4:b2:fa:c6:e3:83:3c:03:91:37:9b:89:36:be:19: 65:c0:66:56:65:d6:7f:c5:ac:74:02:a8:db:9e:6b:ec:b4:8a: 67:1f:56:00:9b:d4:04:8d:1b:ef:24:ed:17:54:ce:26:79:13: 32:1e:f9:c2:24:f2:74:c8:f0:6d:da:d4:b8:f7:8c:40:6e:d7: 86:9e:8b:20:4f:e3:36:53:90:7e:6e:5e:ef:d3:ed:56:d7:b4: 77:a6:ff:9d:25:fc:12:2d:33:96:d4:97:8b:af:82:e2:e2:d1: 24:23:56:d7:80:4d:f6:aa:73:f1:b2:15:fe:d1:06:cf:0a:2a: aa:85:e6:60:f9:90:29:75:34:40:66:88:a7:d6:77:11:e2:1e: b6:fc:6d:12:75:cb:e2:7a:05:ca:1e:72:ff:30:0f:ca:29:ac: f9:fd:6e:c3:50:e6:50:10:fa:58:a0:d7:55:e6:f6:ab:4e:75: 57:49:70:08:dc:88:6d:b0:a6:8a:53:0c:db:bf:6d:01:a9:74: 64:c1:d7:98:54:8e:2b:5d:1a:1d:28:c2:e3:23:71:6f:10:c5: 0f:4a:2d:5f:1d:5d:97:95:98:b2:97:0a:d7:ae:ee:62:d0:2d: bd:26:c4:11:f2:29:a2:9a:a5:a5:9f:66:44:db:20:a4:b5:ce: 16:7a:89:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJ36Rx4EYobzqxuT3z8sY0N3xb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTEyMjQwNzU4MDFaFw0yNTEyMjcxNzI3MDFaMDMxMTAvBgNV BAMTKEQzNDUzQzMzMzYxQzRDMzk5NTZDNUVFRkZDODJBN0M1QjU5RDEyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAyGWef7I01OgyC6TjWzCIqRA u4w9OaKyT7/JpcKPy6zqv6NkOGwOBLkyOdVd7ojuOVSDetSrw4HH1ErzHcuRVtEP t7LzFTEjgcqWEDIt3sS8cYvVHduHlSRw/ZlCbgO/qOOL+vhEVIVZ6XPTkXQN5El+ xt/Wljx48CHNwe6BTfjTh8eE+OleDGMg9zKV9P2Hv2fPc+7a2EDUMfzPC4tYfGrN FoyYO2YYYmvFviML4KChQLxKYloofvNt7XKB+8wUot3RzLbOlPy1QcGN8L/c2woS 0Pb8OgTHMEjiWxqMJa63iz7pcBQ2EB95139Mob9w7Nwglv2WcpwVnQ08xsFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00U8MzYcTDmVbF7v/IKnxbWdEp0wHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXKG6Sy+sbjgzwDkTebiTa+GWXAZlZl1n/F rHQCqNuea+y0imcfVgCb1ASNG+8k7RdUziZ5EzIe+cIk8nTI8G3a1Lj3jEBu14ae iyBP4zZTkH5uXu/T7VbXtHem/50l/BItM5bUl4uvguLi0SQjVteATfaqc/GyFf7R Bs8KKqqF5mD5kCl1NEBmiKfWdxHiHrb8bRJ1y+J6Bcoecv8wD8oprPn9bsNQ5lAQ +lig11Xm9qtOdVdJcAjciG2wpopTDNu/bQGpdGTB15hUjitdGh0owuMjcW8QxQ9K LV8dXZeVmLKXCteu7mLQLb0mxBHyKaKapaWfZkTbIKS1zhZ6iUs= -----END CERTIFICATE-----Generated at Thu Dec 25 22:15:23 2025 by rpki-client