This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: jdNVAgl982GdgS5Dx+5/J+BdD6mvL+C/j2JEGWHgJpY= Subject key identifier: BC:30:1C:9F:F4:76:0E:B8:24:03:45:AE:B8:20:58:99:9E:77:50:2A Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 6BA47FA9A13812D39095D0FAECD7C07D349135F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05B4 Signing time: Tue 23 Dec 2025 19:20:15 +0000 Manifest this update: Tue 23 Dec 2025 19:15:15 +0000 Manifest next update: Fri 26 Dec 2025 19:40:15 +0000 Files and hashes: 1: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) 4: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: xH6BGu7V0YHwXpojdVPPjCI8gYcn/ZEuUp5pP82I7i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 19:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a4:7f:a9:a1:38:12:d3:90:95:d0:fa:ec:d7:c0:7d:34:91:35:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Dec 23 19:15:15 2025 GMT Not After : Dec 26 19:40:15 2025 GMT Subject: CN=BC301C9FF4760EB8240345AEB82058999E77502A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:36:bc:e1:ea:ed:92:85:74:e5:25:7c:fa: 60:9b:99:43:9a:a1:56:ee:cd:f3:fe:80:ae:82:14: 2f:4f:84:57:2f:9d:a3:3c:7e:7f:cc:49:73:ee:c2: 87:d3:d6:dd:79:6a:05:2f:ff:cf:21:c5:7f:a9:78: 2c:3a:66:4a:ca:79:37:56:b6:f9:36:52:27:1a:a5: 7c:1a:46:dd:a6:f1:c6:dd:f7:86:8e:44:83:ae:62: 4c:e1:f6:45:dd:08:aa:cb:ea:09:53:d5:f3:2b:5a: ca:5f:b3:90:ea:e6:54:b6:7b:d5:66:0f:7a:d7:60: 10:63:db:af:cc:e2:6d:3b:68:e1:91:53:91:c9:53: 87:70:29:ec:f9:93:c7:3b:bd:91:33:d1:9a:7f:22: 34:18:84:7e:18:1c:86:9a:eb:c1:9b:23:f4:67:6b: f6:af:dd:3e:de:40:ac:1c:51:be:e4:58:f0:ec:ce: a4:83:8b:41:b3:06:94:a2:6c:38:fc:2c:8e:cd:50: 3f:26:9f:cd:b8:85:9a:e1:b4:47:b3:48:ec:b2:e3: d0:af:b1:62:05:4b:e6:84:e7:3c:2b:13:5e:bc:af: 3b:f6:cf:da:dc:69:c9:9e:2f:d7:b9:23:25:7c:49: 4f:fb:ea:67:55:bb:91:90:f1:fc:5d:2e:ab:e1:9c: fd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:1C:9F:F4:76:0E:B8:24:03:45:AE:B8:20:58:99:9E:77:50:2A X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:43:c4:26:3e:1a:7e:01:3c:26:24:ba:fa:8f:15:4a:89:03: bb:74:57:09:7b:2f:e7:f8:4d:d3:f9:f5:16:4c:3c:a5:77:9f: 8e:ef:af:2b:02:63:61:9d:f6:ca:b6:e1:24:59:d6:65:ae:6b: 7f:43:fe:92:e2:f7:17:3f:1e:e1:18:d3:c3:79:9c:89:49:e8: 15:58:7b:73:8c:55:85:80:55:af:c4:c1:41:fa:1d:4c:96:35: f1:89:60:24:10:e0:2f:66:19:7c:09:b9:1e:8e:85:a8:00:59: 7d:3d:56:68:c9:6e:45:72:93:98:0f:1f:46:c1:5f:0d:c0:7c: d3:1d:6b:27:35:52:e6:7a:c6:21:9f:50:4d:53:36:af:7b:b3: 84:bc:9e:05:f6:57:b3:76:0d:8d:fb:e2:3a:84:08:3f:d3:65: 85:4e:fc:8d:0b:50:24:f5:e6:d6:fd:fa:d8:95:5f:4c:63:c2: 8b:b4:c9:d4:75:0a:d3:f4:2c:44:06:fd:38:d5:9a:fe:46:3d: b5:2c:d9:54:1b:0c:78:e5:40:33:ea:80:8e:4c:73:38:8b:2a: 0d:c1:d5:7f:c0:db:fc:d2:68:51:87:e0:3a:01:3e:58:46:4a: 35:d1:0a:b5:8c:ab:34:ed:b1:32:cd:2a:d4:04:88:bd:b4:f2: 1f:a6:20:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa6R/qaE4EtOQldD67NfAfTSRNfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEyMjMxOTE1MTVaFw0yNTEyMjYxOTQwMTVaMDMxMTAvBgNV BAMTKEJDMzAxQzlGRjQ3NjBFQjgyNDAzNDVBRUI4MjA1ODk5OUU3NzUwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0MTa84ertkoV05SV8+mCbmUOa oVbuzfP+gK6CFC9PhFcvnaM8fn/MSXPuwofT1t15agUv/88hxX+peCw6ZkrKeTdW tvk2UicapXwaRt2m8cbd94aORIOuYkzh9kXdCKrL6glT1fMrWspfs5Dq5lS2e9Vm D3rXYBBj26/M4m07aOGRU5HJU4dwKez5k8c7vZEz0Zp/IjQYhH4YHIaa68GbI/Rn a/av3T7eQKwcUb7kWPDszqSDi0GzBpSibDj8LI7NUD8mn824hZrhtEezSOyy49Cv sWIFS+aE5zwrE168rzv2z9rcacmeL9e5IyV8SU/76mdVu5GQ8fxdLqvhnP25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDAcn/R2DrgkA0WuuCBYmZ53UCowHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhDxCY+Gn4BPCYkuvqPFUqJA7t0Vwl7L+f4 TdP59RZMPKV3n47vrysCY2Gd9sq24SRZ1mWua39D/pLi9xc/HuEY08N5nIlJ6BVY e3OMVYWAVa/EwUH6HUyWNfGJYCQQ4C9mGXwJuR6OhagAWX09VmjJbkVyk5gPH0bB Xw3AfNMdayc1UuZ6xiGfUE1TNq97s4S8ngX2V7N2DY374jqECD/TZYVO/I0LUCT1 5tb9+tiVX0xjwou0ydR1CtP0LEQG/TjVmv5GPbUs2VQbDHjlQDPqgI5McziLKg3B 1X/A2/zSaFGH4DoBPlhGSjXRCrWMqzTtsTLNKtQEiL208h+mICs= -----END CERTIFICATE-----Generated at Wed Dec 24 12:28:53 2025 by rpki-client