This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: LmWhpU1vv9HrD6aFYiT+LuqAkGR2oljs5xFILt1joNA= Subject key identifier: 02:30:C7:8D:C7:1F:7A:46:6A:B4:27:75:D8:6D:A3:2A:00:ED:BC:82 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 5144B43C1B82280E6D30367EC61E6F218B61653C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03A8 Signing time: Sun 14 Dec 2025 08:21:00 +0000 Manifest this update: Sun 14 Dec 2025 08:16:00 +0000 Manifest next update: Wed 17 Dec 2025 15:39:00 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: 1TZ3faYf1byjxkOv/1od95f8sYy6hXXpO79MJomoxPw=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 15:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:44:b4:3c:1b:82:28:0e:6d:30:36:7e:c6:1e:6f:21:8b:61:65:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Dec 14 08:16:00 2025 GMT Not After : Dec 17 15:39:00 2025 GMT Subject: CN=0230C78DC71F7A466AB42775D86DA32A00EDBC82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4c:b1:81:f0:8a:90:6c:f2:5f:08:87:74:8b: c5:97:f9:20:70:1a:ea:66:38:e3:be:fd:63:78:da: c4:8b:43:a6:eb:68:06:80:63:c0:3d:98:97:dc:23: ce:24:c2:df:df:69:e1:1f:53:f2:33:58:0c:b6:cc: 4c:3d:f2:9c:f2:50:5f:fb:8f:66:06:fc:a2:c7:91: de:27:a4:4c:dd:e0:dd:35:39:3c:f5:82:dc:6a:f1: 5a:ea:73:02:9f:88:73:a1:6b:13:29:36:10:63:24: 95:72:43:21:1f:12:69:0b:85:d7:14:cc:00:bc:e0: 67:07:ba:88:c9:74:08:d4:5d:2b:88:0f:13:b2:98: 8c:0e:5f:5a:67:a4:13:bc:21:4b:cc:68:6a:4b:e1: 88:ae:78:b8:bb:17:91:15:a7:dd:3a:33:44:80:f5: b4:a5:96:ff:e5:e2:82:68:84:c1:38:fc:87:1c:3c: 8b:a0:4d:05:78:33:0c:03:18:fa:be:3c:bf:9a:ae: c8:2f:72:95:88:77:c5:92:1f:9c:2a:e8:9d:65:83: 9b:2e:ec:a7:6b:e3:e1:1d:57:8a:f5:44:db:41:4e: 7a:cc:5e:ef:d8:08:49:35:3e:f3:ed:b5:e1:c5:96: 4b:4d:0c:a2:3e:1a:ac:b0:71:4a:2a:21:87:de:e8: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:30:C7:8D:C7:1F:7A:46:6A:B4:27:75:D8:6D:A3:2A:00:ED:BC:82 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:12:f0:74:87:7a:e0:8f:d1:11:c6:29:8c:95:af:a1:02:d7: ff:7b:9e:84:74:d2:dc:dc:f3:fd:b3:d0:0f:97:84:3e:96:07: d1:da:87:a8:c0:db:dd:8c:99:43:17:66:d4:d8:74:b0:78:df: 79:87:d1:a3:13:fc:54:f2:8b:a9:85:c4:7a:17:ca:28:12:e9: a3:4c:6b:3d:13:c5:ca:4c:e4:54:f5:5e:5d:2e:33:fa:fa:b7: fd:5d:ab:1e:fd:34:ea:0d:de:f8:37:4e:13:d7:1b:7b:b9:a9: 48:1f:12:56:02:0e:c2:9b:ac:44:aa:5f:5c:9e:3f:73:7a:e6: 58:9d:a7:b5:b7:cb:d9:dc:7a:47:8b:73:9c:c4:06:86:c3:b9: 81:5e:56:60:01:49:b6:e5:4d:7a:a6:b4:85:e1:63:a1:2f:37: 01:3a:e7:cf:de:30:e4:ae:35:08:77:d5:17:35:6b:14:3c:d7: b0:30:14:b4:fb:0e:4d:d1:ad:13:c7:a7:da:49:64:02:09:f9: 44:26:f3:da:ac:c9:b8:7c:31:33:c3:cd:bd:3f:fd:41:ce:c1: c6:15:c6:cd:7c:19:59:b1:da:8f:f1:43:ae:bd:f9:c1:54:3d: c3:aa:cc:72:96:64:9e:ce:ea:8a:72:cb:02:4d:96:81:e9:fb: c2:b8:6d:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUS0PBuCKA5tMDZ+xh5vIYthZTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNTEyMTQwODE2MDBaFw0yNTEyMTcxNTM5MDBaMDMxMTAvBgNV BAMTKDAyMzBDNzhEQzcxRjdBNDY2QUI0Mjc3NUQ4NkRBMzJBMDBFREJDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTLGB8IqQbPJfCId0i8WX+SBw GupmOOO+/WN42sSLQ6braAaAY8A9mJfcI84kwt/faeEfU/IzWAy2zEw98pzyUF/7 j2YG/KLHkd4npEzd4N01OTz1gtxq8VrqcwKfiHOhaxMpNhBjJJVyQyEfEmkLhdcU zAC84GcHuojJdAjUXSuIDxOymIwOX1pnpBO8IUvMaGpL4YiueLi7F5EVp906M0SA 9bSllv/l4oJohME4/IccPIugTQV4MwwDGPq+PL+arsgvcpWId8WSH5wq6J1lg5su 7Kdr4+EdV4r1RNtBTnrMXu/YCEk1PvPtteHFlktNDKI+GqywcUoqIYfe6CP5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjDHjccfekZqtCd12G2jKgDtvIIwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM0S8HSHeuCP0RHGKYyVr6EC1/97noR00tzc 8/2z0A+XhD6WB9Hah6jA292MmUMXZtTYdLB433mH0aMT/FTyi6mFxHoXyigS6aNM az0TxcpM5FT1Xl0uM/r6t/1dqx79NOoN3vg3ThPXG3u5qUgfElYCDsKbrESqX1ye P3N65lidp7W3y9ncekeLc5zEBobDuYFeVmABSbblTXqmtIXhY6EvNwE658/eMOSu NQh31Rc1axQ817AwFLT7Dk3RrRPHp9pJZAIJ+UQm89qsybh8MTPDzb0//UHOwcYV xs18GVmx2o/xQ669+cFUPcOqzHKWZJ7O6opyywJNloHp+8K4bRk= -----END CERTIFICATE-----Generated at Mon Dec 15 19:49:27 2025 by rpki-client