This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: M0uCja2jI/ua2UySXxWVy+hAsNIjjCY88zGiOchfJoQ= Subject key identifier: 17:F1:14:22:CF:06:4E:E2:C4:EE:25:2C:CB:78:0D:36:1C:BB:38:24 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 0302A308FFAFBEE4097E0CD9F38F1FE11A591251 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04B2 Signing time: Tue 23 Dec 2025 05:42:47 +0000 Manifest this update: Tue 23 Dec 2025 05:37:47 +0000 Manifest next update: Fri 26 Dec 2025 08:03:47 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 2: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 3: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 4: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: MphUMfB2p/q+22/seLqUt9z02Cn64W+2MowyK+jvMMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:02:a3:08:ff:af:be:e4:09:7e:0c:d9:f3:8f:1f:e1:1a:59:12:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Dec 23 05:37:47 2025 GMT Not After : Dec 26 08:03:47 2025 GMT Subject: CN=17F11422CF064EE2C4EE252CCB780D361CBB3824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:fc:ba:6e:c1:57:0c:7a:42:56:c9:3a:b6:0a: 8c:46:df:00:ec:af:2f:bb:68:5d:64:2b:15:ef:80: 13:66:15:cd:fd:dc:f5:3f:c6:bb:e6:f2:7a:50:09: f1:9b:29:1e:58:40:06:41:2f:89:bd:ce:21:50:d3: ac:2e:d6:a8:ca:5f:0a:64:f1:d6:5a:a2:2a:b1:d4: 91:d1:4a:88:56:e1:81:29:10:a9:08:2a:84:a0:dd: c9:f7:68:a0:0b:9c:82:de:57:83:c3:a0:ff:d8:dd: 29:39:00:97:2d:c3:17:1c:bf:87:7c:3a:9f:47:cc: 29:75:98:47:e7:47:7a:69:ae:59:5a:7d:34:01:8f: 90:d6:b3:b8:45:79:a8:85:dd:8d:eb:94:1c:72:29: 7b:32:60:95:02:f2:2b:57:af:a7:31:79:8d:54:6a: f8:db:6e:de:fe:84:95:0d:9d:42:24:39:83:1e:e9: 38:65:95:ef:57:51:6f:e4:43:77:cd:b5:05:8a:bc: 9a:4a:5e:dc:27:b2:3f:c4:68:52:75:85:ab:c3:63: 33:8e:25:ee:44:7f:ba:01:4c:fb:8c:76:65:ad:d1: 31:53:c4:d2:6b:94:48:fb:a3:83:7f:f3:18:57:c4: 24:f8:53:e7:cf:09:f9:ab:4f:66:3f:b3:64:ac:6e: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:14:22:CF:06:4E:E2:C4:EE:25:2C:CB:78:0D:36:1C:BB:38:24 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7c:ad:cd:a0:4f:e9:07:0d:e0:42:f0:e3:30:bd:be:e3:2d: 90:08:be:35:6a:9b:d4:eb:6a:32:a4:9d:85:81:2b:a1:b6:62: e3:71:9c:78:74:0c:7d:00:be:90:a0:ee:d9:9c:89:2b:3c:21: 19:5b:17:87:8c:68:3e:a5:ac:43:be:9b:24:96:93:2a:4e:90: aa:9e:3c:cf:83:49:e5:4f:18:f1:e5:9c:6f:19:91:0b:93:03: 9d:b2:1a:5e:93:c3:c3:e8:08:43:2e:d1:d8:bb:7f:fd:73:8f: 7a:d0:bf:b6:60:99:03:50:66:24:5f:6a:a9:5e:28:a9:04:7c: b4:c8:a5:a7:a0:d3:dd:e8:2a:e3:8a:6b:e2:4a:6e:0c:a4:c4: de:82:40:53:6a:34:ce:22:4c:4a:56:cd:4e:22:d8:bb:94:cd: b2:00:58:ae:28:72:cb:96:93:c7:46:4b:b7:46:37:79:fc:f8: 70:7a:27:44:54:f9:3b:2b:24:e1:95:8f:32:bb:0d:f5:07:f6: f0:ce:b6:3d:7d:a6:4d:d5:62:8c:83:03:2e:ad:9b:43:67:ad: 15:99:08:95:56:54:3f:03:d2:32:25:ec:07:31:2b:f2:40:2b: ec:93:9e:47:7c:3d:d0:91:2b:15:fa:8a:c4:bf:17:48:1d:94: 73:8a:b2:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwKjCP+vvuQJfgzZ848f4RpZElEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTEyMjMwNTM3NDdaFw0yNTEyMjYwODAzNDdaMDMxMTAvBgNV BAMTKDE3RjExNDIyQ0YwNjRFRTJDNEVFMjUyQ0NCNzgwRDM2MUNCQjM4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/LpuwVcMekJWyTq2CoxG3wDs ry+7aF1kKxXvgBNmFc393PU/xrvm8npQCfGbKR5YQAZBL4m9ziFQ06wu1qjKXwpk 8dZaoiqx1JHRSohW4YEpEKkIKoSg3cn3aKALnILeV4PDoP/Y3Sk5AJctwxccv4d8 Op9HzCl1mEfnR3pprllafTQBj5DWs7hFeaiF3Y3rlBxyKXsyYJUC8itXr6cxeY1U avjbbt7+hJUNnUIkOYMe6Thlle9XUW/kQ3fNtQWKvJpKXtwnsj/EaFJ1havDYzOO Je5Ef7oBTPuMdmWt0TFTxNJrlEj7o4N/8xhXxCT4U+fPCfmrT2Y/s2SsbuHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/EUIs8GTuLE7iUsy3gNNhy7OCQwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN8rc2gT+kHDeBC8OMwvb7jLZAIvjVqm9Tr ajKknYWBK6G2YuNxnHh0DH0AvpCg7tmciSs8IRlbF4eMaD6lrEO+mySWkypOkKqe PM+DSeVPGPHlnG8ZkQuTA52yGl6Tw8PoCEMu0di7f/1zj3rQv7ZgmQNQZiRfaqle KKkEfLTIpaeg093oKuOKa+JKbgykxN6CQFNqNM4iTEpWzU4i2LuUzbIAWK4ocsuW k8dGS7dGN3n8+HB6J0RU+TsrJOGVjzK7DfUH9vDOtj19pk3VYoyDAy6tm0NnrRWZ CJVWVD8D0jIl7AcxK/JAK+yTnkd8PdCRKxX6isS/F0gdlHOKsrE= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:38 2025 by rpki-client