This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: /rVOqZlj0or4RKATWkm3Dwpgl7Aa/QuITyBxY/w47jw= Subject key identifier: 6B:C5:84:99:CE:4F:6F:ED:0D:3D:62:75:0E:3B:BC:8C:5F:E2:A5:22 Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 1BC7820F7DD4E14086014C6A9504F1444194263A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 03A0 Signing time: Sat 20 Dec 2025 12:51:31 +0000 Manifest this update: Sat 20 Dec 2025 12:46:31 +0000 Manifest next update: Tue 23 Dec 2025 17:36:31 +0000 Files and hashes: 1: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: OcpxQRh/JL+v1Xi+YB2rUnyhk3ZQ1ohkJPQUkeM+hDE=) 2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 17:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c7:82:0f:7d:d4:e1:40:86:01:4c:6a:95:04:f1:44:41:94:26:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Dec 20 12:46:31 2025 GMT Not After : Dec 23 17:36:31 2025 GMT Subject: CN=6BC58499CE4F6FED0D3D62750E3BBC8C5FE2A522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:6b:08:9b:62:e7:b3:0e:b4:f8:fc:6d:21: 9f:fc:3a:be:f5:a1:b9:75:50:b3:5e:66:c2:7b:57: f5:80:af:31:bd:96:15:16:a6:eb:8f:46:ba:2f:17: 0b:19:cd:b9:bb:58:f9:e7:30:ba:e7:11:6e:92:d1: 5f:74:a6:36:a4:5a:c2:51:c4:f0:04:ac:a1:d1:30: f2:f7:f3:0f:9a:a8:2e:80:a6:06:a7:6c:b0:06:6d: 1a:dc:18:41:6a:37:25:36:28:34:1c:5e:44:8d:aa: 86:2d:31:4d:60:2f:ff:d1:7a:04:04:94:c5:d2:c5: 17:92:57:07:9d:7a:42:39:cb:24:e9:30:f6:0b:e1: f2:eb:c1:57:9a:fd:4a:6f:56:8b:61:0a:7b:ca:51: 37:16:d8:d4:86:3e:8c:bd:a0:d2:27:6d:7c:7b:98: bf:78:98:4f:a2:c5:e8:94:74:5a:2b:97:ca:9c:4d: 3a:ae:ac:ea:c4:6b:24:40:b7:e6:d9:f7:48:44:ae: 5b:8c:a6:e9:97:1f:e4:6b:76:af:4b:bf:26:be:2a: a6:c9:76:cb:06:dc:61:ce:38:c1:07:a8:f7:38:73: 93:7b:96:8c:23:03:55:96:ec:c1:e3:98:19:61:cf: 17:c8:9d:46:af:9f:7d:82:b7:df:87:19:48:fe:4a: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C5:84:99:CE:4F:6F:ED:0D:3D:62:75:0E:3B:BC:8C:5F:E2:A5:22 X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:ce:f9:74:84:c6:b4:ed:45:61:c6:ca:00:87:73:90:a5:64: 7f:ff:78:75:09:00:cb:fc:86:b6:73:1b:40:a5:34:bd:1f:02: d9:33:46:ee:0e:6f:c7:35:2f:f0:9c:3c:e2:6c:55:6f:9b:1f: 77:d5:93:42:2d:64:c1:b3:68:d8:23:a9:4c:96:a2:7e:35:b4: d1:30:1c:f9:3e:2d:07:87:bf:dd:60:d9:fe:9e:0f:56:d7:57: 92:cc:2d:8f:af:1f:92:8b:83:60:07:bb:2e:7e:b3:10:1b:ef: 97:d7:0b:98:7b:b7:5b:91:33:97:e4:04:62:86:2e:b9:a9:90: 43:8d:b7:82:cd:90:78:11:21:9b:2c:ff:4b:c7:88:ef:20:4d: ee:6a:4e:01:b1:d8:9b:e5:14:ac:f3:3a:e4:b1:49:7c:43:25: 92:88:4e:23:b3:81:69:d7:ae:f9:ff:b6:3a:c0:8f:94:68:8a: fb:57:36:78:8e:28:dc:31:0e:e9:8f:85:1a:a7:f3:53:fd:60: 8f:db:2b:18:c1:3d:2a:33:c7:52:32:24:64:6c:53:29:9d:ed: 8c:e0:82:31:2b:63:a2:3a:23:bd:14:b9:f0:03:a1:53:df:fd: f1:d5:41:fb:48:b1:0f:ae:69:b0:01:6e:62:be:f1:b7:09:b0: ca:db:cf:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8eCD33U4UCGAUxqlQTxREGUJjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNTEyMjAxMjQ2MzFaFw0yNTEyMjMxNzM2MzFaMDMxMTAvBgNV BAMTKDZCQzU4NDk5Q0U0RjZGRUQwRDNENjI3NTBFM0JCQzhDNUZFMkE1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeT2sIm2Lnsw60+PxtIZ/8Or71 obl1ULNeZsJ7V/WArzG9lhUWpuuPRrovFwsZzbm7WPnnMLrnEW6S0V90pjakWsJR xPAErKHRMPL38w+aqC6ApganbLAGbRrcGEFqNyU2KDQcXkSNqoYtMU1gL//RegQE lMXSxReSVwedekI5yyTpMPYL4fLrwVea/UpvVothCnvKUTcW2NSGPoy9oNInbXx7 mL94mE+ixeiUdForl8qcTTqurOrEayRAt+bZ90hErluMpumXH+Rrdq9Lvya+KqbJ dssG3GHOOMEHqPc4c5N7lowjA1WW7MHjmBlhzxfInUavn32Ct9+HGUj+SmA5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa8WEmc5Pb+0NPWJ1Dju8jF/ipSIwHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/O+XSExrTtRWHGygCHc5ClZH//eHUJAMv8 hrZzG0ClNL0fAtkzRu4Ob8c1L/CcPOJsVW+bH3fVk0ItZMGzaNgjqUyWon41tNEw HPk+LQeHv91g2f6eD1bXV5LMLY+vH5KLg2AHuy5+sxAb75fXC5h7t1uRM5fkBGKG LrmpkEONt4LNkHgRIZss/0vHiO8gTe5qTgGx2JvlFKzzOuSxSXxDJZKITiOzgWnX rvn/tjrAj5RoivtXNniOKNwxDumPhRqn81P9YI/bKxjBPSozx1IyJGRsUymd7Yzg gjErY6I6I70UufADoVPf/fHVQftIsQ+uabABbmK+8bcJsMrbz/c= -----END CERTIFICATE-----Generated at Mon Dec 22 17:49:03 2025 by rpki-client