This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: ieBAjpQpqBDhK/vKY0HYmRGeowV2kDLS5qLygSkZie0= Subject key identifier: 1C:E0:37:AB:BF:95:D6:EC:6E:91:E7:67:9A:22:87:29:89:D5:5F:75 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 6B1D8FE4E164380B2BAE247E9EA729C8FF167341 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 0137 Signing time: Tue 16 Dec 2025 17:21:41 +0000 Manifest this update: Tue 16 Dec 2025 17:16:41 +0000 Manifest next update: Sat 20 Dec 2025 02:58:41 +0000 Files and hashes: 1: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: QAkfJ3BAheMiaEsCJmwjgkbq1DrIBT5H/J7ApeFrKes=) 2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) 3: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1d:8f:e4:e1:64:38:0b:2b:ae:24:7e:9e:a7:29:c8:ff:16:73:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Dec 16 17:16:41 2025 GMT Not After : Dec 20 02:58:41 2025 GMT Subject: CN=1CE037ABBF95D6EC6E91E7679A22872989D55F75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:5f:8b:e0:73:fa:c2:c2:89:b6:ca:d2:ee: e8:14:e6:7c:88:41:cb:68:31:7c:62:c3:50:1f:a6: 05:65:d2:08:fb:5e:73:97:c1:24:48:be:6b:17:1f: 14:9f:01:6a:d5:e9:b4:72:9a:94:41:34:14:17:71: 3c:45:f7:22:ec:91:11:05:6b:48:b4:b1:5f:b1:b6: 12:e6:2f:e5:d1:6e:fc:d4:c8:e5:32:e3:a3:37:ae: cb:77:57:b7:18:a9:e1:95:ea:bd:76:47:24:d5:36: ff:ec:d4:ea:66:cc:e8:b7:9c:59:ad:aa:fc:f1:4b: bb:ed:21:47:52:86:a9:cc:87:40:c0:8b:c7:1b:d4: da:8b:d8:96:f9:19:6e:d1:85:81:5c:23:34:5b:bb: 4c:60:bf:de:b4:2d:f4:61:7a:57:04:79:b3:29:77: 77:84:37:c4:d5:9d:3f:a0:80:fc:76:54:45:df:68: 90:ff:eb:c3:bb:eb:89:8a:09:9f:96:5d:d4:cf:b0: 9b:af:86:53:a1:48:bb:6a:fd:3c:91:24:d6:bd:43: ba:91:c4:25:ce:00:b3:90:ae:05:8e:b1:0a:97:a1: ee:f3:4b:58:fa:1b:0a:8f:92:cd:d6:5f:8a:b7:3a: 64:9a:f9:dc:4b:59:80:e9:8e:90:0c:26:73:07:25: 83:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E0:37:AB:BF:95:D6:EC:6E:91:E7:67:9A:22:87:29:89:D5:5F:75 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6e:37:98:3b:f1:cf:66:95:ac:23:f0:63:88:46:96:58:ed: 5d:30:24:b5:dd:03:8f:65:db:e1:40:b2:4f:08:54:a4:4c:c4: fe:a4:95:8d:7b:5a:56:41:f2:1f:0e:ce:ea:1d:9f:49:a1:d7: 25:61:1d:6a:1e:85:8e:ec:12:34:49:f4:a8:ad:be:4d:3c:f4: 7f:bd:d7:e8:e7:48:56:7c:a2:5b:c7:85:1e:92:19:f9:51:9e: 02:0d:b6:27:e0:21:7b:69:46:83:3e:a3:db:74:b3:93:ab:a8: 2c:5a:0b:52:89:a9:cd:90:a5:02:75:83:ca:36:7c:6c:45:9f: 82:ae:dd:7b:df:c9:f2:f6:62:3f:c0:7d:bf:e4:79:b2:69:81: 0f:e9:8d:1a:71:98:0f:3c:ea:85:6b:62:86:c7:27:b3:fb:78: 95:09:21:4b:26:17:01:94:48:83:b5:a3:17:ee:fa:c2:36:c7: 6f:32:e4:9a:c9:95:7c:d9:0f:59:b2:0b:11:3e:65:f5:9f:b9: 88:a3:26:c1:9f:c4:23:b9:c3:17:69:1e:38:7f:03:c9:4c:c8: 34:46:50:3a:21:61:e9:1b:6e:a5:e6:e1:58:b9:c1:6d:6e:78: 56:66:0f:e5:df:7a:e5:50:8e:16:93:87:78:ad:7f:ce:f9:ec: 8d:13:16:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUax2P5OFkOAsrriR+nqcpyP8Wc0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTEyMTYxNzE2NDFaFw0yNTEyMjAwMjU4NDFaMDMxMTAvBgNV BAMTKDFDRTAzN0FCQkY5NUQ2RUM2RTkxRTc2NzlBMjI4NzI5ODlENTVGNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg71+L4HP6wsKJtsrS7ugU5nyI QctoMXxiw1AfpgVl0gj7XnOXwSRIvmsXHxSfAWrV6bRympRBNBQXcTxF9yLskREF a0i0sV+xthLmL+XRbvzUyOUy46M3rst3V7cYqeGV6r12RyTVNv/s1OpmzOi3nFmt qvzxS7vtIUdShqnMh0DAi8cb1NqL2Jb5GW7RhYFcIzRbu0xgv960LfRhelcEebMp d3eEN8TVnT+ggPx2VEXfaJD/68O764mKCZ+WXdTPsJuvhlOhSLtq/TyRJNa9Q7qR xCXOALOQrgWOsQqXoe7zS1j6GwqPks3WX4q3OmSa+dxLWYDpjpAMJnMHJYPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHOA3q7+V1uxukednmiKHKYnVX3UwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRuN5g78c9mlawj8GOIRpZY7V0wJLXdA49l 2+FAsk8IVKRMxP6klY17WlZB8h8Ozuodn0mh1yVhHWoehY7sEjRJ9Kitvk089H+9 1+jnSFZ8olvHhR6SGflRngINtifgIXtpRoM+o9t0s5OrqCxaC1KJqc2QpQJ1g8o2 fGxFn4Ku3XvfyfL2Yj/Afb/kebJpgQ/pjRpxmA886oVrYobHJ7P7eJUJIUsmFwGU SIO1oxfu+sI2x28y5JrJlXzZD1myCxE+ZfWfuYijJsGfxCO5wxdpHjh/A8lMyDRG UDohYekbbqXm4Vi5wW1ueFZmD+XfeuVQjhaTh3itf8757I0TFoI= -----END CERTIFICATE-----Generated at Fri Dec 19 12:21:42 2025 by rpki-client