This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: zCGvKIJDOb/BAKp64coooZi1L/GIEae22P82VCLfpyo= Subject key identifier: 18:60:A3:8A:72:4B:7B:96:F6:2A:F4:F7:A1:DE:7C:D4:17:4C:3A:0C Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 4EA756C1C61622E929C17F04D6F3349D9860606C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 0539 Signing time: Sun 21 Dec 2025 21:51:02 +0000 Manifest this update: Sun 21 Dec 2025 21:46:02 +0000 Manifest next update: Thu 25 Dec 2025 03:23:02 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) 2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: teiTMPDwjhzV0lFiopLg7DGf5weS0tHuxCgADN/4XD4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:a7:56:c1:c6:16:22:e9:29:c1:7f:04:d6:f3:34:9d:98:60:60:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Dec 21 21:46:02 2025 GMT Not After : Dec 25 03:23:02 2025 GMT Subject: CN=1860A38A724B7B96F62AF4F7A1DE7CD4174C3A0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:9b:bf:60:96:a9:7c:a8:02:6f:e1:79:03: 01:65:4f:72:82:68:0b:f7:41:5d:ba:6a:cf:d3:d4: f2:81:39:73:08:5f:92:de:43:bd:71:fe:6c:fd:19: 28:9e:6a:9b:7a:f1:96:e0:9f:2f:8e:93:07:cc:b4: d4:58:f3:0e:7a:32:6b:f7:11:93:0d:b9:a8:a1:f0: 4c:10:4a:f9:69:67:97:25:ed:56:8a:b5:76:13:19: 8f:a8:c1:ff:5a:50:01:61:40:33:46:f7:28:33:8a: 15:ed:d9:f9:6e:9d:0b:4a:b1:35:8f:9c:1d:12:85: a2:ee:18:a0:f0:2f:db:8a:27:ec:9f:ab:55:3a:75: 34:3d:b0:b5:4a:4a:7e:22:fb:1e:9d:0a:9f:f8:c2: 46:24:37:73:09:94:26:52:82:9c:f1:04:31:38:53: 4f:71:48:5c:03:0b:c7:f0:e8:df:2a:2f:aa:e7:42: 04:23:08:01:59:8a:c9:ce:c0:3c:24:0e:92:6c:b5: cb:c3:d5:ba:1b:c2:b9:b1:b2:12:0d:64:4c:3c:38: 84:20:1f:7a:b1:2b:41:44:82:8e:90:2c:00:aa:5d: 67:39:5b:2b:27:1b:5c:34:05:bb:46:dd:23:c4:38: 51:8c:45:3e:69:50:2f:66:d4:33:b9:15:9d:ad:d9: 17:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:60:A3:8A:72:4B:7B:96:F6:2A:F4:F7:A1:DE:7C:D4:17:4C:3A:0C X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:73:82:e4:66:d0:b7:6c:c3:91:e7:dd:f8:c2:23:02:b3:2f: d4:bc:c2:90:09:99:63:57:f4:89:b4:92:2e:e6:9e:41:11:a1: 33:86:04:8b:db:f6:df:75:b7:45:60:3b:97:1b:86:e8:d0:67: 32:e7:94:9c:d1:ba:6f:47:eb:eb:10:18:f2:5c:ed:0e:cd:2a: 7d:ce:2f:e5:ef:14:9c:b3:f5:1d:6e:d9:a3:9f:d2:84:57:f6: 7a:04:1b:aa:eb:0e:88:81:ef:07:64:a3:ed:99:9b:52:7a:5a: 6b:f4:9e:70:16:15:5a:11:ef:0b:68:f0:72:15:af:b9:1a:2a: fc:8b:e1:61:e2:7d:af:bd:ef:fd:68:18:e2:88:08:22:04:9d: 22:84:57:24:41:4b:92:11:7b:11:d3:77:ee:cb:33:4d:73:9c: 51:61:f1:f2:df:34:9a:37:18:ac:22:fe:1b:1f:a7:8c:e7:1a: 0c:3e:f7:99:8a:c4:12:a5:5d:05:0d:8a:c6:3c:be:62:39:b3: 8b:02:c7:ab:ce:b0:f4:9e:83:9e:1f:29:4b:21:13:c2:7f:96: a0:ec:86:72:07:f6:1b:9c:ab:51:71:75:ef:e1:d8:18:c9:2f: 5e:06:b3:23:06:7f:0f:41:ba:32:6c:1b:5e:ba:9e:2f:a7:ae: f1:4e:fc:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTqdWwcYWIukpwX8E1vM0nZhgYGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTEyMjEyMTQ2MDJaFw0yNTEyMjUwMzIzMDJaMDMxMTAvBgNV BAMTKDE4NjBBMzhBNzI0QjdCOTZGNjJBRjRGN0ExREU3Q0Q0MTc0QzNBMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt35u/YJapfKgCb+F5AwFlT3KC aAv3QV26as/T1PKBOXMIX5LeQ71x/mz9GSieapt68Zbgny+OkwfMtNRY8w56Mmv3 EZMNuaih8EwQSvlpZ5cl7VaKtXYTGY+owf9aUAFhQDNG9ygzihXt2flunQtKsTWP nB0ShaLuGKDwL9uKJ+yfq1U6dTQ9sLVKSn4i+x6dCp/4wkYkN3MJlCZSgpzxBDE4 U09xSFwDC8fw6N8qL6rnQgQjCAFZisnOwDwkDpJstcvD1bobwrmxshINZEw8OIQg H3qxK0FEgo6QLACqXWc5WysnG1w0BbtG3SPEOFGMRT5pUC9m1DO5FZ2t2RfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGCjinJLe5b2KvT3od581BdMOgwwHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtzguRm0Ldsw5Hn3fjCIwKzL9S8wpAJmWNX 9Im0ki7mnkERoTOGBIvb9t91t0VgO5cbhujQZzLnlJzRum9H6+sQGPJc7Q7NKn3O L+XvFJyz9R1u2aOf0oRX9noEG6rrDoiB7wdko+2Zm1J6Wmv0nnAWFVoR7wto8HIV r7kaKvyL4WHifa+97/1oGOKICCIEnSKEVyRBS5IRexHTd+7LM01znFFh8fLfNJo3 GKwi/hsfp4znGgw+95mKxBKlXQUNisY8vmI5s4sCx6vOsPSeg54fKUshE8J/lqDs hnIH9hucq1Fxde/h2BjJL14GsyMGfw9BujJsG166ni+nrvFO/DU= -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:43 2025 by rpki-client