This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json)
Hash identifier: oxdFvq3PRxwSEY/Qk7BqvVolyJwpd7SiTBwVObj8LDA=
Subject key identifier: 7F:2B:01:95:3E:03:30:8A:9C:28:70:34:C4:27:8E:83:16:DA:0D:A8
Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Certificate serial: 7D5D80B9CEF841B4859BAB66669500A9DB225262
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
Manifest number: 053A
Signing time: Wed 24 Dec 2025 03:31:03 +0000
Manifest this update: Wed 24 Dec 2025 03:26:03 +0000
Manifest next update: Sat 27 Dec 2025 07:10:03 +0000
Files and hashes: 1: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: 4GJXuMLI0jhjxcYiqMXkm2SKZQE61eKaN1qfgy3YB1A=)
2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 07:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5d:80:b9:ce:f8:41:b4:85:9b:ab:66:66:95:00:a9:db:22:52:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5
Validity
Not Before: Dec 24 03:26:03 2025 GMT
Not After : Dec 27 07:10:03 2025 GMT
Subject: CN=7F2B01953E03308A9C287034C4278E8316DA0DA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:11:b5:91:cc:c4:89:58:4a:e0:01:9a:a2:
ee:8a:c6:fd:f9:f2:a2:7a:43:57:d1:cc:04:f2:a1:
49:a9:ca:78:84:62:ce:72:95:fb:5a:8c:cb:d1:fa:
53:16:72:60:de:ea:d0:24:d4:57:50:f3:ce:b6:b8:
78:9c:e1:ca:0b:79:1a:02:bf:8b:96:99:bf:e5:53:
ca:39:f9:14:2d:fc:63:63:f3:89:d1:ef:b0:a4:7d:
4d:dd:c6:de:c3:7c:34:72:5b:95:4d:18:f5:3b:88:
ef:f0:c2:95:f2:a6:ad:04:aa:57:03:26:33:d1:d8:
f1:1b:41:ca:42:c3:35:54:28:6d:15:db:21:34:a0:
33:0b:18:55:5b:96:85:80:10:a0:93:91:d2:40:fe:
6e:c6:a2:4a:5b:98:9d:24:ee:20:5f:64:5f:76:ec:
2a:ba:61:be:c1:ca:1f:ad:11:01:39:48:2f:c6:f6:
11:1c:05:4f:ad:62:48:cc:7e:42:40:b6:5a:58:ff:
e6:3a:47:d7:ce:20:9e:76:2f:35:7e:78:76:3b:07:
7c:8c:48:c8:f0:c7:7c:fb:7c:f4:4c:b1:07:81:db:
8c:bf:63:3f:82:19:01:db:68:3a:ed:f2:82:2a:c6:
89:cb:d6:64:d7:ba:3e:7b:7e:b8:28:7e:1b:23:54:
14:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:01:95:3E:03:30:8A:9C:28:70:34:C4:27:8E:83:16:DA:0D:A8
X509v3 Authority Key Identifier:
keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c2:d9:53:41:b3:e9:a0:d3:a5:6c:91:8d:6a:c8:71:7f:16:
d6:fd:f5:16:b1:8e:7a:e3:34:af:19:a1:b6:a1:77:59:3f:81:
da:83:46:7c:dd:47:43:0d:b4:76:fb:95:e4:95:f5:77:d3:06:
5e:e9:cf:f5:ad:08:9e:bf:3e:e6:3d:72:16:63:e2:5d:5a:c9:
3b:95:c3:14:26:46:b8:93:e5:7c:81:ab:25:7a:17:93:5d:08:
0d:16:32:ff:e0:46:54:3f:4d:fd:7c:ac:d6:db:3d:ea:23:28:
2b:ad:47:10:32:fd:a4:eb:7c:1c:f7:b7:3e:ae:d1:c8:9d:9a:
32:a2:a6:5c:9c:49:24:f4:ea:aa:b8:86:f1:58:b1:30:28:38:
ca:85:ff:0e:1e:a4:91:6c:03:19:94:eb:15:51:7b:42:b3:96:
a0:ac:a2:1d:5f:16:f3:f8:8a:f7:85:71:bd:21:d5:34:04:37:
ea:02:1d:58:8a:64:58:a5:38:03:4f:95:86:c4:cb:41:a7:c0:
f9:03:6e:5a:e9:dc:d7:e7:6f:a6:13:87:ac:90:a6:1a:3b:df:
34:ff:3d:90:62:3e:82:15:af:86:ff:17:43:32:3f:24:bc:e7:
69:bd:fa:4d:bb:8d:fd:b6:96:27:7a:bc:9a:e6:1a:63:fe:dd:
4b:90:53:76
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUfV2Auc74QbSFm6tmZpUAqdsiUmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1
RjU3MDRDNTAeFw0yNTEyMjQwMzI2MDNaFw0yNTEyMjcwNzEwMDNaMDMxMTAvBgNV
BAMTKDdGMkIwMTk1M0UwMzMwOEE5QzI4NzAzNEM0Mjc4RTgzMTZEQTBEQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRhG1kczEiVhK4AGaou6Kxv35
8qJ6Q1fRzATyoUmpyniEYs5ylftajMvR+lMWcmDe6tAk1FdQ8862uHic4coLeRoC
v4uWmb/lU8o5+RQt/GNj84nR77CkfU3dxt7DfDRyW5VNGPU7iO/wwpXypq0EqlcD
JjPR2PEbQcpCwzVUKG0V2yE0oDMLGFVbloWAEKCTkdJA/m7GokpbmJ0k7iBfZF92
7Cq6Yb7Byh+tEQE5SC/G9hEcBU+tYkjMfkJAtlpY/+Y6R9fOIJ52LzV+eHY7B3yM
SMjwx3z7fPRMsQeB24y/Yz+CGQHbaDrt8oIqxonL1mTXuj57frgofhsjVBQrAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfysBlT4DMIqcKHA0xCeOgxbaDagwHwYDVR0j
BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0
MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3
MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh
NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB
NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAjC2VNBs+mg06VskY1qyHF/Ftb99Raxjnrj
NK8Zobahd1k/gdqDRnzdR0MNtHb7leSV9XfTBl7pz/WtCJ6/PuY9chZj4l1ayTuV
wxQmRriT5XyBqyV6F5NdCA0WMv/gRlQ/Tf18rNbbPeojKCutRxAy/aTrfBz3tz6u
0cidmjKiplycSST06qq4hvFYsTAoOMqF/w4epJFsAxmU6xVRe0KzlqCsoh1fFvP4
iveFcb0h1TQEN+oCHViKZFilOANPlYbEy0GnwPkDblrp3Nfnb6YTh6yQpho73zT/
PZBiPoIVr4b/F0MyPyS852m9+k27jf22lid6vJrmGmP+3UuQU3Y=
-----END CERTIFICATE-----
Generated at Thu Dec 25 07:13:53 2025 by rpki-client