This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: bl+l0NBRY2GHuV8qvccF8De6t8u5c3CcTb/878ZgEPU= Subject key identifier: 7D:52:FD:3A:6B:57:1D:84:5F:16:71:DB:6A:2E:EB:E0:21:25:80:61 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 0147827632E381FBE62B356E7C98CEB19AA175A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01FD Signing time: Fri 19 Dec 2025 01:11:20 +0000 Manifest this update: Fri 19 Dec 2025 01:06:20 +0000 Manifest next update: Mon 22 Dec 2025 12:18:20 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: 5AK+V9KCDpcf/yy8yH5gCs4yooNYd3rBlIbYsphqO8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:47:82:76:32:e3:81:fb:e6:2b:35:6e:7c:98:ce:b1:9a:a1:75:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Dec 19 01:06:20 2025 GMT Not After : Dec 22 12:18:20 2025 GMT Subject: CN=7D52FD3A6B571D845F1671DB6A2EEBE021258061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:d8:ce:6f:ac:d4:76:03:15:5f:18:37:65: 57:2f:d3:d9:61:d2:77:e5:a4:4c:c7:c3:c3:e2:ee: af:b3:fd:f9:48:75:4e:57:0b:04:1e:b4:86:6e:a5: 2d:40:86:b5:d3:a7:01:30:19:ba:ee:1d:c1:a3:f6: fc:be:4a:f0:2b:17:94:34:c4:29:f9:ea:9e:38:2e: 32:08:f7:83:b6:26:47:9b:2f:eb:99:fb:16:ad:85: f8:31:46:ab:2f:a8:a5:0a:39:a8:5f:6d:ae:09:18: fe:ba:36:01:7e:d6:87:de:13:7c:b6:08:de:be:c0: f1:14:bd:fc:0c:5f:fb:85:4d:a9:b7:b1:5e:cf:5c: f5:73:79:ef:74:7a:6d:b7:9c:81:2c:85:fa:91:81: 72:29:67:97:30:48:3d:94:ec:52:3d:47:40:ef:20: a0:4e:b2:db:fa:d4:0e:4e:78:0b:13:e0:11:25:a3: 5e:e6:7f:34:49:53:70:f3:9e:cc:a6:8b:c4:ca:70: 3d:44:17:e8:c4:49:ce:64:d0:86:7b:14:c2:ca:c4: 6c:8f:03:8a:b8:a7:18:56:ca:d3:f0:af:ee:2c:15: a6:20:e8:37:7a:c9:04:17:8d:9a:a2:6f:a4:d7:33: aa:03:9c:91:36:fc:1b:4b:db:62:84:7b:1b:ae:b0: 2f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:52:FD:3A:6B:57:1D:84:5F:16:71:DB:6A:2E:EB:E0:21:25:80:61 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:55:c9:63:2f:f0:5a:42:03:42:1b:45:90:82:f3:0a:12:d5: 71:2b:70:e1:ce:d5:c4:96:3f:9e:4c:45:bc:26:3d:16:cc:fb: 84:3c:90:01:17:e9:ea:3d:38:87:8d:47:42:c1:f9:c2:b9:8b: c9:db:2f:8d:c3:e3:cd:e6:96:fd:b7:c1:39:68:57:45:12:11: b1:7d:86:05:51:5d:4e:25:00:a9:13:4d:21:85:8b:6d:2d:70: 48:9b:85:34:34:a0:03:d0:e2:42:e4:c9:4c:44:e0:42:f4:23: a1:6d:5c:3e:8e:ed:eb:7b:dc:c1:c3:d3:80:f6:90:c4:18:af: e0:40:62:5f:02:5a:00:07:c2:d1:94:5b:50:7c:98:33:fa:8d: 1e:eb:76:08:e5:e4:10:94:0d:ff:79:a0:b7:c2:15:f9:cf:d6: 57:a3:f8:51:ef:a8:94:3b:bd:8d:29:7d:a4:ea:2d:89:0e:0b: 48:86:52:9f:11:c2:f5:78:7e:25:9a:e8:0a:81:dc:50:cd:53: 86:1c:05:71:c2:6e:72:67:31:a4:46:4f:ff:97:97:ac:61:da: c7:4b:e1:ae:b8:c5:4c:92:c1:7d:d0:bf:5c:75:3e:86:54:c8: 35:98:11:bd:83:20:2b:e4:29:1e:e8:6e:11:5c:04:61:25:dd: 2e:a8:18:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUeCdjLjgfvmKzVufJjOsZqhdagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTEyMTkwMTA2MjBaFw0yNTEyMjIxMjE4MjBaMDMxMTAvBgNV BAMTKDdENTJGRDNBNkI1NzFEODQ1RjE2NzFEQjZBMkVFQkUwMjEyNTgwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6djOb6zUdgMVXxg3ZVcv09lh 0nflpEzHw8Pi7q+z/flIdU5XCwQetIZupS1AhrXTpwEwGbruHcGj9vy+SvArF5Q0 xCn56p44LjII94O2JkebL+uZ+xathfgxRqsvqKUKOahfba4JGP66NgF+1ofeE3y2 CN6+wPEUvfwMX/uFTam3sV7PXPVzee90em23nIEshfqRgXIpZ5cwSD2U7FI9R0Dv IKBOstv61A5OeAsT4BElo17mfzRJU3Dznsymi8TKcD1EF+jESc5k0IZ7FMLKxGyP A4q4pxhWytPwr+4sFaYg6Dd6yQQXjZqib6TXM6oDnJE2/BtL22KEexuusC95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfVL9OmtXHYRfFnHbai7r4CElgGEwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9VyWMv8FpCA0IbRZCC8woS1XErcOHO1cSW P55MRbwmPRbM+4Q8kAEX6eo9OIeNR0LB+cK5i8nbL43D483mlv23wTloV0USEbF9 hgVRXU4lAKkTTSGFi20tcEibhTQ0oAPQ4kLkyUxE4EL0I6FtXD6O7et73MHD04D2 kMQYr+BAYl8CWgAHwtGUW1B8mDP6jR7rdgjl5BCUDf95oLfCFfnP1lej+FHvqJQ7 vY0pfaTqLYkOC0iGUp8RwvV4fiWa6AqB3FDNU4YcBXHCbnJnMaRGT/+Xl6xh2sdL 4a64xUySwX3Qv1x1PoZUyDWYEb2DICvkKR7obhFcBGEl3S6oGDs= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:01 2025 by rpki-client