This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: OkREV0sO+wEp7RLuCTtjx8dKzIqBRN2XfEV3qRCXot8= Subject key identifier: D7:E8:84:AD:7A:03:01:8D:B0:00:34:E3:34:46:EA:62:05:46:2A:86 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 38861A7781C21FE0AFF161E0A55A92C28690DFCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 0232 Signing time: Fri 19 Dec 2025 15:33:00 +0000 Manifest this update: Fri 19 Dec 2025 15:28:00 +0000 Manifest next update: Mon 22 Dec 2025 20:08:00 +0000 Files and hashes: 1: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: CFG0RPrOpVj/Vsv+bx0G9Z1czDPGpKIrDy70ZJO3bEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:86:1a:77:81:c2:1f:e0:af:f1:61:e0:a5:5a:92:c2:86:90:df:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Dec 19 15:28:00 2025 GMT Not After : Dec 22 20:08:00 2025 GMT Subject: CN=D7E884AD7A03018DB00034E33446EA6205462A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:2c:b8:f9:fa:81:26:49:d8:87:cf:46:1b: 06:cc:dc:27:ca:06:91:d7:64:e3:09:13:36:a6:0a: 92:20:57:73:3c:8c:6d:a0:59:ed:4e:8e:dc:0c:e4: 13:22:27:ad:21:9c:a7:58:a7:f4:c8:14:04:45:e0: bc:30:e6:a7:07:09:49:7e:35:b1:b3:aa:99:63:58: 5d:a9:cd:4e:cd:29:f0:0b:13:65:d4:c8:76:89:56: c6:3c:8e:b3:a8:67:9e:85:85:78:d1:6f:dd:f6:2b: d3:b1:4f:b7:99:07:27:c1:f9:c6:40:41:1f:d2:28: 21:4c:79:68:d7:b3:7f:e2:9c:63:ee:50:49:85:c7: 73:14:a9:37:81:53:17:d5:16:96:2a:86:42:75:45: f9:b5:f2:bf:56:2e:d7:60:4e:50:51:3c:35:92:f3: 70:cf:cc:fa:81:cc:da:1b:64:9c:e9:2c:66:e1:35: 18:cb:9d:83:24:83:81:c6:2d:0f:9f:cd:31:b0:52: b8:11:e2:a9:58:0c:25:37:26:20:87:e0:57:f3:8f: 4a:76:fa:a7:c3:80:45:ad:2e:49:6a:af:d6:c6:77: a3:52:fe:96:d1:58:cb:d9:e6:55:5f:55:75:c4:de: dd:8d:92:a6:ef:81:17:3d:9a:0e:b8:6d:53:59:6e: 2f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E8:84:AD:7A:03:01:8D:B0:00:34:E3:34:46:EA:62:05:46:2A:86 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:05:4b:0f:6a:96:e0:a6:d3:b6:17:d0:12:c1:b9:98:34:24: 53:f2:f8:f8:64:6c:83:01:e9:07:80:ad:46:cd:54:1d:30:95: 59:1c:44:88:f0:b0:1f:30:c1:f0:4b:08:07:8b:3c:94:cd:49: c5:52:33:c6:7f:e9:ed:01:94:3c:a0:2c:8c:0d:ab:e0:9f:90: 36:6c:b1:f7:29:c0:31:e0:58:3c:a2:6c:e8:44:8e:f5:07:1f: fc:23:e9:16:27:26:79:ea:ab:5d:91:d6:21:26:e9:6a:1c:4d: 90:81:1b:db:79:64:c2:14:2d:5d:29:a1:39:e8:71:69:b4:d6: 7e:21:aa:f9:e7:49:fa:b4:13:65:f6:89:b3:90:38:ea:0d:05: d4:a9:6a:a1:8c:6c:14:fa:b0:d7:92:3d:2b:91:82:76:0c:16: 34:14:09:6e:63:d2:3f:63:90:c1:e9:5b:58:67:a4:35:13:e5: 8f:13:5d:9a:12:68:74:2c:5a:db:54:50:ae:91:43:1f:a7:40: f2:04:a7:d8:1a:87:ac:3a:25:8f:8e:8e:ed:83:54:44:8b:5e: e7:17:73:49:94:8c:ab:aa:30:27:fc:c4:49:17:37:d9:31:57: 07:d5:ec:b8:4e:d6:2a:e3:2e:62:b8:ed:5a:a8:47:21:9c:fa: eb:96:f8:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOIYad4HCH+Cv8WHgpVqSwoaQ384wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTEyMTkxNTI4MDBaFw0yNTEyMjIyMDA4MDBaMDMxMTAvBgNV BAMTKEQ3RTg4NEFEN0EwMzAxOERCMDAwMzRFMzM0NDZFQTYyMDU0NjJBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbiy4+fqBJknYh89GGwbM3CfK BpHXZOMJEzamCpIgV3M8jG2gWe1OjtwM5BMiJ60hnKdYp/TIFARF4Lww5qcHCUl+ NbGzqpljWF2pzU7NKfALE2XUyHaJVsY8jrOoZ56FhXjRb932K9OxT7eZByfB+cZA QR/SKCFMeWjXs3/inGPuUEmFx3MUqTeBUxfVFpYqhkJ1Rfm18r9WLtdgTlBRPDWS 83DPzPqBzNobZJzpLGbhNRjLnYMkg4HGLQ+fzTGwUrgR4qlYDCU3JiCH4Ffzj0p2 +qfDgEWtLklqr9bGd6NS/pbRWMvZ5lVfVXXE3t2NkqbvgRc9mg64bVNZbi+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+iErXoDAY2wADTjNEbqYgVGKoYwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4FSw9qluCm07YX0BLBuZg0JFPy+PhkbIMB 6QeArUbNVB0wlVkcRIjwsB8wwfBLCAeLPJTNScVSM8Z/6e0BlDygLIwNq+CfkDZs sfcpwDHgWDyibOhEjvUHH/wj6RYnJnnqq12R1iEm6WocTZCBG9t5ZMIULV0poTno cWm01n4hqvnnSfq0E2X2ibOQOOoNBdSpaqGMbBT6sNeSPSuRgnYMFjQUCW5j0j9j kMHpW1hnpDUT5Y8TXZoSaHQsWttUUK6RQx+nQPIEp9gah6w6JY+Oju2DVESLXucX c0mUjKuqMCf8xEkXN9kxVwfV7LhO1irjLmK47VqoRyGc+uuW+C0= -----END CERTIFICATE-----Generated at Sat Dec 20 18:52:35 2025 by rpki-client