This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: Sp0yVzoC9pPv3cLHeSP2o5ZiRyUYlNvZxEG/u/vy4pY= Subject key identifier: 76:E2:51:51:87:2E:9D:E2:F0:69:E5:58:D6:3C:02:A4:F4:3C:E2:04 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 6D203AF5B78DA6430F967B5DC4169A5B5306548D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0244 Signing time: Wed 17 Dec 2025 16:32:04 +0000 Manifest this update: Wed 17 Dec 2025 16:27:04 +0000 Manifest next update: Sun 21 Dec 2025 02:25:04 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: gLDYjqO4OHUiAQBUTNXE53C95lxAetK3Klv9EC5Fn4w=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:20:3a:f5:b7:8d:a6:43:0f:96:7b:5d:c4:16:9a:5b:53:06:54:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Dec 17 16:27:04 2025 GMT Not After : Dec 21 02:25:04 2025 GMT Subject: CN=76E25151872E9DE2F069E558D63C02A4F43CE204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:05:e5:54:dc:9c:4e:0b:8f:5b:36:bc:b9:83: 6a:63:80:a2:3e:f8:53:f3:d3:65:bc:25:c0:0c:53: e9:dc:7d:4d:6b:e9:fc:9f:41:53:be:c7:2d:31:06: 9b:8d:87:1a:45:ea:97:fe:ca:54:3e:d0:cc:7c:90: d4:9d:69:07:ae:ee:13:0b:f3:4d:5a:96:f4:b5:f9: dd:04:e2:47:c7:a9:08:2a:20:74:9b:f1:d9:54:78: ad:95:1e:74:6c:58:98:5a:11:d6:3f:af:93:45:f4: 98:20:3b:57:5e:9e:fa:05:e5:79:36:81:50:ab:ee: 95:85:c8:fd:ea:e6:c7:83:57:ef:97:33:ef:c5:2e: 7a:40:43:d0:10:79:3a:e3:74:1c:f2:7c:6f:88:d9: c6:d8:e4:ec:7d:00:f4:25:99:33:16:78:bf:cd:0e: df:7c:26:10:de:0c:15:f9:05:4c:28:be:ee:d7:31: a8:80:f9:26:55:e0:87:e0:82:f7:5c:a1:a4:5e:76: 91:2b:d2:b4:ec:53:a6:24:66:f5:d9:51:b6:0c:95: 6c:75:fe:83:92:f0:a5:62:97:c3:74:e0:46:0c:b6: 50:82:bd:f9:2e:a0:5b:1f:92:d2:ef:44:45:32:9f: 5d:95:b7:5d:a8:db:50:a5:09:f1:62:00:8b:41:41: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:51:51:87:2E:9D:E2:F0:69:E5:58:D6:3C:02:A4:F4:3C:E2:04 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:23:bd:a7:32:bf:ed:70:93:fa:62:63:51:0c:14:9c:10:27: 49:0c:11:5a:b2:08:fd:59:e9:98:10:b2:af:b4:52:c4:f0:5b: 1c:5d:b6:53:5c:2c:4b:26:8c:dc:7b:9c:19:3d:25:e8:8b:64: 7b:f6:40:c5:7d:70:62:6d:fb:ec:4b:2e:4b:cf:35:42:06:4e: 34:32:eb:af:07:36:71:ec:b4:3c:3b:b6:0b:12:49:8c:9f:0a: 9e:3a:6f:de:96:e0:66:9e:57:91:fe:e4:33:4e:fe:f1:39:bb: 31:d1:ca:5c:0a:52:46:be:1b:43:a6:70:51:97:cb:f3:3a:24: b9:9f:64:b2:6a:c6:44:a4:e1:c9:f2:98:01:ad:54:3f:c9:6f: a0:ec:6d:f8:bd:ec:84:99:ec:d9:92:9d:42:d1:c1:c4:3e:9e: 7f:62:72:7c:17:7b:b7:51:c7:92:02:59:aa:86:28:45:f5:08: fb:57:a5:0e:e6:83:d6:59:94:29:6b:8e:d3:6c:e8:de:ff:96: fb:20:76:ce:a5:74:73:45:55:64:77:bf:62:78:bb:af:7b:8f: 02:f6:27:f6:38:58:bd:30:e2:b0:ed:fe:16:55:25:3f:74:80: 35:ac:fe:63:e3:2a:ae:68:46:03:cb:f2:ba:ec:a3:26:9a:22: 42:ae:83:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSA69beNpkMPlntdxBaaW1MGVI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTEyMTcxNjI3MDRaFw0yNTEyMjEwMjI1MDRaMDMxMTAvBgNV BAMTKDc2RTI1MTUxODcyRTlERTJGMDY5RTU1OEQ2M0MwMkE0RjQzQ0UyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBeVU3JxOC49bNry5g2pjgKI+ +FPz02W8JcAMU+ncfU1r6fyfQVO+xy0xBpuNhxpF6pf+ylQ+0Mx8kNSdaQeu7hML 801alvS1+d0E4kfHqQgqIHSb8dlUeK2VHnRsWJhaEdY/r5NF9JggO1denvoF5Xk2 gVCr7pWFyP3q5seDV++XM+/FLnpAQ9AQeTrjdBzyfG+I2cbY5Ox9APQlmTMWeL/N Dt98JhDeDBX5BUwovu7XMaiA+SZV4IfggvdcoaRedpEr0rTsU6YkZvXZUbYMlWx1 /oOS8KVil8N04EYMtlCCvfkuoFsfktLvREUyn12Vt12o21ClCfFiAItBQUu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUduJRUYcuneLwaeVY1jwCpPQ84gQwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcjvacyv+1wk/piY1EMFJwQJ0kMEVqyCP1Z 6ZgQsq+0UsTwWxxdtlNcLEsmjNx7nBk9JeiLZHv2QMV9cGJt++xLLkvPNUIGTjQy 668HNnHstDw7tgsSSYyfCp46b96W4GaeV5H+5DNO/vE5uzHRylwKUka+G0OmcFGX y/M6JLmfZLJqxkSk4cnymAGtVD/Jb6Dsbfi97ISZ7NmSnULRwcQ+nn9icnwXe7dR x5ICWaqGKEX1CPtXpQ7mg9ZZlClrjtNs6N7/lvsgds6ldHNFVWR3v2J4u697jwL2 J/Y4WL0w4rDt/hZVJT90gDWs/mPjKq5oRgPL8rrsoyaaIkKug1A= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:14 2025 by rpki-client