This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: Z+udGVZ82L7jxjq9MwR5uO5qd511uIjkWqEawOAqtO0= Subject key identifier: 10:7A:45:06:23:D8:1C:B4:09:75:CD:AC:72:D5:CF:81:CA:84:52:F6 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 71FB62E72E5FFA55422B4FD0616B4ACDE8A195E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0395 Signing time: Thu 04 Dec 2025 19:42:08 +0000 Manifest this update: Thu 04 Dec 2025 19:37:08 +0000 Manifest next update: Mon 08 Dec 2025 00:05:08 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) 2: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: aVTbU2ofINES9Yu+MLxSjIuvP+aVIZg57auA+OkE5SA=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:fb:62:e7:2e:5f:fa:55:42:2b:4f:d0:61:6b:4a:cd:e8:a1:95:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Dec 4 19:37:08 2025 GMT Not After : Dec 8 00:05:08 2025 GMT Subject: CN=107A450623D81CB40975CDAC72D5CF81CA8452F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:18:3e:ec:f1:13:d4:05:e5:d5:16:a3:df: ec:eb:bc:c4:84:ee:13:98:c3:65:a4:1e:af:49:9a: bd:bf:22:f4:82:3b:7a:92:14:e5:f0:47:b8:38:6a: 0b:ba:b4:0b:fd:3a:5d:b3:74:0f:91:27:d1:cd:a1: 7b:7d:91:14:f0:8b:a9:cd:ff:e0:d9:2a:33:dd:f1: 5a:16:4d:12:0a:5b:56:93:94:40:6f:12:b6:40:b0: d9:7a:e0:bc:73:55:fd:96:30:c4:bd:b7:d5:42:9f: 1f:c0:0b:ba:01:53:5d:55:31:be:e4:50:b6:27:69: e5:3f:f5:d2:81:0b:ff:2a:e2:15:d7:7c:c1:d5:3b: 37:25:e4:d4:01:fc:ee:5f:9c:69:f4:82:c1:f4:dc: c2:8a:a5:38:be:ff:5d:3c:df:60:8e:1f:0e:19:a8: 64:63:32:8b:99:1c:5a:b6:a3:8b:2a:82:87:97:20: e7:6c:15:de:f7:0e:1f:f0:20:64:e4:68:39:00:7d: 65:73:07:dc:26:6d:85:5e:b8:ff:70:f4:5f:6c:a6: 81:4c:2e:c1:1d:5b:e6:55:eb:39:e3:b1:b2:0f:a7: 1a:29:03:84:90:70:5c:f0:15:ae:68:48:67:55:80: 72:9d:35:54:c9:09:c4:a3:e5:15:d1:f8:b6:8f:5d: 3d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:45:06:23:D8:1C:B4:09:75:CD:AC:72:D5:CF:81:CA:84:52:F6 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:d8:0a:24:4c:8b:c8:e4:f7:24:43:52:ed:13:bb:b6:4b: 24:4c:20:b1:0a:5a:7a:5c:1d:ca:11:95:f3:0f:2b:76:3f:77: af:4d:71:34:e4:1c:70:aa:85:95:72:01:77:c5:76:21:6a:3f: ea:ac:25:ef:5e:ec:27:2c:11:16:75:14:6b:9d:da:e4:e6:0a: 96:11:9b:ef:9d:ca:be:b6:9a:1d:dd:37:2c:f9:c5:d3:2e:8a: a1:fb:d9:ca:9e:a4:65:07:60:83:2b:a8:5d:9c:05:3b:36:c6: c7:8c:4b:1c:4e:6d:19:35:99:c0:d5:04:28:cd:13:38:cc:09: 14:da:da:46:3e:22:80:23:71:33:e5:9f:fa:ea:3b:53:a6:77: bb:c0:ca:bc:50:49:04:4c:16:28:31:ed:87:16:0d:b3:29:93: 00:f9:e5:ea:80:b3:c7:c3:ea:42:10:7d:0e:07:fc:87:75:3f: 09:a3:0c:0e:06:80:c0:9f:52:36:fb:9e:46:13:36:2f:33:66: d9:1f:72:f5:a5:63:4c:b3:14:0a:50:db:93:3a:f9:e9:fa:75: 69:8f:f9:67:72:f1:76:bb:0e:06:08:30:41:6f:2d:77:f4:c6: 90:33:20:14:ea:b8:a0:f6:00:5c:ad:e1:35:3e:cf:af:c9:91: bf:5e:a3:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcfti5y5f+lVCK0/QYWtKzeihleEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTEyMDQxOTM3MDhaFw0yNTEyMDgwMDA1MDhaMDMxMTAvBgNV BAMTKDEwN0E0NTA2MjNEODFDQjQwOTc1Q0RBQzcyRDVDRjgxQ0E4NDUyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMhg+7PET1AXl1Raj3+zrvMSE 7hOYw2WkHq9Jmr2/IvSCO3qSFOXwR7g4agu6tAv9Ol2zdA+RJ9HNoXt9kRTwi6nN /+DZKjPd8VoWTRIKW1aTlEBvErZAsNl64LxzVf2WMMS9t9VCnx/AC7oBU11VMb7k ULYnaeU/9dKBC/8q4hXXfMHVOzcl5NQB/O5fnGn0gsH03MKKpTi+/10832COHw4Z qGRjMouZHFq2o4sqgoeXIOdsFd73Dh/wIGTkaDkAfWVzB9wmbYVeuP9w9F9spoFM LsEdW+ZV6znjsbIPpxopA4SQcFzwFa5oSGdVgHKdNVTJCcSj5RXR+LaPXT0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHpFBiPYHLQJdc2sctXPgcqEUvYwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfK2AokTIvI5PckQ1LtE7u2SyRMILEKWnpc HcoRlfMPK3Y/d69NcTTkHHCqhZVyAXfFdiFqP+qsJe9e7CcsERZ1FGud2uTmCpYR m++dyr62mh3dNyz5xdMuiqH72cqepGUHYIMrqF2cBTs2xseMSxxObRk1mcDVBCjN EzjMCRTa2kY+IoAjcTPln/rqO1Omd7vAyrxQSQRMFigx7YcWDbMpkwD55eqAs8fD 6kIQfQ4H/Id1PwmjDA4GgMCfUjb7nkYTNi8zZtkfcvWlY0yzFApQ25M6+en6dWmP +Wdy8Xa7DgYIMEFvLXf0xpAzIBTquKD2AFyt4TU+z6/Jkb9eo60= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:53 2025 by rpki-client