This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: 8f6th5wyShgTRTRmP1fiKtTb9c0WSGSQSnOUJ4r8xj0= Subject key identifier: C0:79:39:99:E0:0C:B2:80:4B:AA:63:5B:F0:68:03:B2:73:20:B0:C7 Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 27E69F210DB0C4B047A452CEA6CE3657E1751290 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 03AD Signing time: Sat 24 Jan 2026 15:42:06 +0000 Manifest this update: Sat 24 Jan 2026 15:37:06 +0000 Manifest next update: Tue 27 Jan 2026 15:46:06 +0000 Files and hashes: 1: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: ULJuo4JlKwtfWqpN2WxBIIizTww0+8EhBVz/p9sPJ/4=) 2: 3130332e3136302e31352e302f32342d3234203d3e20313431363130.roa (hash: hvUXOReMrQ3DCf0Qm4MoQmjjiS09sVCzS98Qs2OkopY=) 3: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: G0E79VdSlQltYk3OH12P27D3Gxq5cQvDsgab/UT9ZQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e6:9f:21:0d:b0:c4:b0:47:a4:52:ce:a6:ce:36:57:e1:75:12:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Jan 24 15:37:06 2026 GMT Not After : Jan 27 15:46:06 2026 GMT Subject: CN=C0793999E00CB2804BAA635BF06803B27320B0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:50:b4:c7:9c:1b:3f:bd:38:07:41:70:90:0f: 9c:b2:da:f6:8f:af:54:ac:18:e8:0d:8a:f7:23:78: 67:c2:2c:c2:08:a9:3e:0d:ef:57:23:5e:03:00:dc: 05:98:e5:cf:d3:9e:ac:a8:c0:29:bc:ed:af:d0:9b: 9a:c2:a6:6d:b2:92:87:8d:1a:3d:54:79:0d:32:92: 5b:6f:00:0b:af:bb:1b:89:b8:2e:b7:63:c5:8a:63: f8:3c:94:5f:9a:1d:d4:03:72:2f:83:54:48:96:a6: 9e:07:18:34:91:8a:bd:3b:b4:97:2f:09:3b:f4:54: 7d:50:40:88:4d:62:91:e5:7e:cb:d9:95:79:c0:8a: 11:8c:0d:f1:0c:a0:2c:23:b7:43:1f:ba:9f:9c:b7: 51:61:cf:45:96:6f:b8:8a:85:5c:c0:1b:61:f6:44: 1c:6a:21:1a:fa:d3:8a:a9:6c:da:35:80:7d:1b:7e: 1f:9d:c6:6f:58:eb:ce:dd:7c:0a:3b:6c:6e:50:72: eb:31:b5:f4:6a:48:c3:4d:b0:fe:ea:ca:9f:9a:da: cc:75:2a:79:c7:40:12:e9:9b:d9:c7:53:5e:3c:40: ea:fc:c3:31:24:01:32:9f:da:64:5e:de:71:09:b0: 94:b6:99:86:31:ae:dc:19:9a:30:7e:f7:39:d8:ce: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:79:39:99:E0:0C:B2:80:4B:AA:63:5B:F0:68:03:B2:73:20:B0:C7 X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a5:95:61:56:a4:1a:ac:f1:7c:91:47:a2:5e:27:8d:ec:22: 7e:72:25:0b:7c:4e:b3:e2:25:59:5d:1d:cb:c0:44:60:26:8c: 7d:da:66:14:79:6b:d1:67:c0:af:89:81:c5:63:60:e7:6e:ab: 5b:57:3c:7b:5d:ac:ae:78:ce:62:94:d5:13:da:4a:18:de:0a: d9:52:da:41:09:87:8d:88:3b:2c:fd:66:85:66:e9:38:0a:0d: dc:2d:2d:c8:7e:bd:72:30:6e:fa:d4:6f:fc:ac:0d:88:a8:fc: 3b:76:3e:43:a8:14:de:56:12:f1:72:e1:55:c3:40:05:05:0c: 9b:3e:c7:b8:15:38:55:aa:d9:fe:ed:d9:51:37:03:0c:30:70: 6d:e6:15:1a:5f:ac:0b:78:af:7a:90:6e:6b:56:6e:31:30:97: c7:a1:ec:c7:f4:42:90:f2:92:b7:32:fc:c3:46:17:2c:d1:03: 49:e7:2d:75:e0:fa:f9:0a:d6:4a:6c:2c:13:8b:d7:c2:98:c8: 9e:e2:43:0d:1d:27:af:30:c7:7f:3e:46:71:b1:31:4d:54:e2: 2a:a9:17:48:d1:36:34:db:0d:e8:74:09:f9:e9:47:38:e8:c5: 81:eb:01:1e:d6:c8:97:8b:bd:c1:8b:4a:5a:eb:b3:17:a7:8d: b4:d3:ff:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+afIQ2wxLBHpFLOps42V+F1EpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNjAxMjQxNTM3MDZaFw0yNjAxMjcxNTQ2MDZaMDMxMTAvBgNV BAMTKEMwNzkzOTk5RTAwQ0IyODA0QkFBNjM1QkYwNjgwM0IyNzMyMEIwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ULTHnBs/vTgHQXCQD5yy2vaP r1SsGOgNivcjeGfCLMIIqT4N71cjXgMA3AWY5c/TnqyowCm87a/Qm5rCpm2ykoeN Gj1UeQ0ykltvAAuvuxuJuC63Y8WKY/g8lF+aHdQDci+DVEiWpp4HGDSRir07tJcv CTv0VH1QQIhNYpHlfsvZlXnAihGMDfEMoCwjt0Mfup+ct1Fhz0WWb7iKhVzAG2H2 RBxqIRr604qpbNo1gH0bfh+dxm9Y687dfAo7bG5QcusxtfRqSMNNsP7qyp+a2sx1 KnnHQBLpm9nHU148QOr8wzEkATKf2mRe3nEJsJS2mYYxrtwZmjB+9znYzjDdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwHk5meAMsoBLqmNb8GgDsnMgsMcwHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOllWFWpBqs8XyRR6JeJ43sIn5yJQt8TrPi JVldHcvARGAmjH3aZhR5a9FnwK+JgcVjYOduq1tXPHtdrK54zmKU1RPaShjeCtlS 2kEJh42IOyz9ZoVm6TgKDdwtLch+vXIwbvrUb/ysDYio/Dt2PkOoFN5WEvFy4VXD QAUFDJs+x7gVOFWq2f7t2VE3AwwwcG3mFRpfrAt4r3qQbmtWbjEwl8eh7Mf0QpDy krcy/MNGFyzRA0nnLXXg+vkK1kpsLBOL18KYyJ7iQw0dJ68wx38+RnGxMU1U4iqp F0jRNjTbDeh0CfnpRzjoxYHrAR7WyJeLvcGLSlrrsxenjbTT/84= -----END CERTIFICATE-----Generated at Sun Jan 25 23:55:49 2026 by rpki-client