This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: t3LaBCi6M/Tu9SxlEMtd2MBdGykRJD2nlXK2cvouK3U= Subject key identifier: 6A:1D:67:B6:FE:41:F9:44:88:10:C1:3B:E7:14:FB:21:45:7C:06:B3 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 5A9EA004E8584E60178AB831F9CBAE7A3A166EA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03BA Signing time: Sat 24 Jan 2026 03:21:00 +0000 Manifest this update: Sat 24 Jan 2026 03:16:00 +0000 Manifest next update: Tue 27 Jan 2026 13:24:00 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) 2: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: /qPccJnrZMp8g3f30x1eq8DZ/pqvuF5KM2UqJk+ju9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 13:24:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:9e:a0:04:e8:58:4e:60:17:8a:b8:31:f9:cb:ae:7a:3a:16:6e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Jan 24 03:16:00 2026 GMT Not After : Jan 27 13:24:00 2026 GMT Subject: CN=6A1D67B6FE41F9448810C13BE714FB21457C06B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:23:6b:a2:13:b1:c9:ba:68:3f:61:73:98:d2: a6:e8:f2:ee:0f:96:1d:2f:3a:e3:a2:de:00:49:01: bc:30:56:c4:67:d8:c0:e0:dd:be:61:f6:b0:6f:7b: 13:0b:01:d5:24:45:d3:80:87:ad:0d:02:ae:40:03: 40:16:e2:30:fb:10:a8:4d:74:a7:5b:b4:9a:a7:51: bf:fc:c8:73:89:e0:64:8a:e7:46:95:f1:fb:22:fb: b9:90:ee:33:20:82:c4:7d:16:bc:6e:fb:a9:1b:4b: 8e:51:8e:ec:44:d2:a4:62:c9:c0:e7:5f:42:4e:4e: 35:1f:0e:10:df:e1:0c:19:90:23:d9:19:e5:ca:c6: 15:b8:98:bb:fa:d5:d4:16:61:f8:71:09:d0:2e:55: 82:49:07:a8:0d:ee:16:b2:86:44:77:58:71:5a:b7: 23:d9:df:07:ae:b1:47:39:b5:37:60:4f:bf:1a:2b: 27:5f:d1:c9:34:76:f7:45:4a:a8:5f:4a:ce:18:16: 84:8a:7d:48:67:a8:20:e7:e4:0a:1e:a1:03:5d:5b: f9:06:01:7a:aa:48:82:27:7e:3b:34:76:a3:7c:99: 2f:8b:c9:10:8b:55:5a:ea:e7:c2:74:ce:04:51:d3: 70:81:7a:eb:70:93:e6:8c:76:8c:b6:32:09:af:35: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1D:67:B6:FE:41:F9:44:88:10:C1:3B:E7:14:FB:21:45:7C:06:B3 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:70:70:8e:5f:2b:d7:c3:59:3b:e8:7d:b2:81:e2:00:98:00: c7:a1:a3:b2:4d:f8:82:98:22:4d:fc:1e:e7:cd:bf:ea:09:bd: 6e:42:ab:5f:66:71:13:23:53:b9:e0:aa:2e:ee:75:7c:74:27: 74:8a:82:03:75:6e:47:ae:04:01:b5:10:aa:32:68:62:59:58: 66:72:58:25:02:bb:12:60:89:4c:62:70:89:78:81:6c:37:aa: 38:66:39:4a:f3:36:50:b1:e3:a9:6f:ea:6c:6e:ca:8a:09:00: 28:80:6f:5c:4d:82:3c:b1:19:24:ef:2f:d9:33:7b:c9:fb:49: 91:c5:c7:d3:aa:6e:92:24:6c:0a:62:49:88:8c:37:ec:ac:db: 63:3d:8c:ab:11:c4:03:47:b1:7e:1d:24:d3:14:08:76:60:3e: 3d:3c:cd:f7:0c:28:e6:ee:f8:d7:95:5f:2d:69:53:9c:05:0d: 2e:61:7b:b2:bd:94:be:d1:55:4b:3b:2b:87:3d:8b:ff:d7:77: 36:d8:40:6c:1a:ea:21:fb:46:98:d8:dd:9e:73:2f:3d:49:b4: 05:32:13:5e:fa:f3:73:c7:0a:0b:6f:62:8c:b5:49:d6:27:25: 80:59:a1:4f:47:9c:a0:08:d0:31:49:02:82:54:98:2f:fc:58: 34:82:b0:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWp6gBOhYTmAXirgx+cuuejoWbqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNjAxMjQwMzE2MDBaFw0yNjAxMjcxMzI0MDBaMDMxMTAvBgNV BAMTKDZBMUQ2N0I2RkU0MUY5NDQ4ODEwQzEzQkU3MTRGQjIxNDU3QzA2QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDI2uiE7HJumg/YXOY0qbo8u4P lh0vOuOi3gBJAbwwVsRn2MDg3b5h9rBvexMLAdUkRdOAh60NAq5AA0AW4jD7EKhN dKdbtJqnUb/8yHOJ4GSK50aV8fsi+7mQ7jMggsR9Frxu+6kbS45RjuxE0qRiycDn X0JOTjUfDhDf4QwZkCPZGeXKxhW4mLv61dQWYfhxCdAuVYJJB6gN7hayhkR3WHFa tyPZ3weusUc5tTdgT78aKydf0ck0dvdFSqhfSs4YFoSKfUhnqCDn5AoeoQNdW/kG AXqqSIInfjs0dqN8mS+LyRCLVVrq58J0zgRR03CBeutwk+aMdoy2MgmvNW1ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUah1ntv5B+USIEME75xT7IUV8BrMwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNwcI5fK9fDWTvofbKB4gCYAMeho7JN+IKY Ik38HufNv+oJvW5Cq19mcRMjU7ngqi7udXx0J3SKggN1bkeuBAG1EKoyaGJZWGZy WCUCuxJgiUxicIl4gWw3qjhmOUrzNlCx46lv6mxuyooJACiAb1xNgjyxGSTvL9kz e8n7SZHFx9OqbpIkbApiSYiMN+ys22M9jKsRxANHsX4dJNMUCHZgPj08zfcMKObu +NeVXy1pU5wFDS5he7K9lL7RVUs7K4c9i//XdzbYQGwa6iH7RpjY3Z5zLz1JtAUy E17683PHCgtvYoy1SdYnJYBZoU9HnKAI0DFJAoJUmC/8WDSCsEA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:29:43 2026 by rpki-client