This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: 19kAemGJmXqNoM3ZoGKbNKZvHhn5L/XHhl4oxj6NwAo= Subject key identifier: A4:3D:5B:D4:D1:04:83:E3:42:94:72:15:A7:39:F0:D6:C0:2E:C2:A0 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 39C05BB99DC6454C437E023724FFFEE7E00D2E37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04AA Signing time: Thu 04 Dec 2025 18:42:39 +0000 Manifest this update: Thu 04 Dec 2025 18:37:39 +0000 Manifest next update: Sun 07 Dec 2025 22:23:39 +0000 Files and hashes: 1: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: 0DqqC1FOrlLsNtRidtoP9C/V/gzNrxVBuA+wUPcEZe4=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 4: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 22:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c0:5b:b9:9d:c6:45:4c:43:7e:02:37:24:ff:fe:e7:e0:0d:2e:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Dec 4 18:37:39 2025 GMT Not After : Dec 7 22:23:39 2025 GMT Subject: CN=A43D5BD4D10483E342947215A739F0D6C02EC2A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:77:e9:66:7f:88:ce:3a:76:37:6b:64:38: d5:e8:a9:11:a2:8e:e1:7f:cf:bc:9e:3e:de:ce:73: ca:54:e7:cc:d5:26:39:31:d9:5d:bd:33:fa:8f:c3: 4a:94:5f:c5:ce:10:e6:2a:e7:6b:92:31:4b:5b:59: 4a:17:02:c4:0b:89:1b:fb:fc:5b:b1:bd:ff:b8:6a: c1:a9:58:74:64:37:9d:90:8a:db:ee:bc:63:63:be: c4:95:96:4e:c2:5d:38:2a:4e:4e:ef:e4:11:9b:df: 78:38:f9:7c:80:d0:2b:fd:84:7d:bf:5c:2a:91:d9: ea:6c:5f:89:52:2c:0b:7a:7f:f4:c5:5a:6e:48:0f: 7a:c6:25:68:1f:e8:eb:1c:0a:f6:5e:c9:34:d5:b4: 0e:e5:d9:a5:af:7b:03:9b:e3:f1:01:4e:12:48:63: e5:e3:d1:df:50:93:29:28:68:85:5c:57:96:d6:af: af:a5:a1:c2:7f:ab:ec:07:b4:c9:ca:8d:de:a6:a0: 69:7d:f1:4c:3b:77:7e:bb:cc:fc:53:01:22:b9:e0: bd:77:b4:66:d1:fb:c9:81:f3:62:83:b6:d2:ee:41: d1:8a:17:e1:b0:ad:f3:9b:5e:e4:18:8a:7b:7a:8a: 5e:f2:16:74:12:f0:d1:ad:45:74:21:89:20:3d:b8: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:5B:D4:D1:04:83:E3:42:94:72:15:A7:39:F0:D6:C0:2E:C2:A0 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:dd:cd:81:8f:20:fa:c8:17:22:3f:da:4c:9a:03:3d:7a:10: a6:41:a9:9b:33:55:f3:99:88:17:f7:44:36:62:86:88:63:10: 5d:b3:e8:30:f9:15:27:17:b2:c0:5a:32:4b:88:b6:a1:1f:54: 78:cd:30:c8:c4:7e:91:e2:e4:96:ff:58:4d:b1:33:dc:4c:d1: 0f:4d:3c:21:6b:96:49:bc:f9:91:ea:ab:6d:be:fc:b0:d6:a8: 51:f9:ff:01:6b:89:11:22:cc:0d:ee:9b:42:b8:65:4a:35:ba: f3:d7:cf:54:8a:c7:27:ce:83:be:2e:7b:48:69:f0:84:53:af: 50:42:4d:dc:97:40:af:ff:94:00:06:83:56:81:fb:a6:5d:3e: 8a:65:26:c6:ea:f1:ea:d1:9a:e4:e8:81:86:62:7d:f8:ee:40: f6:4e:06:7b:8a:0c:4f:65:02:38:ec:b4:27:cb:1f:35:cc:86: 19:07:65:89:7d:8e:e2:45:b2:a4:0d:82:35:4d:93:5e:34:82: c9:ce:0f:15:f6:42:95:16:9f:f7:74:84:b8:2e:f3:80:f8:31: 6c:7d:f9:9f:87:3e:67:0a:37:a6:d1:3c:ec:54:e2:30:81:b9: ec:b8:74:5a:1b:04:4c:34:1d:4c:73:0e:b8:20:a1:e7:f9:18: b0:d7:93:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOcBbuZ3GRUxDfgI3JP/+5+ANLjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTEyMDQxODM3MzlaFw0yNTEyMDcyMjIzMzlaMDMxMTAvBgNV BAMTKEE0M0Q1QkQ0RDEwNDgzRTM0Mjk0NzIxNUE3MzlGMEQ2QzAyRUMyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRnfpZn+Izjp2N2tkONXoqRGi juF/z7yePt7Oc8pU58zVJjkx2V29M/qPw0qUX8XOEOYq52uSMUtbWUoXAsQLiRv7 /Fuxvf+4asGpWHRkN52QitvuvGNjvsSVlk7CXTgqTk7v5BGb33g4+XyA0Cv9hH2/ XCqR2epsX4lSLAt6f/TFWm5ID3rGJWgf6OscCvZeyTTVtA7l2aWvewOb4/EBThJI Y+Xj0d9QkykoaIVcV5bWr6+locJ/q+wHtMnKjd6moGl98Uw7d367zPxTASK54L13 tGbR+8mB82KDttLuQdGKF+GwrfObXuQYint6il7yFnQS8NGtRXQhiSA9uP0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpD1b1NEEg+NClHIVpznw1sAuwqAwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDdzYGPIPrIFyI/2kyaAz16EKZBqZszVfOZ iBf3RDZihohjEF2z6DD5FScXssBaMkuItqEfVHjNMMjEfpHi5Jb/WE2xM9xM0Q9N PCFrlkm8+ZHqq22+/LDWqFH5/wFriREizA3um0K4ZUo1uvPXz1SKxyfOg74ue0hp 8IRTr1BCTdyXQK//lAAGg1aB+6ZdPoplJsbq8erRmuTogYZiffjuQPZOBnuKDE9l AjjstCfLHzXMhhkHZYl9juJFsqQNgjVNk140gsnODxX2QpUWn/d0hLgu84D4MWx9 +Z+HPmcKN6bRPOxU4jCBuey4dFobBEw0HUxzDrggoef5GLDXk+w= -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:51 2025 by rpki-client