This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: PxXkhg71aX6/yJPqicp1llQje8QsqBeo+FOi043VaEk= Subject key identifier: 25:88:94:7E:88:45:9D:82:5B:C6:12:DF:58:69:74:C2:BB:5E:B6:E7 Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 247896D02E92D1EAEFA89714391FB5BB827A8418 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04C0 Signing time: Sat 24 Jan 2026 09:02:09 +0000 Manifest this update: Sat 24 Jan 2026 08:57:09 +0000 Manifest next update: Tue 27 Jan 2026 19:51:09 +0000 Files and hashes: 1: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: VuhT43+oGEOb+s4OI+pnMHLjPVS7KgYw0lastxvP7X8=) 2: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 3: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 4: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:78:96:d0:2e:92:d1:ea:ef:a8:97:14:39:1f:b5:bb:82:7a:84:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Jan 24 08:57:09 2026 GMT Not After : Jan 27 19:51:09 2026 GMT Subject: CN=2588947E88459D825BC612DF586974C2BB5EB6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:b4:b9:cd:44:d4:d6:81:f7:3b:24:e3:cf: 0b:cf:92:3f:4c:d9:28:61:d0:5f:5b:7b:fc:fc:8a: 15:d1:57:1a:0f:3c:2c:e1:2f:72:8a:be:c6:38:e5: eb:43:f6:c5:75:23:4c:74:9f:79:4f:5b:4d:59:e2: 17:9a:cc:48:48:d7:82:55:d3:16:65:2e:15:34:1a: b3:14:ab:ca:e5:1d:eb:66:24:2a:1c:59:5b:fa:0e: aa:1c:bc:69:67:bd:f5:aa:dd:16:0e:05:4a:da:34: 8f:27:e4:6e:db:26:a4:7a:47:ff:ff:36:7f:65:61: 37:42:40:90:cf:26:3a:80:ab:67:0f:ed:2c:4d:db: 04:54:8b:b8:82:2a:f5:19:2e:bc:12:19:57:ac:33: ff:d4:e8:f5:3f:6b:a6:04:89:b0:00:b0:27:93:b3: 24:96:27:40:c2:8e:8c:ae:83:17:63:d7:46:b7:0c: b1:e1:c9:3e:36:7a:cf:14:bb:ca:16:f3:48:27:17: 37:4b:08:5e:6e:c3:51:5d:e8:26:b1:98:b1:72:88: 56:08:83:68:c7:dd:92:13:4d:61:ca:0c:11:21:cf: de:4a:29:90:fb:82:a0:22:b4:f2:b1:19:db:e6:d0: bc:a7:53:92:7b:74:32:8a:d0:9b:7f:8e:d7:95:07: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:88:94:7E:88:45:9D:82:5B:C6:12:DF:58:69:74:C2:BB:5E:B6:E7 X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:71:32:e4:e2:97:0e:b0:7c:ff:da:c0:9e:78:be:ce:57:f5: 4c:64:53:d5:69:85:92:a6:e5:c4:a6:55:2a:52:4f:8f:55:08: f2:fc:cc:fe:98:03:41:d1:3a:88:a4:d6:ad:0c:a4:7e:dc:5c: c0:a9:6b:ab:b4:af:50:f1:84:33:28:75:a0:72:c5:84:12:91: 18:85:7b:ce:97:c3:0c:20:7e:d5:df:4c:c9:af:90:b7:f1:10: 44:10:bd:e6:24:80:5f:5d:2b:20:0b:cf:fe:fa:54:62:d8:76: 8d:3b:a3:73:3b:29:a2:ee:fb:05:6d:ae:df:34:27:25:32:e5: 7c:56:9f:43:e6:31:b0:d2:2d:72:c0:19:74:43:87:48:3a:c2: e0:e7:29:ae:4d:32:1b:ba:e1:f4:17:ea:3c:2a:42:1f:0e:7f: 9f:74:fa:07:09:5d:cb:6b:d9:e5:39:18:5c:18:39:02:89:7a: 94:61:31:c3:21:8a:4c:ba:93:d8:f3:19:97:fb:1a:3e:d4:43: a3:24:bd:ad:f5:3e:b8:ee:27:3a:23:d1:87:3b:18:11:e1:39: 0c:07:94:f9:0e:3b:54:8a:6a:82:1c:f2:70:68:a3:72:cb:55: 2d:4a:0d:97:9c:6c:14:70:e1:ca:fd:b5:15:5e:7c:38:b6:d0: a6:95:1f:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJHiW0C6S0ervqJcUOR+1u4J6hBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNjAxMjQwODU3MDlaFw0yNjAxMjcxOTUxMDlaMDMxMTAvBgNV BAMTKDI1ODg5NDdFODg0NTlEODI1QkM2MTJERjU4Njk3NEMyQkI1RUI2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD9rS5zUTU1oH3OyTjzwvPkj9M 2Shh0F9be/z8ihXRVxoPPCzhL3KKvsY45etD9sV1I0x0n3lPW01Z4heazEhI14JV 0xZlLhU0GrMUq8rlHetmJCocWVv6DqocvGlnvfWq3RYOBUraNI8n5G7bJqR6R/// Nn9lYTdCQJDPJjqAq2cP7SxN2wRUi7iCKvUZLrwSGVesM//U6PU/a6YEibAAsCeT sySWJ0DCjoyugxdj10a3DLHhyT42es8Uu8oW80gnFzdLCF5uw1Fd6CaxmLFyiFYI g2jH3ZITTWHKDBEhz95KKZD7gqAitPKxGdvm0LynU5J7dDKK0Jt/jteVB/AdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYiUfohFnYJbxhLfWGl0wrtetucwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJxMuTilw6wfP/awJ54vs5X9UxkU9VphZKm 5cSmVSpST49VCPL8zP6YA0HROoik1q0MpH7cXMCpa6u0r1DxhDModaByxYQSkRiF e86XwwwgftXfTMmvkLfxEEQQveYkgF9dKyALz/76VGLYdo07o3M7KaLu+wVtrt80 JyUy5XxWn0PmMbDSLXLAGXRDh0g6wuDnKa5NMhu64fQX6jwqQh8Of590+gcJXctr 2eU5GFwYOQKJepRhMcMhiky6k9jzGZf7Gj7UQ6Mkva31PrjuJzoj0Yc7GBHhOQwH lPkOO1SKaoIc8nBoo3LLVS1KDZecbBRw4cr9tRVefDi20KaVH5g= -----END CERTIFICATE-----Generated at Mon Jan 26 02:35:32 2026 by rpki-client