This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: 7KIDQLqDxUywpJ2saDvEQ7mN1Po5Hu/h8kPqNpwrAhk= Subject key identifier: A8:B6:91:08:04:3F:E0:0E:23:95:A9:EB:CB:7E:25:C0:C9:2C:49:83 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 41755C6503FC349BB453BDFA5BF1C92D6F6E94E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 028D Signing time: Fri 05 Dec 2025 18:12:11 +0000 Manifest this update: Fri 05 Dec 2025 18:07:11 +0000 Manifest next update: Tue 09 Dec 2025 03:02:11 +0000 Files and hashes: 1: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) 2: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 3: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) 4: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: tqBX55ologM3Z0wsvz5oYfUT1ZFe9JZuSfcyd8L1gLE=) 5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 6: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:75:5c:65:03:fc:34:9b:b4:53:bd:fa:5b:f1:c9:2d:6f:6e:94:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Dec 5 18:07:11 2025 GMT Not After : Dec 9 03:02:11 2025 GMT Subject: CN=A8B69108043FE00E2395A9EBCB7E25C0C92C4983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:23:2b:4a:b6:2d:e3:ce:20:ff:f8:1b:81: 6d:c1:2a:53:14:dc:3d:00:30:41:8d:df:0a:01:a9: 40:33:2b:a3:8d:09:1e:a4:a3:ad:4a:57:1d:e2:4c: a0:7e:2e:8d:9a:d7:e3:e2:3c:b0:94:1d:93:97:16: 37:ec:37:86:d7:06:2a:30:2c:44:28:89:73:a6:f3: 4f:78:4c:d1:9b:26:fb:b4:52:8b:91:46:af:0e:86: b8:8a:af:6b:b2:7b:44:d9:32:6a:11:4e:fd:18:2c: 55:8c:b5:42:4f:86:7c:83:d3:1a:2d:96:91:90:cb: a0:f7:4d:0a:12:78:06:89:aa:db:c6:49:53:a1:8e: dd:e2:fa:6e:bb:14:cd:d9:f5:d2:0a:32:b1:53:00: e8:bf:1e:43:bc:c6:8b:72:9c:ac:c8:84:23:f7:71: 5e:24:49:b4:61:21:b3:5c:63:d7:df:09:75:c7:f0: 69:af:da:08:3d:c6:26:e9:2d:b1:3c:84:33:2c:5e: 45:b5:a1:a9:91:22:a6:48:56:4f:a9:17:67:3d:63: 61:7b:85:44:74:c7:48:88:07:de:83:80:c9:ed:82: 5c:97:4a:48:1d:e1:c4:75:4f:f1:1a:59:5e:fc:ff: ae:11:47:4d:2e:09:e6:49:74:65:d8:e4:4a:e6:f7: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:91:08:04:3F:E0:0E:23:95:A9:EB:CB:7E:25:C0:C9:2C:49:83 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:bc:4a:9b:30:3f:73:66:e2:e1:95:1e:a6:18:e0:0c:3d:e9: 53:b7:2a:d1:10:a3:c9:cf:bd:9f:57:31:d3:a9:2e:d3:38:bb: 35:0a:ad:84:89:cf:85:97:68:46:ec:30:c3:93:48:0a:eb:6a: 53:27:26:10:cd:c4:bb:20:07:21:f1:9b:c9:ec:82:1b:37:a9: c8:8a:4a:e1:0e:fd:f6:f0:38:35:13:6a:16:39:a1:52:ee:c8: b6:2f:8f:8e:1a:15:a8:91:cb:d3:49:f5:a5:81:1a:28:58:0c: 74:4f:23:1c:db:7e:3d:d2:ec:dc:83:66:74:c3:13:a2:26:46: ee:6a:bf:12:e0:28:ce:a7:19:38:c2:72:2f:5d:07:0f:85:1d: b3:82:d3:11:1b:e3:2e:6a:38:1e:09:b3:6c:c8:b8:20:4d:01: 9f:b1:1b:e6:ea:53:38:c5:d1:af:7f:8e:6a:f3:6d:16:f0:5e: 2a:aa:1a:dd:3c:6e:b9:69:ac:c9:fb:23:c1:72:e2:da:5a:12: d2:bc:02:23:e8:9d:a5:df:c7:30:82:2d:91:44:0c:69:6b:8c: b1:d4:ba:ee:70:ce:42:5c:49:4c:a8:ce:ad:2f:17:75:1f:92: 04:64:0a:f1:6a:c7:b4:73:d5:fd:fe:56:74:1f:77:a9:3a:26: 6b:98:8e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXVcZQP8NJu0U736W/HJLW9ulOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTEyMDUxODA3MTFaFw0yNTEyMDkwMzAyMTFaMDMxMTAvBgNV BAMTKEE4QjY5MTA4MDQzRkUwMEUyMzk1QTlFQkNCN0UyNUMwQzkyQzQ5ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3JSMrSrYt484g//gbgW3BKlMU 3D0AMEGN3woBqUAzK6ONCR6ko61KVx3iTKB+Lo2a1+PiPLCUHZOXFjfsN4bXBiow LEQoiXOm8094TNGbJvu0UouRRq8OhriKr2uye0TZMmoRTv0YLFWMtUJPhnyD0xot lpGQy6D3TQoSeAaJqtvGSVOhjt3i+m67FM3Z9dIKMrFTAOi/HkO8xotynKzIhCP3 cV4kSbRhIbNcY9ffCXXH8Gmv2gg9xibpLbE8hDMsXkW1oamRIqZIVk+pF2c9Y2F7 hUR0x0iIB96DgMntglyXSkgd4cR1T/EaWV78/64RR00uCeZJdGXY5Erm9wpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLaRCAQ/4A4jlanry34lwMksSYMwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACq8SpswP3Nm4uGVHqYY4Aw96VO3KtEQo8nP vZ9XMdOpLtM4uzUKrYSJz4WXaEbsMMOTSArralMnJhDNxLsgByHxm8nsghs3qciK SuEO/fbwODUTahY5oVLuyLYvj44aFaiRy9NJ9aWBGihYDHRPIxzbfj3S7NyDZnTD E6ImRu5qvxLgKM6nGTjCci9dBw+FHbOC0xEb4y5qOB4Js2zIuCBNAZ+xG+bqUzjF 0a9/jmrzbRbwXiqqGt08brlprMn7I8Fy4tpaEtK8AiPonaXfxzCCLZFEDGlrjLHU uu5wzkJcSUyozq0vF3UfkgRkCvFqx7Rz1f3+VnQfd6k6JmuYjoQ= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:16 2025 by rpki-client