This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: ERKC2ahmj6n3mYoHBcVUifZzNLwy4A+4xq8rIIDooLw= Subject key identifier: B1:0F:33:E9:56:AC:D3:78:54:E2:DC:C8:3C:2A:F7:D3:06:6D:02:15 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 0454FE1FE18A4F3EC9D762DE930B92A66ECBEFF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 02A3 Signing time: Sun 25 Jan 2026 02:02:09 +0000 Manifest this update: Sun 25 Jan 2026 01:57:09 +0000 Manifest next update: Wed 28 Jan 2026 09:38:09 +0000 Files and hashes: 1: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 2: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 3: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) 4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 5: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: 7ga68i6YoJtUWaq+O0WNiFbGKiUbzSN+hJHhkK26E/Q=) 6: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 09:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:54:fe:1f:e1:8a:4f:3e:c9:d7:62:de:93:0b:92:a6:6e:cb:ef:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Jan 25 01:57:09 2026 GMT Not After : Jan 28 09:38:09 2026 GMT Subject: CN=B10F33E956ACD37854E2DCC83C2AF7D3066D0215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:43:93:f9:ee:61:95:6a:e8:ac:3f:4c:84: 4e:96:42:fa:4f:95:9a:ca:57:7f:a2:59:60:32:d2: 3e:60:1b:ec:0e:96:bc:07:e3:bb:f2:e8:c5:b1:55: fe:ed:20:cf:5b:c7:5e:e0:bb:92:87:dc:24:e5:1f: f6:be:28:f7:92:9f:59:0f:2a:4d:63:50:26:4e:1b: 87:18:7c:14:b6:ee:79:3d:50:7b:38:7d:b5:af:8c: f9:89:b4:d5:cb:a0:90:92:3b:97:a0:5b:9f:2a:eb: 35:dc:ad:8e:bc:c3:c0:71:95:ed:1d:81:16:19:fd: f1:7e:21:ca:c6:40:e7:57:86:b2:84:a2:32:95:88: 8c:b3:fb:05:5b:f3:01:16:88:37:de:aa:d6:78:0a: 9a:f6:6c:18:26:f1:b9:48:9a:ea:a9:43:3e:29:1c: 55:df:33:11:18:b0:c7:48:7d:a3:3d:24:42:fe:ac: 12:e7:d1:52:d3:bd:3b:da:ba:b6:f2:f4:69:77:3d: 41:97:68:9a:e5:c8:30:94:65:ba:88:76:74:52:d4: 46:e3:08:8d:04:d5:1d:37:26:12:c4:83:67:82:ec: 7e:6b:67:d5:fb:93:a3:84:61:b1:ca:7b:6f:c4:50: be:9b:3c:21:b2:93:15:39:71:44:1d:b9:77:d9:94: 36:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0F:33:E9:56:AC:D3:78:54:E2:DC:C8:3C:2A:F7:D3:06:6D:02:15 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:80:00:e2:7c:dc:e5:ce:51:fc:6d:e3:fc:2f:56:df:cd:7a: 5f:6d:b5:f3:92:9c:24:b8:d2:2c:72:26:43:3b:04:89:4f:cf: a3:b7:ee:cb:8b:13:c4:d5:09:29:78:72:0e:15:db:cb:bb:50: 66:42:a8:6b:22:35:c5:41:0b:12:0b:2c:1c:54:40:1a:a4:2a: 81:fb:5b:e9:79:2a:76:5a:fb:6b:31:32:e2:8a:af:ca:eb:8e: 38:16:9e:e4:b0:4c:00:fe:5b:ad:af:7d:a5:48:34:c9:87:9f: 79:44:5f:ce:ae:a1:9b:ed:89:58:90:a2:ca:aa:11:d3:13:5b: f9:53:47:93:bc:f9:3d:a5:a2:df:69:22:a5:2d:b9:ed:e2:9a: f3:37:54:ea:1d:86:37:1f:df:35:04:ea:d1:59:65:36:e9:a4: 0c:08:32:d7:30:bc:23:5e:2f:8f:36:aa:6d:34:b2:9b:19:b8: 32:4a:5c:03:27:10:6d:68:aa:0d:06:38:64:b3:6f:4d:3e:d6: 07:1c:82:14:af:14:db:66:0e:86:82:72:a1:b0:b2:3f:e3:1e: 4f:c6:71:ce:05:53:7a:c7:d3:9f:53:c0:65:fd:6c:15:f9:74: 9e:e3:d4:9f:71:74:ea:38:52:9a:94:45:1d:b4:39:4b:47:9b: 5d:a5:53:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFT+H+GKTz7J12LekwuSpm7L7/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNjAxMjUwMTU3MDlaFw0yNjAxMjgwOTM4MDlaMDMxMTAvBgNV BAMTKEIxMEYzM0U5NTZBQ0QzNzg1NEUyRENDODNDMkFGN0QzMDY2RDAyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMEOT+e5hlWrorD9MhE6WQvpP lZrKV3+iWWAy0j5gG+wOlrwH47vy6MWxVf7tIM9bx17gu5KH3CTlH/a+KPeSn1kP Kk1jUCZOG4cYfBS27nk9UHs4fbWvjPmJtNXLoJCSO5egW58q6zXcrY68w8Bxle0d gRYZ/fF+IcrGQOdXhrKEojKViIyz+wVb8wEWiDfeqtZ4Cpr2bBgm8blImuqpQz4p HFXfMxEYsMdIfaM9JEL+rBLn0VLTvTvaurby9Gl3PUGXaJrlyDCUZbqIdnRS1Ebj CI0E1R03JhLEg2eC7H5rZ9X7k6OEYbHKe2/EUL6bPCGykxU5cUQduXfZlDaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsQ8z6Vas03hU4tzIPCr30wZtAhUwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaAAOJ83OXOUfxt4/wvVt/Nel9ttfOSnCS4 0ixyJkM7BIlPz6O37suLE8TVCSl4cg4V28u7UGZCqGsiNcVBCxILLBxUQBqkKoH7 W+l5KnZa+2sxMuKKr8rrjjgWnuSwTAD+W62vfaVINMmHn3lEX86uoZvtiViQosqq EdMTW/lTR5O8+T2lot9pIqUtue3imvM3VOodhjcf3zUE6tFZZTbppAwIMtcwvCNe L482qm00spsZuDJKXAMnEG1oqg0GOGSzb00+1gccghSvFNtmDoaCcqGwsj/jHk/G cc4FU3rH059TwGX9bBX5dJ7j1J9xdOo4UpqURR20OUtHm12lU5E= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:36 2026 by rpki-client