This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: qwVa83fRu/Z2INlhvdMMkt8VDfwsthVgGJJ1rquPmb0= Subject key identifier: 35:FF:BF:3E:D0:60:97:FF:E7:5B:E8:4D:3F:0C:34:7E:18:45:46:1D Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 4B1DD170B3C51F013BD4629D9215AF62D111F7B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 03AF Signing time: Fri 23 Jan 2026 17:00:54 +0000 Manifest this update: Fri 23 Jan 2026 16:55:54 +0000 Manifest next update: Tue 27 Jan 2026 00:11:54 +0000 Files and hashes: 1: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: Xwd5D4iSJXRO3YWuMqXU2WX+PfBAXSXdUPrO8EOIsPo=) 2: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1d:d1:70:b3:c5:1f:01:3b:d4:62:9d:92:15:af:62:d1:11:f7:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Jan 23 16:55:54 2026 GMT Not After : Jan 27 00:11:54 2026 GMT Subject: CN=35FFBF3ED06097FFE75BE84D3F0C347E1845461D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:a2:95:ae:5a:64:5a:e3:ef:92:01:03:e8: a2:42:49:38:b8:47:61:05:e4:db:b0:53:6f:a3:60: 49:35:06:2a:48:88:95:5a:4b:05:82:51:6a:41:03: 1a:1a:ae:d7:52:0a:d3:e9:ed:26:a5:5a:1f:60:cb: 77:39:69:a7:ab:c1:82:c3:3a:24:76:cb:6f:5b:0d: 26:ce:5e:05:c5:11:13:c3:f4:84:b9:07:b0:b1:27: b1:64:1b:2e:87:d9:85:56:8e:b3:f5:c8:63:cb:04: 31:88:7c:be:2d:e9:78:84:fc:f7:e3:d2:1c:7a:be: 26:f8:bb:b0:7e:de:94:14:2e:ce:01:66:61:8a:72: be:de:7a:06:db:12:ba:df:53:7b:5c:25:7c:e9:4e: 11:ba:de:cf:ab:aa:79:39:c9:cd:c9:b3:91:2e:12: c2:d3:e1:5d:0d:39:e0:eb:fc:36:e6:de:a0:92:49: 4b:a2:1b:3f:55:34:02:ad:b0:03:18:15:8d:7e:17: be:c1:e1:7e:69:9b:a7:4f:98:6f:ae:d5:ff:a7:bf: ff:0b:61:4f:7b:8c:14:4e:f4:21:75:1f:07:d9:3d: 93:b6:c7:f2:0c:a7:91:37:22:eb:5f:0d:43:67:7c: c5:b1:89:4a:16:30:6d:8b:2c:43:87:3d:95:dc:e0: 80:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FF:BF:3E:D0:60:97:FF:E7:5B:E8:4D:3F:0C:34:7E:18:45:46:1D X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:a7:55:29:3b:a7:0d:12:28:20:4f:aa:b4:25:62:50:93: dc:bb:35:2e:9e:72:d9:85:4f:bf:bd:60:49:2f:1e:ea:d0:1c: 8e:07:d1:63:4e:58:0c:c9:da:ad:01:5c:73:7d:8b:49:8a:78: c1:a6:86:eb:ef:00:de:d7:ff:2d:a6:e3:39:16:12:03:7d:83: c2:4f:fd:29:bc:2f:da:1a:e6:f5:19:aa:2f:b5:6a:8b:b4:61: a3:82:a8:8a:37:21:57:71:88:aa:70:2a:e8:b5:6c:19:4a:30: 7f:a7:2e:f1:a6:96:94:f1:92:7e:11:e3:f4:13:a1:dd:b3:f5: 21:9e:03:2c:24:4b:0d:94:94:22:9b:a1:d7:1d:27:5a:5c:cf: 68:02:4a:61:8c:bb:81:35:58:aa:03:14:d0:df:60:9e:4e:bc: ce:e1:2d:8c:30:b2:1c:0b:d3:c8:a8:54:bf:99:c6:a2:8e:14: 13:5c:1d:ed:27:d1:d4:fa:58:4a:78:1e:12:e7:2b:ad:ff:b1: 27:ba:7f:5e:5b:dc:46:45:69:77:96:35:f8:4d:34:8a:0d:4f: ad:45:bd:19:1e:d8:2d:43:73:d6:6b:8e:a1:cd:99:eb:aa:ac: 10:19:fa:52:82:ef:80:77:d0:86:21:85:46:5b:8d:1f:0f:2a: ae:9c:29:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx3RcLPFHwE71GKdkhWvYtER97EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNjAxMjMxNjU1NTRaFw0yNjAxMjcwMDExNTRaMDMxMTAvBgNV BAMTKDM1RkZCRjNFRDA2MDk3RkZFNzVCRTg0RDNGMEMzNDdFMTg0NTQ2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbOKKVrlpkWuPvkgED6KJCSTi4 R2EF5NuwU2+jYEk1BipIiJVaSwWCUWpBAxoartdSCtPp7SalWh9gy3c5aaerwYLD OiR2y29bDSbOXgXFERPD9IS5B7CxJ7FkGy6H2YVWjrP1yGPLBDGIfL4t6XiE/Pfj 0hx6vib4u7B+3pQULs4BZmGKcr7eegbbErrfU3tcJXzpThG63s+rqnk5yc3Js5Eu EsLT4V0NOeDr/Dbm3qCSSUuiGz9VNAKtsAMYFY1+F77B4X5pm6dPmG+u1f+nv/8L YU97jBRO9CF1HwfZPZO2x/IMp5E3IutfDUNnfMWxiUoWMG2LLEOHPZXc4IBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNf+/PtBgl//nW+hNPww0fhhFRh0wHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiep1UpO6cNEiggT6q0JWJQk9y7NS6ectmF T7+9YEkvHurQHI4H0WNOWAzJ2q0BXHN9i0mKeMGmhuvvAN7X/y2m4zkWEgN9g8JP /Sm8L9oa5vUZqi+1aou0YaOCqIo3IVdxiKpwKui1bBlKMH+nLvGmlpTxkn4R4/QT od2z9SGeAywkSw2UlCKbodcdJ1pcz2gCSmGMu4E1WKoDFNDfYJ5OvM7hLYwwshwL 08ioVL+ZxqKOFBNcHe0n0dT6WEp4HhLnK63/sSe6f15b3EZFaXeWNfhNNIoNT61F vRke2C1Dc9ZrjqHNmeuqrBAZ+lKC74B30IYhhUZbjR8PKq6cKXY= -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:57 2026 by rpki-client