This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: UvwkXbX8xgjpyR1IHtlS5CL1Vo5Y6WvRwlDEHM0+z2Q= Subject key identifier: 42:4C:67:26:5B:EE:07:BC:40:8C:DA:80:C0:D1:7A:06:B6:C7:5A:C7 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 368822EEF328C0FAB225ADFC37E11083B6430B34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 0132 Signing time: Fri 05 Dec 2025 21:11:41 +0000 Manifest this update: Fri 05 Dec 2025 21:06:41 +0000 Manifest next update: Tue 09 Dec 2025 03:34:41 +0000 Files and hashes: 1: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: FDXgvBrJniHPK7RlRQI1OMQ+vOoHt4Vw7w8HDF9bqlo=) 2: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 3: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:88:22:ee:f3:28:c0:fa:b2:25:ad:fc:37:e1:10:83:b6:43:0b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Dec 5 21:06:41 2025 GMT Not After : Dec 9 03:34:41 2025 GMT Subject: CN=424C67265BEE07BC408CDA80C0D17A06B6C75AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2a:f1:47:f9:ed:7b:6a:e5:88:a1:89:7f:47: 78:c8:32:94:e6:82:99:96:ab:cb:a7:3b:21:af:0e: a2:ab:d9:ea:58:ad:10:94:53:f1:a0:f9:d6:9c:e4: 1c:61:07:0a:1f:36:93:1e:c6:a7:c0:b2:6b:85:5a: f6:74:59:09:fc:ec:56:b4:aa:93:9c:ad:81:6b:b3: 46:ce:a3:0b:9e:af:8c:55:8c:f0:63:f0:7a:a1:ee: 20:21:83:67:0a:93:8c:91:e8:a3:fe:33:f2:7f:27: 38:79:65:fd:28:b3:e9:6e:16:79:d9:2c:83:b7:2e: 26:96:10:7a:96:a0:24:93:3f:56:8f:ed:98:f8:48: 8f:f3:98:c6:d5:83:08:3e:7a:43:59:b7:8a:05:e8: 31:fc:40:25:0c:54:d0:39:0c:91:dc:a0:1b:e3:af: 68:8d:32:d2:8a:d4:10:4d:ae:f3:27:8c:b4:7d:eb: 80:49:6f:32:e0:e6:56:4a:87:24:d1:08:b3:7a:4d: 0a:f3:8c:1a:37:30:54:26:7b:dd:12:66:d3:41:5f: f9:bb:fa:28:2b:79:08:06:0a:fd:e0:d8:69:2e:3d: 51:2a:3c:ee:6b:59:36:40:a9:94:33:f5:ee:04:09: 43:53:fe:99:19:85:86:67:98:f3:da:7b:e4:c5:8a: 5f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4C:67:26:5B:EE:07:BC:40:8C:DA:80:C0:D1:7A:06:B6:C7:5A:C7 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ff:58:2c:51:de:7b:eb:85:ce:3c:c2:47:2d:b1:4e:d0:c0: be:dc:8c:42:46:be:fc:a4:c6:05:ff:29:7f:49:bb:ca:03:55: b9:34:f3:b1:a2:df:68:e0:d3:e6:9f:32:8c:fd:3b:86:7b:e7: 9d:c1:d7:83:f3:46:5b:f8:9e:87:2e:47:d7:92:59:d6:b4:14: 49:7a:fc:3a:97:2b:47:c0:cc:94:7b:a0:ad:f9:20:00:d6:fe: 56:c4:7a:e3:c0:42:11:5d:a4:f4:72:6c:4d:aa:45:94:10:84: 8e:1d:85:13:64:68:bd:fd:c3:ee:bb:e5:e8:79:8c:79:bc:a8: 9e:6f:f3:5e:a9:d1:b9:e8:c7:98:52:87:91:76:5d:6e:20:a2: 2c:8e:7d:4b:50:84:da:f3:9f:28:60:7a:d2:fb:96:01:a5:7c: de:a0:d2:a9:01:de:f1:48:e7:80:57:25:9c:7e:73:f5:cf:b9: 9e:cb:d7:f4:2e:ce:97:5c:18:bf:47:30:06:77:e5:d8:d7:72: 9f:b7:5b:b3:82:12:85:78:9f:e8:1f:6f:26:3a:8b:a6:bb:0a: 19:3b:28:4d:fd:a4:92:b1:f8:01:2b:53:49:d4:24:7c:f3:b6: 01:f3:27:51:49:34:ed:33:89:67:37:9e:66:64:b7:e5:e4:21: 42:86:ca:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNogi7vMowPqyJa38N+EQg7ZDCzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTEyMDUyMTA2NDFaFw0yNTEyMDkwMzM0NDFaMDMxMTAvBgNV BAMTKDQyNEM2NzI2NUJFRTA3QkM0MDhDREE4MEMwRDE3QTA2QjZDNzVBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKvFH+e17auWIoYl/R3jIMpTm gpmWq8unOyGvDqKr2epYrRCUU/Gg+dac5BxhBwofNpMexqfAsmuFWvZ0WQn87Fa0 qpOcrYFrs0bOowuer4xVjPBj8Hqh7iAhg2cKk4yR6KP+M/J/Jzh5Zf0os+luFnnZ LIO3LiaWEHqWoCSTP1aP7Zj4SI/zmMbVgwg+ekNZt4oF6DH8QCUMVNA5DJHcoBvj r2iNMtKK1BBNrvMnjLR964BJbzLg5lZKhyTRCLN6TQrzjBo3MFQme90SZtNBX/m7 +igreQgGCv3g2GkuPVEqPO5rWTZAqZQz9e4ECUNT/pkZhYZnmPPae+TFil+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQkxnJlvuB7xAjNqAwNF6BrbHWscwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADz/WCxR3nvrhc48wkctsU7QwL7cjEJGvvyk xgX/KX9Ju8oDVbk087Gi32jg0+afMoz9O4Z7553B14PzRlv4nocuR9eSWda0FEl6 /DqXK0fAzJR7oK35IADW/lbEeuPAQhFdpPRybE2qRZQQhI4dhRNkaL39w+675eh5 jHm8qJ5v816p0bnox5hSh5F2XW4goiyOfUtQhNrznyhgetL7lgGlfN6g0qkB3vFI 54BXJZx+c/XPuZ7L1/QuzpdcGL9HMAZ35djXcp+3W7OCEoV4n+gfbyY6i6a7Chk7 KE39pJKx+AErU0nUJHzztgHzJ1FJNO0ziWc3nmZkt+XkIUKGyns= -----END CERTIFICATE-----Generated at Sun Dec 7 03:38:18 2025 by rpki-client