This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: o5KMkwnUZCLEOnuSv84dNuXy+Gq7K8baxS8ISv8LGS4= Subject key identifier: A8:57:1B:34:C0:C0:A1:0F:75:1B:1A:C5:AA:7B:5B:3D:B2:B8:27:3E Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 68A5A6D5A4264D934D3FB6E03221E7AEEC373D95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 0532 Signing time: Fri 05 Dec 2025 20:50:59 +0000 Manifest this update: Fri 05 Dec 2025 20:45:59 +0000 Manifest next update: Tue 09 Dec 2025 08:22:59 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) 2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: gNvaCwKJH4M2s6zD6teuCQe3ycIv7KBEpu3E0nJ8blQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:a5:a6:d5:a4:26:4d:93:4d:3f:b6:e0:32:21:e7:ae:ec:37:3d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Dec 5 20:45:59 2025 GMT Not After : Dec 9 08:22:59 2025 GMT Subject: CN=A8571B34C0C0A10F751B1AC5AA7B5B3DB2B8273E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:e8:56:18:6f:8f:6b:ac:9d:ab:03:fc:03: 12:61:69:28:fb:f5:e9:05:47:76:63:4f:27:e2:52: 8f:35:d7:68:26:50:69:6c:96:f5:59:3e:c8:29:5a: c3:d6:4f:c7:28:8f:5d:25:cb:42:c2:42:bb:37:f1: 4d:8f:3b:ec:3b:5f:b4:e8:7b:6e:19:72:1c:88:e3: b8:8b:53:ad:85:17:5c:58:3a:92:dd:11:51:3a:2d: 15:f4:a1:89:58:1a:fe:5f:d7:55:a5:20:6c:f8:9d: 7e:03:84:8a:ea:59:25:6b:57:8d:cc:9a:6a:77:e4: 18:60:f8:c1:79:11:bc:e8:54:2c:da:bd:0f:92:4b: 17:3e:f8:8a:6f:10:7c:e9:2f:5d:2f:b5:31:cf:cf: 2d:9f:5c:bc:4b:83:90:53:fc:03:7d:0d:7c:ac:4a: f2:b8:96:ab:ed:a3:1a:34:b2:fb:7c:82:c1:5b:b4: b6:e0:fa:60:7d:69:a8:54:98:6f:8d:b8:48:05:f2: 81:df:19:54:37:6e:72:3a:a6:4e:ac:6f:a7:d4:88: 2f:ff:41:3e:2d:db:71:f4:43:84:8f:10:0e:e5:bb: 89:ba:d2:72:85:bd:10:fb:5a:0a:e2:4b:87:43:dd: 79:3e:47:7b:66:e3:c1:ae:09:ad:ce:4c:79:df:f2: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:1B:34:C0:C0:A1:0F:75:1B:1A:C5:AA:7B:5B:3D:B2:B8:27:3E X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:68:33:d3:24:45:a5:7d:5b:10:c0:14:4e:c7:47:4b:e1: 72:06:c3:ab:01:99:89:49:e2:2f:bf:3b:ad:98:1a:fb:20:f9: 81:36:f4:c7:21:95:fa:1a:6f:32:d9:2b:dc:2f:67:d8:e9:23: ef:49:92:70:07:88:02:a3:8c:e7:65:2f:92:bd:5f:d8:72:5f: 1d:69:c9:78:ed:95:0b:77:ea:59:53:5e:e5:fb:c4:3e:cb:3a: 45:ea:33:d5:ce:8d:ea:03:22:b9:16:86:17:1b:33:56:14:12: 28:fd:61:cf:45:16:a9:06:b1:6b:63:d4:a5:aa:68:0f:22:b6: e4:cc:41:b0:f9:66:46:bb:b4:46:89:cd:be:66:b5:3b:6e:62: ef:55:aa:a7:78:13:c5:58:4d:6b:80:bf:da:54:90:92:a4:4d: bb:34:39:0d:c7:5b:cf:3e:7e:cc:2d:b8:1a:f2:4e:f9:8e:be: c5:5a:af:58:ef:d6:94:75:6f:3a:fe:0b:c7:2b:65:09:e1:ec: fa:ce:35:e9:4f:e6:db:ef:0a:11:6a:fe:de:3d:44:9d:a4:1d: 60:b1:24:4b:54:db:25:d7:d0:fd:ff:23:98:bc:c7:e1:03:41: ee:fc:64:c0:a2:ca:6e:1a:06:b8:25:b8:67:30:89:b4:83:84: b9:3e:a3:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaKWm1aQmTZNNP7bgMiHnruw3PZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTEyMDUyMDQ1NTlaFw0yNTEyMDkwODIyNTlaMDMxMTAvBgNV BAMTKEE4NTcxQjM0QzBDMEExMEY3NTFCMUFDNUFBN0I1QjNEQjJCODI3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2euhWGG+Pa6ydqwP8AxJhaSj7 9ekFR3ZjTyfiUo8112gmUGlslvVZPsgpWsPWT8coj10ly0LCQrs38U2PO+w7X7To e24ZchyI47iLU62FF1xYOpLdEVE6LRX0oYlYGv5f11WlIGz4nX4DhIrqWSVrV43M mmp35Bhg+MF5EbzoVCzavQ+SSxc++IpvEHzpL10vtTHPzy2fXLxLg5BT/AN9DXys SvK4lqvtoxo0svt8gsFbtLbg+mB9aahUmG+NuEgF8oHfGVQ3bnI6pk6sb6fUiC// QT4t23H0Q4SPEA7lu4m60nKFvRD7WgriS4dD3Xk+R3tm48GuCa3OTHnf8h7LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqFcbNMDAoQ91GxrFqntbPbK4Jz4wHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs+aDPTJEWlfVsQwBROx0dL4XIGw6sBmYlJ 4i+/O62YGvsg+YE29MchlfoabzLZK9wvZ9jpI+9JknAHiAKjjOdlL5K9X9hyXx1p yXjtlQt36llTXuX7xD7LOkXqM9XOjeoDIrkWhhcbM1YUEij9Yc9FFqkGsWtj1KWq aA8ituTMQbD5Zka7tEaJzb5mtTtuYu9Vqqd4E8VYTWuAv9pUkJKkTbs0OQ3HW88+ fswtuBryTvmOvsVar1jv1pR1bzr+C8crZQnh7PrONelP5tvvChFq/t49RJ2kHWCx JEtU2yXX0P3/I5i8x+EDQe78ZMCiym4aBrgluGcwibSDhLk+ows= -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:25 2025 by rpki-client