This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: D5WNIfBuqyim3n34Qk7+zwnutpKepsleVWM3OyspZ/4= Subject key identifier: 83:B4:6B:01:88:10:F8:1F:5D:98:F5:20:CE:91:4B:5B:AA:6B:F8:47 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 4E4C8407B9CA1AEC3913906F49D5E524146C1F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 01F7 Signing time: Fri 05 Dec 2025 16:00:54 +0000 Manifest this update: Fri 05 Dec 2025 15:55:54 +0000 Manifest next update: Tue 09 Dec 2025 00:00:54 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: oEAjAudo8sQpv42OWRjCyYt+zQFXHCAfTlwNzxtXfFw=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4c:84:07:b9:ca:1a:ec:39:13:90:6f:49:d5:e5:24:14:6c:1f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Dec 5 15:55:54 2025 GMT Not After : Dec 9 00:00:54 2025 GMT Subject: CN=83B46B018810F81F5D98F520CE914B5BAA6BF847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:93:5d:8f:1a:8e:e7:ce:3c:b2:58:ef:9f: 63:8c:0e:75:d7:84:d6:64:94:a7:27:9d:b5:d4:99: 8d:9a:90:a9:96:9d:ce:96:bb:2c:76:a8:2f:ba:85: a8:3b:c2:35:f6:9b:02:c5:1a:3c:21:14:92:20:aa: 9c:d3:d8:81:9b:cf:60:df:dd:a2:bd:9d:05:45:c8: b4:be:80:f8:66:3c:e0:48:c3:35:f0:f4:b2:bf:57: 92:12:a6:02:99:6b:64:c2:ee:d9:b9:3f:27:ba:c1: 53:78:b1:95:0f:bb:8a:5c:80:c3:7d:ac:3b:91:0d: e2:14:2b:08:d4:b5:e9:0d:9c:af:cc:00:d6:86:42: 02:31:5a:9d:df:22:7f:cc:13:b5:62:bb:d6:fe:67: c2:e9:6b:06:0f:1a:b2:9c:28:d5:3b:03:69:60:bb: 1c:12:72:47:44:aa:21:bc:6b:2f:f5:0f:02:89:cb: ba:eb:03:66:16:2d:13:5b:52:2a:d0:a4:4c:df:66: 3f:79:af:0c:50:3c:d1:3c:6f:76:41:dd:5d:a7:34: 67:c6:d4:67:f1:30:9a:c3:0c:0d:9e:93:2b:11:5f: a1:92:1a:56:e6:09:40:90:e0:cb:cf:4d:8a:b0:7e: 43:63:8a:be:56:31:a2:af:6a:55:fb:ce:81:2e:c0: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B4:6B:01:88:10:F8:1F:5D:98:F5:20:CE:91:4B:5B:AA:6B:F8:47 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d0:e4:a4:74:22:f4:e3:14:fd:4c:b0:41:42:9d:28:71:cb: cd:42:d5:99:25:33:44:81:5a:27:63:5f:1d:ae:8c:01:dc:62: a5:1d:43:8d:08:92:5e:d3:2e:6b:3f:8e:7a:66:77:19:f6:a6: 8b:b8:26:30:47:3f:a5:03:c3:7a:28:35:78:b0:70:9e:9e:ea: 5b:37:23:9e:b7:4f:39:7d:5b:91:a5:c1:54:9d:11:ec:5c:6e: ea:af:a4:ec:26:86:89:30:6c:54:80:27:04:04:54:60:bd:fe: d2:b4:89:85:34:ef:6f:43:ff:fa:6f:fd:82:1a:ca:b7:67:69: 7d:2b:fb:8c:a8:ca:d0:18:73:44:2d:63:78:04:36:04:74:ec: 16:91:82:2a:90:44:5e:5e:34:ba:5c:5f:87:91:dd:e4:5e:d9: a6:e4:3a:b4:81:68:3c:62:28:d4:59:0a:57:71:9d:ff:a3:5d: 81:8b:48:6f:00:10:a2:b3:2a:73:35:52:0a:e7:70:77:e8:63: b1:d2:da:e9:ce:9b:64:a4:0d:9b:f9:0e:85:52:64:5d:c6:0e: 49:35:1d:80:96:21:40:50:c8:20:ee:18:28:cf:7e:53:be:ae: ea:29:d8:43:9a:fa:b2:09:32:6f:95:19:82:62:35:b9:b2:4f: 61:41:c5:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkyEB7nKGuw5E5BvSdXlJBRsH10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNTEyMDUxNTU1NTRaFw0yNTEyMDkwMDAwNTRaMDMxMTAvBgNV BAMTKDgzQjQ2QjAxODgxMEY4MUY1RDk4RjUyMENFOTE0QjVCQUE2QkY4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z5NdjxqO5848sljvn2OMDnXX hNZklKcnnbXUmY2akKmWnc6Wuyx2qC+6hag7wjX2mwLFGjwhFJIgqpzT2IGbz2Df 3aK9nQVFyLS+gPhmPOBIwzXw9LK/V5ISpgKZa2TC7tm5Pye6wVN4sZUPu4pcgMN9 rDuRDeIUKwjUtekNnK/MANaGQgIxWp3fIn/ME7Viu9b+Z8LpawYPGrKcKNU7A2lg uxwSckdEqiG8ay/1DwKJy7rrA2YWLRNbUirQpEzfZj95rwxQPNE8b3ZB3V2nNGfG 1GfxMJrDDA2ekysRX6GSGlbmCUCQ4MvPTYqwfkNjir5WMaKvalX7zoEuwH1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg7RrAYgQ+B9dmPUgzpFLW6pr+EcwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLQ5KR0IvTjFP1MsEFCnShxy81C1ZklM0SB WidjXx2ujAHcYqUdQ40Ikl7TLms/jnpmdxn2pou4JjBHP6UDw3ooNXiwcJ6e6ls3 I563Tzl9W5GlwVSdEexcbuqvpOwmhokwbFSAJwQEVGC9/tK0iYU0729D//pv/YIa yrdnaX0r+4yoytAYc0QtY3gENgR07BaRgiqQRF5eNLpcX4eR3eRe2abkOrSBaDxi KNRZCldxnf+jXYGLSG8AEKKzKnM1UgrncHfoY7HS2unOm2SkDZv5DoVSZF3GDkk1 HYCWIUBQyCDuGCjPflO+ruop2EOa+rIJMm+VGYJiNbmyT2FBxbI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:19 2025 by rpki-client