This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: g/LQtNcxqDrVbJRPta0/PoR36+zVQdceWs1s2i5vYbE= Subject key identifier: 08:BF:0D:47:ED:F0:0C:7F:7A:C0:72:C7:13:B9:1E:DA:E7:50:4E:CE Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 02AB81FD77B4B1136512BA3BF1F8AD3FC9782072 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 020E Signing time: Sun 25 Jan 2026 20:50:48 +0000 Manifest this update: Sun 25 Jan 2026 20:45:48 +0000 Manifest next update: Wed 28 Jan 2026 22:42:48 +0000 Files and hashes: 1: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) 2: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: GuVdLOTBuLCFGjDiy91iCnrlmnzNO8AFgK21ZWeFEZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ab:81:fd:77:b4:b1:13:65:12:ba:3b:f1:f8:ad:3f:c9:78:20:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jan 25 20:45:48 2026 GMT Not After : Jan 28 22:42:48 2026 GMT Subject: CN=08BF0D47EDF00C7F7AC072C713B91EDAE7504ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:60:96:f3:ce:6b:fe:a0:d4:42:a7:8d:61:5f: a7:6e:d0:d9:b9:d7:f6:95:05:d1:33:5e:01:03:b4: 80:d2:9f:ae:2f:1d:28:f1:e2:dd:cc:67:31:f0:d9: 30:83:f5:2a:74:bb:87:a2:8e:ed:26:71:90:51:57: e0:ce:78:d3:e8:03:7b:c8:dc:d0:b1:c6:fb:4d:57: d0:45:f7:2a:8d:06:9d:3c:9a:7b:0f:19:52:ee:70: 65:89:49:9b:cb:c3:8d:6f:76:4e:d7:7c:25:0f:02: bb:db:17:64:29:b3:d4:39:2b:7f:aa:c2:2d:fb:db: 24:57:4c:7e:8e:29:55:e0:bc:fe:f5:ed:b2:42:14: cf:a3:ee:f2:f1:f6:8e:0e:69:85:d2:b2:46:cf:2b: 64:b0:08:ec:6c:8b:1c:15:7b:d7:0c:48:45:bd:1b: ee:a5:98:0e:e3:67:60:ab:d0:fa:d8:72:1f:1e:2f: ce:11:5c:ac:8a:e8:c2:19:4d:7a:27:e7:7b:29:7a: 9f:2d:00:0a:39:40:27:cf:80:61:59:4e:7d:c1:9b: ed:3a:19:1d:8d:e8:ec:a3:e8:f2:de:7a:1e:8e:31: f1:1c:f5:37:6f:6d:6f:23:72:2a:13:66:ae:78:31: d1:67:6d:2b:19:9d:e9:6c:d7:13:1f:cb:7d:a5:98: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BF:0D:47:ED:F0:0C:7F:7A:C0:72:C7:13:B9:1E:DA:E7:50:4E:CE X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:1b:a9:a8:b2:a3:64:ef:7d:eb:c0:16:39:0c:d2:f1:13:13: 77:3a:85:8b:2e:2d:fd:4a:69:69:e8:87:40:e0:60:d1:28:dd: 9d:43:2d:59:90:a8:b9:1a:db:0a:d2:22:11:8b:d8:66:13:94: a6:19:5e:0e:21:bd:61:53:8e:87:1d:cf:16:c4:da:b9:0c:9f: 6d:14:69:0f:2d:5c:d3:69:12:df:1b:62:43:db:45:63:28:21: 18:9b:db:36:f0:e9:4e:70:f1:09:1a:56:f8:f0:52:96:22:e8: d9:f2:02:af:ec:f8:4b:b4:36:89:f4:d3:e2:b5:09:ee:65:ce: d6:91:d6:b1:9c:0e:83:dd:86:10:2e:84:35:76:93:80:cc:46: 1a:86:d5:67:d6:43:61:bb:1c:05:ba:be:3a:f4:8d:54:12:a2: 18:5c:13:ba:fc:12:4e:1f:42:2f:37:1e:77:ba:97:36:b9:1b: 39:f0:9c:65:d5:dd:03:32:2c:c5:a1:d5:9b:6f:f0:30:c5:86: b6:e3:5c:3a:74:d5:1c:24:09:15:87:20:72:de:b3:63:e0:f8: d5:a5:1b:02:6d:36:65:82:66:fe:c6:33:46:a3:23:05:f5:88: 38:3a:f7:82:f5:9f:33:c3:27:6b:67:81:3b:f4:bc:d4:d4:f7: 88:a5:2b:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAquB/Xe0sRNlEro78fitP8l4IHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjAxMjUyMDQ1NDhaFw0yNjAxMjgyMjQyNDhaMDMxMTAvBgNV BAMTKDA4QkYwRDQ3RURGMDBDN0Y3QUMwNzJDNzEzQjkxRURBRTc1MDRFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYJbzzmv+oNRCp41hX6du0Nm5 1/aVBdEzXgEDtIDSn64vHSjx4t3MZzHw2TCD9Sp0u4eiju0mcZBRV+DOeNPoA3vI 3NCxxvtNV9BF9yqNBp08mnsPGVLucGWJSZvLw41vdk7XfCUPArvbF2Qps9Q5K3+q wi372yRXTH6OKVXgvP717bJCFM+j7vLx9o4OaYXSskbPK2SwCOxsixwVe9cMSEW9 G+6lmA7jZ2Cr0PrYch8eL84RXKyK6MIZTXon53spep8tAAo5QCfPgGFZTn3Bm+06 GR2N6Oyj6PLeeh6OMfEc9TdvbW8jcioTZq54MdFnbSsZnels1xMfy32lmMWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCL8NR+3wDH96wHLHE7ke2udQTs4wHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAbqaiyo2TvfevAFjkM0vETE3c6hYsuLf1K aWnoh0DgYNEo3Z1DLVmQqLka2wrSIhGL2GYTlKYZXg4hvWFTjocdzxbE2rkMn20U aQ8tXNNpEt8bYkPbRWMoIRib2zbw6U5w8QkaVvjwUpYi6NnyAq/s+Eu0Non00+K1 Ce5lztaR1rGcDoPdhhAuhDV2k4DMRhqG1WfWQ2G7HAW6vjr0jVQSohhcE7r8Ek4f Qi83Hne6lza5GznwnGXV3QMyLMWh1Ztv8DDFhrbjXDp01RwkCRWHIHLes2Pg+NWl GwJtNmWCZv7GM0ajIwX1iDg694L1nzPDJ2tngTv0vNTU94ilK2M= -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:28 2026 by rpki-client