This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: UVuSXEP+5Suw9MHeY0SeEUHA1twXxYBu5nsU3q9ArEQ= Subject key identifier: 37:50:B6:9B:BA:DF:17:F6:A2:7B:83:37:8F:EA:82:F9:72:9C:2B:8B Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 1F19A461F183B822BC025ABCF124C639F7554D8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: CD Signing time: Tue 16 Dec 2025 08:31:25 +0000 Manifest this update: Tue 16 Dec 2025 08:26:25 +0000 Manifest next update: Fri 19 Dec 2025 11:34:25 +0000 Files and hashes: 1: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) 2: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: i4JZxsDDfvkT3JYG0ohNryNT6/zJuD+r+1AUVoOWjf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 11:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:19:a4:61:f1:83:b8:22:bc:02:5a:bc:f1:24:c6:39:f7:55:4d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Dec 16 08:26:25 2025 GMT Not After : Dec 19 11:34:25 2025 GMT Subject: CN=3750B69BBADF17F6A27B83378FEA82F9729C2B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:8f:81:0a:32:f9:23:28:3e:15:f8:82:bf: e8:38:f3:1d:9e:d6:21:29:eb:c3:6c:da:74:fd:0b: bb:40:b7:29:19:10:f0:f7:b3:40:61:f3:48:8d:69: ec:6c:aa:cf:a9:84:81:51:d4:2e:80:50:60:73:23: 46:08:38:a3:55:ad:03:fb:ca:eb:5b:a6:6e:d9:f2: ca:bf:ab:ea:74:0e:02:0b:e9:7d:39:9d:b8:22:af: 0d:0b:3c:84:2c:ea:2a:84:4b:4e:0d:30:f4:29:2d: 8c:3f:e3:64:a3:5e:40:c0:d3:7b:20:e0:1f:bb:94: a9:b1:b7:6d:a9:00:a7:9b:61:1e:16:37:22:0b:b5: 32:c1:a3:a3:d6:f6:52:a3:5d:b3:16:1f:28:b3:d5: e4:21:00:46:43:f8:f3:73:6c:8c:67:52:5f:84:91: ad:e9:31:f3:cb:2c:54:ec:5b:02:2e:ba:74:21:65: e2:f7:c2:d4:7a:61:e5:9e:3c:b6:b8:e6:03:2c:97: c3:f9:8e:f5:07:eb:d7:d7:6e:26:83:17:29:91:31: c9:40:3c:62:17:f2:12:e0:be:a0:70:e5:28:87:25: d0:19:ac:36:d3:69:95:d5:ad:30:83:15:d8:53:e4: 72:e9:dd:4f:fd:f9:50:9a:0e:28:3b:ed:10:c0:c9: 8d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:50:B6:9B:BA:DF:17:F6:A2:7B:83:37:8F:EA:82:F9:72:9C:2B:8B X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ac:4f:40:8b:c5:04:0b:28:88:7c:b7:45:56:29:bb:8c:d6: 60:a0:94:3b:ac:77:02:8d:e1:c4:6d:13:15:a6:14:ad:99:22: f7:01:ae:9b:ea:49:6c:a7:39:2a:e1:7a:67:d3:8f:4f:33:09: 3b:25:65:bd:4f:4b:91:68:bb:e7:58:1c:f0:58:a1:f3:d6:23: 0c:12:b7:1b:c7:4a:8a:ed:a2:b9:83:73:6c:09:7c:9a:ef:c4: a6:e7:b2:b8:82:19:c6:3d:16:74:b7:c4:83:e7:ab:ca:dd:17: 01:ae:5b:8b:f9:26:d0:d0:39:57:77:b7:6d:55:a4:6a:27:33: 0d:bb:11:29:c8:c4:57:4a:3c:49:eb:05:7e:6d:d4:f5:5f:1c: 13:21:5f:b3:94:3a:e7:38:a6:e0:a7:8b:e4:67:02:fc:45:8e: b0:02:17:e5:cf:7b:9e:87:a9:72:fd:92:b5:38:ae:e6:df:d8: cd:0d:39:f5:61:3e:c1:ac:c6:f5:89:8e:a5:61:92:2f:36:16: 3d:04:9a:d2:63:30:7c:9d:af:26:86:69:8a:82:e6:4d:c5:e9: cb:45:fd:eb:61:41:7f:9b:4e:c9:82:f1:e5:ff:1e:bb:e5:f1: fe:18:b9:b4:50:60:22:9d:92:d2:e5:6b:c8:5c:21:9f:f3:be: 07:9e:2b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxmkYfGDuCK8Alq88STGOfdVTY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTEyMTYwODI2MjVaFw0yNTEyMTkxMTM0MjVaMDMxMTAvBgNV BAMTKDM3NTBCNjlCQkFERjE3RjZBMjdCODMzNzhGRUE4MkY5NzI5QzJCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtsY+BCjL5Iyg+FfiCv+g48x2e 1iEp68Ns2nT9C7tAtykZEPD3s0Bh80iNaexsqs+phIFR1C6AUGBzI0YIOKNVrQP7 yutbpm7Z8sq/q+p0DgIL6X05nbgirw0LPIQs6iqES04NMPQpLYw/42SjXkDA03sg 4B+7lKmxt22pAKebYR4WNyILtTLBo6PW9lKjXbMWHyiz1eQhAEZD+PNzbIxnUl+E ka3pMfPLLFTsWwIuunQhZeL3wtR6YeWePLa45gMsl8P5jvUH69fXbiaDFymRMclA PGIX8hLgvqBw5SiHJdAZrDbTaZXVrTCDFdhT5HLp3U/9+VCaDig77RDAyY2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN1C2m7rfF/aie4M3j+qC+XKcK4swHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+sT0CLxQQLKIh8t0VWKbuM1mCglDusdwKN 4cRtExWmFK2ZIvcBrpvqSWynOSrhemfTj08zCTslZb1PS5Fou+dYHPBYofPWIwwS txvHSortormDc2wJfJrvxKbnsriCGcY9FnS3xIPnq8rdFwGuW4v5JtDQOVd3t21V pGonMw27ESnIxFdKPEnrBX5t1PVfHBMhX7OUOuc4puCni+RnAvxFjrACF+XPe56H qXL9krU4rubf2M0NOfVhPsGsxvWJjqVhki82Fj0EmtJjMHydryaGaYqC5k3F6ctF /ethQX+bTsmC8eX/Hrvl8f4YubRQYCKdktLla8hcIZ/zvgeeK4Q= -----END CERTIFICATE-----Generated at Wed Dec 17 21:57:02 2025 by rpki-client