This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft File: BAB9DF6E6156CB968E7115D7D429758297DF7401.mft (raw, json) Hash identifier: Jc0gDPHprESziKcBQ2mDS50hgPCsMzCFTnotJSnpRQg= Subject key identifier: 18:BF:49:93:AF:E3:28:CD:5F:CE:36:16:98:13:96:F2:89:03:74:60 Authority key identifier: BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 Certificate issuer: /CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Certificate serial: 26F491DF72D31A5909876DD528DBEB5BB3A22DD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft Manifest number: 022B Signing time: Fri 05 Dec 2025 21:42:25 +0000 Manifest this update: Fri 05 Dec 2025 21:37:25 +0000 Manifest next update: Tue 09 Dec 2025 02:59:25 +0000 Files and hashes: 1: 3130332e3133352e32342e302f32322d3234203d3e203338333230.roa (hash: pqB1ruj1y50kMLTY1QixFSzofv1aBEosqK4RDKcdCxA=) 2: BAB9DF6E6156CB968E7115D7D429758297DF7401.crl (hash: gWUFZjcYcP6gTKw4kfQ4HnDn25rWsj/d4DaifG6yKG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f4:91:df:72:d3:1a:59:09:87:6d:d5:28:db:eb:5b:b3:a2:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAB9DF6E6156CB968E7115D7D429758297DF7401 Validity Not Before: Dec 5 21:37:25 2025 GMT Not After : Dec 9 02:59:25 2025 GMT Subject: CN=18BF4993AFE328CD5FCE3616981396F289037460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:04:50:af:91:33:0a:68:8f:65:7a:76:b9: 92:fc:0a:49:86:31:df:55:61:9a:db:f5:fd:a1:36: 09:52:0d:d7:36:c6:f3:ad:b5:89:c7:4c:6c:80:b0: d3:e7:ba:9a:0e:38:75:88:6c:3e:59:c1:3e:68:86: fb:64:50:b7:e8:eb:22:ae:ab:07:42:48:f4:3a:b7: 8b:44:17:43:09:dd:c7:a2:af:64:2c:9e:83:fb:9c: 05:c8:85:a3:87:f1:5a:13:15:00:5c:d2:50:92:b1: 6d:47:cb:46:ca:00:6b:e3:57:51:29:83:28:46:68: 74:4c:6a:59:16:35:c9:c8:80:96:4d:24:0c:b3:c9: cd:d7:78:29:24:ce:28:61:9a:e8:0a:0f:cf:7f:de: 10:5c:37:7b:df:e3:1f:64:33:f4:a7:79:46:4c:02: 29:51:bc:1e:b7:97:3a:8f:c2:76:c1:09:49:8b:8c: 0c:8d:16:0e:a7:eb:af:2a:58:33:8e:6e:a1:fc:2f: 60:2a:f6:c5:44:fc:35:12:f2:c1:4c:70:c0:9c:97: f9:05:70:e4:c5:78:ab:dc:53:d3:77:d7:87:4a:72: 17:8c:5c:57:fe:40:cc:25:d3:fd:48:29:a0:d5:4b: 4b:84:25:ef:4c:57:20:66:7b:06:2a:39:ae:86:a8: 84:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BF:49:93:AF:E3:28:CD:5F:CE:36:16:98:13:96:F2:89:03:74:60 X509v3 Authority Key Identifier: keyid:BA:B9:DF:6E:61:56:CB:96:8E:71:15:D7:D4:29:75:82:97:DF:74:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAB9DF6E6156CB968E7115D7D429758297DF7401.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac941fbd-ad40-4327-93d6-8e79723fdb44/0/BAB9DF6E6156CB968E7115D7D429758297DF7401.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e4:8f:d9:78:86:73:dc:80:01:f6:5e:a1:89:cc:21:9d:8f: 2d:5d:83:39:7d:16:84:f1:a9:30:a6:bc:ee:8d:a5:7b:63:9f: 41:9d:ca:43:7e:0a:60:9d:fd:73:42:13:c9:49:d2:ee:d8:71: f9:d0:77:1b:05:69:1a:ad:c2:65:a5:1a:81:6a:39:0e:e0:d9: 8e:c7:59:07:36:e8:8f:cf:c7:00:56:a5:58:02:f9:90:d5:6f: 95:78:02:5c:ac:e4:fc:3e:50:e4:cf:75:1a:6b:05:02:ca:f8: 7d:f7:7b:28:67:ad:85:6d:0d:74:31:70:a0:88:70:9a:c6:26: 12:8c:b9:24:77:0e:cf:4c:0b:04:59:32:e6:8f:40:b7:8f:64: 7b:6d:7f:b7:dd:a7:b7:ff:36:dd:e4:6f:ee:bf:7c:6d:8e:90: 15:07:d5:5b:64:4f:33:bf:e9:c6:b9:df:90:e2:f4:11:86:74: c5:9b:05:8e:4c:aa:79:d0:a6:1d:02:e7:26:75:39:4f:1d:f5: 1c:01:d5:8a:87:4b:01:5f:04:54:e4:d4:23:e0:fb:e9:78:e9: 33:da:08:19:1d:fb:f3:c8:bc:3b:50:ba:30:71:76:90:c2:78: c3:84:96:40:20:98:0c:70:97:e1:de:4e:6c:95:e7:18:66:5f: b7:38:54:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvSR33LTGlkJh23VKNvrW7OiLdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5 N0RGNzQwMTAeFw0yNTEyMDUyMTM3MjVaFw0yNTEyMDkwMjU5MjVaMDMxMTAvBgNV BAMTKDE4QkY0OTkzQUZFMzI4Q0Q1RkNFMzYxNjk4MTM5NkYyODkwMzc0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXQRQr5EzCmiPZXp2uZL8CkmG Md9VYZrb9f2hNglSDdc2xvOttYnHTGyAsNPnupoOOHWIbD5ZwT5ohvtkULfo6yKu qwdCSPQ6t4tEF0MJ3ceir2QsnoP7nAXIhaOH8VoTFQBc0lCSsW1Hy0bKAGvjV1Ep gyhGaHRMalkWNcnIgJZNJAyzyc3XeCkkzihhmugKD89/3hBcN3vf4x9kM/SneUZM AilRvB63lzqPwnbBCUmLjAyNFg6n668qWDOObqH8L2Aq9sVE/DUS8sFMcMCcl/kF cOTFeKvcU9N314dKcheMXFf+QMwl0/1IKaDVS0uEJe9MVyBmewYqOa6GqITbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGL9Jk6/jKM1fzjYWmBOW8okDdGAwHwYDVR0j BBgwFoAUurnfbmFWy5aOcRXX1Cl1gpffdAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yzk0MWZiZC1hZDQwLTQzMjctOTNkNi04ZTc5NzIzZmRiNDQvMC9CQUI5REY2RTYx NTZDQjk2OEU3MTE1RDdENDI5NzU4Mjk3REY3NDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1ODI5N0RG NzQwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM5NDFmYmQtYWQ0MC00MzI3LTkz ZDYtOGU3OTcyM2ZkYjQ0LzAvQkFCOURGNkU2MTU2Q0I5NjhFNzExNUQ3RDQyOTc1 ODI5N0RGNzQwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/kj9l4hnPcgAH2XqGJzCGdjy1dgzl9FoTx qTCmvO6NpXtjn0GdykN+CmCd/XNCE8lJ0u7YcfnQdxsFaRqtwmWlGoFqOQ7g2Y7H WQc26I/PxwBWpVgC+ZDVb5V4Alys5Pw+UOTPdRprBQLK+H33eyhnrYVtDXQxcKCI cJrGJhKMuSR3Ds9MCwRZMuaPQLePZHttf7fdp7f/Nt3kb+6/fG2OkBUH1VtkTzO/ 6ca535Di9BGGdMWbBY5MqnnQph0C5yZ1OU8d9RwB1YqHSwFfBFTk1CPg++l46TPa CBkd+/PIvDtQujBxdpDCeMOElkAgmAxwl+HeTmyV5xhmX7c4VC8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:07 2025 by rpki-client