This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: 8xWCpk15NMJVz+wrcsGpsGoZ8AwmlUDm5ctEBahYX9k= Subject key identifier: 00:E3:ED:F8:D3:37:00:0C:F9:C0:B3:11:5D:E5:7B:5F:80:46:AE:40 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 49A3B1996991EC264ACE5546EF563CDDDB987BE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 0255 Signing time: Sat 24 Jan 2026 21:22:00 +0000 Manifest this update: Sat 24 Jan 2026 21:17:00 +0000 Manifest next update: Tue 27 Jan 2026 22:10:00 +0000 Files and hashes: 1: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=) 2: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: DsvK6dyr1i0V0a01F7PMnzz7+G5Bu/W/vl/K/kQzaQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 22:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a3:b1:99:69:91:ec:26:4a:ce:55:46:ef:56:3c:dd:db:98:7b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Jan 24 21:17:00 2026 GMT Not After : Jan 27 22:10:00 2026 GMT Subject: CN=00E3EDF8D337000CF9C0B3115DE57B5F8046AE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:53:dd:14:49:b9:62:8b:36:2d:6a:9c:ee: bd:7a:46:92:6d:eb:c7:98:c7:31:05:4e:75:8b:01: 2c:e7:98:00:82:19:c9:ef:12:b5:bf:29:89:61:26: d0:25:e2:50:97:be:49:96:9b:34:51:3c:fd:a4:25: 77:df:ae:78:13:ba:27:29:de:88:2c:28:fe:bb:44: ed:52:ff:89:ec:cc:3c:46:e2:95:85:b1:7a:c3:b7: 48:90:4a:22:c4:c9:0b:e0:90:ae:1c:be:a1:03:a0: 79:d1:8c:3c:ac:20:b1:da:e4:6c:7c:c9:08:0e:d7: 54:00:26:6a:95:68:a0:45:41:4a:bb:37:94:1e:ae: 53:a4:73:3e:ac:d2:40:7a:5b:5a:21:14:b0:9a:8f: 68:5b:52:87:33:2e:47:29:76:df:99:03:a1:75:26: ca:00:c3:fa:6a:d3:67:50:35:f9:5d:bf:7e:e7:8a: a4:df:f9:b4:f1:ce:dd:0f:8f:cf:0b:0f:6a:f9:37: 38:df:63:b3:82:d7:3b:c9:8a:94:77:63:e9:3a:9a: 07:a8:0c:ba:41:b4:71:b3:54:9a:26:d9:ac:52:90: f2:cb:ed:ff:42:d9:c1:aa:aa:38:74:03:11:e0:3d: f3:6b:66:95:ae:10:aa:e2:c0:bb:83:29:44:ed:5c: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E3:ED:F8:D3:37:00:0C:F9:C0:B3:11:5D:E5:7B:5F:80:46:AE:40 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:2e:45:65:23:f0:f3:08:8a:63:b4:bc:eb:ab:9d:e0:55:20: 5a:ac:8d:58:42:bd:51:e3:84:08:8c:b0:21:40:df:9e:17:15: 44:8d:62:da:2f:0c:1c:3a:ea:a8:74:3d:75:46:e1:24:69:9c: d0:3e:5d:5c:b5:a4:f5:96:d3:7f:13:f7:97:a1:e5:c2:86:3d: fb:9f:56:a9:12:bf:7c:de:ae:c4:8d:18:4d:e0:7b:86:cf:47: 89:60:cf:31:94:ec:e9:10:00:cb:ac:20:68:8c:ec:c6:0a:12: 99:5a:ac:04:d9:50:36:c6:4f:82:da:4b:a2:13:0b:76:87:96: 56:09:ef:58:22:5f:bb:31:bb:18:88:1d:95:fe:a2:9d:70:85: d8:ec:f7:c3:4c:6a:19:b2:e2:1e:26:43:9b:e9:c7:60:b4:e0: b1:e0:9e:97:a2:c2:a0:3a:69:91:48:f1:26:70:e8:4b:43:6c: e8:1c:88:36:76:b8:27:30:01:4a:17:94:d1:a4:92:b4:21:e1: e2:b6:de:b1:80:e6:cc:08:1f:7d:d3:7b:20:f7:98:53:1b:cb: 03:94:9b:5c:b2:0f:77:59:5d:2e:af:c1:cc:6b:3e:b8:ba:49: 1c:de:8f:c1:cf:29:f3:e9:74:a0:9c:2a:3e:4d:e7:9d:6c:51: 2b:20:4c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaOxmWmR7CZKzlVG71Y83duYe+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNjAxMjQyMTE3MDBaFw0yNjAxMjcyMjEwMDBaMDMxMTAvBgNV BAMTKDAwRTNFREY4RDMzNzAwMENGOUMwQjMxMTVERTU3QjVGODA0NkFFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EFPdFEm5Yos2LWqc7r16RpJt 68eYxzEFTnWLASznmACCGcnvErW/KYlhJtAl4lCXvkmWmzRRPP2kJXffrngTuicp 3ogsKP67RO1S/4nszDxG4pWFsXrDt0iQSiLEyQvgkK4cvqEDoHnRjDysILHa5Gx8 yQgO11QAJmqVaKBFQUq7N5QerlOkcz6s0kB6W1ohFLCaj2hbUoczLkcpdt+ZA6F1 JsoAw/pq02dQNfldv37niqTf+bTxzt0Pj88LD2r5NzjfY7OC1zvJipR3Y+k6mgeo DLpBtHGzVJom2axSkPLL7f9C2cGqqjh0AxHgPfNrZpWuEKriwLuDKUTtXMlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAOPt+NM3AAz5wLMRXeV7X4BGrkAwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMuRWUj8PMIimO0vOurneBVIFqsjVhCvVHj hAiMsCFA354XFUSNYtovDBw66qh0PXVG4SRpnNA+XVy1pPWW038T95eh5cKGPfuf VqkSv3zersSNGE3ge4bPR4lgzzGU7OkQAMusIGiM7MYKEplarATZUDbGT4LaS6IT C3aHllYJ71giX7sxuxiIHZX+op1whdjs98NMahmy4h4mQ5vpx2C04LHgnpeiwqA6 aZFI8SZw6EtDbOgciDZ2uCcwAUoXlNGkkrQh4eK23rGA5swIH33TeyD3mFMbywOU m1yyD3dZXS6vwcxrPri6SRzej8HPKfPpdKCcKj5N551sUSsgTIc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:36:01 2026 by rpki-client