This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft File: BA464CC49469C32DF090DA43D97CD49A55310171.mft (raw, json) Hash identifier: jSslhuJVgj75e5hYxJORS/bG2vSy0PCWofsSLa7uJ44= Subject key identifier: EF:FF:1F:44:6D:69:92:47:CE:85:6A:5F:57:62:5F:63:E8:5A:A2:D4 Authority key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Certificate issuer: /CN=BA464CC49469C32DF090DA43D97CD49A55310171 Certificate serial: 18E4B511BBC9139B2377AF6528E03DE1A4EBA722 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft Manifest number: 023F Signing time: Sat 06 Dec 2025 22:22:01 +0000 Manifest this update: Sat 06 Dec 2025 22:17:01 +0000 Manifest next update: Tue 09 Dec 2025 22:45:01 +0000 Files and hashes: 1: BA464CC49469C32DF090DA43D97CD49A55310171.crl (hash: jUswHGXY4bIm2QpNvrRprNrYun1KlQATj4gAjDsMjVE=) 2: 3130332e3232382e32342e302f32322d3234203d3e203539323830.roa (hash: MiIoYTJBd/MaIc8CFenzeZ7Kco5pQhZQ/L7ZwOtlTL8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:e4:b5:11:bb:c9:13:9b:23:77:af:65:28:e0:3d:e1:a4:eb:a7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Validity Not Before: Dec 6 22:17:01 2025 GMT Not After : Dec 9 22:45:01 2025 GMT Subject: CN=EFFF1F446D699247CE856A5F57625F63E85AA2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:a6:fb:9f:73:c4:d3:a4:03:e9:e2:e9:f1: 5f:5f:c3:dd:17:5f:5c:d3:de:9b:bb:68:d0:2f:70: 68:61:24:c9:1e:c5:b9:5e:df:e8:c9:0e:ef:14:6f: 34:01:c9:c6:c8:a0:e1:f9:43:6e:c3:b3:63:75:35: b6:5a:34:ae:51:8f:3d:e9:72:28:2d:02:22:fa:02: 14:36:73:5a:22:2f:8c:8a:c8:b1:93:a5:5c:9b:39: be:cf:c8:35:4a:a6:86:2e:72:db:81:1f:ab:d2:e1: ce:99:27:6e:a2:d2:5e:9f:e5:92:88:7c:1c:80:22: 5c:dd:b4:cb:c4:8f:ae:0a:5a:3e:54:c1:d8:ef:5f: 6a:f8:35:7a:ee:22:10:49:86:8c:0a:d6:fd:25:45: a8:91:61:73:4f:a3:3d:e1:61:60:1e:ea:34:72:d4: b5:79:bc:60:e9:89:1f:a3:af:1d:93:b5:e8:ea:75: b6:9e:a4:d6:5e:19:6b:be:f9:35:99:b4:b1:3a:fd: f8:c2:92:ca:b6:12:91:7d:f3:ae:79:d6:78:a6:73: 04:2f:a2:38:7d:1a:0a:d9:ea:50:8e:5f:aa:2d:3e: f0:dd:8d:68:3a:89:be:02:7b:1f:fd:dd:b6:7e:a7: b8:9e:3d:91:11:7a:98:5e:1c:43:f1:5f:db:82:fb: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FF:1F:44:6D:69:92:47:CE:85:6A:5F:57:62:5F:63:E8:5A:A2:D4 X509v3 Authority Key Identifier: keyid:BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:b8:b9:9b:15:86:9e:54:9e:8c:5d:5a:68:11:2f:b5:70: 7c:3a:4e:b8:88:ee:5c:df:db:db:18:6e:fc:e2:4e:18:70:ac: 08:75:ae:40:02:a0:e3:12:48:12:77:e2:f4:ec:56:d2:b8:a7: 2a:04:31:69:c4:51:0b:c0:87:33:81:41:c4:49:ec:55:61:db: fc:82:a1:c2:a8:ba:18:7c:22:64:78:94:93:99:b2:66:6a:2d: 32:b3:89:d4:03:09:72:15:29:2d:a3:60:45:73:4e:f8:8c:c0: a3:74:ff:01:bf:cb:1e:ab:b3:ea:0a:d0:38:4a:03:d9:1c:e7: 8a:52:db:c3:f1:bd:f9:41:a4:d3:41:dd:f1:04:90:74:68:87: f3:65:bd:65:79:07:e1:db:3e:f5:ae:4a:9c:9f:bc:71:1f:06: 9b:3a:19:6f:be:2c:07:fd:02:3e:02:36:99:f7:3e:7e:03:bf: 44:0e:52:ff:b5:5a:94:2b:91:b7:de:ef:eb:d1:99:b8:43:ab: 97:1d:77:6a:80:1a:55:9f:60:95:69:6e:70:84:7a:25:3e:a0: 88:14:04:c5:10:60:06:82:68:a2:b7:cf:5b:65:c4:69:14:d3: e1:6a:c3:5a:78:dd:d3:c7:09:f3:0e:dc:50:80:f8:38:80:d2: 20:12:f6:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGOS1EbvJE5sjd69lKOA94aTrpyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1 NTMxMDE3MTAeFw0yNTEyMDYyMjE3MDFaFw0yNTEyMDkyMjQ1MDFaMDMxMTAvBgNV BAMTKEVGRkYxRjQ0NkQ2OTkyNDdDRTg1NkE1RjU3NjI1RjYzRTg1QUEyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD46b7n3PE06QD6eLp8V9fw90X X1zT3pu7aNAvcGhhJMkexble3+jJDu8UbzQBycbIoOH5Q27Ds2N1NbZaNK5Rjz3p cigtAiL6AhQ2c1oiL4yKyLGTpVybOb7PyDVKpoYuctuBH6vS4c6ZJ26i0l6f5ZKI fByAIlzdtMvEj64KWj5UwdjvX2r4NXruIhBJhowK1v0lRaiRYXNPoz3hYWAe6jRy 1LV5vGDpiR+jrx2TtejqdbaepNZeGWu++TWZtLE6/fjCksq2EpF986551nimcwQv ojh9GgrZ6lCOX6otPvDdjWg6ib4Cex/93bZ+p7iePZERepheHEPxX9uC+3JlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7/8fRG1pkkfOhWpfV2JfY+haotQwHwYDVR0j BBgwFoAUukZMxJRpwy3wkNpD2XzUmlUxAXEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMC9CQTQ2NENDNDk0 NjlDMzJERjA5MERBNDNEOTdDRDQ5QTU1MzEwMTcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0OUE1NTMx MDE3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzliMWU3ZjctMWY0Yi00MWE2LTky NTItZjZiODI4OGZiM2FiLzAvQkE0NjRDQzQ5NDY5QzMyREYwOTBEQTQzRDk3Q0Q0 OUE1NTMxMDE3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElBuLmbFYaeVJ6MXVpoES+1cHw6TriI7lzf 29sYbvziThhwrAh1rkACoOMSSBJ34vTsVtK4pyoEMWnEUQvAhzOBQcRJ7FVh2/yC ocKouhh8ImR4lJOZsmZqLTKzidQDCXIVKS2jYEVzTviMwKN0/wG/yx6rs+oK0DhK A9kc54pS28PxvflBpNNB3fEEkHRoh/NlvWV5B+HbPvWuSpyfvHEfBps6GW++LAf9 Aj4CNpn3Pn4Dv0QOUv+1WpQrkbfe7+vRmbhDq5cdd2qAGlWfYJVpbnCEeiU+oIgU BMUQYAaCaKK3z1tlxGkU0+Fqw1p43dPHCfMO3FCA+DiA0iAS9j0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:19 2025 by rpki-client