This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft File: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft (raw, json) Hash identifier: Bl0tinq3JcBmjC5OrkpNl1zY3HostZhaUrv5WdyTgiI= Subject key identifier: B8:36:3F:62:84:36:3F:97:CA:1C:21:AE:BE:3A:4D:C2:CE:1B:38:8A Authority key identifier: BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 Certificate issuer: /CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Certificate serial: 6DA39860FB913AC32E217552665030D4104C9D75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft Manifest number: 0394 Signing time: Tue 02 Dec 2025 10:52:10 +0000 Manifest this update: Tue 02 Dec 2025 10:47:10 +0000 Manifest next update: Fri 05 Dec 2025 19:32:10 +0000 Files and hashes: 1: 3130332e3136302e31352e302f32342d3234203d3e20313338303936.roa (hash: TXQIRXriJht3JOgCTd7/J9Hx21TMhiLYd4Rp6KeHOGg=) 2: BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl (hash: o5sbP8I+VuDMqnpFaoLtHHTIlfV2EFJ2puvpEnlx9SM=) 3: 3130332e3136302e31342e302f32342d3234203d3e20313431363130.roa (hash: Jph2XiNWmwNAS4UJyHSi24QW91o/E+0+i6OT+5Vsmxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a3:98:60:fb:91:3a:c3:2e:21:75:52:66:50:30:d4:10:4c:9d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7 Validity Not Before: Dec 2 10:47:10 2025 GMT Not After : Dec 5 19:32:10 2025 GMT Subject: CN=B8363F6284363F97CA1C21AEBE3A4DC2CE1B388A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:5b:4f:82:b1:1f:e0:b1:66:58:1e:d4:0d: a8:15:f3:45:07:a1:87:fb:2b:0e:8c:69:28:16:7d: 96:61:4c:cb:48:c3:61:4e:68:55:11:07:7e:7e:7a: ee:81:4c:c3:36:71:b8:ad:cd:48:8c:76:ea:81:df: 95:c6:5f:c3:d6:59:6a:60:c6:d1:9a:7d:6d:88:e2: 22:2c:17:4c:f4:49:6f:33:38:3f:8c:61:3d:47:4b: 07:6d:77:86:3d:58:d0:ed:3c:90:cf:bb:6b:5c:54: af:74:61:4b:8e:13:7a:c6:3e:6c:3c:c9:56:cd:85: 48:b6:c1:e1:c9:46:5f:f5:07:26:d3:8c:d1:0c:c9: 96:00:08:3c:ce:27:09:b8:6f:f5:49:0b:88:03:d8: 17:a3:9a:ee:5d:e1:1e:9e:d2:9f:80:c9:d7:3f:84: 4f:1c:84:ec:70:f2:0b:91:fd:99:98:db:00:20:e1: da:54:1d:4a:ed:69:b5:21:d8:f5:e6:8d:40:e2:90: dd:e0:85:f6:b5:1f:03:79:1f:71:15:33:55:40:ad: 7b:33:79:9c:f7:42:70:2c:04:d0:01:2b:a0:6e:27: 47:e8:cf:9e:db:81:47:13:f4:3b:a3:44:e4:c8:12: c7:56:9d:26:47:6d:4d:41:b0:5d:64:c4:80:99:61: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:36:3F:62:84:36:3F:97:CA:1C:21:AE:BE:3A:4D:C2:CE:1B:38:8A X509v3 Authority Key Identifier: keyid:BA:65:CD:04:3C:E7:E9:AE:0C:DA:AE:BF:12:E3:3D:86:46:7A:8F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12b71536-717e-45db-a03a-338f1dfa4893/0/BA65CD043CE7E9AE0CDAAEBF12E33D86467A8FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:91:f8:59:8e:a5:1d:6e:ee:c7:5c:2e:41:35:b2:41:28:a1: 95:2d:ca:51:4b:97:72:61:6d:ae:40:5c:7e:5b:9a:6a:1f:44: f9:4c:cb:c6:7f:26:9d:9d:2e:a8:1e:9e:c5:26:18:b6:e3:2a: da:94:fd:54:2d:d6:f7:68:71:00:18:79:fc:e0:2c:cf:69:83: 73:35:c3:8f:fd:20:c3:51:96:12:e8:f6:4d:7a:b3:d1:8c:79: 35:f3:d2:ef:14:19:49:a1:e2:1d:9f:cf:52:ba:bf:7e:fc:bf: 28:90:53:5c:4d:2c:4a:1b:9c:8f:c3:30:22:4b:07:cd:c2:63: 51:9b:2b:a0:02:b5:f7:ad:5c:86:4c:e0:50:19:76:d3:ff:2d: 22:16:23:98:81:d5:61:00:e4:1b:bc:15:56:ce:cb:31:7a:8d: f9:f8:cb:d7:03:96:e8:6d:02:9f:cd:02:6b:54:1f:6c:ad:51: fa:7e:dc:96:8d:dc:59:a9:05:9c:d9:38:b1:7a:d9:f5:b3:4e: 04:38:74:8e:1f:1b:f3:1b:41:40:b1:5b:ab:14:70:8b:cb:25: 69:6a:52:89:ea:e0:28:a2:d9:1b:0a:0b:e1:2d:51:13:ca:a4: 7c:bd:27:c9:35:f5:0e:e3:50:da:44:95:f8:ad:15:f5:77:39: b4:6a:c0:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbaOYYPuROsMuIXVSZlAw1BBMnXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0 NjdBOEZFNzAeFw0yNTEyMDIxMDQ3MTBaFw0yNTEyMDUxOTMyMTBaMDMxMTAvBgNV BAMTKEI4MzYzRjYyODQzNjNGOTdDQTFDMjFBRUJFM0E0REMyQ0UxQjM4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSVtPgrEf4LFmWB7UDagV80UH oYf7Kw6MaSgWfZZhTMtIw2FOaFURB35+eu6BTMM2cbitzUiMduqB35XGX8PWWWpg xtGafW2I4iIsF0z0SW8zOD+MYT1HSwdtd4Y9WNDtPJDPu2tcVK90YUuOE3rGPmw8 yVbNhUi2weHJRl/1BybTjNEMyZYACDzOJwm4b/VJC4gD2Bejmu5d4R6e0p+Aydc/ hE8chOxw8guR/ZmY2wAg4dpUHUrtabUh2PXmjUDikN3ghfa1HwN5H3EVM1VArXsz eZz3QnAsBNABK6BuJ0foz57bgUcT9DujROTIEsdWnSZHbU1BsF1kxICZYTxzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDY/YoQ2P5fKHCGuvjpNws4bOIowHwYDVR0j BBgwFoAUumXNBDzn6a4M2q6/EuM9hkZ6j+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmI3MTUzNi03MTdlLTQ1ZGItYTAzYS0zMzhmMWRmYTQ4OTMvMC9CQTY1Q0QwNDND RTdFOUFFMENEQUFFQkYxMkUzM0Q4NjQ2N0E4RkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNEODY0NjdB OEZFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJiNzE1MzYtNzE3ZS00NWRiLWEw M2EtMzM4ZjFkZmE0ODkzLzAvQkE2NUNEMDQzQ0U3RTlBRTBDREFBRUJGMTJFMzNE ODY0NjdBOEZFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiR+FmOpR1u7sdcLkE1skEooZUtylFLl3Jh ba5AXH5bmmofRPlMy8Z/Jp2dLqgensUmGLbjKtqU/VQt1vdocQAYefzgLM9pg3M1 w4/9IMNRlhLo9k16s9GMeTXz0u8UGUmh4h2fz1K6v378vyiQU1xNLEobnI/DMCJL B83CY1GbK6ACtfetXIZM4FAZdtP/LSIWI5iB1WEA5Bu8FVbOyzF6jfn4y9cDluht Ap/NAmtUH2ytUfp+3JaN3FmpBZzZOLF62fWzTgQ4dI4fG/MbQUCxW6sUcIvLJWlq Uonq4Cii2RsKC+EtURPKpHy9J8k19Q7jUNpElfitFfV3ObRqwHE= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:06 2025 by rpki-client