This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft File: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft (raw, json) Hash identifier: dy4r79ZxXtNF4r5FCP/ZrZHl72d/VH4xM/ir2+nclHw= Subject key identifier: D7:F1:8B:65:C7:9B:7F:50:DB:C0:12:C2:AF:8A:8F:E1:1D:34:E6:8B Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Certificate serial: 511C5F93501E40B2073EBFF8EB1CF3E44D9ED1B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft Manifest number: 05B0 Signing time: Sun 14 Dec 2025 20:40:04 +0000 Manifest this update: Sun 14 Dec 2025 20:35:04 +0000 Manifest next update: Wed 17 Dec 2025 21:56:04 +0000 Files and hashes: 1: AS139994.roa (hash: 3MhCOE1JfpBzQV976XNeUOb97J9ofo+CArIJ1ybLWHw=) 2: AS17885.roa (hash: +5xEigpCp1X2T9rrFe1WUaOISe2GaQb0l6AFpj1VLrI=) 3: 10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl (hash: u9f04Vb1p33ChEWlerkKxwdqu/cGL9NeB8ELMzeVOyU=) 4: AS24203.roa (hash: liOvJt+yX+uMFw47nNBN9GmU7xS1CPE6TUtdH7jFgY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 21:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1c:5f:93:50:1e:40:b2:07:3e:bf:f8:eb:1c:f3:e4:4d:9e:d1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B Validity Not Before: Dec 14 20:35:04 2025 GMT Not After : Dec 17 21:56:04 2025 GMT Subject: CN=D7F18B65C79B7F50DBC012C2AF8A8FE11D34E68B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:16:4c:d2:21:35:ed:e7:56:1b:46:1b:88: d9:45:d3:d8:29:be:8e:90:10:be:12:87:84:e1:18: b4:5f:91:f3:78:d2:73:d5:5e:e9:27:09:16:f9:55: bf:b2:02:1e:6d:2e:67:85:ec:64:ce:64:ee:5a:54: 34:1d:e3:15:d5:29:c5:41:fc:33:9c:5f:c1:fc:77: e6:47:1f:d7:e7:a7:25:1a:9c:97:fa:ca:c1:34:74: 48:cb:df:7a:7f:f0:d6:6b:80:f3:6c:c1:5d:7f:20: 6f:22:0a:4e:17:d5:2e:bb:2e:e7:fd:8f:b3:41:02: 6f:89:5e:5e:93:c0:aa:df:c4:2a:cb:be:f1:c8:8b: 76:bc:ff:c4:a0:1a:f1:f6:66:5b:fa:6f:d9:b3:a3: 5c:9f:d9:f1:a2:17:d3:2f:83:7d:7f:e3:2d:ae:80: 6e:e0:20:72:63:d8:51:55:af:a5:b1:f1:a2:98:f5: 0f:b8:bf:33:6b:9c:c6:30:34:9f:51:b9:48:dd:42: a7:bb:b7:7d:b0:2a:53:d9:a0:dd:d0:91:d4:15:fc: ff:c8:6a:0e:c7:18:ff:c8:0d:b5:7d:fb:2d:4a:00: 75:90:8f:71:0d:33:78:c7:f3:36:77:59:c8:ba:75: 63:49:58:d1:1e:c2:7a:ba:83:ab:ba:61:c4:4d:cc: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:8B:65:C7:9B:7F:50:DB:C0:12:C2:AF:8A:8F:E1:1D:34:E6:8B X509v3 Authority Key Identifier: keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d1:b9:3c:bf:fa:ff:83:8c:56:d1:36:81:be:2f:9d:b5:2a: fc:ea:5d:8b:55:68:55:0a:63:f0:e3:bf:68:c0:63:5e:30:f9: 01:0e:3a:46:d3:3a:75:bf:c2:08:cb:12:c1:dc:c5:ed:c5:ad: bf:5b:c1:b3:00:48:ea:6d:02:95:28:3f:31:b8:0f:82:fd:6e: 9f:88:39:2a:1c:d8:60:ca:94:97:fc:24:ee:ef:30:f0:f8:19: 5b:10:8b:28:f5:31:90:39:f5:eb:b8:1f:ff:1e:c1:61:2c:b7: e0:0e:71:40:0e:6a:31:97:68:89:19:f6:72:7a:7c:ec:bc:18: ee:7e:7f:9d:b0:19:ad:3e:73:a7:80:18:8c:61:e5:71:89:96: 11:ee:1b:7c:c3:07:7b:c2:7f:50:bd:42:11:e5:a4:1b:9d:03: e9:99:50:28:3c:56:f4:90:33:86:06:ca:fd:5a:db:b0:17:e1: cf:5b:09:19:b0:40:8f:67:bc:f3:02:45:97:d3:90:11:7d:db: b8:59:e3:99:65:ed:5c:00:0e:4f:b6:64:c1:1d:c5:52:b8:86: 0f:9c:a0:b9:73:03:68:37:15:94:3b:b7:17:4b:70:be:9e:fc: 8a:3a:18:58:1d:59:d3:46:4a:42:c9:9c:5c:45:4c:8e:0c:c7: 47:86:95:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUURxfk1AeQLIHPr/46xzz5E2e0bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG QzY2MEExQjAeFw0yNTEyMTQyMDM1MDRaFw0yNTEyMTcyMTU2MDRaMDMxMTAvBgNV BAMTKEQ3RjE4QjY1Qzc5QjdGNTBEQkMwMTJDMkFGOEE4RkUxMUQzNEU2OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLBZM0iE17edWG0YbiNlF09gp vo6QEL4Sh4ThGLRfkfN40nPVXuknCRb5Vb+yAh5tLmeF7GTOZO5aVDQd4xXVKcVB /DOcX8H8d+ZHH9fnpyUanJf6ysE0dEjL33p/8NZrgPNswV1/IG8iCk4X1S67Luf9 j7NBAm+JXl6TwKrfxCrLvvHIi3a8/8SgGvH2Zlv6b9mzo1yf2fGiF9Mvg31/4y2u gG7gIHJj2FFVr6Wx8aKY9Q+4vzNrnMYwNJ9RuUjdQqe7t32wKlPZoN3QkdQV/P/I ag7HGP/IDbV9+y1KAHWQj3ENM3jH8zZ3Wci6dWNJWNEewnq6g6u6YcRNzMbbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/GLZcebf1DbwBLCr4qP4R005oswHwYDVR0j BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2 MEExQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5 QkNGQzY2MEExQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrRuTy/+v+DjFbRNoG+L521KvzqXYtVaFUK Y/Djv2jAY14w+QEOOkbTOnW/wgjLEsHcxe3Frb9bwbMASOptApUoPzG4D4L9bp+I OSoc2GDKlJf8JO7vMPD4GVsQiyj1MZA59eu4H/8ewWEst+AOcUAOajGXaIkZ9nJ6 fOy8GO5+f52wGa0+c6eAGIxh5XGJlhHuG3zDB3vCf1C9QhHlpBudA+mZUCg8VvSQ M4YGyv1a27AX4c9bCRmwQI9nvPMCRZfTkBF927hZ45ll7VwADk+2ZMEdxVK4hg+c oLlzA2g3FZQ7txdLcL6e/Io6GFgdWdNGSkLJnFxFTI4Mx0eGlYQ= -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:21 2025 by rpki-client