This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: aThdQatSjh+Ga1IGPhAEQfl/tfzLjO/4uM/JC1XOJi4= Subject key identifier: C3:46:3D:0E:22:5A:44:14:29:01:09:18:88:50:31:C0:2D:10:C2:8F Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 6267A4AE05B3C4876497121FF437FFA39E6C64C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03A3 Signing time: Wed 03 Dec 2025 04:51:01 +0000 Manifest this update: Wed 03 Dec 2025 04:46:01 +0000 Manifest next update: Sat 06 Dec 2025 10:01:01 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: CRfj/3IGALPs8Ut8fG6A7KNQ3fI/oOJ5EzV+YE2YHiY=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:67:a4:ae:05:b3:c4:87:64:97:12:1f:f4:37:ff:a3:9e:6c:64:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Dec 3 04:46:01 2025 GMT Not After : Dec 6 10:01:01 2025 GMT Subject: CN=C3463D0E225A441429010918885031C02D10C28F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c9:d9:77:58:6d:fd:0c:86:66:6b:03:8f:1a: 7d:49:a2:f2:cd:9d:2b:44:f2:59:b3:fd:69:32:67: bf:f7:77:42:3c:4d:93:16:21:12:58:a4:88:52:4a: a9:bc:fa:d8:62:a0:6b:7d:6b:f4:8c:ff:52:6a:c9: 28:29:c8:82:3e:fd:9b:fc:d5:34:57:0b:ba:6a:47: 32:69:b7:45:de:5b:a5:47:0d:b5:9b:00:ea:5f:e0: a0:29:2a:99:d8:a5:94:58:1b:59:83:b8:55:55:0a: 5d:0a:ce:69:f6:ab:f9:fd:5a:d7:8c:3d:95:ae:e6: 0f:16:4f:25:60:c6:4d:be:ef:a3:48:bd:09:37:cf: 7d:63:da:10:7b:8b:1c:88:12:1d:b3:c8:06:0e:91: 22:65:3f:e2:f4:eb:0b:7a:d7:f9:d1:c3:02:22:6c: c4:ff:88:78:45:ba:88:a0:01:2b:82:e1:e0:a8:b2: d9:75:1f:00:8c:23:09:33:06:b3:04:3f:c3:b1:7b: 42:2a:ba:eb:34:be:93:cd:bc:da:97:48:10:fa:d1: 44:2d:2e:21:45:d2:d5:b0:9f:87:21:dd:71:c3:d5: 6d:9c:20:86:c0:e6:1b:c9:70:14:e3:b6:fb:11:db: 8d:cb:53:fa:c6:ce:7d:a4:cd:71:ff:41:d5:73:23: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:46:3D:0E:22:5A:44:14:29:01:09:18:88:50:31:C0:2D:10:C2:8F X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:53:5d:72:50:0d:84:a9:c5:23:e4:c8:f8:63:2d:de:96:b3: b8:ad:98:44:55:23:e2:df:ad:8b:82:aa:f9:4b:cf:61:bc:8a: e7:a0:6d:de:21:ab:b2:2e:8a:ea:b0:76:bf:90:82:82:6a:d9: 26:59:72:9b:6a:83:37:18:bb:87:b7:72:22:57:bb:46:19:ae: a3:b7:a2:f9:82:1f:d3:b5:8a:91:96:8a:e4:54:f1:1e:14:a3: 6b:46:1a:6d:18:d0:60:a6:a8:cb:60:8c:a2:b6:75:b6:fe:20: 54:8b:24:8d:ce:6d:68:f2:49:51:01:6f:fd:91:42:d7:7b:08: 61:8f:0a:22:b5:9d:14:92:0d:0d:be:3a:b1:35:59:49:47:75: 80:d9:be:83:9a:04:1e:35:fa:78:a4:28:ad:bf:85:6f:28:66: f8:92:0b:3c:4c:7d:3d:c7:cd:7a:37:d4:97:68:03:3e:4d:0f: 5d:58:a7:fa:1b:7c:66:91:2d:d1:40:1a:db:50:d9:15:d3:fa: 16:c4:35:c1:a8:22:9f:50:6c:42:3b:7a:76:f4:18:83:4c:cb: 8d:b9:11:8c:12:3a:08:7a:aa:93:d7:3a:4a:9e:9f:54:c8:96: 30:70:a4:14:7e:7d:47:5b:b7:36:d0:d9:7e:e4:12:0e:c2:0b: 72:03:ee:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmekrgWzxIdklxIf9Df/o55sZMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNTEyMDMwNDQ2MDFaFw0yNTEyMDYxMDAxMDFaMDMxMTAvBgNV BAMTKEMzNDYzRDBFMjI1QTQ0MTQyOTAxMDkxODg4NTAzMUMwMkQxMEMyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXydl3WG39DIZmawOPGn1JovLN nStE8lmz/WkyZ7/3d0I8TZMWIRJYpIhSSqm8+thioGt9a/SM/1JqySgpyII+/Zv8 1TRXC7pqRzJpt0XeW6VHDbWbAOpf4KApKpnYpZRYG1mDuFVVCl0Kzmn2q/n9WteM PZWu5g8WTyVgxk2+76NIvQk3z31j2hB7ixyIEh2zyAYOkSJlP+L06wt61/nRwwIi bMT/iHhFuoigASuC4eCostl1HwCMIwkzBrMEP8Oxe0Iquus0vpPNvNqXSBD60UQt LiFF0tWwn4ch3XHD1W2cIIbA5hvJcBTjtvsR243LU/rGzn2kzXH/QdVzI5lXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw0Y9DiJaRBQpAQkYiFAxwC0Qwo8wHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdTXXJQDYSpxSPkyPhjLd6Ws7itmERVI+Lf rYuCqvlLz2G8iuegbd4hq7Iuiuqwdr+QgoJq2SZZcptqgzcYu4e3ciJXu0YZrqO3 ovmCH9O1ipGWiuRU8R4Uo2tGGm0Y0GCmqMtgjKK2dbb+IFSLJI3ObWjySVEBb/2R Qtd7CGGPCiK1nRSSDQ2+OrE1WUlHdYDZvoOaBB41+nikKK2/hW8oZviSCzxMfT3H zXo31JdoAz5ND11Yp/obfGaRLdFAGttQ2RXT+hbENcGoIp9QbEI7enb0GINMy425 EYwSOgh6qpPXOkqen1TIljBwpBR+fUdbtzbQ2X7kEg7CC3ID7pE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:50:37 2025 by rpki-client