This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: +UqTgHtiTevZhQaKXRvkqL36ugR2bm/EkszxdXIc6Bs= Subject key identifier: 5B:92:A3:78:46:70:4D:93:82:93:8F:1E:FE:F7:01:EE:5D:5B:23:3C Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 551B3D56FA4D58F33A83A47EE2259BD649379607 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 04A9 Signing time: Tue 02 Dec 2025 08:02:13 +0000 Manifest this update: Tue 02 Dec 2025 07:57:13 +0000 Manifest next update: Fri 05 Dec 2025 18:37:13 +0000 Files and hashes: 1: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: t20KTLD3QvlRm61wfFjkign18dWDSCQQUyzibJQxyTU=) 2: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) 3: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 4: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:37:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:1b:3d:56:fa:4d:58:f3:3a:83:a4:7e:e2:25:9b:d6:49:37:96:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Dec 2 07:57:13 2025 GMT Not After : Dec 5 18:37:13 2025 GMT Subject: CN=5B92A37846704D9382938F1EFEF701EE5D5B233C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b1:a4:a6:32:1d:05:5b:a1:b2:ba:96:4f:97: 0b:bf:1a:0c:e6:93:d7:f8:85:9c:0e:18:09:db:ca: 20:58:e5:e7:28:f2:27:dc:a9:c1:b6:fa:8a:71:06: 1b:81:f9:19:29:3d:5d:db:de:51:43:c6:43:1a:f9: 7d:2d:c3:5e:3b:35:4a:11:f7:7c:86:c5:1c:17:f8: 2d:e4:b4:36:40:3c:1a:a3:99:6a:0b:52:38:f3:f9: 52:79:52:53:d2:03:04:12:0b:bd:b1:21:35:1e:da: 8c:f0:26:8a:dd:01:69:71:b6:32:71:7c:85:a6:d9: f2:18:b3:af:57:91:b0:f0:29:bd:02:90:c6:45:e5: 2d:6e:46:8a:f1:02:6f:3a:91:8f:38:d7:e0:ca:d3: de:3d:5d:a4:fa:51:b1:d1:43:90:7b:db:48:39:56: 1d:f9:14:6e:9a:32:76:db:95:b7:14:8e:a6:f2:3f: 75:42:5e:b7:c9:08:14:5d:02:e9:d5:42:d7:51:78: 53:84:50:e4:95:3b:61:73:36:68:43:df:8d:2c:89: af:2f:68:b0:d5:63:d0:2e:60:84:9f:c4:36:d8:39: 59:d1:2a:c0:f5:69:d6:38:29:04:28:d1:3f:f2:fd: d8:56:9b:01:8b:fe:a7:b2:06:41:e8:99:ab:32:45: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:92:A3:78:46:70:4D:93:82:93:8F:1E:FE:F7:01:EE:5D:5B:23:3C X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:43:98:e4:a7:1d:8f:13:1d:60:73:d4:59:19:d0:ae:3a: 50:02:88:a7:69:71:7c:15:93:c1:f6:1c:71:37:98:1c:b5:4f: 5e:ad:92:95:59:b7:39:13:cb:4d:24:0e:00:37:d0:6c:6d:bd: 65:89:7b:dd:77:c6:bc:ac:28:2e:ad:df:50:54:03:0b:d4:94: 9e:c9:f6:98:2c:23:20:e8:61:b5:86:71:8f:0c:54:b2:f5:29: f6:bf:0a:fd:c2:2e:0f:08:f4:1a:80:bf:c6:be:ca:13:6e:a8: 0a:35:3e:6b:11:6f:22:53:49:0f:d7:d8:bb:8f:16:a5:76:06: f7:05:b2:4b:ed:bf:b6:84:39:31:dc:ff:d4:26:ff:7c:a8:1b: 74:13:ca:63:a2:7b:d0:98:d6:76:2f:90:18:e8:17:05:05:a6: da:7f:9e:72:61:10:4e:bb:2b:02:6a:0c:a9:bb:63:d7:d6:8d: df:42:4e:cf:0b:da:ef:a2:c2:79:45:ea:6d:ef:54:4f:06:3f: 6b:ed:e5:09:f2:fb:0f:5d:46:4c:dd:73:5e:08:98:3d:86:0f: 5e:1b:51:3f:8c:9b:87:73:2f:6b:85:4d:18:7b:df:bd:da:ff: f3:64:d1:af:3d:ac:1e:43:e4:7d:4b:93:e9:4d:03:75:c8:6a: 6f:71:a3:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRs9VvpNWPM6g6R+4iWb1kk3lgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTEyMDIwNzU3MTNaFw0yNTEyMDUxODM3MTNaMDMxMTAvBgNV BAMTKDVCOTJBMzc4NDY3MDREOTM4MjkzOEYxRUZFRjcwMUVFNUQ1QjIzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesaSmMh0FW6GyupZPlwu/Ggzm k9f4hZwOGAnbyiBY5eco8ifcqcG2+opxBhuB+RkpPV3b3lFDxkMa+X0tw147NUoR 93yGxRwX+C3ktDZAPBqjmWoLUjjz+VJ5UlPSAwQSC72xITUe2ozwJordAWlxtjJx fIWm2fIYs69XkbDwKb0CkMZF5S1uRorxAm86kY841+DK0949XaT6UbHRQ5B720g5 Vh35FG6aMnbblbcUjqbyP3VCXrfJCBRdAunVQtdReFOEUOSVO2FzNmhD340sia8v aLDVY9AuYISfxDbYOVnRKsD1adY4KQQo0T/y/dhWmwGL/qeyBkHomasyRaYjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW5KjeEZwTZOCk48e/vcB7l1bIzwwHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIU/Q5jkpx2PEx1gc9RZGdCuOlACiKdpcXwV k8H2HHE3mBy1T16tkpVZtzkTy00kDgA30GxtvWWJe913xrysKC6t31BUAwvUlJ7J 9pgsIyDoYbWGcY8MVLL1Kfa/Cv3CLg8I9BqAv8a+yhNuqAo1PmsRbyJTSQ/X2LuP FqV2BvcFskvtv7aEOTHc/9Qm/3yoG3QTymOie9CY1nYvkBjoFwUFptp/nnJhEE67 KwJqDKm7Y9fWjd9CTs8L2u+iwnlF6m3vVE8GP2vt5Qny+w9dRkzdc14ImD2GD14b UT+Mm4dzL2uFTRh7373a//Nk0a89rB5D5H1Lk+lNA3XIam9xo4E= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:10 2025 by rpki-client