This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: nMTmdwoIKK3KTnZY/m560LAYZu6Bhrrp7T+ZNfs1NIY= Subject key identifier: 3C:C5:3D:B8:F1:0C:A6:03:E3:D5:56:E6:5C:8E:AB:AB:C3:F7:F3:F8 Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 0493EB7804597BF5EB9EC064791321DF2BC3A7CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 02A6 Signing time: Sat 31 Jan 2026 18:02:07 +0000 Manifest this update: Sat 31 Jan 2026 17:57:07 +0000 Manifest next update: Wed 04 Feb 2026 01:57:07 +0000 Files and hashes: 1: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) 2: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 3: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 4: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: /07Fi8i/Ls3KMjLVxZztmekk3qw83bl/jD51fUZE6RQ=) 5: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) 6: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 01:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:93:eb:78:04:59:7b:f5:eb:9e:c0:64:79:13:21:df:2b:c3:a7:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Jan 31 17:57:07 2026 GMT Not After : Feb 4 01:57:07 2026 GMT Subject: CN=3CC53DB8F10CA603E3D556E65C8EABABC3F7F3F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:79:ee:a8:89:88:9d:3a:1c:fc:84:d5:eb: 2e:5e:4d:7a:51:6e:82:87:9a:87:ba:e5:6b:47:72: a9:1c:5e:42:2c:65:6c:a5:fa:90:5f:9d:e5:94:7a: 4c:d5:22:c2:69:90:cf:fe:3b:da:8b:51:6e:3d:1f: cb:7b:9e:7a:91:61:b3:a3:16:b4:fb:cc:5e:b3:f0: a3:ac:23:90:82:98:d4:32:d9:e8:fa:27:be:1d:0d: d3:cb:e3:bc:d9:ee:47:38:c7:bb:17:a2:b7:10:3b: c2:ed:a6:ec:1f:27:9e:9e:c2:a9:46:09:2a:03:f7: 77:d6:13:0f:aa:c0:30:0d:2f:fd:ab:f6:ab:dd:1e: ef:d4:ee:be:c3:41:8d:5b:8c:b6:b1:e6:b7:c8:81: 9b:40:7e:a5:3b:d1:95:85:a6:27:7a:bc:c6:aa:5c: d6:cc:08:8a:86:44:99:4a:97:52:b2:bb:0b:3c:13: a6:d5:c1:91:e7:a5:12:2e:3d:7e:7b:a9:a3:9f:fd: 62:10:29:42:40:49:6b:c1:7f:ae:1d:65:35:86:06: 92:b6:86:9d:e8:0b:3c:20:1e:77:36:99:42:44:95: 4d:c5:7c:79:4e:8a:3f:eb:7f:d0:8b:7e:12:61:f7: 43:b2:ae:8d:6c:37:55:f1:35:a8:bd:96:99:8c:e5: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:3D:B8:F1:0C:A6:03:E3:D5:56:E6:5C:8E:AB:AB:C3:F7:F3:F8 X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:89:82:03:88:f9:da:0a:9d:f3:1c:12:72:44:3f:44:c6:fc: cc:d4:d8:6f:ed:5a:9d:d2:23:fc:1d:57:16:cf:21:1d:a5:08: a7:58:bf:ee:5d:b3:ee:49:8d:cc:25:c5:ca:7a:e6:29:64:c2: da:97:1c:02:a6:cf:1d:d6:53:78:a1:69:de:40:5f:34:fb:18: 7e:3a:84:ab:c7:dc:b7:82:4d:c0:0d:77:db:4d:00:19:b3:ff: c3:de:02:c9:aa:2e:0f:f5:96:7f:16:86:29:10:88:42:ca:5e: b0:1a:47:fd:de:e1:94:e8:93:16:13:7c:c5:98:65:3a:82:f0: 93:ba:e5:9c:9e:33:5e:6e:e6:36:42:a3:da:c3:f2:47:82:70: 0f:84:f8:8d:92:b0:5d:08:75:c4:bb:cf:c3:69:58:85:16:c4: f3:a8:04:4b:8e:b4:8f:a7:09:17:de:f7:1e:da:c8:68:4f:f5: d9:9f:46:fc:98:d3:66:6a:87:85:ff:2f:9a:d2:34:d6:7f:50: d9:07:31:63:39:a1:c7:bf:ca:74:7c:fd:64:16:a9:8e:0a:85: 90:70:8c:9d:86:59:28:ef:6f:0c:d4:d9:76:56:02:73:64:34: dd:5e:a6:c4:31:69:76:f6:9e:8c:9b:0e:db:50:38:5d:52:88: fd:42:94:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJPreARZe/XrnsBkeRMh3yvDp88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNjAxMzExNzU3MDdaFw0yNjAyMDQwMTU3MDdaMDMxMTAvBgNV BAMTKDNDQzUzREI4RjEwQ0E2MDNFM0Q1NTZFNjVDOEVBQkFCQzNGN0YzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP93nuqImInToc/ITV6y5eTXpR boKHmoe65WtHcqkcXkIsZWyl+pBfneWUekzVIsJpkM/+O9qLUW49H8t7nnqRYbOj FrT7zF6z8KOsI5CCmNQy2ej6J74dDdPL47zZ7kc4x7sXorcQO8LtpuwfJ56ewqlG CSoD93fWEw+qwDANL/2r9qvdHu/U7r7DQY1bjLax5rfIgZtAfqU70ZWFpid6vMaq XNbMCIqGRJlKl1Kyuws8E6bVwZHnpRIuPX57qaOf/WIQKUJASWvBf64dZTWGBpK2 hp3oCzwgHnc2mUJElU3FfHlOij/rf9CLfhJh90Oyro1sN1XxNai9lpmM5f7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPMU9uPEMpgPj1VbmXI6rq8P38/gwHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiJggOI+doKnfMcEnJEP0TG/MzU2G/tWp3S I/wdVxbPIR2lCKdYv+5ds+5Jjcwlxcp65ilkwtqXHAKmzx3WU3ihad5AXzT7GH46 hKvH3LeCTcANd9tNABmz/8PeAsmqLg/1ln8WhikQiELKXrAaR/3e4ZTokxYTfMWY ZTqC8JO65ZyeM15u5jZCo9rD8keCcA+E+I2SsF0IdcS7z8NpWIUWxPOoBEuOtI+n CRfe9x7ayGhP9dmfRvyY02Zqh4X/L5rSNNZ/UNkHMWM5oce/ynR8/WQWqY4KhZBw jJ2GWSjvbwzU2XZWAnNkNN1epsQxaXb2noybDttQOF1SiP1ClPM= -----END CERTIFICATE-----Generated at Mon Feb 2 09:45:07 2026 by rpki-client