This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft File: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft (raw, json) Hash identifier: kxo9msZ7lXZ5bSjG7TCYrwOTai+8ZX26SdBui2LZ730= Subject key identifier: EF:1D:50:5D:EF:EC:CB:17:75:71:1E:55:2E:6C:A7:35:23:58:A7:6A Authority key identifier: 0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF Certificate issuer: /CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Certificate serial: 6F28600C3048884F5549439867E0FBF08172DC68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft Manifest number: 028B Signing time: Mon 01 Dec 2025 05:32:06 +0000 Manifest this update: Mon 01 Dec 2025 05:27:06 +0000 Manifest next update: Thu 04 Dec 2025 15:56:06 +0000 Files and hashes: 1: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: MvgqBGXrnOkC/bSNmq53L/wKuHtt5QyNVXA0tvnGZYU=) 2: 0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl (hash: 5PhlNcWJFPR5giYlX9/qyUQy7D4Ek59VKHzsWrvUno4=) 3: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: zrbBCkWXbp/QRaVHtWjjAzEvRytZESlXfX/5sg0H0sQ=) 4: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: knuIklDPIimRkON042cExQYjdXGcfiWbqkGFha8mOGA=) 5: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: xx/q8Pg4Xq4PjVzlGqUqXNKdPIEC0luemVSHSnJC5jE=) 6: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 3FCB7wGcxY5o7OIM5kLAifNt8CAQvL8N3I6rZCJvBcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:28:60:0c:30:48:88:4f:55:49:43:98:67:e0:fb:f0:81:72:dc:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0BAF96670660C94FBB3E387EF1505E6FA401ECCF Validity Not Before: Dec 1 05:27:06 2025 GMT Not After : Dec 4 15:56:06 2025 GMT Subject: CN=EF1D505DEFECCB1775711E552E6CA7352358A76A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:94:1d:a2:7b:b2:58:06:6d:64:7b:00:7e: 25:20:d4:75:e3:cd:87:ae:ad:18:00:ad:68:de:6c: c2:1b:c2:12:0f:0d:7d:52:45:3c:65:36:a9:60:50: 87:17:fb:8c:bb:61:00:bc:85:bb:6b:bc:b1:fb:9c: 62:99:4d:95:11:54:42:10:c0:af:14:10:d6:ff:08: 36:a9:9b:81:5b:98:35:2a:2a:ed:cb:9a:4f:5d:8d: 3f:73:1f:76:cb:62:67:b1:0c:33:41:be:46:ba:26: 2a:22:46:ea:7a:d9:d6:05:9c:c3:4f:1f:02:aa:fe: 34:c5:2a:6e:c8:21:a2:0f:30:7e:a5:5a:99:90:7b: fe:b8:26:fc:f9:a6:d7:8f:bc:5e:3f:b8:46:c4:90: 9d:c5:66:a0:d9:42:37:94:ef:62:9e:cc:23:20:f5: 11:df:7a:51:73:82:24:d2:fe:54:bf:ed:b0:48:56: 8c:d4:02:98:f0:80:d1:45:cd:0f:e5:9f:1f:1b:82: 74:f4:75:44:d0:87:71:42:5e:21:53:a2:12:f3:c2: 48:40:a0:27:a6:43:12:07:ab:f5:8b:65:5c:77:8b: e6:1c:d9:9b:00:42:23:3a:78:a9:40:dc:a7:fc:14: bb:56:dd:c7:6f:18:d4:ee:67:d9:6b:1e:13:63:55: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1D:50:5D:EF:EC:CB:17:75:71:1E:55:2E:6C:A7:35:23:58:A7:6A X509v3 Authority Key Identifier: keyid:0B:AF:96:67:06:60:C9:4F:BB:3E:38:7E:F1:50:5E:6F:A4:01:EC:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/0BAF96670660C94FBB3E387EF1505E6FA401ECCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4d:71:3e:22:7e:33:38:20:c8:5a:4e:f6:a9:e2:24:b9:c2: 37:e5:6f:6a:b3:c6:db:b0:33:97:39:61:4a:6c:85:7f:52:cf: f8:18:b5:11:41:bf:7f:d7:08:21:40:66:1d:bd:24:42:69:ec: 31:ed:06:f2:fa:9e:59:8a:f6:8f:bc:d2:c7:23:1e:bc:f9:9b: 74:40:8b:e2:2b:94:63:4c:25:e5:9b:eb:68:02:82:8c:3e:e1: 64:41:a5:dd:d4:b3:38:a8:50:e2:59:3c:b9:6b:6c:40:86:2f: 45:8a:e9:67:d4:ec:41:39:44:65:23:59:57:f6:8d:24:b3:2a: 71:f4:c6:3e:bb:17:58:09:fe:fb:f6:2d:bd:94:b9:28:f9:36: 34:a9:8a:71:83:aa:44:1d:29:ee:99:17:9d:db:7f:e4:ae:eb: dc:7f:f5:82:b0:b7:43:d6:d0:83:ba:78:34:89:9f:12:b0:66: 7f:14:28:6d:d0:71:c1:05:79:b4:ee:92:8c:6a:a3:2f:e9:48: 4e:5d:fa:da:10:2f:4d:dd:79:68:ed:53:d7:e7:e1:fc:c3:e7: 18:ee:47:b5:a2:53:98:5f:ab:5a:7c:76:43:63:2a:74:1b:a5: 4d:b7:fe:9a:c7:97:92:e2:5a:89:35:a4:90:01:2f:ee:c3:30: d9:5b:68:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbyhgDDBIiE9VSUOYZ+D78IFy3GgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZB NDAxRUNDRjAeFw0yNTEyMDEwNTI3MDZaFw0yNTEyMDQxNTU2MDZaMDMxMTAvBgNV BAMTKEVGMUQ1MDVERUZFQ0NCMTc3NTcxMUU1NTJFNkNBNzM1MjM1OEE3NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78ZQdonuyWAZtZHsAfiUg1HXj zYeurRgArWjebMIbwhIPDX1SRTxlNqlgUIcX+4y7YQC8hbtrvLH7nGKZTZURVEIQ wK8UENb/CDapm4FbmDUqKu3Lmk9djT9zH3bLYmexDDNBvka6JioiRup62dYFnMNP HwKq/jTFKm7IIaIPMH6lWpmQe/64Jvz5ptePvF4/uEbEkJ3FZqDZQjeU72KezCMg 9RHfelFzgiTS/lS/7bBIVozUApjwgNFFzQ/lnx8bgnT0dUTQh3FCXiFTohLzwkhA oCemQxIHq/WLZVx3i+Yc2ZsAQiM6eKlA3Kf8FLtW3cdvGNTuZ9lrHhNjVXrrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7x1QXe/syxd1cR5VLmynNSNYp2owHwYDVR0j BBgwFoAUC6+WZwZgyU+7Pjh+8VBeb6QB7M8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZWEwY2Y5YS1jNTdkLTQzOTUtOTI0OS1iZmNmNDY3MjQyODIvMC8wQkFGOTY2NzA2 NjBDOTRGQkIzRTM4N0VGMTUwNUU2RkE0MDFFQ0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVFNkZBNDAx RUNDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWVhMGNmOWEtYzU3ZC00Mzk1LTky NDktYmZjZjQ2NzI0MjgyLzAvMEJBRjk2NjcwNjYwQzk0RkJCM0UzODdFRjE1MDVF NkZBNDAxRUNDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtNcT4ifjM4IMhaTvap4iS5wjflb2qzxtuw M5c5YUpshX9Sz/gYtRFBv3/XCCFAZh29JEJp7DHtBvL6nlmK9o+80scjHrz5m3RA i+IrlGNMJeWb62gCgow+4WRBpd3UszioUOJZPLlrbECGL0WK6WfU7EE5RGUjWVf2 jSSzKnH0xj67F1gJ/vv2Lb2UuSj5NjSpinGDqkQdKe6ZF53bf+Su69x/9YKwt0PW 0IO6eDSJnxKwZn8UKG3QccEFebTukoxqoy/pSE5d+toQL03deWjtU9fn4fzD5xju R7WiU5hfq1p8dkNjKnQbpU23/prHl5LiWok1pJABL+7DMNlbaLQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:50 2025 by rpki-client