This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json)
Hash identifier: BimzGFnZ5Ex7deDrymDZvcMgj6EO4DSRZyr8y4MTEIg=
Subject key identifier: 8C:3F:2C:51:6E:AA:44:A6:E7:4F:74:93:DC:8D:8D:F3:DF:D4:8F:DC
Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E
Certificate serial: 4E31245A642C8F73580F74E0C77D0C2ACC631532
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
Manifest number: 03B3
Signing time: Mon 02 Feb 2026 01:40:54 +0000
Manifest this update: Mon 02 Feb 2026 01:35:54 +0000
Manifest next update: Thu 05 Feb 2026 08:47:54 +0000
Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=)
2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: rZC/wFt/TcfdW9yoctgKOOorNlalC51a+Yi4jZABEfE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:31:24:5a:64:2c:8f:73:58:0f:74:e0:c7:7d:0c:2a:cc:63:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E
Validity
Not Before: Feb 2 01:35:54 2026 GMT
Not After : Feb 5 08:47:54 2026 GMT
Subject: CN=8C3F2C516EAA44A6E74F7493DC8D8DF3DFD48FDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:b0:a6:4f:4b:d8:82:c0:a8:e1:b9:3c:51:
c5:04:33:68:41:68:9b:49:6a:06:6b:ef:1a:88:cf:
9e:cd:5a:82:37:a5:d6:77:b8:35:42:28:42:7d:91:
ef:b2:cd:65:90:ba:b0:6f:8e:ad:dc:8e:4f:e6:bc:
c1:31:f3:df:d6:0c:41:77:f2:35:88:d4:38:60:4d:
01:8f:6a:6c:a8:9e:df:1a:29:37:77:ed:78:d5:90:
af:68:4c:94:94:4d:85:0c:17:a0:ff:fa:fc:4a:5b:
7d:cb:d2:ca:23:15:ca:24:41:83:ac:cb:dd:f8:83:
44:77:5a:8c:a6:cb:53:0f:30:21:1f:b9:94:40:86:
f7:1c:97:14:64:82:c5:88:43:10:b4:67:1f:c4:c3:
06:7b:c4:a9:eb:ca:7d:50:16:a1:15:58:8f:72:ff:
8a:77:fc:ca:fe:30:59:c6:0d:d8:26:b3:9a:09:34:
ec:bb:53:85:12:5a:b9:dd:8f:3a:3b:0c:37:8c:d3:
9e:ae:96:51:47:16:10:ca:82:02:c1:c3:6c:da:50:
fc:05:34:2d:b8:b6:22:dd:92:f9:2f:36:9a:6d:60:
a1:d6:55:c1:27:1f:f9:e9:97:59:ca:80:d1:a5:4e:
22:72:12:e8:24:8b:30:02:04:c5:7a:96:30:b5:5a:
49:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:2C:51:6E:AA:44:A6:E7:4F:74:93:DC:8D:8D:F3:DF:D4:8F:DC
X509v3 Authority Key Identifier:
keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0c:ef:c4:f9:ad:4d:3c:7b:52:d5:55:e3:52:4e:23:26:03:
69:0f:e6:18:82:45:15:aa:86:aa:41:36:b3:fe:51:df:c7:f6:
06:cf:6d:80:1d:2a:fa:07:4b:d1:45:f7:3b:8f:2c:8c:3c:26:
30:3d:f4:2e:40:b8:ac:4b:56:46:76:c4:08:3c:f2:d6:2f:f6:
b1:5a:f8:ee:6d:d6:69:3f:bd:65:17:60:95:1f:af:f3:54:3e:
68:9d:0f:1f:77:98:81:e4:9e:74:16:ad:d5:96:2d:cf:53:91:
a0:ab:c6:5f:6b:e5:32:a4:86:2a:73:75:0d:4b:92:04:a9:76:
c9:ac:54:1b:11:8b:b2:02:80:49:8c:5a:23:53:db:4d:66:d9:
0e:69:87:d3:c1:6d:28:2f:b5:7a:50:45:eb:31:ae:03:4f:53:
8d:d3:b3:02:38:c4:28:c9:78:ef:81:a9:f2:93:f9:92:eb:96:
f2:7d:5c:c7:9a:12:b9:6a:ac:16:17:cf:db:93:99:e9:f5:1a:
17:2d:b8:0a:61:de:42:34:bf:98:87:fd:c0:b2:ef:ae:b1:1f:
cb:fb:6d:b5:16:64:16:7c:63:bf:34:f0:84:73:88:b6:5b:fa:
c8:10:63:2e:49:19:c4:6c:8e:16:bb:9f:eb:d6:7d:e8:e1:12:
bb:ed:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:07 2026 by rpki-client