This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft File: BA0937086D03009DB3422C9809596F09C430C76E.mft (raw, json) Hash identifier: eGvZstTmNWpiDSgjyOIRFaAeDU2QTncpVqgtutB8S9Q= Subject key identifier: BC:D3:DF:9E:85:C4:C4:23:32:6E:05:64:AF:FE:7A:B5:DA:B4:DD:1F Authority key identifier: BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E Certificate issuer: /CN=BA0937086D03009DB3422C9809596F09C430C76E Certificate serial: 7934F20D53433946FA2B3C8812A809DD85B0DC71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft Manifest number: 0398 Signing time: Tue 02 Dec 2025 08:30:54 +0000 Manifest this update: Tue 02 Dec 2025 08:25:54 +0000 Manifest next update: Fri 05 Dec 2025 09:21:54 +0000 Files and hashes: 1: 3130332e3136392e3232322e302f32332d3234203d3e20313338383535.roa (hash: 6wVMqMSXA+uPVRX4j6JWzyD8uZnPZJJ0Jsqrz/zO/Ts=) 2: BA0937086D03009DB3422C9809596F09C430C76E.crl (hash: pNfm4wtOmxUts/9omTzxzpqVW34jcP8B+9HwVQvoDcs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:34:f2:0d:53:43:39:46:fa:2b:3c:88:12:a8:09:dd:85:b0:dc:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA0937086D03009DB3422C9809596F09C430C76E Validity Not Before: Dec 2 08:25:54 2025 GMT Not After : Dec 5 09:21:54 2025 GMT Subject: CN=BCD3DF9E85C4C423326E0564AFFE7AB5DAB4DD1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:49:5e:4d:70:eb:26:57:74:b2:cd:ab:61:ad: 96:e4:01:78:8b:43:d2:9f:11:8a:0e:4c:7c:6c:3d: 13:a1:88:ff:e7:25:0c:85:63:08:ed:bb:4c:a7:e6: 20:e3:6a:4a:67:ad:b9:3c:1d:89:d5:79:cc:cf:d8: 51:0d:1a:7d:9d:26:67:fe:1b:c3:e0:cd:f1:6d:5e: 8f:ba:ac:75:7d:84:d7:0f:73:8c:24:3c:ac:7b:80: 82:e0:d7:d3:ca:13:dc:3e:91:1c:a5:b2:93:af:21: f6:37:53:83:38:23:c2:0f:f7:00:6d:28:4e:d9:1f: b9:bc:b7:9a:da:26:dd:a6:48:14:67:53:17:52:32: 67:2b:0e:2c:e7:1d:9f:3b:92:fb:2b:41:16:0e:98: d5:b2:ae:cb:67:6b:0a:59:85:1b:ca:79:b4:bc:2c: 3f:37:1a:37:30:6f:e9:a2:f5:7d:c1:22:1c:f4:ae: 3b:7b:40:cc:8b:ec:31:a8:fe:6f:90:0b:62:98:b2: 03:77:7b:93:20:0b:94:b8:a1:7a:a2:4b:c1:aa:8e: f6:28:98:a4:ab:d6:36:01:7e:e5:e0:cd:bb:10:dd: 15:91:67:ed:ea:e4:0c:bc:a8:fb:7c:b9:3a:8e:f3: 5b:82:73:01:98:f7:5b:12:1f:0b:72:1a:70:6a:30: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D3:DF:9E:85:C4:C4:23:32:6E:05:64:AF:FE:7A:B5:DA:B4:DD:1F X509v3 Authority Key Identifier: keyid:BA:09:37:08:6D:03:00:9D:B3:42:2C:98:09:59:6F:09:C4:30:C7:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA0937086D03009DB3422C9809596F09C430C76E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69fead9d-d7a7-483b-8f17-31b323d97d8f/0/BA0937086D03009DB3422C9809596F09C430C76E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fc:41:55:7c:60:17:91:13:05:d6:d5:30:52:99:da:67:72: 98:60:fc:eb:60:3c:c0:44:14:87:73:6d:27:69:63:3a:2f:07: 2d:79:aa:6b:6e:94:f5:7f:ca:51:5a:74:e8:fe:b6:ac:45:92: 93:b0:05:75:11:c5:46:71:c2:e3:5c:a5:63:ff:1b:1c:4d:4f: 37:32:37:a0:34:ad:01:a3:18:24:70:56:f4:25:d5:53:b0:8d: b9:47:fe:32:98:80:65:19:20:78:6d:1f:7e:ad:da:41:f0:5b: 22:31:89:6b:bd:bc:71:7b:dc:e4:47:fb:0d:3b:66:d4:58:ab: 57:3b:e9:31:e2:06:b3:c3:73:0c:4b:76:87:91:9e:56:61:2c: 81:51:81:90:64:cf:62:24:2e:04:ae:e0:29:3d:6a:1c:fd:53: 73:06:dd:28:13:d6:96:17:f7:53:79:a2:08:7c:bd:23:bb:67: 71:58:1d:ad:85:47:e7:e2:ac:68:0a:1a:10:13:45:20:f0:f6: c5:3a:e4:6e:95:fe:f4:ef:c8:27:ac:04:07:76:83:b3:a5:d5: 6a:2b:8e:1f:7a:2f:b2:be:b0:72:af:db:74:22:60:18:89:bb: 60:b0:fb:63:83:b7:3e:1e:ad:f9:63:8d:d2:fc:40:e4:3d:9c: fb:c3:a4:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTTyDVNDOUb6KzyIEqgJ3YWw3HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlD NDMwQzc2RTAeFw0yNTEyMDIwODI1NTRaFw0yNTEyMDUwOTIxNTRaMDMxMTAvBgNV BAMTKEJDRDNERjlFODVDNEM0MjMzMjZFMDU2NEFGRkU3QUI1REFCNEREMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcSV5NcOsmV3SyzathrZbkAXiL Q9KfEYoOTHxsPROhiP/nJQyFYwjtu0yn5iDjakpnrbk8HYnVeczP2FENGn2dJmf+ G8PgzfFtXo+6rHV9hNcPc4wkPKx7gILg19PKE9w+kRylspOvIfY3U4M4I8IP9wBt KE7ZH7m8t5raJt2mSBRnUxdSMmcrDiznHZ87kvsrQRYOmNWyrstnawpZhRvKebS8 LD83Gjcwb+mi9X3BIhz0rjt7QMyL7DGo/m+QC2KYsgN3e5MgC5S4oXqiS8GqjvYo mKSr1jYBfuXgzbsQ3RWRZ+3q5Ay8qPt8uTqO81uCcwGY91sSHwtyGnBqMIjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvNPfnoXExCMybgVkr/56tdq03R8wHwYDVR0j BBgwFoAUugk3CG0DAJ2zQiyYCVlvCcQwx24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OWZlYWQ5ZC1kN2E3LTQ4M2ItOGYxNy0zMWIzMjNkOTdkOGYvMC9CQTA5MzcwODZE MDMwMDlEQjM0MjJDOTgwOTU5NkYwOUM0MzBDNzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZGMDlDNDMw Qzc2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjlmZWFkOWQtZDdhNy00ODNiLThm MTctMzFiMzIzZDk3ZDhmLzAvQkEwOTM3MDg2RDAzMDA5REIzNDIyQzk4MDk1OTZG MDlDNDMwQzc2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFv8QVV8YBeREwXW1TBSmdpncphg/OtgPMBE FIdzbSdpYzovBy15qmtulPV/ylFadOj+tqxFkpOwBXURxUZxwuNcpWP/GxxNTzcy N6A0rQGjGCRwVvQl1VOwjblH/jKYgGUZIHhtH36t2kHwWyIxiWu9vHF73ORH+w07 ZtRYq1c76THiBrPDcwxLdoeRnlZhLIFRgZBkz2IkLgSu4Ck9ahz9U3MG3SgT1pYX 91N5ogh8vSO7Z3FYHa2FR+firGgKGhATRSDw9sU65G6V/vTvyCesBAd2g7Ol1Wor jh96L7K+sHKv23QiYBiJu2Cw+2ODtz4erfljjdL8QOQ9nPvDpFw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:31 2025 by rpki-client