This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: 42QZMvhUewSbiZbb+TEKipXVqK2CP0Q/90EDD+eMQ5M= Subject key identifier: 0C:F5:CC:F3:AC:AB:DF:A7:C1:67:17:1E:5A:3F:2B:14:4E:2C:A1:19 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 674891389FE2453F4A9D88E681DE3D558AEAF761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 0131 Signing time: Wed 03 Dec 2025 09:31:42 +0000 Manifest this update: Wed 03 Dec 2025 09:26:42 +0000 Manifest next update: Sat 06 Dec 2025 21:02:42 +0000 Files and hashes: 1: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) 2: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 3: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) 4: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: 8FKHvg2FVmF46yls/Wt48geKOasV0+CHBhUVF4nTvBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:48:91:38:9f:e2:45:3f:4a:9d:88:e6:81:de:3d:55:8a:ea:f7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Dec 3 09:26:42 2025 GMT Not After : Dec 6 21:02:42 2025 GMT Subject: CN=0CF5CCF3ACABDFA7C167171E5A3F2B144E2CA119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:d8:0d:a5:4f:44:6c:38:07:40:21:d3:8d: e7:2a:42:33:26:93:11:1b:81:9d:9a:d3:9e:bd:c3: a4:76:5d:a6:57:e6:2a:10:b2:1a:f7:51:c2:a2:7b: b4:70:e1:85:53:0c:8b:ae:1f:7f:b5:ae:22:a4:c1: 07:9f:22:f1:be:c1:d5:13:6a:8f:f1:37:39:cc:06: e1:79:4e:78:57:ff:75:02:92:b0:a7:69:df:68:61: a8:9a:28:70:b5:4d:fe:0e:d0:d3:64:b4:46:e5:ce: 20:43:9c:c0:ad:d7:72:53:5b:d1:ad:85:9a:56:18: 44:14:d1:c9:86:7c:a8:8d:49:bf:a0:fe:70:55:dd: cb:31:aa:ea:03:a2:00:21:87:ba:c8:24:e2:49:11: d3:c5:64:0a:af:6e:ea:8e:31:46:72:19:f6:67:20: 9a:aa:2f:f2:ea:fc:64:67:a6:80:ba:da:4d:d2:57: b0:3e:ae:a5:31:65:51:48:49:90:7c:70:35:67:c8: b5:47:0f:96:cf:06:84:ec:51:4f:0e:d2:04:03:c8: 2f:85:f4:4a:3d:94:23:6f:6d:8e:22:fe:8d:47:ae: 31:8f:17:f2:50:a8:40:d5:31:74:42:fe:0f:1f:4e: 04:54:bd:e8:be:40:82:9d:ab:99:20:73:dc:0a:31: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F5:CC:F3:AC:AB:DF:A7:C1:67:17:1E:5A:3F:2B:14:4E:2C:A1:19 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f7:e7:c3:32:7f:f3:7a:84:82:14:68:31:6f:40:b7:e7:97: 62:6b:bc:41:3c:f2:3b:cf:6b:db:69:07:56:31:02:db:4c:65: dc:22:4e:53:af:d2:f6:d4:ec:a8:46:2c:53:17:ec:43:8e:4b: 80:64:86:8d:ce:a9:f3:81:c3:6e:66:eb:c0:f8:71:ae:c8:c0: bd:19:cd:e4:99:65:16:74:f0:62:05:46:e7:2b:6b:48:9e:e3: 35:29:b4:a0:06:52:8f:98:f9:fc:c3:9d:6f:c4:c8:92:ab:71: 9e:46:eb:7d:ce:5d:43:5e:01:a8:bc:56:56:a0:da:aa:7a:16: f0:b3:a7:b1:9d:91:2c:d2:0d:1b:fa:82:6d:ea:a9:56:e3:4d: 47:9e:b1:a8:d5:0b:56:df:12:7d:49:57:48:82:b8:cb:21:e3: 2e:82:74:0e:2d:5b:34:56:28:29:5e:d9:22:70:74:a5:5f:a9: 33:8b:e2:9b:9c:b3:63:82:3c:a3:35:1f:a6:ea:df:ab:dc:5e: 85:46:d2:4c:a0:17:bd:99:a6:c8:f0:14:26:96:32:8d:63:99: e8:d2:a7:f1:c5:2a:48:f3:42:d2:99:c4:ca:3d:ff:9e:c5:4f: 96:25:0f:a8:89:e9:b8:9b:0e:a0:3c:cb:9c:f2:02:9a:69:5f: f3:0b:f7:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0iROJ/iRT9KnYjmgd49VYrq92EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTEyMDMwOTI2NDJaFw0yNTEyMDYyMTAyNDJaMDMxMTAvBgNV BAMTKDBDRjVDQ0YzQUNBQkRGQTdDMTY3MTcxRTVBM0YyQjE0NEUyQ0ExMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XtgNpU9EbDgHQCHTjecqQjMm kxEbgZ2a0569w6R2XaZX5ioQshr3UcKie7Rw4YVTDIuuH3+1riKkwQefIvG+wdUT ao/xNznMBuF5TnhX/3UCkrCnad9oYaiaKHC1Tf4O0NNktEblziBDnMCt13JTW9Gt hZpWGEQU0cmGfKiNSb+g/nBV3csxquoDogAhh7rIJOJJEdPFZAqvbuqOMUZyGfZn IJqqL/Lq/GRnpoC62k3SV7A+rqUxZVFISZB8cDVnyLVHD5bPBoTsUU8O0gQDyC+F 9Eo9lCNvbY4i/o1HrjGPF/JQqEDVMXRC/g8fTgRUvei+QIKdq5kgc9wKMcPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPXM86yr36fBZxceWj8rFE4soRkwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT358Myf/N6hIIUaDFvQLfnl2JrvEE88jvP a9tpB1YxAttMZdwiTlOv0vbU7KhGLFMX7EOOS4Bkho3OqfOBw25m68D4ca7IwL0Z zeSZZRZ08GIFRucra0ie4zUptKAGUo+Y+fzDnW/EyJKrcZ5G633OXUNeAai8Vlag 2qp6FvCzp7GdkSzSDRv6gm3qqVbjTUeesajVC1bfEn1JV0iCuMsh4y6CdA4tWzRW KCle2SJwdKVfqTOL4pucs2OCPKM1H6bq36vcXoVG0kygF72ZpsjwFCaWMo1jmejS p/HFKkjzQtKZxMo9/57FT5YlD6iJ6bibDqA8y5zyApppX/ML94Y= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:06 2025 by rpki-client