This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: L7uqTNNk/6/LCPjccCWbd2xefAWBF9gyy6UDKzkJFQs= Subject key identifier: C7:EB:FD:BA:E4:22:9D:46:54:76:38:F3:B1:24:11:61:A0:63:B0:A6 Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 68D616A1812764DF224D97CB8D504546DA041D55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 0530 Signing time: Mon 01 Dec 2025 08:41:00 +0000 Manifest this update: Mon 01 Dec 2025 08:36:00 +0000 Manifest next update: Thu 04 Dec 2025 16:14:00 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) 2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: amYA65DGbfAxMqP7g4M6sY5uzKBs/3XM62wU3DOM8ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d6:16:a1:81:27:64:df:22:4d:97:cb:8d:50:45:46:da:04:1d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Dec 1 08:36:00 2025 GMT Not After : Dec 4 16:14:00 2025 GMT Subject: CN=C7EBFDBAE4229D46547638F3B1241161A063B0A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:d9:54:c9:7d:ea:e5:d7:0b:f1:0e:b7:61: 84:c0:d1:90:43:5e:45:71:29:d4:d1:3c:99:2c:ff: e2:f6:d2:ff:2e:34:bb:22:59:c6:86:67:49:52:84: dd:4b:70:9c:a9:07:9e:e6:c1:93:fd:ce:0d:ea:47: 54:ab:44:13:15:0d:34:7e:be:e0:ad:f9:4a:e2:28: e3:1a:b9:0f:d2:d3:d2:ed:f7:50:20:a0:c0:7e:e4: a1:45:23:71:38:9b:b5:47:36:8f:22:e0:47:79:05: 21:0e:45:17:5b:ac:ff:93:44:14:ff:83:67:b5:a8: fb:76:be:f5:dd:08:cf:37:a1:15:b4:df:04:84:4a: db:ca:a4:86:c3:db:46:43:6f:76:82:9a:ac:c0:36: 5e:f7:93:33:63:11:e9:d3:36:e7:1c:51:10:91:d1: 6b:24:8c:6c:78:f8:8a:1c:e9:7f:aa:33:ac:fa:4b: 85:50:a6:b0:94:f8:68:58:bc:14:80:05:5f:f2:4a: 37:18:4d:c8:71:7a:61:90:ed:76:5f:34:a2:62:0b: 31:da:0d:c5:d8:54:69:c2:a7:1f:5a:f4:1a:6f:07: 20:d0:62:f1:b2:92:45:39:76:3a:d1:4f:1e:e1:ff: 03:42:53:79:9a:63:cc:f1:d1:96:75:23:07:a2:3f: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:FD:BA:E4:22:9D:46:54:76:38:F3:B1:24:11:61:A0:63:B0:A6 X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:b4:a9:2a:65:25:09:72:15:bc:00:3a:2a:ae:04:d5:2b:6d: 98:b2:66:c5:4f:a9:5c:cf:ef:7c:85:4b:a5:d0:58:ec:d2:c7: a6:88:88:22:12:27:7a:46:40:03:4c:7e:28:fe:bb:a0:45:9c: e8:5d:9e:ea:1b:21:75:59:d6:78:26:a7:bf:b1:56:b9:af:1d: 99:78:48:9a:fb:89:69:db:c7:a5:32:f6:55:98:29:2a:b0:7f: 10:4d:fa:2d:66:47:b0:9f:62:cd:98:4f:3f:b1:72:66:75:b0: 5b:62:56:94:b2:a0:1e:28:15:13:c1:18:6e:56:04:49:b4:f1: ba:60:d1:02:73:7e:bf:1d:5a:c1:5e:9b:9e:58:5d:bc:72:96: 2e:a5:ce:5c:b0:dc:e7:6c:53:e7:5d:67:a9:fc:2b:95:65:24: f0:84:dd:09:aa:54:8d:9f:d0:95:65:fd:35:68:49:48:ab:f4: d8:99:6f:c6:03:7a:c5:a7:98:43:8d:a0:54:68:fe:12:cf:2b: bd:93:d0:67:73:a0:f8:cc:9e:7d:d7:98:79:26:a0:7e:d4:a3: b4:57:a7:5c:a8:22:41:d3:ec:ff:7d:98:6a:34:11:86:6e:ad: fd:88:f6:0f:54:f6:c2:fd:13:53:2d:fe:4e:e3:57:9b:79:dc: 9f:d9:0a:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNYWoYEnZN8iTZfLjVBFRtoEHVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNTEyMDEwODM2MDBaFw0yNTEyMDQxNjE0MDBaMDMxMTAvBgNV BAMTKEM3RUJGREJBRTQyMjlENDY1NDc2MzhGM0IxMjQxMTYxQTA2M0IwQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2utlUyX3q5dcL8Q63YYTA0ZBD XkVxKdTRPJks/+L20v8uNLsiWcaGZ0lShN1LcJypB57mwZP9zg3qR1SrRBMVDTR+ vuCt+UriKOMauQ/S09Lt91AgoMB+5KFFI3E4m7VHNo8i4Ed5BSEORRdbrP+TRBT/ g2e1qPt2vvXdCM83oRW03wSEStvKpIbD20ZDb3aCmqzANl73kzNjEenTNuccURCR 0WskjGx4+Ioc6X+qM6z6S4VQprCU+GhYvBSABV/ySjcYTchxemGQ7XZfNKJiCzHa DcXYVGnCpx9a9BpvByDQYvGykkU5djrRTx7h/wNCU3maY8zx0ZZ1IweiP99PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+v9uuQinUZUdjjzsSQRYaBjsKYwHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ60qSplJQlyFbwAOiquBNUrbZiyZsVPqVzP 73yFS6XQWOzSx6aIiCISJ3pGQANMfij+u6BFnOhdnuobIXVZ1ngmp7+xVrmvHZl4 SJr7iWnbx6Uy9lWYKSqwfxBN+i1mR7CfYs2YTz+xcmZ1sFtiVpSyoB4oFRPBGG5W BEm08bpg0QJzfr8dWsFem55YXbxyli6lzlyw3OdsU+ddZ6n8K5VlJPCE3QmqVI2f 0JVl/TVoSUir9NiZb8YDesWnmEONoFRo/hLPK72T0GdzoPjMnn3XmHkmoH7Uo7RX p1yoIkHT7P99mGo0EYZurf2I9g9U9sL9E1Mt/k7jV5t53J/ZCiw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:28 2025 by rpki-client