This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft (raw, json) Hash identifier: bobLdMFt7CqocJbe8Qv0PRCXS8b/ixCzMxVswFrIoic= Subject key identifier: 96:BF:0A:ED:23:5C:24:91:F9:8B:3A:E9:79:38:71:50:96:96:0D:65 Authority key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Certificate issuer: /CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Certificate serial: 1A034A3812A693DBE23FE0CDAD467B5E1882EFD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft Manifest number: 020A Signing time: Fri 16 Jan 2026 11:10:48 +0000 Manifest this update: Fri 16 Jan 2026 11:05:48 +0000 Manifest next update: Mon 19 Jan 2026 21:20:48 +0000 Files and hashes: 1: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl (hash: WK+Xi6sFaiw1HR7APN3jE7Y7gSz6SA9ukExBUj6NqQg=) 2: 3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (hash: bBSFxLKr65f9r/DOl1jNQXOVz/QBHgN+KQhImgM5Vd4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Jan 2026 16:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:03:4a:38:12:a6:93:db:e2:3f:e0:cd:ad:46:7b:5e:18:82:ef:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Validity Not Before: Jan 16 11:05:48 2026 GMT Not After : Jan 19 21:20:48 2026 GMT Subject: CN=96BF0AED235C2491F98B3AE97938715096960D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6f:31:5b:66:51:f9:c4:e8:80:d5:bb:a2:76: 69:6d:4c:d0:42:e2:b8:64:07:ab:6b:a6:13:d7:4a: 92:13:b6:44:c5:1d:82:0b:9d:15:94:74:a8:9a:e0: 73:ed:4b:3d:ce:04:ba:d0:00:4d:49:e6:f0:d3:91: 6c:75:8c:28:a2:83:6d:23:42:45:aa:24:07:05:8a: 5f:9b:f2:f1:a2:c4:ed:b0:aa:e2:49:e8:af:38:21: 15:3e:3b:de:79:1c:58:1d:b7:94:86:84:c3:b6:ea: e0:a6:dc:03:cb:70:2b:ba:c5:76:e5:a0:59:93:25: a1:db:60:40:81:0a:58:54:06:67:6c:2b:64:2b:d0: fe:f0:a8:d6:a9:ee:7d:79:c5:34:ec:0b:7d:41:e2: 4c:ac:f6:26:7a:a6:fe:64:ae:a2:7a:a4:a5:ad:95: aa:a2:5a:c9:b8:19:a6:48:ae:d4:d2:fe:b4:f1:62: 68:8e:99:9a:c4:ad:5c:39:68:cc:6a:bd:62:36:1e: 57:38:31:77:b1:75:d7:68:2b:a5:b6:19:80:40:0d: 2f:24:58:3c:96:7f:a8:1b:46:42:ea:58:9b:e7:5a: 89:26:38:7c:0c:a7:e0:a7:c5:58:b9:fe:58:4b:06: 25:5f:17:2a:7e:45:a8:a5:73:3e:3a:81:45:fe:57: 04:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BF:0A:ED:23:5C:24:91:F9:8B:3A:E9:79:38:71:50:96:96:0D:65 X509v3 Authority Key Identifier: keyid:BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:79:48:aa:b9:8d:7e:b5:c3:d1:53:c9:19:2f:d7:85:35:29: 93:68:c7:91:31:31:cd:8c:b3:9d:cd:c3:16:46:4c:12:bb:1a: f2:d0:38:4c:29:80:7e:7f:33:8e:71:1d:a0:94:ab:f6:32:a3: a6:e4:46:59:c1:7a:2c:06:ae:db:98:77:56:56:92:ca:ff:a6: 9b:2e:1a:cc:e7:65:a8:bb:3d:0e:23:55:85:86:0a:eb:8a:9d: 15:8c:7a:db:9d:38:88:9c:12:29:77:42:5b:58:0e:86:e2:8f: 0a:dd:b2:22:e2:16:2a:0c:0f:12:d5:c5:56:8e:f6:b8:0f:08: 32:1d:6f:db:75:d4:4c:d6:ba:73:ca:f4:ad:32:82:d3:3b:77: 85:5c:f2:dc:1b:a7:58:7c:80:48:b9:75:74:e8:cf:c5:d5:96: c9:ac:30:25:8e:73:b5:11:f4:24:9b:d5:72:36:04:88:3d:fc: aa:0e:a3:31:f9:d0:55:12:79:ba:47:98:bd:31:da:b7:85:20: 47:e3:61:28:95:6e:c4:7c:f9:80:5a:80:12:b4:dd:4f:df:e6: 1c:a1:60:10:38:77:58:f9:76:f5:4a:92:61:b4:ad:17:39:60: 55:c8:51:f4:e0:a8:eb:ee:73:ca:c5:51:2a:87:45:fd:c2:62: e0:f6:58:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGgNKOBKmk9viP+DNrUZ7XhiC79cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJF Njc4MTZCMDAeFw0yNjAxMTYxMTA1NDhaFw0yNjAxMTkyMTIwNDhaMDMxMTAvBgNV BAMTKDk2QkYwQUVEMjM1QzI0OTFGOThCM0FFOTc5Mzg3MTUwOTY5NjBENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbzFbZlH5xOiA1buidmltTNBC 4rhkB6trphPXSpITtkTFHYILnRWUdKia4HPtSz3OBLrQAE1J5vDTkWx1jCiig20j QkWqJAcFil+b8vGixO2wquJJ6K84IRU+O955HFgdt5SGhMO26uCm3APLcCu6xXbl oFmTJaHbYECBClhUBmdsK2Qr0P7wqNap7n15xTTsC31B4kys9iZ6pv5krqJ6pKWt laqiWsm4GaZIrtTS/rTxYmiOmZrErVw5aMxqvWI2Hlc4MXexdddoK6W2GYBADS8k WDyWf6gbRkLqWJvnWokmOHwMp+CnxVi5/lhLBiVfFyp+Railcz46gUX+VwShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlr8K7SNcJJH5izrpeThxUJaWDWUwHwYDVR0j BBgwFoAUuhBeDAeudIbN+Oz+X9fIa+Z4FrAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMC9CQTEwNUUwQzA3 QUU3NDg2Q0RGOEVDRkU1RkQ3Qzg2QkU2NzgxNkIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4NkJFNjc4 MTZCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ0OGJiODgtYTc1OC00NDNmLWI3 MDgtNDhlMzg3ZDY2ZjU3LzAvQkExMDVFMEMwN0FFNzQ4NkNERjhFQ0ZFNUZEN0M4 NkJFNjc4MTZCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHp5SKq5jX61w9FTyRkv14U1KZNox5ExMc2M s53NwxZGTBK7GvLQOEwpgH5/M45xHaCUq/Yyo6bkRlnBeiwGrtuYd1ZWksr/ppsu GsznZai7PQ4jVYWGCuuKnRWMetudOIicEil3QltYDobijwrdsiLiFioMDxLVxVaO 9rgPCDIdb9t11EzWunPK9K0ygtM7d4Vc8twbp1h8gEi5dXToz8XVlsmsMCWOc7UR 9CSb1XI2BIg9/KoOozH50FUSebpHmL0x2reFIEfjYSiVbsR8+YBagBK03U/f5hyh YBA4d1j5dvVKkmG0rRc5YFXIUfTgqOvuc8rFUSqHRf3CYuD2WBE= -----END CERTIFICATE-----Generated at Fri Jan 16 21:11:09 2026 by rpki-client