This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft File: BA3C6E8206951343A970BD80B8DC3351252A9719.mft (raw, json) Hash identifier: xPk22bC/KPrlRKYVTKAVBUXdkm/N3eA9W4xl7IHHEnY= Subject key identifier: FE:1D:55:BF:62:A9:E9:6C:DF:F2:E4:2B:33:80:26:C3:5B:A5:9D:6C Authority key identifier: BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 Certificate issuer: /CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Certificate serial: 1B16F28351C6E6798A8C3E097F66BDB8609386BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft Manifest number: C9 Signing time: Sun 07 Dec 2025 07:41:26 +0000 Manifest this update: Sun 07 Dec 2025 07:36:26 +0000 Manifest next update: Wed 10 Dec 2025 10:04:26 +0000 Files and hashes: 1: BA3C6E8206951343A970BD80B8DC3351252A9719.crl (hash: 6i4RwIf/iHOeMTWMyUXBBNnXcf/SrMUUM6gs9bfaeTA=) 2: 3136302e32352e3135362e302f32342d3234203d3e20313533303838.roa (hash: mhfAph5jHpIIQpADW/6z0VmmK6WaOWV9si8/hgfO+jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:16:f2:83:51:c6:e6:79:8a:8c:3e:09:7f:66:bd:b8:60:93:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA3C6E8206951343A970BD80B8DC3351252A9719 Validity Not Before: Dec 7 07:36:26 2025 GMT Not After : Dec 10 10:04:26 2025 GMT Subject: CN=FE1D55BF62A9E96CDFF2E42B338026C35BA59D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:99:4c:e6:ce:eb:10:5c:1e:6c:d8:74:d4: f0:47:9a:72:4a:f5:5b:b0:b4:e9:8d:e0:ad:bc:3f: 02:89:56:ee:7c:60:16:29:b9:75:9c:00:4c:b2:0a: e8:2a:92:78:2c:b6:d6:6a:6a:87:f2:ec:ce:97:f4: 5f:eb:03:8f:df:fe:26:3f:6b:5f:a9:66:71:76:c7: 91:c5:fb:72:4a:70:36:43:95:75:18:55:ee:ee:db: a7:03:b7:8f:ec:09:a3:73:fe:6d:0b:f8:ac:50:0e: 14:03:f5:5f:5a:53:21:05:cc:c0:af:9d:68:ff:6e: b6:01:60:54:7b:8c:c5:bc:c2:bb:5b:9f:00:ac:78: c9:5a:77:98:7a:76:35:f2:c6:e0:01:55:db:e1:8a: 9c:96:33:00:df:34:35:73:82:03:b2:e8:89:2b:19: c1:b8:13:45:2f:1e:17:b1:28:02:78:ff:2b:7a:3b: 3c:27:8f:31:7f:78:a2:eb:88:f0:1d:90:f4:98:53: 1f:49:59:e2:9d:dd:b6:3a:52:d6:7b:8f:ed:20:8d: e7:3c:48:58:f7:ce:c8:4b:6c:5b:77:5f:f9:54:0d: 20:7e:8b:b0:87:df:d8:09:8e:be:fe:74:51:5c:0a: 06:b2:e3:18:5f:95:f4:ed:c2:f8:69:ca:35:0e:e3: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:55:BF:62:A9:E9:6C:DF:F2:E4:2B:33:80:26:C3:5B:A5:9D:6C X509v3 Authority Key Identifier: keyid:BA:3C:6E:82:06:95:13:43:A9:70:BD:80:B8:DC:33:51:25:2A:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BA3C6E8206951343A970BD80B8DC3351252A9719.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aafdd6f9-b799-4a96-9e2a-1fef69bfa597/0/BA3C6E8206951343A970BD80B8DC3351252A9719.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7c:c9:b8:63:62:32:64:da:f8:e1:b1:d1:2b:7c:e0:7b:83: 63:c8:8d:d7:6d:a0:db:40:4e:25:02:19:ac:a8:17:1f:c5:60: 3a:e0:c2:15:c9:c6:f2:d4:9d:e2:28:a3:47:79:e7:7d:e5:14: b2:57:1b:42:de:2f:f1:9a:ba:3f:bb:5f:b4:42:11:79:ae:d2: 6b:a7:e0:cc:95:66:52:bd:54:e2:ed:10:c3:cb:0a:7f:6c:8c: 46:b5:ba:57:2b:8d:53:20:09:4f:3a:ac:92:f3:ec:42:74:ea: 50:aa:51:88:63:59:14:47:ef:f4:4f:2e:40:51:e2:c3:67:27: 7c:39:1f:59:cb:88:93:c9:f3:64:8d:3a:b0:de:dd:9b:dd:97: 01:48:fa:4d:0c:76:95:f6:da:4d:51:69:c2:b7:7c:60:a0:27: eb:67:39:f3:28:35:ba:8f:f6:ae:6e:0d:45:dc:b5:d6:78:55: fb:1d:a0:b3:19:ab:9e:22:24:6b:0f:e2:1f:4f:e3:25:0e:0d: e5:ac:92:59:c4:06:11:bf:05:9c:3a:6e:b4:47:77:e4:62:04: 34:12:4e:53:9e:21:71:f7:02:18:11:05:17:11:ac:08:76:cc: 20:3b:95:1c:1b:4c:52:db:67:3d:0e:cd:06:f6:61:92:1e:d4: 70:2c:d1:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxbyg1HG5nmKjD4Jf2a9uGCThrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEy NTJBOTcxOTAeFw0yNTEyMDcwNzM2MjZaFw0yNTEyMTAxMDA0MjZaMDMxMTAvBgNV BAMTKEZFMUQ1NUJGNjJBOUU5NkNERkYyRTQyQjMzODAyNkMzNUJBNTlENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3JlM5s7rEFwebNh01PBHmnJK 9VuwtOmN4K28PwKJVu58YBYpuXWcAEyyCugqkngsttZqaofy7M6X9F/rA4/f/iY/ a1+pZnF2x5HF+3JKcDZDlXUYVe7u26cDt4/sCaNz/m0L+KxQDhQD9V9aUyEFzMCv nWj/brYBYFR7jMW8wrtbnwCseMlad5h6djXyxuABVdvhipyWMwDfNDVzggOy6Ikr GcG4E0UvHhexKAJ4/yt6OzwnjzF/eKLriPAdkPSYUx9JWeKd3bY6UtZ7j+0gjec8 SFj3zshLbFt3X/lUDSB+i7CH39gJjr7+dFFcCgay4xhflfTtwvhpyjUO4y3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/h1Vv2Kp6Wzf8uQrM4Amw1ulnWwwHwYDVR0j BBgwFoAUujxuggaVE0OpcL2AuNwzUSUqlxkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWZkZDZmOS1iNzk5LTRhOTYtOWUyYS0xZmVmNjliZmE1OTcvMC9CQTNDNkU4MjA2 OTUxMzQzQTk3MEJEODBCOERDMzM1MTI1MkE5NzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMzNTEyNTJB OTcxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFmZGQ2ZjktYjc5OS00YTk2LTll MmEtMWZlZjY5YmZhNTk3LzAvQkEzQzZFODIwNjk1MTM0M0E5NzBCRDgwQjhEQzMz NTEyNTJBOTcxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ58ybhjYjJk2vjhsdErfOB7g2PIjddtoNtA TiUCGayoFx/FYDrgwhXJxvLUneIoo0d5533lFLJXG0LeL/Gauj+7X7RCEXmu0mun 4MyVZlK9VOLtEMPLCn9sjEa1ulcrjVMgCU86rJLz7EJ06lCqUYhjWRRH7/RPLkBR 4sNnJ3w5H1nLiJPJ82SNOrDe3ZvdlwFI+k0MdpX22k1RacK3fGCgJ+tnOfMoNbqP 9q5uDUXctdZ4VfsdoLMZq54iJGsP4h9P4yUODeWsklnEBhG/BZw6brRHd+RiBDQS TlOeIXH3AhgRBRcRrAh2zCA7lRwbTFLbZz0OzQb2YZIe1HAs0SY= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:46 2025 by rpki-client