This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: vQIwnzQA4gplGxdeRaI5hybnG86ePb9UYhAfkBpDTy8= Subject key identifier: B8:27:EE:AB:82:A7:AC:1D:F6:4D:7C:01:9E:60:7F:1A:F2:2E:F0:09 Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 4892FDE77FAEABBA456E9DAFCA0DF34979CF3291 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: C4 Signing time: Fri 05 Dec 2025 12:01:36 +0000 Manifest this update: Fri 05 Dec 2025 11:56:36 +0000 Manifest next update: Mon 08 Dec 2025 22:56:36 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: xO3YA8kvV0S2k9V1gUkOrfuFTDA74IDm000uOPYAAEk=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:92:fd:e7:7f:ae:ab:ba:45:6e:9d:af:ca:0d:f3:49:79:cf:32:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Dec 5 11:56:36 2025 GMT Not After : Dec 8 22:56:36 2025 GMT Subject: CN=B827EEAB82A7AC1DF64D7C019E607F1AF22EF009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6e:ca:d2:da:21:08:b0:0e:b0:8f:11:b7:73: 5e:94:59:f4:f8:e3:df:1f:74:47:53:ac:b9:63:30: ab:50:0d:79:98:3f:9f:07:0e:e2:40:ea:7b:9b:08: af:fc:d8:a5:2b:34:36:28:51:ab:07:4b:b1:3e:db: c5:4e:43:1a:90:45:12:8b:b9:c3:1f:c8:f5:d7:68: 41:b2:d4:1c:50:59:24:13:58:71:5b:66:46:40:d6: e3:7b:b4:d7:5c:a9:7d:01:32:68:ca:04:a4:5b:49: 7c:84:66:ce:a2:9a:a1:20:ef:55:12:23:32:97:26: 35:a7:8d:44:2f:67:36:16:d3:fb:b9:08:19:9c:6e: 9c:06:c1:d5:97:09:c3:28:fe:9c:b0:28:1f:fb:95: 99:53:06:51:81:0c:d1:76:1f:9a:92:55:65:c9:f1: 3f:13:46:c9:7a:63:3f:05:39:da:98:8e:07:07:3f: a4:97:a3:d1:8f:3d:ba:97:2b:06:ae:3a:22:1e:45: db:39:93:f1:4d:74:7a:4e:f4:e8:9a:d7:b4:d9:f5: 9c:df:21:66:75:ab:5a:76:21:67:83:44:e9:e6:82: 06:2a:65:bd:5a:48:83:5c:0a:b8:7f:46:7e:a9:06: 43:4b:bb:98:46:20:3b:f8:28:39:a6:17:04:c0:02: 96:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:27:EE:AB:82:A7:AC:1D:F6:4D:7C:01:9E:60:7F:1A:F2:2E:F0:09 X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8e:e3:db:73:a4:1e:89:b6:37:8f:60:ff:0c:5b:63:63:28: 4a:d8:4a:2a:28:c3:68:12:e2:7d:e2:9f:c7:1a:5e:5a:27:9b: 4b:91:c4:95:b6:1b:5a:c6:62:da:f5:12:09:f7:a3:c5:b5:ed: a5:c7:56:04:bc:e6:a0:47:6d:b1:fe:fd:17:4b:a6:e1:57:94: 7e:f1:01:de:96:ff:a7:31:44:ae:c9:88:5b:21:d9:3e:2e:2f: 41:ae:bf:b1:cd:eb:5c:1b:de:22:65:45:bf:fa:2d:74:15:c1: fd:f2:7f:3f:37:2f:34:8e:32:be:34:89:bd:41:af:1a:34:7f: 14:76:31:4b:79:4d:56:52:01:a7:04:d3:f1:ba:11:12:d4:3c: 77:c9:c6:1d:d5:cf:5b:84:c8:66:06:57:96:06:7e:0b:f6:d2: 01:32:26:dd:53:7b:2f:0d:27:39:a1:f9:76:f8:6b:0b:30:6f: 0f:91:b1:cb:36:e3:3f:7b:33:fa:bf:b9:31:5a:9a:5d:e2:00: 86:a7:3a:7f:70:a6:d1:d7:81:ef:7e:6e:ed:e4:bb:14:d8:05: ff:33:dc:69:e8:8f:12:1a:b9:62:02:79:7c:cb:ad:05:9a:b3: 54:a5:3a:df:3d:24:d2:b2:7c:6c:6e:5a:70:a9:df:59:95:cc: 5e:61:08:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSJL953+uq7pFbp2vyg3zSXnPMpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNTEyMDUxMTU2MzZaFw0yNTEyMDgyMjU2MzZaMDMxMTAvBgNV BAMTKEI4MjdFRUFCODJBN0FDMURGNjREN0MwMTlFNjA3RjFBRjIyRUYwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObsrS2iEIsA6wjxG3c16UWfT4 498fdEdTrLljMKtQDXmYP58HDuJA6nubCK/82KUrNDYoUasHS7E+28VOQxqQRRKL ucMfyPXXaEGy1BxQWSQTWHFbZkZA1uN7tNdcqX0BMmjKBKRbSXyEZs6imqEg71US IzKXJjWnjUQvZzYW0/u5CBmcbpwGwdWXCcMo/pywKB/7lZlTBlGBDNF2H5qSVWXJ 8T8TRsl6Yz8FOdqYjgcHP6SXo9GPPbqXKwauOiIeRds5k/FNdHpO9Oia17TZ9Zzf IWZ1q1p2IWeDROnmggYqZb1aSINcCrh/Rn6pBkNLu5hGIDv4KDmmFwTAApZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCfuq4KnrB32TXwBnmB/GvIu8AkwHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiO49tzpB6JtjePYP8MW2NjKErYSioow2gS 4n3in8caXlonm0uRxJW2G1rGYtr1Egn3o8W17aXHVgS85qBHbbH+/RdLpuFXlH7x Ad6W/6cxRK7JiFsh2T4uL0Guv7HN61wb3iJlRb/6LXQVwf3yfz83LzSOMr40ib1B rxo0fxR2MUt5TVZSAacE0/G6ERLUPHfJxh3Vz1uEyGYGV5YGfgv20gEyJt1Tey8N Jzmh+Xb4awswbw+Rscs24z97M/q/uTFaml3iAIanOn9wptHXge9+bu3kuxTYBf8z 3GnojxIauWICeXzLrQWas1SlOt89JNKyfGxuWnCp31mVzF5hCLA= -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:11 2025 by rpki-client