This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: vpVjDiqGGWUmXGpIs+TB86N3JwG6nxw2kVIh2Bohdk8= Subject key identifier: C4:99:C0:A5:9A:DE:52:F2:AC:54:3C:92:5D:61:E8:CA:D8:D2:7E:B7 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 15048A79720AEB581BE60E734FE2A462D07FCE20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01B5 Signing time: Sun 25 Jan 2026 11:01:46 +0000 Manifest this update: Sun 25 Jan 2026 10:56:46 +0000 Manifest next update: Wed 28 Jan 2026 19:34:46 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: mg+rD6A5YVN2zvE26Q5y8s9K23DgOl1GKrwMhdK6aS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:04:8a:79:72:0a:eb:58:1b:e6:0e:73:4f:e2:a4:62:d0:7f:ce:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Jan 25 10:56:46 2026 GMT Not After : Jan 28 19:34:46 2026 GMT Subject: CN=C499C0A59ADE52F2AC543C925D61E8CAD8D27EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:0a:84:82:3d:1c:d4:26:ca:e2:c9:57:05: 91:d3:38:77:1d:5a:ec:9e:17:da:f2:1d:d0:84:14: 7b:aa:7b:0e:0b:d3:b6:db:ad:3b:bb:18:25:6c:85: 34:60:aa:f3:e1:a2:48:ac:f9:02:72:f9:4c:84:2a: e6:c4:bf:fe:83:4e:21:6b:d6:3f:b4:7f:b4:50:d4: 57:e4:6b:f4:12:3b:10:5e:ad:5b:24:70:96:8e:81: 7b:1c:13:41:4c:1c:cb:05:0d:93:bf:41:6a:56:71: fa:5a:35:3a:b4:f9:73:02:50:cc:97:8d:dd:1c:1f: 92:17:84:0d:f3:d9:f8:05:db:df:ae:99:ba:04:4d: 47:4b:17:ab:bf:c2:6a:c0:97:ab:6b:0c:5f:6f:8c: 67:78:c9:fb:bc:4b:5d:c8:68:55:96:1b:03:11:aa: 53:28:25:6d:ef:46:c1:c8:da:f0:9a:43:d1:47:85: 5a:75:93:53:fd:f5:23:e2:22:12:93:75:a8:9b:9d: 37:54:c6:8c:f0:ef:30:17:ba:15:a7:19:ab:1a:f9: 86:41:d2:56:9c:ee:28:40:45:de:85:bb:57:41:91: d7:25:51:b1:61:27:bb:a3:42:b8:3b:5e:aa:4e:e1: 93:4d:3f:70:1a:16:8e:98:aa:81:06:53:2a:18:3a: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:C0:A5:9A:DE:52:F2:AC:54:3C:92:5D:61:E8:CA:D8:D2:7E:B7 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b0:62:9b:79:b4:84:11:03:f1:58:9f:67:f0:e2:e4:0f:19: dd:8a:20:53:f4:73:88:ce:d9:9b:a2:34:27:b3:0f:a0:b6:ae: 4b:5f:d3:80:5a:67:b9:b2:6f:d9:6c:70:94:8e:99:3d:c9:3e: ff:a5:31:a1:7e:d2:b6:24:00:73:cf:8d:97:11:de:f2:a4:8c: e0:11:d0:4a:f5:ef:ee:ce:3f:11:60:75:a5:95:bb:ea:6b:38: 36:09:b5:ac:39:ab:b9:98:42:63:91:ce:71:8f:f2:bd:54:7e: 48:0b:e5:56:31:04:fa:ef:15:d6:b2:02:43:35:69:d1:46:f1: 4c:eb:f8:b9:72:f2:ca:5c:57:29:38:6b:8d:ea:03:9c:a6:bf: 4a:69:20:bb:e6:3d:05:97:d4:be:fa:fa:a2:d9:3e:92:6f:dc: 7d:ef:4a:27:3d:12:9d:45:aa:b7:6b:6a:34:85:b9:b5:db:e2: b9:c1:a8:99:65:1a:56:43:82:e5:fc:17:ba:5e:ca:0a:e8:2b: 00:84:27:60:e4:05:70:63:2b:cd:3a:f9:10:06:f0:e3:08:6f: d9:81:5c:7f:73:88:26:75:76:52:a7:2c:b3:a3:9d:7d:fc:03: ed:de:1f:6a:79:03:be:3d:1d:5f:dc:5f:2f:2e:d0:64:85:61: b0:26:a4:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQSKeXIK61gb5g5zT+KkYtB/ziAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNjAxMjUxMDU2NDZaFw0yNjAxMjgxOTM0NDZaMDMxMTAvBgNV BAMTKEM0OTlDMEE1OUFERTUyRjJBQzU0M0M5MjVENjFFOENBRDhEMjdFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNXgqEgj0c1CbK4slXBZHTOHcd WuyeF9ryHdCEFHuqew4L07bbrTu7GCVshTRgqvPhokis+QJy+UyEKubEv/6DTiFr 1j+0f7RQ1Ffka/QSOxBerVskcJaOgXscE0FMHMsFDZO/QWpWcfpaNTq0+XMCUMyX jd0cH5IXhA3z2fgF29+umboETUdLF6u/wmrAl6trDF9vjGd4yfu8S13IaFWWGwMR qlMoJW3vRsHI2vCaQ9FHhVp1k1P99SPiIhKTdaibnTdUxozw7zAXuhWnGasa+YZB 0lac7ihARd6Fu1dBkdclUbFhJ7ujQrg7XqpO4ZNNP3AaFo6YqoEGUyoYOsJjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxJnApZreUvKsVDySXWHoytjSfrcwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKwYpt5tIQRA/FYn2fw4uQPGd2KIFP0c4jO 2ZuiNCezD6C2rktf04BaZ7myb9lscJSOmT3JPv+lMaF+0rYkAHPPjZcR3vKkjOAR 0Er17+7OPxFgdaWVu+prODYJtaw5q7mYQmORznGP8r1UfkgL5VYxBPrvFdayAkM1 adFG8Uzr+Lly8spcVyk4a43qA5ymv0ppILvmPQWX1L76+qLZPpJv3H3vSic9Ep1F qrdrajSFubXb4rnBqJllGlZDguX8F7peygroKwCEJ2DkBXBjK806+RAG8OMIb9mB XH9ziCZ1dlKnLLOjnX38A+3eH2p5A749HV/cXy8u0GSFYbAmpKA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:43 2026 by rpki-client