This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: X+QkU3aNHKVSX9CIW0opBFhGUKvRecIavvM2WDduNCE= Subject key identifier: 8C:F0:43:C4:52:78:69:F1:81:65:0C:80:E0:4B:66:CF:F2:6F:7B:A4 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 225BCECBE12F432FA73E320554C0AA8AA62B32FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 019F Signing time: Sat 06 Dec 2025 12:01:48 +0000 Manifest this update: Sat 06 Dec 2025 11:56:48 +0000 Manifest next update: Tue 09 Dec 2025 14:59:48 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: TZYCl+XWSlIyvBfGK5LZ0gcrmuJ00lU3e6Ph2mUOaqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5b:ce:cb:e1:2f:43:2f:a7:3e:32:05:54:c0:aa:8a:a6:2b:32:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Dec 6 11:56:48 2025 GMT Not After : Dec 9 14:59:48 2025 GMT Subject: CN=8CF043C4527869F181650C80E04B66CFF26F7BA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:65:69:d7:2b:eb:15:53:e3:aa:12:e6:c6:4c: be:7d:02:17:1e:79:88:ba:32:6c:3b:ac:e4:a5:01: f2:36:70:3d:59:9d:14:3d:24:e8:f1:fc:73:07:a5: 5a:de:26:d7:ea:54:06:8e:9c:4c:65:a1:14:d4:65: 94:ae:37:2a:db:6f:a5:b8:2a:d3:28:16:99:31:fd: 14:e5:0d:d0:f7:89:21:07:3c:58:43:1a:bc:a6:9f: f1:72:c2:03:c2:74:15:0d:ec:5a:9b:2b:e4:45:56: f9:b1:97:f9:c3:43:9f:00:2b:d0:ba:a0:57:3f:e5: 06:03:ac:ff:bb:b4:9d:87:4f:a5:00:08:c2:dc:c0: 5a:da:cf:6b:02:4f:9d:2f:fd:d1:60:92:cb:76:00: f9:60:74:dd:fa:29:45:63:30:dd:03:c6:75:42:6b: 93:87:29:0b:bf:58:84:d0:20:bd:62:c4:5b:fa:9a: a9:90:49:98:0e:73:0a:95:ff:62:6f:05:62:e6:4f: c6:b1:d1:0e:be:f5:7c:dd:8d:73:02:d9:ee:ed:72: 1a:3f:86:0f:09:8b:30:bb:2f:75:8f:2a:f6:89:bf: 36:a8:d4:a9:59:1d:97:18:b6:ec:01:d9:d7:9e:70: 2f:ea:9f:85:a2:bf:62:99:27:83:fa:cb:71:5f:12: 20:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F0:43:C4:52:78:69:F1:81:65:0C:80:E0:4B:66:CF:F2:6F:7B:A4 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:30:80:a3:68:bd:8f:d6:d4:c3:6a:71:1e:d4:d6:a9:2c:48: c3:e8:83:5e:95:45:67:f2:e7:2c:28:31:b0:5b:ec:16:b2:cf: 11:cf:c8:51:9f:a3:57:48:9a:0e:9e:bf:dc:3a:8f:c3:2f:47: 7c:1b:37:62:9f:76:94:07:a2:d6:10:62:b8:8d:7c:3a:9f:80: ad:aa:43:eb:5f:3c:31:c3:77:99:ef:9c:8e:00:23:7b:9f:5c: b5:c4:c5:8a:90:4e:0c:b2:e1:ba:19:ee:37:dc:71:a7:1c:20: 88:5b:21:88:44:e4:36:e1:e1:62:e2:59:0e:64:4b:62:13:e6: d4:32:ee:e0:16:a0:6b:e8:2b:dd:d7:be:68:43:e3:c2:da:5b: 89:dd:d6:21:51:91:6e:44:b0:16:7b:92:19:72:a2:c8:41:9c: 61:e3:06:b3:25:f1:91:ed:de:f4:62:a1:f3:5d:2a:ce:ae:80: a5:e2:69:69:39:5e:90:e5:2d:1e:d3:3b:0b:79:d4:b8:bd:6d: 80:e2:b8:a8:0e:78:8d:24:35:4e:7c:e1:4f:70:d1:e2:73:94: de:11:06:0e:08:c1:e3:74:68:af:c1:f9:94:56:5c:ed:34:58: 3d:59:0d:36:94:de:2b:f1:59:35:d5:ec:f8:bf:c0:bb:0a:85: cd:65:d2:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlvOy+EvQy+nPjIFVMCqiqYrMv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTEyMDYxMTU2NDhaFw0yNTEyMDkxNDU5NDhaMDMxMTAvBgNV BAMTKDhDRjA0M0M0NTI3ODY5RjE4MTY1MEM4MEUwNEI2NkNGRjI2RjdCQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZWnXK+sVU+OqEubGTL59Ahce eYi6Mmw7rOSlAfI2cD1ZnRQ9JOjx/HMHpVreJtfqVAaOnExloRTUZZSuNyrbb6W4 KtMoFpkx/RTlDdD3iSEHPFhDGrymn/FywgPCdBUN7FqbK+RFVvmxl/nDQ58AK9C6 oFc/5QYDrP+7tJ2HT6UACMLcwFraz2sCT50v/dFgkst2APlgdN36KUVjMN0DxnVC a5OHKQu/WITQIL1ixFv6mqmQSZgOcwqV/2JvBWLmT8ax0Q6+9XzdjXMC2e7tcho/ hg8JizC7L3WPKvaJvzao1KlZHZcYtuwB2deecC/qn4Wiv2KZJ4P6y3FfEiCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPBDxFJ4afGBZQyA4Etmz/Jve6QwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYwgKNovY/W1MNqcR7U1qksSMPog16VRWfy 5ywoMbBb7BayzxHPyFGfo1dImg6ev9w6j8MvR3wbN2KfdpQHotYQYriNfDqfgK2q Q+tfPDHDd5nvnI4AI3ufXLXExYqQTgyy4boZ7jfccaccIIhbIYhE5Dbh4WLiWQ5k S2IT5tQy7uAWoGvoK93XvmhD48LaW4nd1iFRkW5EsBZ7khlyoshBnGHjBrMl8ZHt 3vRiofNdKs6ugKXiaWk5XpDlLR7TOwt51Li9bYDiuKgOeI0kNU584U9w0eJzlN4R Bg4IweN0aK/B+ZRWXO00WD1ZDTaU3ivxWTXV7Pi/wLsKhc1l0nI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:39 2025 by rpki-client