This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: /h6z/AVr9EOsav4ZdVsvwXbDAVJKJLLvY5/cElOnyxw= Subject key identifier: 0E:88:A8:29:5F:65:19:36:7B:04:44:E2:C6:3F:D9:7C:27:6C:41:BD Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 09EFB7787BB1B8AB655DB5302096A22897ED110C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 027C Signing time: Sat 24 Jan 2026 01:50:05 +0000 Manifest this update: Sat 24 Jan 2026 01:45:05 +0000 Manifest next update: Tue 27 Jan 2026 07:27:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: baQDSAW0/g73cwI4CvEptWdAzcP8c/t/AZ6Wg8AUtUo=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 07:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ef:b7:78:7b:b1:b8:ab:65:5d:b5:30:20:96:a2:28:97:ed:11:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Jan 24 01:45:05 2026 GMT Not After : Jan 27 07:27:05 2026 GMT Subject: CN=0E88A8295F6519367B0444E2C63FD97C276C41BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:1b:ac:df:85:8f:47:76:ec:8b:c9:25:0e: bd:c0:23:67:a5:66:5a:b4:2c:cd:f4:91:35:8c:55: 8d:72:5f:8a:2a:47:ac:69:91:22:50:a2:4a:ee:ef: df:61:38:4a:e9:06:59:aa:35:9a:c4:c2:dd:06:d3: a9:ab:0c:47:49:ee:78:ab:21:2b:9a:78:a5:8c:b4: e4:05:6f:6e:95:95:be:d6:32:4d:01:79:98:82:bb: 0c:23:d5:31:8a:5c:c6:69:c1:84:76:28:7e:20:8d: 81:45:36:92:71:d6:4e:3e:07:4c:f4:1e:bc:d5:3d: e4:df:49:94:02:65:8a:3f:ab:92:c2:a7:bd:86:c4: c5:98:14:03:99:1f:a7:9f:50:e5:67:b1:a2:b9:16: cf:7c:a3:bc:99:3c:17:59:7a:0e:f3:67:5e:ab:9e: dc:ef:45:c1:84:c0:b7:ca:d1:19:a5:b7:24:f7:89: c1:e2:7e:c7:70:08:e7:48:60:fa:e5:81:54:e2:b6: 19:af:a9:0a:f0:07:15:38:6a:12:73:ef:be:bc:0f: c7:12:b9:ed:38:71:64:99:61:90:bd:94:bf:df:e0: 34:6d:73:b6:52:c0:b1:d1:46:b7:79:c7:96:b6:23: 44:c9:74:b8:d2:5f:e1:34:6e:34:9d:34:90:c1:0e: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:88:A8:29:5F:65:19:36:7B:04:44:E2:C6:3F:D9:7C:27:6C:41:BD X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:08:1b:b8:7f:d4:17:68:9b:54:49:3f:57:18:93:a1:22:3a: b4:fc:5d:10:ba:da:d3:08:91:d9:04:4e:5a:98:56:22:2a:e0: 4d:56:16:22:92:d5:1b:72:a7:cb:fd:83:4f:05:c0:f3:62:33: de:99:97:9d:d1:cf:4c:89:de:26:03:34:11:44:fc:55:49:77: d5:d8:ee:c8:1c:cf:d0:b6:a9:26:10:35:78:c3:4e:e7:b9:40: 69:ba:b6:d5:f1:de:58:7a:70:f3:2c:69:3e:cf:ba:f3:94:e4: 13:00:c5:18:87:86:8a:56:7f:b2:ab:60:dd:fc:66:c2:f3:ed: c7:64:b1:0f:a8:70:0b:ce:e6:e7:b3:33:d1:67:6e:f9:74:aa: 17:7d:5a:e3:71:1d:4f:88:ce:c0:14:94:b2:49:b1:7e:4c:8c: d1:ed:11:09:f3:8c:43:e2:d5:c3:68:4b:b3:43:ef:e5:8e:28: 8f:35:16:76:83:ff:5b:40:31:8c:dc:28:ea:67:04:6e:29:37: f0:6b:4f:3e:1d:04:27:3f:a1:c5:00:32:78:88:fc:de:78:d1: c0:df:09:cd:2f:c5:dd:10:7f:e8:40:54:41:6d:bb:86:88:74: e7:1e:73:c1:60:36:ce:90:cd:39:7e:54:2f:9d:e7:2d:9b:19: e3:46:06:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCe+3eHuxuKtlXbUwIJaiKJftEQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNjAxMjQwMTQ1MDVaFw0yNjAxMjcwNzI3MDVaMDMxMTAvBgNV BAMTKDBFODhBODI5NUY2NTE5MzY3QjA0NDRFMkM2M0ZEOTdDMjc2QzQxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMxus34WPR3bsi8klDr3AI2el Zlq0LM30kTWMVY1yX4oqR6xpkSJQokru799hOErpBlmqNZrEwt0G06mrDEdJ7nir ISuaeKWMtOQFb26Vlb7WMk0BeZiCuwwj1TGKXMZpwYR2KH4gjYFFNpJx1k4+B0z0 HrzVPeTfSZQCZYo/q5LCp72GxMWYFAOZH6efUOVnsaK5Fs98o7yZPBdZeg7zZ16r ntzvRcGEwLfK0RmltyT3icHifsdwCOdIYPrlgVTithmvqQrwBxU4ahJz7768D8cS ue04cWSZYZC9lL/f4DRtc7ZSwLHRRrd5x5a2I0TJdLjSX+E0bjSdNJDBDtf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDoioKV9lGTZ7BETixj/ZfCdsQb0wHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4IG7h/1Bdom1RJP1cYk6EiOrT8XRC62tMI kdkETlqYViIq4E1WFiKS1Rtyp8v9g08FwPNiM96Zl53Rz0yJ3iYDNBFE/FVJd9XY 7sgcz9C2qSYQNXjDTue5QGm6ttXx3lh6cPMsaT7PuvOU5BMAxRiHhopWf7KrYN38 ZsLz7cdksQ+ocAvO5uezM9Fnbvl0qhd9WuNxHU+IzsAUlLJJsX5MjNHtEQnzjEPi 1cNoS7ND7+WOKI81FnaD/1tAMYzcKOpnBG4pN/BrTz4dBCc/ocUAMniI/N540cDf Cc0vxd0Qf+hAVEFtu4aIdOcec8FgNs6QzTl+VC+d5y2bGeNGBhI= -----END CERTIFICATE-----Generated at Mon Jan 26 01:03:18 2026 by rpki-client