This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: f4afl8spIATeZJb30QlNqLbUhQrzDf5OSezk+SJ4ss8= Subject key identifier: 04:92:B4:14:E1:F6:9A:0B:95:5B:CA:6C:7E:99:59:BE:F8:CA:34:D0 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 481008A0EDEE25EB87C808F14B607649121BF966 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0266 Signing time: Fri 05 Dec 2025 11:40:05 +0000 Manifest this update: Fri 05 Dec 2025 11:35:05 +0000 Manifest next update: Mon 08 Dec 2025 15:35:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: js57XuqEj1GN1yP9HkIjxKjStx+nHInpgUQbRVYyimU=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:10:08:a0:ed:ee:25:eb:87:c8:08:f1:4b:60:76:49:12:1b:f9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Dec 5 11:35:05 2025 GMT Not After : Dec 8 15:35:05 2025 GMT Subject: CN=0492B414E1F69A0B955BCA6C7E9959BEF8CA34D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:13:78:78:be:37:7f:fd:9a:55:c7:fa:f5: 0e:56:52:01:da:0d:0e:4c:af:86:b0:a9:1e:67:d2: ec:de:8a:03:96:34:b8:92:6f:a6:3f:d3:8c:8a:1c: cd:60:2a:90:6a:d5:1b:84:26:da:00:df:6c:0b:38: 98:8d:b3:ee:79:86:ee:81:df:7e:9b:e5:4f:18:bd: 75:67:aa:90:23:b5:da:7c:12:2f:a6:95:3d:52:ef: ce:d4:c4:07:ea:b2:8b:fc:53:10:a5:9e:0c:36:be: 17:c9:96:11:3a:bd:7d:f1:e4:1f:66:81:a7:b4:4f: da:8a:3d:ce:b4:d7:66:b3:15:78:d8:99:35:25:4b: 54:ac:a3:d6:d6:3d:92:bf:53:12:f4:ea:9f:6b:3e: ea:ae:cd:16:a3:e7:03:93:0a:0e:c6:ba:2b:9e:1a: cd:6f:e9:db:ba:c2:d0:5b:94:ea:ba:8e:d2:6b:3e: 6a:59:cf:55:6b:2b:26:99:2e:93:0d:4e:63:0f:46: 83:39:28:db:8e:03:27:d8:ca:c4:ff:03:9c:17:b3: 98:53:df:b9:87:09:fc:1d:e0:6b:f4:82:0b:d0:33: c6:dc:a4:dd:62:6c:1d:8f:2c:45:bd:1b:d0:36:be: 4e:44:27:60:a5:dd:59:44:e3:0d:3d:e8:d5:e0:2c: fc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:B4:14:E1:F6:9A:0B:95:5B:CA:6C:7E:99:59:BE:F8:CA:34:D0 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:65:fa:8c:68:91:26:36:ee:71:14:8f:6b:09:10:44:7d:28: cf:94:3c:8f:7b:d7:32:b1:33:78:b7:39:fe:30:ed:c7:b1:a0: 97:f6:d4:1a:8e:2e:98:bc:ed:84:93:a6:26:55:ec:18:7e:a7: 54:aa:09:e3:06:ec:9c:82:32:e0:8b:ae:93:38:19:d0:3a:60: c5:2d:7c:61:a3:4f:96:c6:55:a5:4f:5c:30:c9:cf:5a:34:65: 77:cc:0a:52:77:ee:2e:86:58:a7:c8:31:2c:84:9d:c3:5a:af: c2:33:07:4d:c0:68:5e:e7:a2:3f:7b:3a:2b:58:ca:6e:04:7d: dd:a8:14:e6:ed:b9:34:6a:5a:d5:91:13:39:eb:3c:93:57:1b: 45:d3:15:2e:d5:fb:a7:0c:bd:73:f7:d2:de:42:b9:45:d7:09: 7d:0d:1c:60:bf:cf:96:d8:fd:30:87:05:c4:1f:c5:48:ed:3c: 96:5d:7a:eb:78:6c:f4:cd:2a:74:57:4f:b0:36:41:c2:c4:7c: de:53:58:79:a8:25:43:be:d6:e0:a9:48:24:8d:d3:f8:50:0f: 00:64:51:94:07:f6:f2:9b:91:ed:e6:7c:7d:c9:76:ff:66:89: 22:90:18:5c:29:45:0d:6e:31:87:a7:00:ad:4a:10:f9:7d:b0: dc:0e:0e:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBAIoO3uJeuHyAjxS2B2SRIb+WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTEyMDUxMTM1MDVaFw0yNTEyMDgxNTM1MDVaMDMxMTAvBgNV BAMTKDA0OTJCNDE0RTFGNjlBMEI5NTVCQ0E2QzdFOTk1OUJFRjhDQTM0RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrXBN4eL43f/2aVcf69Q5WUgHa DQ5Mr4awqR5n0uzeigOWNLiSb6Y/04yKHM1gKpBq1RuEJtoA32wLOJiNs+55hu6B 336b5U8YvXVnqpAjtdp8Ei+mlT1S787UxAfqsov8UxClngw2vhfJlhE6vX3x5B9m gae0T9qKPc6012azFXjYmTUlS1Sso9bWPZK/UxL06p9rPuquzRaj5wOTCg7Guiue Gs1v6du6wtBblOq6jtJrPmpZz1VrKyaZLpMNTmMPRoM5KNuOAyfYysT/A5wXs5hT 37mHCfwd4Gv0ggvQM8bcpN1ibB2PLEW9G9A2vk5EJ2Cl3VlE4w096NXgLPzRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJK0FOH2mguVW8psfplZvvjKNNAwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAll+oxokSY27nEUj2sJEER9KM+UPI971zKx M3i3Of4w7cexoJf21BqOLpi87YSTpiZV7Bh+p1SqCeMG7JyCMuCLrpM4GdA6YMUt fGGjT5bGVaVPXDDJz1o0ZXfMClJ37i6GWKfIMSyEncNar8IzB03AaF7noj97OitY ym4Efd2oFObtuTRqWtWREznrPJNXG0XTFS7V+6cMvXP30t5CuUXXCX0NHGC/z5bY /TCHBcQfxUjtPJZdeut4bPTNKnRXT7A2QcLEfN5TWHmoJUO+1uCpSCSN0/hQDwBk UZQH9vKbke3mfH3Jdv9miSKQGFwpRQ1uMYenAK1KEPl9sNwODnI= -----END CERTIFICATE-----Generated at Sun Dec 7 05:15:54 2025 by rpki-client