This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: NOjAVdFEe/qsExl/BGoaBtqSHzhOU09cyhlB6K0q4LM= Subject key identifier: 1E:64:86:77:15:0C:ED:AF:2F:DB:4C:11:56:6C:25:6D:6A:F1:94:29 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 70E78BCA16E9D9845FEF3B3362ADDB0BE50EEE02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01CF Signing time: Sun 25 Jan 2026 10:41:03 +0000 Manifest this update: Sun 25 Jan 2026 10:36:03 +0000 Manifest next update: Wed 28 Jan 2026 15:16:03 +0000 Files and hashes: 1: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: XpsrFjei0l+09ODvvmQABrLd5RCt8xbB9sqvgbDFDtE=) 2: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: wiYrq6CjqWqPb2SEtdVmOUWu5eaGme6xziKeQlsqJWA=) 3: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: TZ8feDByv9ab3r2T2o1dAtxBjODU6I8711HYm4ANY0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e7:8b:ca:16:e9:d9:84:5f:ef:3b:33:62:ad:db:0b:e5:0e:ee:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Jan 25 10:36:03 2026 GMT Not After : Jan 28 15:16:03 2026 GMT Subject: CN=1E648677150CEDAF2FDB4C11566C256D6AF19429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:9a:8a:27:f6:24:29:a3:5c:c3:e9:6f:57: 1e:22:45:73:b7:36:85:a7:6b:53:27:e5:78:d9:3e: ed:9b:49:45:88:1c:45:32:09:ae:54:31:ee:9b:a9: 97:d0:b0:66:23:25:90:db:a6:59:3b:e5:a8:e4:fb: 2f:82:81:cd:a3:a9:f7:81:ab:4b:93:ee:fd:c7:0a: 42:68:f5:a9:3b:6f:1d:26:b0:f4:db:f3:d5:f9:6e: 11:4b:9c:cd:24:98:13:7b:c9:01:7d:bb:2f:7f:74: d4:55:2f:a9:fe:60:f3:f1:17:3f:ff:9a:de:5a:79: 85:66:20:51:79:52:6d:7b:76:d7:70:1c:4c:a7:73: c2:36:bc:b5:3c:ea:17:f3:5c:a3:d5:9d:85:22:b0: 91:64:6f:d2:a5:72:6f:f1:4b:2e:a9:c4:6e:ff:26: 3c:fe:ad:9d:3a:c4:72:c8:11:f7:5d:f3:17:01:25: 9f:a0:f5:fa:a5:43:56:38:9b:d7:74:76:e4:43:11: 0e:17:0f:bb:60:a9:9a:c2:7d:db:4f:24:0b:da:5c: 2c:6e:34:fd:27:22:4a:60:4c:e2:65:71:c6:93:c3: 1f:f1:86:f3:13:78:46:81:66:41:93:96:ce:cb:5b: ef:ba:38:6b:14:df:af:2a:29:2d:05:02:07:99:54: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:64:86:77:15:0C:ED:AF:2F:DB:4C:11:56:6C:25:6D:6A:F1:94:29 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:99:b0:1a:29:c9:2a:ab:9d:fd:d8:1c:c3:03:9a:ef:24:8d: 13:42:b6:97:29:f3:60:28:42:3b:fc:63:4c:30:6b:6a:0b:bd: a9:4a:ee:a5:18:1d:73:93:a8:5f:a0:a9:89:90:e1:16:cb:e9: b8:e5:ce:a4:19:e7:41:35:f2:c0:e8:b4:76:ba:dc:c1:cb:7b: e7:00:a4:60:e7:00:92:14:16:82:b8:87:b4:48:d4:93:7e:80: 0e:32:50:13:3d:02:88:f7:21:66:aa:1c:f8:a3:8d:d5:75:96: b6:12:d5:23:56:50:e5:be:7c:1e:91:1f:eb:d7:26:fc:b6:f4: 41:31:21:b0:e5:08:ac:8b:6c:6a:fa:9d:3c:8b:ad:24:dd:1f: 07:b4:ea:28:df:ec:70:d7:28:3b:d8:5d:7d:ba:35:7a:86:a9: a2:f3:0f:bd:93:6b:5a:6a:6e:7b:14:6a:52:b6:34:99:82:a9: 9a:fe:40:13:af:4f:8d:8f:48:4b:58:75:e8:d4:42:26:28:ff: 3f:41:28:e4:a8:85:e4:2d:bc:7c:f1:56:2e:69:95:3a:d8:ed: 70:d6:2e:ba:a0:7c:fe:a5:ea:86:d3:f6:40:eb:5f:c7:8c:b6: 7c:ef:e0:95:e2:8a:df:29:4a:7e:ab:50:c1:5f:93:96:33:83: c9:cf:86:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcOeLyhbp2YRf7zszYq3bC+UO7gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNjAxMjUxMDM2MDNaFw0yNjAxMjgxNTE2MDNaMDMxMTAvBgNV BAMTKDFFNjQ4Njc3MTUwQ0VEQUYyRkRCNEMxMTU2NkMyNTZENkFGMTk0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81ZqKJ/YkKaNcw+lvVx4iRXO3 NoWna1Mn5XjZPu2bSUWIHEUyCa5UMe6bqZfQsGYjJZDbplk75ajk+y+Cgc2jqfeB q0uT7v3HCkJo9ak7bx0msPTb89X5bhFLnM0kmBN7yQF9uy9/dNRVL6n+YPPxFz// mt5aeYVmIFF5Um17dtdwHEync8I2vLU86hfzXKPVnYUisJFkb9Klcm/xSy6pxG7/ Jjz+rZ06xHLIEfdd8xcBJZ+g9fqlQ1Y4m9d0duRDEQ4XD7tgqZrCfdtPJAvaXCxu NP0nIkpgTOJlccaTwx/xhvMTeEaBZkGTls7LW++6OGsU368qKS0FAgeZVERNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHmSGdxUM7a8v20wRVmwlbWrxlCkwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6ZsBopySqrnf3YHMMDmu8kjRNCtpcp82Ao Qjv8Y0wwa2oLvalK7qUYHXOTqF+gqYmQ4RbL6bjlzqQZ50E18sDotHa63MHLe+cA pGDnAJIUFoK4h7RI1JN+gA4yUBM9Aoj3IWaqHPijjdV1lrYS1SNWUOW+fB6RH+vX Jvy29EExIbDlCKyLbGr6nTyLrSTdHwe06ijf7HDXKDvYXX26NXqGqaLzD72Ta1pq bnsUalK2NJmCqZr+QBOvT42PSEtYdejUQiYo/z9BKOSoheQtvHzxVi5plTrY7XDW LrqgfP6l6obT9kDrX8eMtnzv4JXiit8pSn6rUMFfk5Yzg8nPhvE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:54:32 2026 by rpki-client