This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: 8IWcPT7iOGVKWHtW7D4286mp+REhk/8IgIuL19eaZwI= Subject key identifier: BD:D6:FD:7B:E0:FB:10:1B:C5:31:26:B6:39:F8:9D:27:C1:4A:8C:7C Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 48182516E995822B8557C08183DDB1350F16EBFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01D4 Signing time: Sat 06 Dec 2025 07:00:02 +0000 Manifest this update: Sat 06 Dec 2025 06:55:02 +0000 Manifest next update: Tue 09 Dec 2025 12:08:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: 4B4sLGiYY9UJpR0B0tGX9mvG/0eQi98EmZG9gK2t/p8=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:18:25:16:e9:95:82:2b:85:57:c0:81:83:dd:b1:35:0f:16:eb:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Dec 6 06:55:02 2025 GMT Not After : Dec 9 12:08:02 2025 GMT Subject: CN=BDD6FD7BE0FB101BC53126B639F89D27C14A8C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:ba:4a:72:a5:fe:6c:99:b0:f0:31:c2:7f: 10:d9:7a:b7:78:c3:fd:5e:7e:d9:82:9b:2d:3b:de: f6:cd:ba:c9:e7:df:c7:55:ff:07:a7:4c:8c:76:fe: 7c:f1:07:fc:1f:2e:aa:83:66:65:f3:7b:7a:0e:2f: 10:cb:44:39:1f:2a:88:c3:e0:c3:4c:03:59:cd:68: b9:1f:ed:6b:85:28:00:0f:43:6e:f1:86:73:78:ee: 59:b0:a5:51:9d:17:ee:1f:c4:c3:52:86:19:dd:00: b5:8d:41:8a:49:6f:89:ae:92:4f:2f:81:89:ef:7a: 0b:8b:93:5c:2d:35:8f:e2:90:b9:0d:44:9f:3c:fa: 5e:2f:d7:94:6f:99:5c:cf:c8:33:42:0d:bd:62:45: 94:b1:2e:46:51:6a:f8:2a:1c:a1:9a:18:06:55:14: 94:22:bb:a0:c4:57:cb:a6:ea:65:ce:1d:24:e9:92: 0d:5c:a8:9d:29:40:09:9d:83:38:e4:e3:31:e7:f1: 39:02:56:b2:47:be:c3:80:59:94:fb:55:ec:1c:2d: 90:9d:b5:ad:a9:e0:c7:1c:33:7b:60:17:9c:56:df: ed:de:2b:ae:b8:11:54:88:9e:5e:75:b0:30:eb:ce: 03:70:55:ad:24:17:96:dd:83:3c:f2:a3:b3:52:e0: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D6:FD:7B:E0:FB:10:1B:C5:31:26:B6:39:F8:9D:27:C1:4A:8C:7C X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:93:22:fa:87:d3:a9:c8:e1:e6:87:13:22:5d:51:b7:e2:4f: 4c:ad:fb:a5:a2:f1:88:f8:64:d4:ca:a0:f7:e9:46:8c:70:7c: 56:9f:70:99:96:b3:35:2b:3a:be:f5:5a:87:6d:2b:5d:c1:e1: 9c:ef:d1:be:c4:af:ca:29:38:e0:f7:f2:89:91:a0:97:1e:81: 5b:73:cc:13:16:c3:96:b6:a0:f1:f3:2c:2d:e4:91:75:88:e4: b1:21:96:f6:ba:a0:a0:e6:b2:51:9d:65:b6:e5:f6:93:50:26: a2:8d:52:69:c3:d7:37:40:d2:2b:81:bf:bc:79:75:70:c9:03: e4:2f:22:6c:7e:31:06:bb:ff:42:b7:f7:24:f4:6c:bd:32:75: 81:0a:a0:cc:d3:12:18:b3:a8:ba:97:71:ec:da:52:9a:44:54: 3e:9d:ff:b7:9d:9e:09:f3:4b:99:17:b8:4f:4b:f9:37:10:85: 6b:86:e5:7d:5c:62:7c:b5:51:3e:04:7e:0f:0e:0a:cd:2f:46: 4a:de:27:1b:d4:be:e5:ee:ca:86:15:29:d0:a4:c4:a3:df:f3: ff:ee:ca:b7:24:0f:a0:f1:b5:06:31:c2:89:07:fa:2d:30:de: 14:34:aa:ef:6c:d4:b8:17:de:a1:21:16:d3:2e:dd:f2:17:77: 52:ee:e7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSBglFumVgiuFV8CBg92xNQ8W6/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTEyMDYwNjU1MDJaFw0yNTEyMDkxMjA4MDJaMDMxMTAvBgNV BAMTKEJERDZGRDdCRTBGQjEwMUJDNTMxMjZCNjM5Rjg5RDI3QzE0QThDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB9rpKcqX+bJmw8DHCfxDZerd4 w/1eftmCmy073vbNusnn38dV/wenTIx2/nzxB/wfLqqDZmXze3oOLxDLRDkfKojD 4MNMA1nNaLkf7WuFKAAPQ27xhnN47lmwpVGdF+4fxMNShhndALWNQYpJb4mukk8v gYnveguLk1wtNY/ikLkNRJ88+l4v15RvmVzPyDNCDb1iRZSxLkZRavgqHKGaGAZV FJQiu6DEV8um6mXOHSTpkg1cqJ0pQAmdgzjk4zHn8TkCVrJHvsOAWZT7VewcLZCd ta2p4MccM3tgF5xW3+3eK664EVSInl51sDDrzgNwVa0kF5bdgzzyo7NS4A2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdb9e+D7EBvFMSa2OfidJ8FKjHwwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCTIvqH06nI4eaHEyJdUbfiT0yt+6Wi8Yj4 ZNTKoPfpRoxwfFafcJmWszUrOr71WodtK13B4Zzv0b7Er8opOOD38omRoJcegVtz zBMWw5a2oPHzLC3kkXWI5LEhlva6oKDmslGdZbbl9pNQJqKNUmnD1zdA0iuBv7x5 dXDJA+QvImx+MQa7/0K39yT0bL0ydYEKoMzTEhizqLqXcezaUppEVD6d/7edngnz S5kXuE9L+TcQhWuG5X1cYny1UT4Efg8OCs0vRkreJxvUvuXuyoYVKdCkxKPf8//u yrckD6DxtQYxwokH+i0w3hQ0qu9s1LgX3qEhFtMu3fIXd1Lu56I= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:48 2025 by rpki-client