This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: 1uE93nhEY0Amu/iQBPzuOAybAM8nKg72kR35eljg9II= Subject key identifier: AD:70:B5:FC:91:84:AF:1E:7B:B8:62:DB:51:24:56:C0:1D:E9:11:43 Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 65A15395BF84B5620DE534A6AEDFE7941302E6A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01EA Signing time: Fri 23 Jan 2026 23:20:02 +0000 Manifest this update: Fri 23 Jan 2026 23:15:02 +0000 Manifest next update: Mon 26 Jan 2026 23:55:02 +0000 Files and hashes: 1: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: 8jKimulytD7Pq2mFmluc3KHXOw+TVZk4G1dQA6M9A5A=) 2: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 23:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a1:53:95:bf:84:b5:62:0d:e5:34:a6:ae:df:e7:94:13:02:e6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Jan 23 23:15:02 2026 GMT Not After : Jan 26 23:55:02 2026 GMT Subject: CN=AD70B5FC9184AF1E7BB862DB512456C01DE91143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:26:8e:d7:e3:b0:54:9c:5a:7f:27:7f:03: 04:ad:33:14:9d:98:75:3e:77:e8:3c:77:8c:03:da: 0c:6d:fa:dc:52:bc:03:5d:43:a5:71:40:3d:3f:d0: 86:42:08:87:e8:20:52:51:a7:83:10:82:2b:00:3e: bb:31:58:33:a8:7b:14:b6:d7:c4:b8:c1:b9:fa:e1: 0f:3d:64:4d:d9:c1:82:2d:96:1e:b5:46:2f:00:70: b1:83:4a:90:39:3f:ec:fa:27:29:d1:ad:a2:20:2a: 3d:ae:5a:5e:f2:14:af:ef:24:e1:8f:c8:93:06:61: b6:d9:c0:da:5e:b4:47:f7:fc:6c:cc:43:7a:72:c6: 18:9f:49:54:b4:e5:ff:a0:14:dc:12:22:95:43:f6: 41:f6:72:33:b5:35:60:47:ec:6c:ed:ed:0d:a1:89: cc:ef:f2:0d:88:e0:5c:c6:b5:08:46:a7:8f:8a:d1: a6:a2:73:3e:6e:ff:af:e5:cd:32:82:0a:ea:cc:66: e4:98:90:79:07:4e:2c:6f:d7:fc:c7:4c:0e:37:0d: 05:33:1d:fc:17:51:9f:47:7d:ab:24:17:f5:db:9a: c2:52:dd:c8:d6:46:a3:f5:8c:84:6b:b3:4a:35:27: c8:ba:bb:ec:16:dc:b7:42:d1:ed:c5:77:51:56:06: c9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:70:B5:FC:91:84:AF:1E:7B:B8:62:DB:51:24:56:C0:1D:E9:11:43 X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:da:51:6a:21:7b:5a:5a:2e:e3:0a:1d:c1:2d:66:17:d8:10: 40:ba:d6:30:b3:8d:41:a3:6f:63:63:c0:e6:75:58:d8:4b:06: 69:2e:83:6e:70:9e:dd:e9:e5:52:65:3c:2d:77:55:a9:a9:d8: 51:f6:28:7a:9a:65:fd:5b:8f:67:d5:e9:e3:a3:8e:cf:80:77: ec:35:22:07:6a:34:46:ab:cb:73:17:02:55:fc:b1:1f:43:1d: 75:7c:6f:76:64:6b:f2:21:4a:4b:ff:4b:93:42:8d:40:1e:81: 39:85:43:05:dd:87:69:f2:4f:09:a8:e3:b3:cc:b8:e2:85:d2: 50:60:e8:b3:78:47:aa:a5:96:18:25:ed:e7:22:46:89:55:8d: cf:05:7b:bd:07:51:c7:3f:eb:28:e0:63:d2:03:c0:ce:7d:c5: 96:81:a6:64:98:ce:9b:e4:99:73:cd:78:d8:b0:6d:04:67:75: 6a:f3:00:03:ca:20:a3:d8:19:a8:17:3c:b5:28:de:41:19:69: bf:cd:da:83:fa:6f:f5:dc:56:76:92:8c:3c:54:ff:00:fa:3f: 07:ad:21:7e:3b:7e:72:c6:e5:66:ac:96:65:ce:ec:c8:e8:f4: 51:14:4a:1d:4e:18:b1:b7:55:98:42:29:93:8d:62:93:bc:29: 9a:bf:c5:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaFTlb+EtWIN5TSmrt/nlBMC5qUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNjAxMjMyMzE1MDJaFw0yNjAxMjYyMzU1MDJaMDMxMTAvBgNV BAMTKEFENzBCNUZDOTE4NEFGMUU3QkI4NjJEQjUxMjQ1NkMwMURFOTExNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1riaO1+OwVJxafyd/AwStMxSd mHU+d+g8d4wD2gxt+txSvANdQ6VxQD0/0IZCCIfoIFJRp4MQgisAPrsxWDOoexS2 18S4wbn64Q89ZE3ZwYItlh61Ri8AcLGDSpA5P+z6JynRraIgKj2uWl7yFK/vJOGP yJMGYbbZwNpetEf3/GzMQ3pyxhifSVS05f+gFNwSIpVD9kH2cjO1NWBH7Gzt7Q2h iczv8g2I4FzGtQhGp4+K0aaicz5u/6/lzTKCCurMZuSYkHkHTixv1/zHTA43DQUz HfwXUZ9HfaskF/XbmsJS3cjWRqP1jIRrs0o1J8i6u+wW3LdC0e3Fd1FWBskvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXC1/JGErx57uGLbUSRWwB3pEUMwHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzaUWohe1paLuMKHcEtZhfYEEC61jCzjUGj b2NjwOZ1WNhLBmkug25wnt3p5VJlPC13Vamp2FH2KHqaZf1bj2fV6eOjjs+Ad+w1 IgdqNEary3MXAlX8sR9DHXV8b3Zka/IhSkv/S5NCjUAegTmFQwXdh2nyTwmo47PM uOKF0lBg6LN4R6qllhgl7eciRolVjc8Fe70HUcc/6yjgY9IDwM59xZaBpmSYzpvk mXPNeNiwbQRndWrzAAPKIKPYGagXPLUo3kEZab/N2oP6b/XcVnaSjDxU/wD6Pwet IX47fnLG5WaslmXO7Mjo9FEUSh1OGLG3VZhCKZONYpO8KZq/xVA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:35 2026 by rpki-client