This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft File: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json) Hash identifier: BInZD2Fb60RKS3K68rIARrWWwVNUyxEQEQpEdvY8YUE= Subject key identifier: 71:6C:AA:12:84:21:94:6C:B5:1C:DF:81:F1:AD:33:D4:20:B4:50:91 Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC Certificate issuer: /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Certificate serial: 63AFDF979D61567A90A0D6B0668FDC1960BF451C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft Manifest number: 12 Signing time: Sat 06 Dec 2025 11:41:40 +0000 Manifest this update: Sat 06 Dec 2025 11:36:40 +0000 Manifest next update: Tue 09 Dec 2025 17:34:40 +0000 Files and hashes: 1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: ESScUQAPneXCEYx1JvEdGUhqr3QRt6C4CHFD7yHVMwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:af:df:97:9d:61:56:7a:90:a0:d6:b0:66:8f:dc:19:60:bf:45:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Validity Not Before: Dec 6 11:36:40 2025 GMT Not After : Dec 9 17:34:40 2025 GMT Subject: CN=716CAA128421946CB51CDF81F1AD33D420B45091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:03:39:04:05:24:94:44:ed:5b:c8:bf:4e:53: 85:e7:1e:85:4c:e3:24:77:7e:c6:7f:ad:6a:55:21: f4:38:14:d3:ea:cb:ea:d7:89:7c:97:4a:01:30:ac: c1:a0:57:f6:8d:21:ea:3b:fe:a3:89:6a:4a:ed:eb: 20:f2:26:f0:f7:0a:74:43:b1:ef:7c:ed:06:e1:38: 08:f9:d0:39:1e:56:be:6e:14:a1:1a:38:a7:fc:93: 5a:8f:94:5a:60:e6:05:b4:9d:e9:24:67:b1:77:e2: ef:db:51:6a:a8:0e:ca:d9:e5:d8:85:e8:53:db:1c: da:60:fc:8e:3d:83:81:43:62:1f:a3:34:fd:78:5b: 0e:47:8d:99:5f:fb:8e:be:4a:ad:70:12:e3:3b:6e: b8:28:6f:11:00:d3:c1:57:ca:7a:aa:3a:d3:12:3c: fa:ab:cd:a3:4c:2d:30:a6:7b:3d:41:f0:86:43:88: bb:c8:25:17:81:71:7d:4d:29:18:f6:8d:1e:e4:f7: 19:84:0c:8d:fd:5b:ba:45:75:b6:5b:74:b7:3d:10: f0:b8:cf:c0:c6:c3:39:9f:6d:a0:2f:bb:ae:99:ed: 7f:a8:48:7d:cd:f3:7b:96:43:76:88:6e:f8:5d:80: 86:96:03:37:b7:97:d5:ff:d0:4a:fc:8a:c7:52:50: bb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6C:AA:12:84:21:94:6C:B5:1C:DF:81:F1:AD:33:D4:20:B4:50:91 X509v3 Authority Key Identifier: keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:96:0c:12:63:79:c5:48:6d:c7:71:7b:22:52:5e:64:3f:28: d1:20:5c:fc:d3:00:de:b4:c1:d6:7a:04:a1:11:53:89:d2:4c: ea:ae:77:c7:83:fa:da:ae:eb:e5:2e:d4:c4:49:1f:cb:3a:6d: 10:ad:45:3f:5a:42:78:c6:e9:9e:67:dc:90:2b:28:07:87:21: 5e:0d:84:ed:81:3e:e6:6e:67:7b:a9:4e:58:12:09:25:d0:5d: 31:02:f5:49:de:38:a8:b6:f1:5a:4d:50:a0:b4:78:8c:ca:a9: ed:88:c5:e7:d1:d8:4d:c1:c5:e3:b9:f9:e3:5c:12:21:74:c6: a1:08:e0:f7:ce:10:36:65:06:e4:31:07:a4:c5:e8:d8:a0:c0: 9d:c8:95:03:8a:69:e6:17:1f:ce:45:25:3f:43:ef:f5:87:46: e9:2b:55:bd:08:6e:d0:b6:62:14:75:4d:ad:d8:d4:ba:1e:30: 3b:9f:a3:08:55:cb:25:36:a6:19:26:d3:08:4d:87:cf:96:8a: 54:5f:04:79:6d:15:44:5e:a9:be:7f:32:09:f8:97:36:65:d4: 00:33:65:73:b4:b7:ad:6b:70:92:50:04:86:ec:58:a8:bb:8d: 30:2a:21:e3:20:30:db:93:31:ca:40:f5:2a:ef:9d:d3:84:d4: da:d1:14:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6/fl51hVnqQoNawZo/cGWC/RRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVF MjQxN0NEQzAeFw0yNTEyMDYxMTM2NDBaFw0yNTEyMDkxNzM0NDBaMDMxMTAvBgNV BAMTKDcxNkNBQTEyODQyMTk0NkNCNTFDREY4MUYxQUQzM0Q0MjBCNDUwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAzkEBSSURO1byL9OU4XnHoVM 4yR3fsZ/rWpVIfQ4FNPqy+rXiXyXSgEwrMGgV/aNIeo7/qOJakrt6yDyJvD3CnRD se987QbhOAj50DkeVr5uFKEaOKf8k1qPlFpg5gW0nekkZ7F34u/bUWqoDsrZ5diF 6FPbHNpg/I49g4FDYh+jNP14Ww5HjZlf+46+Sq1wEuM7brgobxEA08FXynqqOtMS PPqrzaNMLTCmez1B8IZDiLvIJReBcX1NKRj2jR7k9xmEDI39W7pFdbZbdLc9EPC4 z8DGwzmfbaAvu66Z7X+oSH3N83uWQ3aIbvhdgIaWAze3l9X/0Er8isdSULs5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWyqEoQhlGy1HN+B8a0z1CC0UJEwHwYDVR0j BBgwFoAUrncKILibC1xJQxCl3CHeXuJBfNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzgzNzYyZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9BRTc3MEEyMEI4 OUIwQjVDNDk0MzEwQTVEQzIxREU1RUUyNDE3Q0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVFMjQx N0NEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURF NUVFMjQxN0NEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqWDBJjecVIbcdxeyJSXmQ/KNEgXPzTAN60 wdZ6BKERU4nSTOqud8eD+tqu6+Uu1MRJH8s6bRCtRT9aQnjG6Z5n3JArKAeHIV4N hO2BPuZuZ3upTlgSCSXQXTEC9UneOKi28VpNUKC0eIzKqe2IxefR2E3BxeO5+eNc EiF0xqEI4PfOEDZlBuQxB6TF6NigwJ3IlQOKaeYXH85FJT9D7/WHRukrVb0IbtC2 YhR1Ta3Y1LoeMDufowhVyyU2phkm0whNh8+WilRfBHltFUReqb5/Mgn4lzZl1AAz ZXO0t61rcJJQBIbsWKi7jTAqIeMgMNuTMcpA9SrvndOE1NrRFK8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:11:00 2025 by rpki-client