This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: gY+7tFFF42V7nQhDzwmIqalXFBpVd0+l9MsayDaeBAo= Subject key identifier: 85:A6:67:C4:F3:A4:CF:CF:D1:F4:3F:D6:5B:15:E4:D4:62:39:D1:0C Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 2CB45D26FCB0F3FC3847A6645D04355D0A47452F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0268 Signing time: Fri 05 Dec 2025 01:41:11 +0000 Manifest this update: Fri 05 Dec 2025 01:36:11 +0000 Manifest next update: Mon 08 Dec 2025 07:52:11 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: cjzGgTirsHa1//ygFLL1hyyvG8otQyTGfMY4WIcnHT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b4:5d:26:fc:b0:f3:fc:38:47:a6:64:5d:04:35:5d:0a:47:45:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Dec 5 01:36:11 2025 GMT Not After : Dec 8 07:52:11 2025 GMT Subject: CN=85A667C4F3A4CFCFD1F43FD65B15E4D46239D10C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:a0:38:93:de:62:a2:95:44:dc:6a:58:5d: e6:7d:d5:44:63:5e:a7:e6:b2:51:e7:5f:07:cc:e5: 63:51:4f:b5:5e:05:d4:75:6a:34:2b:1d:8b:20:33: b3:92:a5:f8:c8:2c:6f:21:bd:79:14:c4:16:11:6e: fa:ed:20:a9:1c:6c:05:4e:7e:0d:69:a8:b9:1a:e9: 90:1f:6a:f0:9a:df:58:47:9c:0d:f3:4a:3c:f3:33: b7:37:77:25:23:da:c6:b6:da:69:60:a1:1c:b5:a6: 13:d1:b3:d3:08:3d:dd:4f:78:30:d2:6b:92:da:c9: 72:8f:0d:da:2b:e5:69:3c:54:1a:b4:97:d6:e1:e0: cf:bb:66:b1:7d:9e:68:ea:13:85:3d:0b:a3:a4:d3: 56:fa:c8:da:c2:5f:a8:63:1c:73:af:a7:af:a9:cd: d7:9e:e0:52:d0:4c:fa:46:53:a8:e4:61:ca:06:1d: 98:fd:e4:bc:f7:f6:30:cd:56:4a:d2:17:a0:b8:a1: 58:5f:a8:fb:e6:2d:61:3c:be:50:80:5e:2d:eb:89: da:e7:ca:94:5a:ed:4d:73:8a:93:b3:84:ca:ad:8b: 58:4e:8f:09:8d:af:75:db:ef:f3:a6:e6:f1:13:4c: 71:0c:4a:fb:0d:35:e8:45:c3:0a:6c:02:70:61:be: 70:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A6:67:C4:F3:A4:CF:CF:D1:F4:3F:D6:5B:15:E4:D4:62:39:D1:0C X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:21:32:79:ae:d2:9d:da:2e:b2:94:12:9d:f7:1c:68:d2:b5: 5b:48:09:fe:d5:96:cf:94:f0:ec:35:8d:80:18:b4:ea:c9:09: 6f:df:de:f8:36:44:c6:85:f9:b0:4a:74:5d:0e:53:9a:48:3f: 2d:7f:10:25:11:c7:1e:df:bf:f6:7f:e4:e3:8c:71:38:99:7b: 32:05:55:8a:05:73:0f:05:55:a2:35:b8:28:70:57:9b:bf:15: 80:e3:be:b0:8c:db:be:dd:79:e0:a9:5a:df:48:67:49:c1:c1: f9:07:1e:97:98:cb:2d:19:9e:72:9b:ad:f1:30:4a:4c:f1:68: b9:48:4f:51:b0:b9:0f:57:f1:7a:c0:16:50:f5:1b:27:85:36: ab:6f:9a:e4:b1:39:69:98:cb:15:67:d9:3f:af:f1:18:b6:e7: aa:09:ef:8a:86:95:13:d8:b5:6e:d5:01:6c:6b:b5:3e:0d:b8: 0a:67:54:9e:c1:77:ac:ce:5f:57:98:3a:7a:36:58:57:17:91: 3e:30:e0:18:a1:16:d9:98:7c:fa:58:5f:f0:f6:b7:bc:65:92: d7:4c:9c:69:e7:69:ef:e8:00:9e:2b:03:c3:cc:75:61:0a:b5: de:e0:45:1a:c4:9d:30:4d:49:45:fe:83:49:31:76:eb:2f:8d: be:b9:cd:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLRdJvyw8/w4R6ZkXQQ1XQpHRS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTEyMDUwMTM2MTFaFw0yNTEyMDgwNzUyMTFaMDMxMTAvBgNV BAMTKDg1QTY2N0M0RjNBNENGQ0ZEMUY0M0ZENjVCMTVFNEQ0NjIzOUQxMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VaA4k95iopVE3GpYXeZ91URj XqfmslHnXwfM5WNRT7VeBdR1ajQrHYsgM7OSpfjILG8hvXkUxBYRbvrtIKkcbAVO fg1pqLka6ZAfavCa31hHnA3zSjzzM7c3dyUj2sa22mlgoRy1phPRs9MIPd1PeDDS a5LayXKPDdor5Wk8VBq0l9bh4M+7ZrF9nmjqE4U9C6Ok01b6yNrCX6hjHHOvp6+p zdee4FLQTPpGU6jkYcoGHZj95Lz39jDNVkrSF6C4oVhfqPvmLWE8vlCAXi3ridrn ypRa7U1zipOzhMqti1hOjwmNr3Xb7/Om5vETTHEMSvsNNehFwwpsAnBhvnDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhaZnxPOkz8/R9D/WWxXk1GI50QwwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADchMnmu0p3aLrKUEp33HGjStVtICf7Vls+U 8Ow1jYAYtOrJCW/f3vg2RMaF+bBKdF0OU5pIPy1/ECURxx7fv/Z/5OOMcTiZezIF VYoFcw8FVaI1uChwV5u/FYDjvrCM277deeCpWt9IZ0nBwfkHHpeYyy0ZnnKbrfEw SkzxaLlIT1GwuQ9X8XrAFlD1GyeFNqtvmuSxOWmYyxVn2T+v8Ri256oJ74qGlRPY tW7VAWxrtT4NuApnVJ7Bd6zOX1eYOno2WFcXkT4w4BihFtmYfPpYX/D2t7xlktdM nGnnae/oAJ4rA8PMdWEKtd7gRRrEnTBNSUX+g0kxdusvjb65zSg= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:06 2025 by rpki-client