This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: +DucXTxjZRofZR6iYFU7ReK8sy7nil62mf5+tcLxNkY= Subject key identifier: 56:91:6E:0B:94:D7:9C:1E:E5:20:CA:92:F8:F3:2E:85:B8:55:11:C6 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 12822CCBAFA0F3944EBD24CAD64031EF121603AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 026D Signing time: Tue 16 Dec 2025 16:50:39 +0000 Manifest this update: Tue 16 Dec 2025 16:45:39 +0000 Manifest next update: Sat 20 Dec 2025 03:03:39 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: 2KeaqNERL6y62m6nZSuSk4NjRGC+JGpj4eqLpo10RAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:82:2c:cb:af:a0:f3:94:4e:bd:24:ca:d6:40:31:ef:12:16:03:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Dec 16 16:45:39 2025 GMT Not After : Dec 20 03:03:39 2025 GMT Subject: CN=56916E0B94D79C1EE520CA92F8F32E85B85511C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:26:07:4d:e4:1b:86:94:ae:5c:f9:0f:ed: b7:0f:cf:d1:7d:ec:b2:f7:ca:8f:13:63:c5:7b:67: c1:70:b3:6b:e1:16:e3:30:d2:77:0b:fe:07:75:31: 36:c7:02:26:04:3c:ff:08:84:db:ef:97:fa:b7:0f: f5:2c:b8:9b:02:ce:e7:a5:65:db:c4:f1:78:d6:db: 06:7c:54:31:fb:a2:00:d6:2f:69:61:a7:f9:b4:f8: 42:41:5e:86:7d:dd:25:a7:24:b8:75:90:65:46:d9: 11:08:6a:b9:d1:4c:0a:8b:72:7e:22:4d:2b:28:ec: 8d:a8:a8:6a:18:79:e1:ac:b2:54:59:2f:f3:28:29: d1:5b:f4:c5:3a:94:a8:02:b1:4c:14:a4:a1:a7:84: 80:c5:da:94:7b:bf:f3:f1:04:af:a6:2c:cd:d0:80: 2a:17:36:cf:dc:d3:16:d5:b4:c6:ee:4a:2f:ba:9f: ff:5d:a9:62:51:76:fa:7b:00:55:e1:e5:e0:97:82: d6:ff:c8:93:de:88:0b:93:3c:97:e2:97:ed:f9:90: e5:f0:0d:38:37:79:b8:e1:f0:54:f0:9e:9f:97:64: bd:c8:f2:80:a3:18:fa:bb:40:ec:2e:47:8e:42:12: 1f:17:92:d5:5c:81:bd:d8:49:9e:15:58:03:f0:4b: 97:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:91:6E:0B:94:D7:9C:1E:E5:20:CA:92:F8:F3:2E:85:B8:55:11:C6 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:67:9b:e2:d4:94:76:5f:1b:6e:32:ff:41:e1:08:51:b8:06: 1d:8c:62:8e:a5:60:41:1c:d1:5f:72:89:c1:bf:44:0d:a0:04: 27:d6:39:49:4c:88:c0:40:e2:0a:05:ee:7e:02:c6:47:f6:05: f9:c3:8f:2d:b0:80:66:36:0f:95:bb:dc:8a:f9:ac:45:ba:be: d0:02:72:ee:40:c5:d8:12:87:9a:23:f2:47:b8:ad:11:1b:1a: 80:39:af:48:2b:ee:2e:d2:80:77:3f:9e:5b:f7:0f:5e:1a:81: d1:e5:83:02:5a:e3:17:5e:0d:aa:31:b6:e8:24:05:54:d0:82: 67:93:1c:0a:e5:dd:ac:0b:35:15:2c:4f:15:bf:b3:2e:ac:2a: 4d:45:c6:c3:c1:de:86:74:c5:6b:e2:48:bf:57:93:ff:5c:4d: 48:a2:4f:69:05:78:cc:ca:c2:ca:05:40:82:f9:95:0a:61:e7: fb:3a:01:2f:72:90:0e:89:e1:46:b6:70:f3:7d:c9:00:a1:9d: d4:79:9b:86:c2:1d:ca:e6:c8:12:09:f0:66:2e:bc:b5:dc:35: 66:af:42:9a:f4:58:44:24:fe:c7:a2:08:b3:d3:93:37:19:bc: f3:76:82:f5:1e:8b:3f:a3:de:d8:5f:94:5d:24:80:b0:6e:23: 85:05:e4:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEoIsy6+g85ROvSTK1kAx7xIWA60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTEyMTYxNjQ1MzlaFw0yNTEyMjAwMzAzMzlaMDMxMTAvBgNV BAMTKDU2OTE2RTBCOTRENzlDMUVFNTIwQ0E5MkY4RjMyRTg1Qjg1NTExQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iCYHTeQbhpSuXPkP7bcPz9F9 7LL3yo8TY8V7Z8Fws2vhFuMw0ncL/gd1MTbHAiYEPP8IhNvvl/q3D/UsuJsCzuel ZdvE8XjW2wZ8VDH7ogDWL2lhp/m0+EJBXoZ93SWnJLh1kGVG2REIarnRTAqLcn4i TSso7I2oqGoYeeGsslRZL/MoKdFb9MU6lKgCsUwUpKGnhIDF2pR7v/PxBK+mLM3Q gCoXNs/c0xbVtMbuSi+6n/9dqWJRdvp7AFXh5eCXgtb/yJPeiAuTPJfil+35kOXw DTg3ebjh8FTwnp+XZL3I8oCjGPq7QOwuR45CEh8XktVcgb3YSZ4VWAPwS5cdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVpFuC5TXnB7lIMqS+PMuhbhVEcYwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBnm+LUlHZfG24y/0HhCFG4Bh2MYo6lYEEc 0V9yicG/RA2gBCfWOUlMiMBA4goF7n4Cxkf2BfnDjy2wgGY2D5W73Ir5rEW6vtAC cu5AxdgSh5oj8ke4rREbGoA5r0gr7i7SgHc/nlv3D14agdHlgwJa4xdeDaoxtugk BVTQgmeTHArl3awLNRUsTxW/sy6sKk1FxsPB3oZ0xWviSL9Xk/9cTUiiT2kFeMzK wsoFQIL5lQph5/s6AS9ykA6J4Ua2cPN9yQChndR5m4bCHcrmyBIJ8GYuvLXcNWav Qpr0WEQk/seiCLPTkzcZvPN2gvUeiz+j3thflF0kgLBuI4UF5PE= -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:31 2025 by rpki-client