This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: EeE2v3GvWzIYWP+K+Th+729bZGN7PPi1t+9YPz+jwr4= Subject key identifier: A7:A2:36:D9:A8:4C:23:86:BE:5D:78:62:58:79:F0:39:8D:8F:49:2A Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 6CF9327F332B7C2EF5FC57D8FC31F449C52C8B42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03C3 Signing time: Fri 23 Jan 2026 09:01:23 +0000 Manifest this update: Fri 23 Jan 2026 08:56:23 +0000 Manifest next update: Mon 26 Jan 2026 12:15:23 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: fLk2DcKHqsgkEjtR/YyQnOzycJeYVG9hScmQBVveg6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 12:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f9:32:7f:33:2b:7c:2e:f5:fc:57:d8:fc:31:f4:49:c5:2c:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Jan 23 08:56:23 2026 GMT Not After : Jan 26 12:15:23 2026 GMT Subject: CN=A7A236D9A84C2386BE5D78625879F0398D8F492A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7d:bd:53:1e:54:ed:4e:b0:69:61:81:65:c6: c3:b3:8c:81:58:0b:4a:9d:6e:ac:5d:73:8d:9e:72: 01:5f:71:ce:cc:38:6d:a6:75:3b:3f:53:17:11:02: 7e:44:4d:3b:49:4b:f3:68:25:99:96:b8:ba:8a:ab: 3a:77:d4:d5:6a:70:d4:29:50:b2:08:57:4d:5d:09: fd:13:b4:c3:85:a5:02:f3:e1:6a:01:a4:53:1b:76: c6:85:57:07:3d:e8:05:84:18:af:a2:b4:44:6c:9a: be:73:5f:3d:31:05:ad:67:09:1e:9f:99:69:80:56: 53:14:78:8e:82:e3:57:07:a3:dc:32:96:d6:a2:c1: c5:b3:46:66:04:c1:40:9c:07:52:d8:9b:a3:32:cd: 1c:91:9a:68:97:bc:7e:1b:2b:b8:2c:a2:f8:b4:d0: 12:e3:84:55:b2:0a:dd:11:6f:3b:0f:84:9c:33:84: a5:9c:a5:9f:6f:0a:7c:a2:82:4f:a9:70:9d:6d:86: fb:a2:a6:fa:b0:41:5f:ab:69:d7:d8:b1:fe:36:80: be:f4:ca:71:27:be:16:cb:23:1f:2e:dc:c1:ab:d8: 90:8a:4a:5e:4a:12:07:02:0f:72:59:7d:b3:b0:e3: 73:09:04:9e:2a:b1:d1:b6:31:95:6e:b6:23:a9:b6: 21:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A2:36:D9:A8:4C:23:86:BE:5D:78:62:58:79:F0:39:8D:8F:49:2A X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e5:43:e9:fb:29:c9:a3:f6:c6:70:16:4b:75:48:c3:39:8a: b7:3e:00:d5:14:4c:25:9c:ca:84:c4:40:03:90:bc:86:f3:70: 19:41:8f:9d:09:81:c8:af:97:80:22:d4:35:b6:1d:89:be:f2: ee:0a:5a:e8:41:e3:49:03:7e:fe:17:9a:ba:19:e4:3a:b5:fd: bf:92:42:f0:c4:98:9c:f1:92:4e:47:ea:6e:16:8a:12:5f:fb: 6e:50:65:0d:84:3c:38:17:43:e4:7d:4d:e0:b4:82:65:0c:c9: 23:61:3f:65:32:10:85:62:86:7e:83:09:26:0a:82:9b:97:5c: bb:fc:3a:3f:df:0f:f6:97:51:8d:a0:43:e3:e9:05:88:c5:7e: 31:f6:51:65:f6:e9:40:29:f5:88:af:93:f7:2e:ad:c4:38:f5: c0:96:dc:83:da:ef:f1:6d:cc:5d:e3:89:f1:2b:c8:1e:e1:8c: ca:3e:ed:0b:1d:2c:57:7f:77:96:0f:3c:23:8d:89:e1:9c:0d: 7b:e3:4d:4e:71:eb:1f:bd:3b:15:f4:63:1b:8c:ce:1b:b9:15: bf:60:87:4c:a0:82:4c:d5:44:2a:6c:5a:9b:50:b3:cf:93:99: f2:7a:48:0b:8b:40:01:16:fb:b5:e8:82:94:bf:d9:9c:6f:be: 51:50:53:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbPkyfzMrfC71/FfY/DH0ScUsi0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNjAxMjMwODU2MjNaFw0yNjAxMjYxMjE1MjNaMDMxMTAvBgNV BAMTKEE3QTIzNkQ5QTg0QzIzODZCRTVENzg2MjU4NzlGMDM5OEQ4RjQ5MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfb1THlTtTrBpYYFlxsOzjIFY C0qdbqxdc42ecgFfcc7MOG2mdTs/UxcRAn5ETTtJS/NoJZmWuLqKqzp31NVqcNQp ULIIV01dCf0TtMOFpQLz4WoBpFMbdsaFVwc96AWEGK+itERsmr5zXz0xBa1nCR6f mWmAVlMUeI6C41cHo9wyltaiwcWzRmYEwUCcB1LYm6MyzRyRmmiXvH4bK7gsovi0 0BLjhFWyCt0RbzsPhJwzhKWcpZ9vCnyigk+pcJ1thvuipvqwQV+radfYsf42gL70 ynEnvhbLIx8u3MGr2JCKSl5KEgcCD3JZfbOw43MJBJ4qsdG2MZVutiOptiElAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6I22ahMI4a+XXhiWHnwOY2PSSowHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLlQ+n7Kcmj9sZwFkt1SMM5irc+ANUUTCWc yoTEQAOQvIbzcBlBj50Jgcivl4Ai1DW2HYm+8u4KWuhB40kDfv4XmroZ5Dq1/b+S QvDEmJzxkk5H6m4WihJf+25QZQ2EPDgXQ+R9TeC0gmUMySNhP2UyEIVihn6DCSYK gpuXXLv8Oj/fD/aXUY2gQ+PpBYjFfjH2UWX26UAp9Yivk/curcQ49cCW3IPa7/Ft zF3jifEryB7hjMo+7QsdLFd/d5YPPCONieGcDXvjTU5x6x+9OxX0YxuMzhu5Fb9g h0yggkzVRCpsWptQs8+TmfJ6SAuLQAEW+7XogpS/2ZxvvlFQU2I= -----END CERTIFICATE-----Generated at Sun Jan 25 11:31:48 2026 by rpki-client