This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: EtzH10MrMSIS5MeNyKOpyURgPp4LUIPyAnG/IXN5mxY= Subject key identifier: FF:0A:B4:3B:21:EF:B4:23:A9:CE:86:32:1C:15:77:CC:6B:33:D5:4A Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 31E56E623AD81987264ACCBA75267740201850AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03AD Signing time: Fri 05 Dec 2025 06:21:23 +0000 Manifest this update: Fri 05 Dec 2025 06:16:23 +0000 Manifest next update: Mon 08 Dec 2025 15:05:23 +0000 Files and hashes: 1: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: WcV4qz5baV5EW4NMRkc96DUA+0zwRDUtkHr7DFWNJqc=) 2: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e5:6e:62:3a:d8:19:87:26:4a:cc:ba:75:26:77:40:20:18:50:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Dec 5 06:16:23 2025 GMT Not After : Dec 8 15:05:23 2025 GMT Subject: CN=FF0AB43B21EFB423A9CE86321C1577CC6B33D54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:37:89:a2:8f:4d:aa:a0:c5:8a:69:d7:0a:ee: e1:8b:34:c9:a8:88:e9:f5:ce:38:e3:f8:14:11:d1: 3c:9d:1b:f0:0c:f7:23:58:e5:90:7a:61:e8:9e:1d: 85:fe:59:df:79:8b:8a:1d:13:5a:1d:c3:c4:ab:75: 59:b7:2e:2b:bd:3e:b6:b0:1c:73:74:bc:2c:e6:44: fb:f9:14:2a:79:f7:81:dd:f8:16:d1:c0:2b:15:bd: 0f:70:76:ea:6e:a3:68:f7:a2:77:bf:c8:d6:2c:0b: 2d:7e:8e:c1:db:87:a5:f3:71:10:fc:21:67:2d:59: 01:f0:c5:9d:bc:9a:4f:38:c4:be:47:bb:13:f4:00: 91:7e:5d:93:e7:71:78:a6:89:2e:05:1c:b5:cb:06: 80:58:ea:5b:4e:fa:5c:7d:1d:f3:b3:21:16:83:5e: 2d:10:ad:e9:38:7e:22:44:3a:f1:0c:0e:82:c5:49: 90:5d:15:15:b9:f3:b0:6f:93:24:f5:f4:1e:ff:a2: 81:0f:59:1f:39:dd:26:2f:c3:11:ea:67:0e:5b:b8: 0f:b9:b0:fe:5b:6f:af:0a:67:54:4e:7e:3f:c4:27: 1f:17:1c:bf:4c:da:8e:8f:31:cb:27:ce:38:0e:9e: a1:e2:a4:1d:f7:44:01:63:3b:ae:c9:3e:6e:f1:27: 95:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:B4:3B:21:EF:B4:23:A9:CE:86:32:1C:15:77:CC:6B:33:D5:4A X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:1b:fb:e3:34:20:8d:cb:7d:2c:22:ac:46:b9:4b:8c:64:94: 16:49:d4:f1:4e:37:8d:6c:8a:87:20:11:96:25:80:1a:c1:e1: 58:7f:16:f4:4c:5b:75:fc:de:b2:c9:0c:91:2b:b7:4a:7d:9e: dd:51:17:47:9d:62:78:66:2f:46:e9:32:d8:6d:cb:71:7a:07: 8c:4f:c7:e2:04:35:93:a7:a2:0b:95:ad:4b:71:de:c9:09:0f: de:b0:3d:85:b6:3b:a2:b8:08:a2:49:c5:de:5f:ba:cc:5b:e4: bf:5d:9c:39:bb:28:0b:99:30:46:c5:e2:e8:90:00:ea:0c:05: ca:a0:6a:f4:9a:8c:8d:9d:1e:df:f7:4e:0d:79:31:b9:62:44: 41:21:93:16:4a:16:5c:4a:07:f4:c4:54:7d:27:f9:f2:7a:f4: 1f:cf:a0:8e:4c:7b:17:b4:23:ec:77:11:d0:f3:2f:99:b1:3e: 20:1e:73:cb:c2:ab:9a:ae:6c:e5:2d:2b:00:32:fb:30:5e:c7: 32:bb:5e:01:95:17:20:02:03:8d:90:5b:c2:78:0c:2a:12:67: fc:17:be:9f:fa:c8:3d:c2:9a:80:e2:f8:02:83:98:04:df:cb: 2a:f8:d2:2a:fa:97:88:7e:2d:d0:d3:3f:b5:56:13:04:0e:95: 46:37:4a:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeVuYjrYGYcmSsy6dSZ3QCAYUK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTEyMDUwNjE2MjNaFw0yNTEyMDgxNTA1MjNaMDMxMTAvBgNV BAMTKEZGMEFCNDNCMjFFRkI0MjNBOUNFODYzMjFDMTU3N0NDNkIzM0Q1NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLN4mij02qoMWKadcK7uGLNMmo iOn1zjjj+BQR0TydG/AM9yNY5ZB6YeieHYX+Wd95i4odE1odw8SrdVm3Liu9Praw HHN0vCzmRPv5FCp594Hd+BbRwCsVvQ9wdupuo2j3one/yNYsCy1+jsHbh6XzcRD8 IWctWQHwxZ28mk84xL5HuxP0AJF+XZPncXimiS4FHLXLBoBY6ltO+lx9HfOzIRaD Xi0Qrek4fiJEOvEMDoLFSZBdFRW587BvkyT19B7/ooEPWR853SYvwxHqZw5buA+5 sP5bb68KZ1ROfj/EJx8XHL9M2o6PMcsnzjgOnqHipB33RAFjO67JPm7xJ5X1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/wq0OyHvtCOpzoYyHBV3zGsz1UowHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANwb++M0II3LfSwirEa5S4xklBZJ1PFON41s iocgEZYlgBrB4Vh/FvRMW3X83rLJDJErt0p9nt1RF0edYnhmL0bpMthty3F6B4xP x+IENZOnoguVrUtx3skJD96wPYW2O6K4CKJJxd5fusxb5L9dnDm7KAuZMEbF4uiQ AOoMBcqgavSajI2dHt/3Tg15MbliREEhkxZKFlxKB/TEVH0n+fJ69B/PoI5Mexe0 I+x3EdDzL5mxPiAec8vCq5qubOUtKwAy+zBexzK7XgGVFyACA42QW8J4DCoSZ/wX vp/6yD3CmoDi+AKDmATfyyr40ir6l4h+LdDTP7VWEwQOlUY3Sp8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:44 2025 by rpki-client