This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: Gaet6ap13F+A6XaUXshpw2o6XtIqMCfTPvJ0SPFj+Kw= Subject key identifier: 04:8E:4A:31:B2:AF:01:1C:89:4A:2E:18:9D:A5:9B:D8:A6:AD:C2:A1 Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 03FDABB338BE4C7981F422B835C0944E28B7066C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01D1 Signing time: Thu 04 Dec 2025 23:41:23 +0000 Manifest this update: Thu 04 Dec 2025 23:36:23 +0000 Manifest next update: Mon 08 Dec 2025 01:09:23 +0000 Files and hashes: 1: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: 1u3Z1lk6zXunvZlCpm0Bd5q9QPJyu+B5fC/Cft7A8RQ=) 2: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: x8NZlNlUyvGMlN8hhsJWtoHxl7LoXb2c6+KaZM2DY1Y=) 3: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: TlXJY/lychyAWlXh1xVK5QhH4HsgK9/rInRQ7Z3cjQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:fd:ab:b3:38:be:4c:79:81:f4:22:b8:35:c0:94:4e:28:b7:06:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Dec 4 23:36:23 2025 GMT Not After : Dec 8 01:09:23 2025 GMT Subject: CN=048E4A31B2AF011C894A2E189DA59BD8A6ADC2A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:3e:5d:85:55:78:aa:1b:3b:4f:e0:25:84: 72:c9:7e:b4:eb:bd:f5:91:18:4f:f4:73:57:37:5e: ae:69:ee:75:90:03:df:d2:82:69:a4:bd:c9:86:5a: 19:76:01:3f:51:2c:66:4b:1e:04:16:9c:be:7e:7b: a0:ae:03:c6:89:63:71:d9:35:06:6f:55:35:60:9c: 0b:b8:62:3e:10:35:22:66:9d:41:96:97:db:33:e2: 97:6b:30:40:03:f9:65:27:78:78:16:5f:4c:92:1a: 8a:aa:60:84:33:97:b5:45:75:96:8b:9c:b1:58:5e: 4e:44:2b:60:63:92:be:91:88:c4:a4:21:16:92:bd: 9d:6f:77:be:d2:cc:ff:73:fb:c2:66:da:0f:f8:87: 58:62:f1:9d:2f:65:8f:16:76:db:df:22:e6:6d:0e: 66:8e:f1:20:65:ed:98:ca:99:34:23:1a:ce:a4:7b: 3a:09:4d:4d:91:3f:73:90:3f:94:33:34:97:fe:a8: 41:62:2c:94:19:02:48:e5:fb:51:c1:6f:ad:d2:a9: cc:df:f1:74:13:74:3b:3e:d0:35:dc:37:ad:6b:cf: 14:51:03:b9:3f:c9:67:13:c1:80:c8:0a:48:18:9d: d2:13:03:ed:54:cc:6c:f8:cc:39:70:01:c4:4e:15: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8E:4A:31:B2:AF:01:1C:89:4A:2E:18:9D:A5:9B:D8:A6:AD:C2:A1 X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:61:eb:80:1e:fa:95:d4:9d:5d:2a:9e:50:d9:27:d8:7d:cc: ac:1a:8d:41:14:90:03:5d:0c:42:84:6c:2e:ce:3a:35:2a:4b: 04:41:08:91:d4:8b:96:ee:1d:12:64:34:f1:42:48:17:c7:10: e1:40:9d:9f:4d:73:33:0a:a5:4e:b4:ac:f1:e8:47:2d:95:c4: fd:29:48:ac:ee:db:a2:bc:77:b8:24:3b:3b:7a:f7:bd:ae:7b: c3:18:07:11:b3:32:c2:af:f4:72:c7:4a:6d:1b:71:a3:46:0c: af:92:e0:1a:8f:cf:6f:f5:d9:1c:b3:83:06:da:88:77:cd:75: 15:58:af:9b:36:1b:3a:27:a4:3c:ac:99:8e:40:25:2e:e7:ff: 44:0e:89:15:d4:06:91:c4:7d:8d:4b:06:85:b6:11:73:49:a2: 47:39:cc:66:f9:02:ea:1f:67:9c:66:e7:7a:7e:81:c2:0f:44: 43:d0:dc:24:17:5b:c9:3b:7e:e0:61:1d:b1:69:e6:4d:ae:ef: 6d:7c:ce:36:3f:46:42:eb:19:27:2f:0d:b3:fe:c4:6a:b8:85: e0:23:7b:e1:be:93:fe:b3:64:30:9b:0d:f9:95:59:92:c7:6b: f0:31:b4:a0:0c:ea:54:11:73:3d:a9:26:82:a0:44:cb:24:9e: 9d:df:8e:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA/2rszi+THmB9CK4NcCUTii3BmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTEyMDQyMzM2MjNaFw0yNTEyMDgwMTA5MjNaMDMxMTAvBgNV BAMTKDA0OEU0QTMxQjJBRjAxMUM4OTRBMkUxODlEQTU5QkQ4QTZBREMyQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wj5dhVV4qhs7T+AlhHLJfrTr vfWRGE/0c1c3Xq5p7nWQA9/SgmmkvcmGWhl2AT9RLGZLHgQWnL5+e6CuA8aJY3HZ NQZvVTVgnAu4Yj4QNSJmnUGWl9sz4pdrMEAD+WUneHgWX0ySGoqqYIQzl7VFdZaL nLFYXk5EK2Bjkr6RiMSkIRaSvZ1vd77SzP9z+8Jm2g/4h1hi8Z0vZY8WdtvfIuZt DmaO8SBl7ZjKmTQjGs6kezoJTU2RP3OQP5QzNJf+qEFiLJQZAkjl+1HBb63Sqczf 8XQTdDs+0DXcN61rzxRRA7k/yWcTwYDICkgYndITA+1UzGz4zDlwAcROFYvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBI5KMbKvARyJSi4YnaWb2KatwqEwHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5h64Ae+pXUnV0qnlDZJ9h9zKwajUEUkANd DEKEbC7OOjUqSwRBCJHUi5buHRJkNPFCSBfHEOFAnZ9NczMKpU60rPHoRy2VxP0p SKzu26K8d7gkOzt6972ue8MYBxGzMsKv9HLHSm0bcaNGDK+S4BqPz2/12Ryzgwba iHfNdRVYr5s2GzonpDysmY5AJS7n/0QOiRXUBpHEfY1LBoW2EXNJokc5zGb5Auof Z5xm53p+gcIPREPQ3CQXW8k7fuBhHbFp5k2u7218zjY/RkLrGScvDbP+xGq4heAj e+G+k/6zZDCbDfmVWZLHa/AxtKAM6lQRcz2pJoKgRMsknp3fjnU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:16 2025 by rpki-client