This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: PJPNGL+qo0DWLpLul8NaIbdL6ORZyu12JKmZ+CEIIh0= Subject key identifier: 0C:3B:ED:54:AD:B4:EF:60:0F:12:D1:15:B4:C6:76:78:33:CF:05:1F Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 0844166604A5434FE269EE5185930345C3DA03C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 0197 Signing time: Mon 01 Dec 2025 18:12:12 +0000 Manifest this update: Mon 01 Dec 2025 18:07:12 +0000 Manifest next update: Thu 04 Dec 2025 19:50:12 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: IaJOMP5YYJEJ+bnXokC25bTDwmfBCrxRIBhFXRp5QZU=) 2: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 3: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:44:16:66:04:a5:43:4f:e2:69:ee:51:85:93:03:45:c3:da:03:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Dec 1 18:07:12 2025 GMT Not After : Dec 4 19:50:12 2025 GMT Subject: CN=0C3BED54ADB4EF600F12D115B4C6767833CF051F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:75:d2:2a:11:1a:1d:b2:f7:f0:4a:ee:23: 4c:c7:58:7d:3c:85:f5:c4:df:31:38:01:f2:01:96: c2:d1:2d:b8:b7:23:64:41:9e:96:62:9a:d7:28:05: 19:10:f9:67:6f:0e:d8:6e:07:3b:b2:78:cc:90:6f: ab:a5:da:52:3e:3b:b4:a7:8a:2e:77:b8:0e:0c:c9: 84:8a:46:1b:f5:07:9e:45:35:0a:55:f8:d1:3a:31: 7a:bf:09:fe:ae:48:9b:c8:57:de:90:ac:9d:c3:b8: 0a:73:44:c8:07:bb:1f:0c:84:70:f5:29:cb:a9:f2: 30:50:c7:20:c5:b6:e1:7f:31:af:d6:ea:a2:08:4d: 81:2e:ee:f4:4c:af:69:71:4d:ad:c1:1d:31:98:3a: f7:f2:06:07:c0:07:dc:21:35:ab:e5:4e:ac:67:34: ee:e7:4b:54:b9:f3:f3:8e:1e:f7:8c:45:02:f2:2b: 78:f3:14:27:d0:1e:a6:80:dc:84:04:71:e4:d9:46: 8e:e6:fc:a8:d5:35:3d:af:0d:47:0c:42:75:00:88: 68:2b:fb:9d:51:35:ed:0d:cb:0c:72:86:7f:85:5c: 69:86:6b:1a:53:d4:f0:37:fb:91:18:31:fd:e4:35: 4a:df:86:5a:19:dc:94:96:d6:4f:02:29:07:31:aa: 4e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:3B:ED:54:AD:B4:EF:60:0F:12:D1:15:B4:C6:76:78:33:CF:05:1F X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:8d:9a:5d:56:93:a5:08:68:a4:54:4c:a3:58:6f:68:99:cc: 9e:2f:62:3c:66:27:79:38:9a:3a:fc:e9:d1:4e:31:c3:70:48: bf:4c:48:d5:d4:44:4c:e8:34:b9:8c:ce:0f:2d:7c:ca:17:54: a6:ce:c4:d1:4d:eb:24:0e:65:5c:da:ec:00:6b:70:71:af:3b: 9d:74:8d:61:df:9c:43:1d:2d:ae:92:05:36:64:3f:38:39:2e: 40:41:0f:bf:a4:e1:4d:55:b9:5c:58:48:fe:e6:02:ea:d5:4e: 47:87:2c:5f:12:39:2c:89:89:70:67:12:3c:70:af:f8:6d:a7: ab:9d:57:20:df:ac:1d:a5:cd:b6:2c:40:a7:dd:c5:ef:68:b2: 31:15:07:93:6d:e9:bc:35:3a:3f:0e:8e:e2:5a:d1:5b:ed:25: 78:5e:27:ab:3c:17:04:18:97:c9:31:66:63:bd:a6:cf:75:a1: 9d:9d:7c:58:e8:4b:cd:6e:a6:f2:e2:59:66:e4:bd:34:c8:5a: 2f:63:cc:c7:3c:3d:d2:89:28:c0:d2:08:75:4e:1b:bc:1a:36: 4a:e9:a0:e8:dc:a8:de:fb:b2:a5:8b:8f:a2:a2:7f:76:34:00: 30:0c:ee:60:0e:04:ba:bb:a0:d3:bb:56:59:98:b8:7c:83:f8: dc:d3:6f:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEQWZgSlQ0/iae5RhZMDRcPaA8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTEyMDExODA3MTJaFw0yNTEyMDQxOTUwMTJaMDMxMTAvBgNV BAMTKDBDM0JFRDU0QURCNEVGNjAwRjEyRDExNUI0QzY3Njc4MzNDRjA1MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjRHXSKhEaHbL38EruI0zHWH08 hfXE3zE4AfIBlsLRLbi3I2RBnpZimtcoBRkQ+WdvDthuBzuyeMyQb6ul2lI+O7Sn ii53uA4MyYSKRhv1B55FNQpV+NE6MXq/Cf6uSJvIV96QrJ3DuApzRMgHux8MhHD1 Kcup8jBQxyDFtuF/Ma/W6qIITYEu7vRMr2lxTa3BHTGYOvfyBgfAB9whNavlTqxn NO7nS1S58/OOHveMRQLyK3jzFCfQHqaA3IQEceTZRo7m/KjVNT2vDUcMQnUAiGgr +51RNe0Nywxyhn+FXGmGaxpT1PA3+5EYMf3kNUrfhloZ3JSW1k8CKQcxqk59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDvtVK2072APEtEVtMZ2eDPPBR8wHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGNml1Wk6UIaKRUTKNYb2iZzJ4vYjxmJ3k4 mjr86dFOMcNwSL9MSNXUREzoNLmMzg8tfMoXVKbOxNFN6yQOZVza7ABrcHGvO510 jWHfnEMdLa6SBTZkPzg5LkBBD7+k4U1VuVxYSP7mAurVTkeHLF8SOSyJiXBnEjxw r/htp6udVyDfrB2lzbYsQKfdxe9osjEVB5Nt6bw1Oj8OjuJa0VvtJXheJ6s8FwQY l8kxZmO9ps91oZ2dfFjoS81upvLiWWbkvTTIWi9jzMc8PdKJKMDSCHVOG7waNkrp oOjcqN77sqWLj6Kif3Y0ADAM7mAOBLq7oNO7VlmYuHyD+NzTb9Y= -----END CERTIFICATE-----Generated at Wed Dec 3 15:31:01 2025 by rpki-client