This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: K2Ojf21JpdMtVpMYobTlp0oqbLe1HS/pJa8TBh/bjvY= Subject key identifier: 79:51:E4:CA:0F:4A:14:A1:3C:CC:CB:A7:BC:CA:31:DD:6E:09:12:9E Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 45BB33F4A46380076EE2B1439832D3A96466B533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 0206 Signing time: Mon 15 Dec 2025 09:41:48 +0000 Manifest this update: Mon 15 Dec 2025 09:36:48 +0000 Manifest next update: Thu 18 Dec 2025 19:10:48 +0000 Files and hashes: 1: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: njilGAmUeewVSWIe9GDvIucHip4egQ40hyYnFUPOZtw=) 2: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 4: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 19:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:bb:33:f4:a4:63:80:07:6e:e2:b1:43:98:32:d3:a9:64:66:b5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Dec 15 09:36:48 2025 GMT Not After : Dec 18 19:10:48 2025 GMT Subject: CN=7951E4CA0F4A14A13CCCCBA7BCCA31DD6E09129E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2e:6a:df:98:8d:af:97:9a:62:8f:31:8c:73: d2:19:07:d3:6d:ab:9b:76:0d:1e:67:34:2f:e6:70: 11:75:c8:34:db:a4:13:e8:c3:28:e8:57:ee:2b:5a: 73:8f:7b:11:8d:98:22:fb:48:39:25:4c:b1:11:8b: 6b:10:2b:13:82:d3:a9:2a:29:4d:8a:f7:0a:90:56: 8f:18:e8:1e:84:c5:6c:d9:b9:a6:7a:b0:0b:37:cd: ee:b9:dd:c8:2f:76:be:82:30:fc:1e:b0:41:3d:df: 67:15:fe:8e:e8:b0:58:92:f4:4a:a7:2f:88:b5:f3: 4e:87:82:ca:fa:ee:92:16:19:64:4f:e1:1d:1e:f8: d9:a2:95:0e:cb:3b:69:a5:6e:39:9b:24:99:b4:72: b3:a8:d2:37:99:78:08:a9:3f:4d:7c:52:1e:08:e8: ed:3e:46:27:64:f3:f1:8f:39:40:6a:97:1e:01:13: aa:8f:4c:da:dc:e1:11:26:8b:43:58:31:81:ab:ce: 2e:82:51:b5:a6:89:b6:f9:a2:5c:41:c3:7c:e2:26: 52:61:9c:62:46:ce:55:52:02:92:10:7b:4f:87:71: a0:83:9c:26:b7:32:ee:fb:66:35:87:50:83:67:ca: e3:0e:df:c0:19:c3:04:cb:80:3e:88:bf:5f:3d:29: 0e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:51:E4:CA:0F:4A:14:A1:3C:CC:CB:A7:BC:CA:31:DD:6E:09:12:9E X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:83:e5:5b:10:ac:3f:b3:dd:24:93:9c:d8:48:da:4b:05:97: b7:a4:77:d1:6d:b0:57:9f:31:94:29:40:1f:b9:13:75:9a:b7: 77:cb:2b:e2:5a:e1:79:b3:a6:bb:4e:c3:e9:5c:db:9c:83:b0: 3a:62:59:b3:da:f0:82:7e:53:d4:94:53:6a:7c:e2:98:76:39: 49:42:8e:46:57:bf:ec:4a:2d:53:1a:b1:55:71:8c:91:a6:f6: 3c:94:ed:d0:dd:a3:ed:02:25:57:a8:94:f2:fe:e0:e2:ef:52: e1:8b:94:0e:22:b4:c4:1a:ea:e0:df:08:85:29:87:13:4f:71: 17:58:11:b4:d6:60:80:76:8c:10:d8:36:cb:91:3d:f8:37:ee: b3:18:d1:b4:4b:a2:41:7d:cd:5e:1e:59:00:f9:e6:55:1f:cd: 15:43:cf:4d:40:79:21:31:9e:a9:b9:76:0f:fd:0d:99:1d:cb: 7f:56:0a:cd:cd:3e:82:0a:38:89:fd:27:83:25:41:ca:f1:ca: e5:fc:fc:04:b6:ab:59:39:73:38:47:c1:e7:69:e1:e5:39:a5: a6:1d:df:c4:1e:6c:28:d4:75:53:28:67:f2:d9:a6:10:f2:b4: 88:74:a7:eb:35:9c:56:a8:81:3c:e4:40:de:17:cf:63:d4:b6: 7b:24:2e:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbsz9KRjgAdu4rFDmDLTqWRmtTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTEyMTUwOTM2NDhaFw0yNTEyMTgxOTEwNDhaMDMxMTAvBgNV BAMTKDc5NTFFNENBMEY0QTE0QTEzQ0NDQ0JBN0JDQ0EzMURENkUwOTEyOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLmrfmI2vl5pijzGMc9IZB9Nt q5t2DR5nNC/mcBF1yDTbpBPowyjoV+4rWnOPexGNmCL7SDklTLERi2sQKxOC06kq KU2K9wqQVo8Y6B6ExWzZuaZ6sAs3ze653cgvdr6CMPwesEE932cV/o7osFiS9Eqn L4i1806Hgsr67pIWGWRP4R0e+NmilQ7LO2mlbjmbJJm0crOo0jeZeAipP018Uh4I 6O0+Ridk8/GPOUBqlx4BE6qPTNrc4REmi0NYMYGrzi6CUbWmibb5olxBw3ziJlJh nGJGzlVSApIQe0+HcaCDnCa3Mu77ZjWHUINnyuMO38AZwwTLgD6Iv189KQ59AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVHkyg9KFKE8zMunvMox3W4JEp4wHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGD5VsQrD+z3SSTnNhI2ksFl7ekd9FtsFef MZQpQB+5E3Wat3fLK+Ja4XmzprtOw+lc25yDsDpiWbPa8IJ+U9SUU2p84ph2OUlC jkZXv+xKLVMasVVxjJGm9jyU7dDdo+0CJVeolPL+4OLvUuGLlA4itMQa6uDfCIUp hxNPcRdYEbTWYIB2jBDYNsuRPfg37rMY0bRLokF9zV4eWQD55lUfzRVDz01AeSEx nqm5dg/9DZkdy39WCs3NPoIKOIn9J4MlQcrxyuX8/AS2q1k5czhHwedp4eU5paYd 38QebCjUdVMoZ/LZphDytIh0p+s1nFaogTzkQN4Xz2PUtnskLvc= -----END CERTIFICATE-----Generated at Mon Dec 15 22:10:53 2025 by rpki-client