This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft File: AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft (raw, json) Hash identifier: x5NaeXjSG5fkhxSKWxL2jITejie4PoYvsYli4R8g5KQ= Subject key identifier: 81:0A:93:9C:F2:9A:BA:47:47:34:13:57:72:0A:3A:2C:04:05:F7:5E Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF Certificate issuer: /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Certificate serial: 08050C3DD20F8649DEF36B8D8D61D75DFC1650F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft Manifest number: D8 Signing time: Mon 19 Jan 2026 22:41:38 +0000 Manifest this update: Mon 19 Jan 2026 22:36:38 +0000 Manifest next update: Fri 23 Jan 2026 05:08:38 +0000 Files and hashes: 1: AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl (hash: pdDrqZS5xebpXtQDvkifKvn0m5DOShI7GDdu/fhFYuc=) 2: 3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (hash: KBNbxQjOLfhYwGB4Wp4pMpbXxYHR8QezEvyeUuNBjy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 05:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:05:0c:3d:d2:0f:86:49:de:f3:6b:8d:8d:61:d7:5d:fc:16:50:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF Validity Not Before: Jan 19 22:36:38 2026 GMT Not After : Jan 23 05:08:38 2026 GMT Subject: CN=810A939CF29ABA4747341357720A3A2C0405F75E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:52:fa:cc:4e:75:47:83:00:f3:ed:67:d1: bf:97:73:2e:81:92:35:41:fd:ed:8a:67:39:5d:55: d2:82:15:15:4f:09:4b:16:78:15:00:35:3c:32:43: 62:8a:7a:73:0b:68:1d:d8:ba:be:63:6c:30:9a:8a: 99:c9:89:91:1c:d4:1f:9e:1f:0b:25:3b:9a:e1:d9: 6c:bb:a6:b3:56:e3:d9:b8:b7:2d:47:85:a4:6d:a4: 2c:24:f7:67:9d:eb:10:e9:7e:95:94:8b:a6:d6:d2: 07:76:03:4e:44:53:0d:a4:85:5c:56:32:45:1d:93: 1f:50:d4:ba:0b:a3:f2:60:9c:a8:a7:42:2b:62:f9: 99:0d:40:ab:80:44:b8:a2:58:a8:bd:63:7b:6d:f4: 73:ed:59:81:c9:fb:4a:8b:bf:f9:d4:b6:16:3c:d1: 29:27:28:0f:c6:b4:c0:9e:4f:b5:22:7e:8b:81:04: 9a:ae:9a:9d:6c:bb:96:ff:6b:fb:50:14:94:fc:76: fd:03:3b:b8:ca:ea:34:aa:14:d5:9f:e5:05:c0:16: ff:98:21:43:62:02:a4:e5:ff:be:15:7e:fb:75:83: e5:f2:53:bd:0a:43:32:a7:c3:1f:1d:2a:20:b0:88: 29:a8:5d:ae:2a:69:c6:04:b9:9f:1d:11:0d:6c:c8: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0A:93:9C:F2:9A:BA:47:47:34:13:57:72:0A:3A:2C:04:05:F7:5E X509v3 Authority Key Identifier: keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:02:02:93:77:f3:64:97:b0:1a:b2:6a:db:c0:15:1f:76:f6: a9:27:19:4d:22:18:f6:e8:23:23:1c:fe:66:c5:4c:80:54:5a: 6a:10:f3:6b:52:2d:ee:a1:9e:5d:7a:67:8f:6d:76:d2:df:e5: 9d:bc:31:98:7b:9e:e0:27:bf:b8:16:42:62:9f:e3:7b:76:4e: ad:49:4c:e0:cb:4a:76:ea:c7:ba:68:0e:9a:6a:36:3b:ac:7d: b8:2f:bc:0a:b1:55:03:69:64:8f:87:bd:f4:09:c3:51:00:a2: 3b:1f:bd:10:25:01:83:9e:87:b2:d5:78:18:3e:5e:4a:be:91: 07:b5:bf:d6:e4:dc:6d:6d:6a:23:f8:d0:5d:b6:42:a5:1b:7d: 94:72:fe:4d:4c:37:60:df:c9:fd:67:51:cd:53:ad:c8:64:eb: 3d:1c:8c:e7:42:28:af:d9:b5:4c:70:c7:0c:b3:97:4c:00:01: db:27:ba:ac:57:ac:6e:b5:7c:8f:5e:c1:3f:a6:1f:62:ac:b2: 76:18:28:29:fa:44:04:57:ed:3c:e2:81:9e:73:d5:a9:a5:6c: fd:92:c7:46:51:d8:9a:d5:5c:8e:d3:f8:c0:3b:61:1c:e3:2c: 9e:46:84:bc:77:5a:00:1c:06:dd:35:66:7f:85:15:44:7c:69: 12:59:6c:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAUMPdIPhkne82uNjWHXXfwWUPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0 NUI5ODFFRjAeFw0yNjAxMTkyMjM2MzhaFw0yNjAxMjMwNTA4MzhaMDMxMTAvBgNV BAMTKDgxMEE5MzlDRjI5QUJBNDc0NzM0MTM1NzcyMEEzQTJDMDQwNUY3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/elL6zE51R4MA8+1n0b+Xcy6B kjVB/e2KZzldVdKCFRVPCUsWeBUANTwyQ2KKenMLaB3Yur5jbDCaipnJiZEc1B+e HwslO5rh2Wy7prNW49m4ty1HhaRtpCwk92ed6xDpfpWUi6bW0gd2A05EUw2khVxW MkUdkx9Q1LoLo/JgnKinQiti+ZkNQKuARLiiWKi9Y3tt9HPtWYHJ+0qLv/nUthY8 0SknKA/GtMCeT7UifouBBJqump1su5b/a/tQFJT8dv0DO7jK6jSqFNWf5QXAFv+Y IUNiAqTl/74Vfvt1g+XyU70KQzKnwx8dKiCwiCmoXa4qacYEuZ8dEQ1syGTTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgQqTnPKaukdHNBNXcgo6LAQF914wHwYDVR0j BBgwFoAUrtjLM+eJ3TQhgrjdbRbZWkW5ge8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWIwN2E5ZS02MmRmLTQ4MDgtOWQyYS1hNmU2ODg0YmNiYmIvMC9BRUQ4Q0IzM0U3 ODlERDM0MjE4MkI4REQ2RDE2RDk1QTQ1Qjk4MUVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5NUE0NUI5 ODFFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTliMDdhOWUtNjJkZi00ODA4LTlk MmEtYTZlNjg4NGJjYmJiLzAvQUVEOENCMzNFNzg5REQzNDIxODJCOERENkQxNkQ5 NUE0NUI5ODFFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMCApN382SXsBqyatvAFR929qknGU0iGPbo IyMc/mbFTIBUWmoQ82tSLe6hnl16Z49tdtLf5Z28MZh7nuAnv7gWQmKf43t2Tq1J TODLSnbqx7poDppqNjusfbgvvAqxVQNpZI+HvfQJw1EAojsfvRAlAYOeh7LVeBg+ Xkq+kQe1v9bk3G1taiP40F22QqUbfZRy/k1MN2Dfyf1nUc1Trchk6z0cjOdCKK/Z tUxwxwyzl0wAAdsnuqxXrG61fI9ewT+mH2KssnYYKCn6RARX7TzigZ5z1amlbP2S x0ZR2JrVXI7T+MA7YRzjLJ5GhLx3WgAcBt01Zn+FFUR8aRJZbHY= -----END CERTIFICATE-----Generated at Wed Jan 21 12:03:30 2026 by rpki-client