This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: FkZdqpvF9INtoMnUiOLQ1Vr7PsOngsUzn+s+aq/xr98= Subject key identifier: EC:66:38:6C:DA:E2:83:D8:C2:B7:B4:91:FA:65:06:BA:4D:9E:44:EF Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 2C7006803D95BA509EBC6B6C3C224418069AFD48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01A4 Signing time: Wed 17 Dec 2025 20:51:42 +0000 Manifest this update: Wed 17 Dec 2025 20:46:42 +0000 Manifest next update: Sun 21 Dec 2025 06:58:42 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: /G9TnAlM3BYZgWMrb2by0BjI78+1ESBYcAwZuCkz0Cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:70:06:80:3d:95:ba:50:9e:bc:6b:6c:3c:22:44:18:06:9a:fd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Dec 17 20:46:42 2025 GMT Not After : Dec 21 06:58:42 2025 GMT Subject: CN=EC66386CDAE283D8C2B7B491FA6506BA4D9E44EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:12:6b:62:e8:4a:33:1c:50:6d:79:d8:5e:7d: d8:41:fc:ee:06:6d:49:2a:1c:8d:39:2d:97:8c:64: 28:c4:e1:35:d3:0d:fa:a9:ab:4c:14:ba:c0:15:1c: a1:51:8c:09:f9:93:37:35:bb:78:97:6d:0f:38:6d: 1b:f4:37:a0:78:26:39:2d:77:a7:bd:da:9c:dd:e7: dd:26:e0:4d:52:46:a7:82:78:c0:82:f9:ce:7e:ad: a5:07:0b:69:83:cd:06:64:1d:4e:07:ec:af:59:09: 22:d5:d8:1a:0d:3d:8f:df:ed:d8:f8:40:82:58:3f: 42:86:43:ee:90:62:3d:4c:ed:ef:db:14:bf:9b:2b: 34:5d:ec:56:dd:ab:fc:f8:60:70:a5:6c:49:3d:89: 38:f5:1d:7c:4a:23:41:c9:f2:2d:64:cb:0b:0a:5d: 00:f7:aa:c9:e8:2e:6f:85:86:5f:f2:67:53:40:13: 14:73:33:0b:42:af:02:aa:09:4e:18:9e:34:ff:9d: ea:6c:19:f6:ec:c4:e9:19:ef:f0:ae:d0:4b:ea:0a: 68:0f:c3:79:2b:35:58:1e:0e:f3:29:8a:ba:14:0a: 30:71:f4:7f:1b:95:86:5d:df:15:0e:d1:24:78:fa: a1:94:1f:6a:45:99:ab:f7:b4:82:ed:d2:ba:bb:89: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:66:38:6C:DA:E2:83:D8:C2:B7:B4:91:FA:65:06:BA:4D:9E:44:EF X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5f:19:f4:30:57:d0:d4:76:90:08:bd:ae:a9:77:cc:30:a5: 4f:7b:d9:d5:54:1f:a0:31:ef:4f:bc:75:59:15:95:dc:bb:33: e4:6f:8a:f3:92:3f:d6:44:4e:05:e8:85:73:84:b7:fe:8c:96: 7f:fe:4e:2d:a3:88:f3:0c:21:31:68:62:db:d9:1f:b4:fc:e9: f0:69:9b:f1:36:f6:85:be:7b:33:34:97:30:54:f1:04:02:43: 37:0e:c5:97:8c:53:8d:f8:8f:54:40:75:77:53:b9:d0:fa:3a: af:9f:df:5b:af:c6:3e:1d:1f:35:3e:e0:f9:e3:ee:0d:e0:83: 37:f8:f3:85:39:db:4d:0f:2b:2c:45:06:c1:c7:2a:52:9b:aa: 55:29:c0:68:2b:8f:36:62:2c:e9:2d:8f:81:47:46:57:42:56: 3c:97:e6:a5:d3:6e:60:1d:85:ba:76:a8:e4:eb:19:d6:5a:7d: 62:b6:80:28:29:e4:98:8b:dd:d9:ea:0b:e9:07:05:1e:64:c7: 18:08:50:c6:d9:25:04:60:b4:97:a9:43:11:9a:b5:4b:57:44: 8a:dc:cc:4a:ef:87:18:0e:a3:e5:1e:12:81:33:34:d6:e2:e0: 2b:3b:0a:20:35:35:33:6a:13:16:02:40:37:ce:f2:5e:39:d5: 6f:64:ee:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHAGgD2VulCevGtsPCJEGAaa/UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTEyMTcyMDQ2NDJaFw0yNTEyMjEwNjU4NDJaMDMxMTAvBgNV BAMTKEVDNjYzODZDREFFMjgzRDhDMkI3QjQ5MUZBNjUwNkJBNEQ5RTQ0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzEmti6EozHFBtedhefdhB/O4G bUkqHI05LZeMZCjE4TXTDfqpq0wUusAVHKFRjAn5kzc1u3iXbQ84bRv0N6B4Jjkt d6e92pzd590m4E1SRqeCeMCC+c5+raUHC2mDzQZkHU4H7K9ZCSLV2BoNPY/f7dj4 QIJYP0KGQ+6QYj1M7e/bFL+bKzRd7Fbdq/z4YHClbEk9iTj1HXxKI0HJ8i1kywsK XQD3qsnoLm+Fhl/yZ1NAExRzMwtCrwKqCU4YnjT/nepsGfbsxOkZ7/Cu0EvqCmgP w3krNVgeDvMpiroUCjBx9H8blYZd3xUO0SR4+qGUH2pFmav3tILt0rq7iUtFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GY4bNrig9jCt7SR+mUGuk2eRO8wHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdfGfQwV9DUdpAIva6pd8wwpU972dVUH6Ax 70+8dVkVldy7M+RvivOSP9ZETgXohXOEt/6Mln/+Ti2jiPMMITFoYtvZH7T86fBp m/E29oW+ezM0lzBU8QQCQzcOxZeMU434j1RAdXdTudD6Oq+f31uvxj4dHzU+4Pnj 7g3ggzf484U5200PKyxFBsHHKlKbqlUpwGgrjzZiLOktj4FHRldCVjyX5qXTbmAd hbp2qOTrGdZafWK2gCgp5JiL3dnqC+kHBR5kxxgIUMbZJQRgtJepQxGatUtXRIrc zErvhxgOo+UeEoEzNNbi4Cs7CiA1NTNqExYCQDfO8l451W9k7n8= -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:22 2025 by rpki-client