This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 9Tuz96Mxr3RHXWVuJgVFreB7452M9718C9sbhfinF38= Subject key identifier: 01:C1:72:80:A7:8D:62:FB:45:7B:13:FB:AE:E1:EB:1B:11:80:20:76 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 3A16CAE8F315A820B8AB84CE5C4A6AB259460C2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 0280 Signing time: Sun 01 Feb 2026 21:40:05 +0000 Manifest this update: Sun 01 Feb 2026 21:35:05 +0000 Manifest next update: Thu 05 Feb 2026 02:38:05 +0000 Files and hashes: 1: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: +9BFdH9Ka3nAGKvGfMF3Zu5I6hH+rdl5jhXshufL7zo=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 02:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:16:ca:e8:f3:15:a8:20:b8:ab:84:ce:5c:4a:6a:b2:59:46:0c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Feb 1 21:35:05 2026 GMT Not After : Feb 5 02:38:05 2026 GMT Subject: CN=01C17280A78D62FB457B13FBAEE1EB1B11802076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:d3:6e:10:3e:f5:da:2d:bc:6f:4c:96:5a: 3c:fc:59:84:0b:d2:19:22:e8:46:f7:13:e9:46:8f: 25:0b:fd:91:15:df:35:24:12:b0:a6:3f:96:be:9c: a1:13:a8:5a:5e:3b:6b:c9:b1:1c:69:b6:fa:ad:e8: a9:c7:1f:35:c2:85:db:fb:a6:45:8d:ef:61:d5:a7: 3d:be:cb:29:19:8a:76:b9:5e:41:c1:5a:7f:ab:6c: 53:c0:23:f3:b5:b6:db:3e:15:d1:ed:68:89:75:30: f0:32:cf:1a:e8:93:94:a8:23:f1:1d:02:10:12:97: 6d:10:fa:6f:6a:eb:ba:e7:ad:8c:dc:dd:5f:b1:ef: 8f:d1:ee:9d:22:92:a6:be:31:7a:66:3b:8b:83:03: b3:b4:9d:1f:8d:de:a7:08:90:56:4c:4b:ff:ba:93: 26:10:ae:74:b7:83:0e:b4:1f:01:65:37:ad:ef:85: 32:48:83:3e:c3:59:9b:d7:98:9f:b8:7d:95:97:00: fa:23:c9:3d:ba:ee:b7:e1:bc:49:d9:fd:67:72:c3: 80:0f:a0:90:29:ef:ac:68:cf:82:8e:94:de:e7:9c: 4e:cc:9b:ab:9a:a0:1c:fc:1c:d7:d0:46:59:5d:7e: 17:d6:b5:35:2a:2c:c5:0c:34:96:f8:c4:b4:57:8f: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C1:72:80:A7:8D:62:FB:45:7B:13:FB:AE:E1:EB:1B:11:80:20:76 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d7:a3:13:95:06:d8:13:dc:ae:75:6e:bb:76:15:35:39:aa: 72:9d:9c:40:0d:a5:ce:64:31:c4:9b:f8:53:03:0d:e5:f9:9c: 6e:39:5d:3d:53:3a:90:e9:88:b1:09:d2:5c:ce:b6:b8:55:4d: b5:b4:11:f6:bb:d3:78:1e:9d:d5:78:ae:87:04:64:4e:fa:14: 33:a1:f2:51:4b:f4:01:f1:83:25:22:18:7f:ad:a9:27:52:6c: 6a:af:ef:c1:c9:cc:3c:ad:39:e8:d9:31:a5:98:72:67:9e:45: 55:5b:20:f6:9e:4b:67:4a:c6:b8:3c:d2:e5:91:3c:ef:8f:72: ba:98:ff:2f:de:6c:2e:cf:2f:08:31:fc:c1:dc:08:1f:4f:56: 96:17:2a:66:b3:c1:5c:fb:76:58:d9:21:85:d5:34:ab:2b:8d: 2e:1c:61:79:44:48:ae:e7:db:07:0f:ce:45:eb:2a:ec:ff:e5: 08:26:97:e9:63:8a:38:34:8e:57:9f:d6:61:ce:5b:45:59:6d: fd:1f:d8:e1:a6:31:a5:4f:b7:aa:ca:67:b0:81:82:68:d0:1a: 14:bd:96:be:fd:62:3a:72:a4:cd:5b:57:0c:d0:82:04:8f:e1: 35:3b:14:1f:68:2f:7c:ea:31:6d:3b:ad:77:1d:1f:3d:3f:b9: 2a:9b:e2:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOhbK6PMVqCC4q4TOXEpqsllGDCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNjAyMDEyMTM1MDVaFw0yNjAyMDUwMjM4MDVaMDMxMTAvBgNV BAMTKDAxQzE3MjgwQTc4RDYyRkI0NTdCMTNGQkFFRTFFQjFCMTE4MDIwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0tNuED712i28b0yWWjz8WYQL 0hki6Eb3E+lGjyUL/ZEV3zUkErCmP5a+nKETqFpeO2vJsRxptvqt6KnHHzXChdv7 pkWN72HVpz2+yykZina5XkHBWn+rbFPAI/O1tts+FdHtaIl1MPAyzxrok5SoI/Ed AhASl20Q+m9q67rnrYzc3V+x74/R7p0ikqa+MXpmO4uDA7O0nR+N3qcIkFZMS/+6 kyYQrnS3gw60HwFlN63vhTJIgz7DWZvXmJ+4fZWXAPojyT267rfhvEnZ/Wdyw4AP oJAp76xoz4KOlN7nnE7Mm6uaoBz8HNfQRlldfhfWtTUqLMUMNJb4xLRXj6p3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAcFygKeNYvtFexP7ruHrGxGAIHYwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvXoxOVBtgT3K51brt2FTU5qnKdnEANpc5k McSb+FMDDeX5nG45XT1TOpDpiLEJ0lzOtrhVTbW0Efa703gendV4rocEZE76FDOh 8lFL9AHxgyUiGH+tqSdSbGqv78HJzDytOejZMaWYcmeeRVVbIPaeS2dKxrg80uWR PO+PcrqY/y/ebC7PLwgx/MHcCB9PVpYXKmazwVz7dljZIYXVNKsrjS4cYXlESK7n 2wcPzkXrKuz/5Qgml+ljijg0jlef1mHOW0VZbf0f2OGmMaVPt6rKZ7CBgmjQGhS9 lr79YjpypM1bVwzQggSP4TU7FB9oL3zqMW07rXcdHz0/uSqb4sY= -----END CERTIFICATE-----Generated at Mon Feb 2 10:02:52 2026 by rpki-client