This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: gx4OrWE6GboAd1WpMQYUeMAga0UxDY9ozDYlkQQP5NQ= Subject key identifier: 8A:CE:2F:45:39:F7:86:36:99:7A:01:DB:02:CD:5B:11:F1:3A:9D:3F Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 50420262C34B549F904F33E6A6DDA8140B9E7B06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01D2 Signing time: Sun 01 Feb 2026 10:21:03 +0000 Manifest this update: Sun 01 Feb 2026 10:16:03 +0000 Manifest next update: Wed 04 Feb 2026 17:10:03 +0000 Files and hashes: 1: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: SKPMUbt6FeZn/4LPERiCBTwqCLF6C4F+v51fbALIxYQ=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: XpsrFjei0l+09ODvvmQABrLd5RCt8xbB9sqvgbDFDtE=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: wiYrq6CjqWqPb2SEtdVmOUWu5eaGme6xziKeQlsqJWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 17:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:42:02:62:c3:4b:54:9f:90:4f:33:e6:a6:dd:a8:14:0b:9e:7b:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Feb 1 10:16:03 2026 GMT Not After : Feb 4 17:10:03 2026 GMT Subject: CN=8ACE2F4539F78636997A01DB02CD5B11F13A9D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:68:86:39:2e:22:5e:a5:e4:b8:5c:58:78: a4:f6:cf:18:27:38:55:9f:9d:ab:aa:ea:06:d1:b8: a6:c8:60:f1:68:91:d8:45:a9:ea:90:89:6c:3b:c3: 8f:17:e1:d1:6e:15:f8:e7:0e:3f:d8:4d:ac:b5:57: c4:d3:22:e9:fb:e8:22:4b:e5:dd:94:ec:2e:4d:1f: 08:e7:29:8b:b0:39:51:bc:1b:ad:30:8c:67:45:e7: 24:49:2a:4d:d0:50:d9:82:38:8f:bd:b5:1c:f7:03: 46:04:47:76:22:f8:e7:d3:f2:9c:78:59:ec:ac:0a: b6:8e:2d:51:bc:81:44:7d:e8:f0:72:9b:a8:3c:31: 57:43:e9:4a:59:68:cf:b7:bc:82:8a:35:84:8f:93: 4a:7a:5a:85:ec:e6:e4:48:14:5e:73:32:f6:1c:75: 71:c1:22:21:58:4c:9a:83:80:7b:ca:21:80:3d:8a: e8:dd:e7:02:25:8c:7b:7a:f0:ad:e5:52:ff:3c:de: 81:6d:f9:de:86:9e:8c:d4:9a:5a:e2:3e:4a:37:d5: 08:c3:9c:d1:4f:ff:ba:34:3c:27:ea:d9:74:9d:a9: e4:a0:03:21:bb:8e:ba:91:8a:86:cb:31:d7:c2:70: b0:aa:eb:5d:1b:ea:08:31:36:03:aa:15:7f:1e:ca: 22:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CE:2F:45:39:F7:86:36:99:7A:01:DB:02:CD:5B:11:F1:3A:9D:3F X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:44:cb:4e:1a:77:36:32:01:94:a9:dd:d6:34:a0:f3:1d:af: 90:c5:54:e6:06:f9:0e:ca:49:37:67:4c:9b:2b:23:ff:b3:c6: 36:be:26:1d:a1:e1:7b:28:3a:21:28:b4:74:c3:6b:2d:10:20: 2b:cc:2e:aa:fc:21:36:15:3e:83:bf:f2:c5:85:67:3a:12:4f: 33:b8:95:74:34:c7:1a:38:49:b4:29:ac:db:22:f3:41:03:e8: b4:87:81:95:ff:14:01:e3:45:0e:ce:e5:1a:44:2e:ca:8c:5d: f6:b2:f7:0e:64:ca:2d:77:4d:c5:7c:f8:71:b6:6c:91:12:fc: 7f:2a:d3:44:9e:d2:4c:3e:56:39:ee:6f:20:13:b3:47:d2:b4: dd:7a:3d:54:3c:a4:f4:8c:8b:bb:9a:59:dc:53:c3:92:06:58: 1a:34:82:a6:05:ff:5a:56:5c:d9:b0:11:5a:13:5f:1e:c4:aa: 57:74:05:20:f6:4f:2b:40:30:e3:25:af:33:23:86:b3:cd:54: 68:c6:94:f2:e4:ab:a3:d5:1c:d1:4c:60:f0:58:bc:07:bd:b5: 3f:2f:3d:d1:c0:b8:8f:a5:92:e3:b3:3d:7f:5d:80:b0:7f:af: 00:04:f5:27:1f:de:69:df:19:3d:3b:56:5f:60:14:d7:69:45: 64:d0:5f:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEICYsNLVJ+QTzPmpt2oFAueewYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNjAyMDExMDE2MDNaFw0yNjAyMDQxNzEwMDNaMDMxMTAvBgNV BAMTKDhBQ0UyRjQ1MzlGNzg2MzY5OTdBMDFEQjAyQ0Q1QjExRjEzQTlEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOWiGOS4iXqXkuFxYeKT2zxgn OFWfnauq6gbRuKbIYPFokdhFqeqQiWw7w48X4dFuFfjnDj/YTay1V8TTIun76CJL 5d2U7C5NHwjnKYuwOVG8G60wjGdF5yRJKk3QUNmCOI+9tRz3A0YER3Yi+OfT8px4 WeysCraOLVG8gUR96PBym6g8MVdD6UpZaM+3vIKKNYSPk0p6WoXs5uRIFF5zMvYc dXHBIiFYTJqDgHvKIYA9iujd5wIljHt68K3lUv883oFt+d6GnozUmlriPko31QjD nNFP/7o0PCfq2XSdqeSgAyG7jrqRiobLMdfCcLCq610b6ggxNgOqFX8eyiJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUis4vRTn3hjaZegHbAs1bEfE6nT8wHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFEy04adzYyAZSp3dY0oPMdr5DFVOYG+Q7K STdnTJsrI/+zxja+Jh2h4XsoOiEotHTDay0QICvMLqr8ITYVPoO/8sWFZzoSTzO4 lXQ0xxo4SbQprNsi80ED6LSHgZX/FAHjRQ7O5RpELsqMXfay9w5kyi13TcV8+HG2 bJES/H8q00Se0kw+VjnubyATs0fStN16PVQ8pPSMi7uaWdxTw5IGWBo0gqYF/1pW XNmwEVoTXx7Eqld0BSD2TytAMOMlrzMjhrPNVGjGlPLkq6PVHNFMYPBYvAe9tT8v PdHAuI+lkuOzPX9dgLB/rwAE9Scf3mnfGT07Vl9gFNdpRWTQX+I= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:49 2026 by rpki-client