This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: psgZD+M790FWeEbJ7rSEd6C5oKewcvKx+uE4e32l3iU= Subject key identifier: BF:D6:EE:CF:8E:B0:17:93:7E:B8:B2:7D:6F:B1:55:51:7F:C6:D3:3F Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 3B80CF2AC8F328EFA5475A7C143286DE18C688DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01D2 Signing time: Mon 01 Dec 2025 20:40:02 +0000 Manifest this update: Mon 01 Dec 2025 20:35:02 +0000 Manifest next update: Thu 04 Dec 2025 22:46:02 +0000 Files and hashes: 1: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: OQoBA0VZLcANOCVeoNAU0ZtRcT2/E+WyITU6kLQNTMs=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:80:cf:2a:c8:f3:28:ef:a5:47:5a:7c:14:32:86:de:18:c6:88:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Dec 1 20:35:02 2025 GMT Not After : Dec 4 22:46:02 2025 GMT Subject: CN=BFD6EECF8EB017937EB8B27D6FB155517FC6D33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:c8:43:b1:79:7f:05:35:67:13:c1:cc:51: fb:87:8f:a9:1e:6b:18:bf:c6:41:37:ae:1a:3f:5c: e4:37:45:55:c8:04:79:e3:70:0b:cf:20:22:65:fa: f1:4f:3d:32:46:12:0a:1f:e8:67:c0:65:1c:07:37: ae:a7:ac:b7:24:fc:2f:ce:b8:d2:7d:99:6e:b5:a1: 6a:09:58:19:85:ad:5e:99:e8:77:98:ba:b6:22:ca: 15:68:af:d8:ac:02:50:be:e3:13:1f:01:47:5a:c6: fa:f7:d5:55:99:9e:07:f5:f3:c6:d3:8f:6f:4f:da: c1:cd:15:93:b8:99:4d:fe:7c:fa:e5:d5:85:0a:f0: cb:9f:41:53:01:6f:6a:31:52:de:8d:7f:45:87:8d: 46:67:7c:da:3e:bb:6f:7f:68:9e:ad:85:d4:6e:13: 80:3d:a3:31:a1:04:e7:02:47:87:9f:ed:7a:1b:14: 27:64:c3:e7:93:d6:41:5b:fc:b8:42:1c:ef:f6:da: 9c:48:a1:80:cf:49:12:aa:0b:9a:c7:da:44:13:5a: 09:1e:8d:cc:9a:29:37:fc:d1:56:37:2c:0f:d8:13: 13:66:74:37:0a:54:72:00:86:12:a5:e5:a5:7b:3f: 04:bd:07:f9:62:5d:a3:92:5a:db:f3:28:cb:fc:c0: 21:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D6:EE:CF:8E:B0:17:93:7E:B8:B2:7D:6F:B1:55:51:7F:C6:D3:3F X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:54:c0:21:02:cb:4e:1e:85:51:e0:c5:06:c9:26:a8:eb:6d: 57:58:b3:4b:a7:e1:d0:ef:12:e2:01:51:8a:38:53:2c:0e:e6: 65:8b:a9:8e:70:af:02:c9:27:04:2b:af:00:e6:1c:1b:22:a5: 10:6c:89:b7:04:c7:8d:55:05:0f:59:86:8b:3f:33:44:86:fb: c0:b8:86:65:0a:95:d5:2e:98:27:a4:d0:24:58:4a:6c:f8:84: 46:89:3d:8d:79:50:44:ec:03:2f:17:5a:db:a4:07:46:86:98: 6b:7f:ff:0b:99:a2:d8:9e:5b:73:bc:a6:b0:68:85:43:60:58: fd:84:3f:19:1e:7c:ae:25:15:42:5c:ee:94:da:31:c0:b7:4b: c3:ee:3c:6a:7b:bb:03:cb:18:b4:6d:5e:17:33:db:13:7f:1d: 31:f4:7b:f0:0e:c6:38:9b:0e:68:7b:77:e7:8a:71:10:47:4d: d6:4a:fb:5f:6a:4e:55:bc:1f:98:0c:24:ae:79:75:0e:32:30: 41:2b:66:20:90:60:9e:a7:24:37:53:c1:13:4a:f2:b2:fc:15: 2b:5e:8f:d3:a3:5f:83:c8:01:a8:e4:c6:da:c3:41:d8:28:10: 8c:ea:6e:b9:1e:3b:ac:1a:2d:b3:4e:5e:41:dc:60:21:82:89: 15:56:f3:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4DPKsjzKO+lR1p8FDKG3hjGiN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTEyMDEyMDM1MDJaFw0yNTEyMDQyMjQ2MDJaMDMxMTAvBgNV BAMTKEJGRDZFRUNGOEVCMDE3OTM3RUI4QjI3RDZGQjE1NTUxN0ZDNkQzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTzchDsXl/BTVnE8HMUfuHj6ke axi/xkE3rho/XOQ3RVXIBHnjcAvPICJl+vFPPTJGEgof6GfAZRwHN66nrLck/C/O uNJ9mW61oWoJWBmFrV6Z6HeYurYiyhVor9isAlC+4xMfAUdaxvr31VWZngf188bT j29P2sHNFZO4mU3+fPrl1YUK8MufQVMBb2oxUt6Nf0WHjUZnfNo+u29/aJ6thdRu E4A9ozGhBOcCR4ef7XobFCdkw+eT1kFb/LhCHO/22pxIoYDPSRKqC5rH2kQTWgke jcyaKTf80VY3LA/YExNmdDcKVHIAhhKl5aV7PwS9B/liXaOSWtvzKMv8wCG5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv9buz46wF5N+uLJ9b7FVUX/G0z8wHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5UwCECy04ehVHgxQbJJqjrbVdYs0un4dDv EuIBUYo4UywO5mWLqY5wrwLJJwQrrwDmHBsipRBsibcEx41VBQ9Zhos/M0SG+8C4 hmUKldUumCek0CRYSmz4hEaJPY15UETsAy8XWtukB0aGmGt//wuZotieW3O8prBo hUNgWP2EPxkefK4lFUJc7pTaMcC3S8PuPGp7uwPLGLRtXhcz2xN/HTH0e/AOxjib Dmh7d+eKcRBHTdZK+19qTlW8H5gMJK55dQ4yMEErZiCQYJ6nJDdTwRNK8rL8FSte j9OjX4PIAajkxtrDQdgoEIzqbrkeO6waLbNOXkHcYCGCiRVW88w= -----END CERTIFICATE-----Generated at Wed Dec 3 12:42:15 2025 by rpki-client