This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft File: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json) Hash identifier: +NlA+z03j1lKDwvUKjWkT+4DjD8LCbyFsTg9trPZTlI= Subject key identifier: BC:30:53:6A:14:03:41:4E:B5:95:98:47:A4:9A:75:A4:2A:92:4D:93 Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC Certificate issuer: /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Certificate serial: 154F986C23C4C59EBBFE6DABC71D538140E07AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft Manifest number: 2B Signing time: Sat 31 Jan 2026 16:41:44 +0000 Manifest this update: Sat 31 Jan 2026 16:36:44 +0000 Manifest next update: Tue 03 Feb 2026 20:31:44 +0000 Files and hashes: 1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: bxL98EE2Fn+ht1fPc870s3eQssH8Suf8qhJp5GZupiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4f:98:6c:23:c4:c5:9e:bb:fe:6d:ab:c7:1d:53:81:40:e0:7a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Validity Not Before: Jan 31 16:36:44 2026 GMT Not After : Feb 3 20:31:44 2026 GMT Subject: CN=BC30536A1403414EB5959847A49A75A42A924D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e5:e5:c5:fa:d3:0b:c3:96:b2:6a:59:09:94: 31:b8:8c:25:d2:2d:84:cc:7f:03:f6:b7:6e:3f:52: fd:e0:eb:77:a5:64:70:21:b6:88:02:dc:98:29:47: 7e:32:92:89:53:42:9d:bd:d8:9c:7a:c8:f8:92:68: cc:36:d8:6f:30:0b:54:a9:0c:03:69:f7:69:93:04: b1:49:0a:ef:61:41:47:9e:aa:ef:51:21:84:31:f1: b7:d6:72:4c:c7:be:c9:5d:6a:d5:00:d1:7b:27:e4: c3:c9:1f:6a:15:84:58:b7:db:de:3c:5f:0b:02:42: db:ff:35:0d:3d:b3:1d:6c:f9:d9:c1:42:23:ef:96: 43:6e:34:c8:d7:83:a5:aa:66:78:99:01:1a:33:af: ae:5d:09:a8:2e:1a:af:b9:26:4b:1c:6c:8e:bc:8e: 87:ea:31:2c:2b:a4:68:1c:64:92:8f:5c:77:b1:19: 41:b1:dd:c3:af:6f:ce:78:8f:78:6e:da:38:8f:ab: bd:12:67:6d:ac:5d:eb:91:a8:a5:90:1c:1e:ef:a6: 9c:44:23:ea:d6:e6:91:31:1b:0f:e5:35:32:67:a2: 68:fe:eb:c9:b5:87:ee:eb:c4:b0:56:aa:34:1a:6c: 1f:61:50:3f:7b:e2:8b:0d:e0:7b:54:70:82:34:93: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:30:53:6A:14:03:41:4E:B5:95:98:47:A4:9A:75:A4:2A:92:4D:93 X509v3 Authority Key Identifier: keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:b8:2f:b6:7f:1c:ed:04:c2:52:90:7a:cc:51:6b:2e:39:be: 71:1e:e6:27:29:51:3a:6d:ba:82:b9:5f:f9:82:b2:47:df:2e: d9:58:09:ce:8d:49:ff:e2:2b:48:f8:c2:61:5e:55:d5:f8:a1: b4:4d:e9:db:53:ba:c0:99:82:b5:b8:4d:f0:3f:a2:5c:3b:bb: 75:89:f2:82:35:37:2d:f0:ae:a1:40:4b:c5:c8:ab:67:90:29: 93:59:71:df:c2:18:38:ce:63:da:ce:5a:1a:6c:51:40:2d:2e: 03:76:14:3e:8b:1c:2d:a4:30:c3:65:39:1b:6e:62:53:a4:97: 44:79:ae:a0:46:64:4b:7b:86:8d:6e:6d:1d:ed:87:b1:5f:8b: f8:02:80:ee:30:38:9c:3d:89:e3:d5:c8:61:f6:c0:23:e2:5c: b3:96:34:94:19:ed:d7:44:8e:a0:75:03:e2:06:f0:a3:7c:7c: 0b:a2:57:24:21:35:76:4f:a6:1f:88:a5:ec:df:67:b5:03:2b: 05:c8:a0:7c:63:51:ca:ea:5e:12:1b:74:61:0c:c3:89:59:d6: 0f:cb:fa:63:aa:4b:15:b6:06:ac:a6:38:0e:2b:f6:91:a3:b5: 84:b0:0f:3b:61:38:0f:2e:11:64:1d:02:b9:55:dd:6c:15:36: 39:0b:3f:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFU+YbCPExZ67/m2rxx1TgUDgevswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVF MjQxN0NEQzAeFw0yNjAxMzExNjM2NDRaFw0yNjAyMDMyMDMxNDRaMDMxMTAvBgNV BAMTKEJDMzA1MzZBMTQwMzQxNEVCNTk1OTg0N0E0OUE3NUE0MkE5MjREOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75eXF+tMLw5ayalkJlDG4jCXS LYTMfwP2t24/Uv3g63elZHAhtogC3JgpR34ykolTQp292Jx6yPiSaMw22G8wC1Sp DANp92mTBLFJCu9hQUeequ9RIYQx8bfWckzHvsldatUA0Xsn5MPJH2oVhFi32948 XwsCQtv/NQ09sx1s+dnBQiPvlkNuNMjXg6WqZniZARozr65dCaguGq+5JkscbI68 jofqMSwrpGgcZJKPXHexGUGx3cOvb854j3hu2jiPq70SZ22sXeuRqKWQHB7vppxE I+rW5pExGw/lNTJnomj+68m1h+7rxLBWqjQabB9hUD974osN4HtUcII0k0i5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvDBTahQDQU61lZhHpJp1pCqSTZMwHwYDVR0j BBgwFoAUrncKILibC1xJQxCl3CHeXuJBfNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzgzNzYyZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9BRTc3MEEyMEI4 OUIwQjVDNDk0MzEwQTVEQzIxREU1RUUyNDE3Q0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVFMjQx N0NEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURF NUVFMjQxN0NEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS4L7Z/HO0EwlKQesxRay45vnEe5icpUTpt uoK5X/mCskffLtlYCc6NSf/iK0j4wmFeVdX4obRN6dtTusCZgrW4TfA/olw7u3WJ 8oI1Ny3wrqFAS8XIq2eQKZNZcd/CGDjOY9rOWhpsUUAtLgN2FD6LHC2kMMNlORtu YlOkl0R5rqBGZEt7ho1ubR3th7Ffi/gCgO4wOJw9iePVyGH2wCPiXLOWNJQZ7ddE jqB1A+IG8KN8fAuiVyQhNXZPph+IpezfZ7UDKwXIoHxjUcrqXhIbdGEMw4lZ1g/L +mOqSxW2BqymOA4r9pGjtYSwDzthOA8uEWQdArlV3WwVNjkLPw8= -----END CERTIFICATE-----Generated at Mon Feb 2 10:06:07 2026 by rpki-client