This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: ItT/CZwZSvldgVh08UwtLgToZvQLwe76OSwGOfF/+ag= Subject key identifier: 42:A3:0B:1B:19:AF:BE:FE:05:9F:50:0D:51:2E:8B:62:75:16:4E:E3 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 0D4534FEBD90E55A930F889F4B3FA20DC7BFE69D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 0267 Signing time: Wed 03 Dec 2025 00:10:39 +0000 Manifest this update: Wed 03 Dec 2025 00:05:39 +0000 Manifest next update: Sat 06 Dec 2025 01:33:39 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: VisswGAVipkxZSKMVfjD+zefpbAGVBJX3T2/V3MLS2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:45:34:fe:bd:90:e5:5a:93:0f:88:9f:4b:3f:a2:0d:c7:bf:e6:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Dec 3 00:05:39 2025 GMT Not After : Dec 6 01:33:39 2025 GMT Subject: CN=42A30B1B19AFBEFE059F500D512E8B6275164EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:6e:90:03:97:83:7f:3d:be:0c:5b:7c:61: b0:6a:e8:63:66:c5:e8:0f:ff:6c:d0:f6:90:d1:3f: 61:8c:d7:f0:f4:83:2e:c8:23:f4:14:8a:8f:81:6f: 14:ce:14:5c:83:cf:4a:54:a3:57:c2:7b:6c:36:40: db:fa:9b:f8:f1:e0:d3:36:24:c5:50:1b:20:a9:88: 96:13:6e:77:72:91:e7:7b:35:4d:9b:b0:59:91:60: 03:83:30:41:93:c6:ac:1b:fd:3c:e8:be:b0:2d:83: cc:d0:05:ae:b6:24:1e:31:d5:b9:f4:5b:f0:ba:a9: d8:82:e9:cc:76:5e:11:3d:1a:68:ac:cb:0c:aa:70: 8a:ba:ef:95:b5:6b:65:48:2c:ef:d9:70:81:43:80: d2:92:2a:18:8f:49:44:65:78:6b:47:c5:11:76:87: 1e:9e:cf:cc:7f:5e:c1:5e:52:38:07:fd:ee:2d:ff: fa:92:89:ed:bc:12:df:1f:49:d8:58:5e:05:fc:c2: a8:69:24:f5:44:77:f7:9c:bf:fb:8b:9c:3b:36:14: 4f:21:33:e1:d1:2e:71:a6:ea:1f:bc:af:24:21:f0: c9:d3:bf:88:52:3a:74:1f:c3:b1:35:f2:a6:9c:79: af:7d:62:39:05:ff:fc:f6:eb:23:45:f3:b2:4b:c2: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:0B:1B:19:AF:BE:FE:05:9F:50:0D:51:2E:8B:62:75:16:4E:E3 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:e6:d6:54:2e:20:b3:24:0c:d7:b0:25:f8:b5:a8:18:f3:da: 8e:cd:ec:71:21:2f:7a:60:82:22:1e:4b:48:bc:7f:d2:95:d0: eb:cc:a8:3b:2e:bf:94:dd:73:bd:f1:ee:cd:1f:1a:d2:f0:a9: ce:0b:60:44:f9:c4:1e:da:9d:e8:0d:5c:06:ef:df:b7:fc:63: 6b:ce:3a:3d:91:66:70:c9:95:08:25:c3:8b:cf:d3:90:c7:ef: 50:b7:0d:a2:5a:6b:90:95:08:80:a0:c9:ad:58:21:30:5b:31: 82:d3:90:90:69:31:75:9a:df:0a:9c:41:cd:68:64:36:d8:1e: 3a:af:28:51:24:7a:37:01:a3:d9:3b:8e:38:8b:10:72:60:ab: f2:48:2f:cc:68:71:e1:2b:2f:b2:fa:3a:98:37:ad:97:14:01: c6:2c:75:de:bb:95:8c:f3:76:0a:18:8f:33:95:47:8e:ab:dd: 0c:14:63:c2:ad:f5:48:16:bc:bb:e1:c0:ba:67:02:7f:19:e8: c9:bb:0f:a2:a5:9d:6b:b6:8a:b1:ca:33:b5:10:24:2a:52:a5: 98:e9:25:1f:79:4f:20:4d:b1:ad:98:25:de:6d:0d:c7:45:6a: 23:b8:a4:14:a8:b5:2d:d4:30:1c:23:28:95:4c:4f:e2:84:02: b2:94:0b:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUU0/r2Q5VqTD4ifSz+iDce/5p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTEyMDMwMDA1MzlaFw0yNTEyMDYwMTMzMzlaMDMxMTAvBgNV BAMTKDQyQTMwQjFCMTlBRkJFRkUwNTlGNTAwRDUxMkU4QjYyNzUxNjRFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4gm6QA5eDfz2+DFt8YbBq6GNm xegP/2zQ9pDRP2GM1/D0gy7II/QUio+BbxTOFFyDz0pUo1fCe2w2QNv6m/jx4NM2 JMVQGyCpiJYTbndyked7NU2bsFmRYAODMEGTxqwb/TzovrAtg8zQBa62JB4x1bn0 W/C6qdiC6cx2XhE9GmisywyqcIq675W1a2VILO/ZcIFDgNKSKhiPSURleGtHxRF2 hx6ez8x/XsFeUjgH/e4t//qSie28Et8fSdhYXgX8wqhpJPVEd/ecv/uLnDs2FE8h M+HRLnGm6h+8ryQh8MnTv4hSOnQfw7E18qacea99YjkF//z26yNF87JLwkEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqMLGxmvvv4Fn1ANUS6LYnUWTuMwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHm1lQuILMkDNewJfi1qBjz2o7N7HEhL3pg giIeS0i8f9KV0OvMqDsuv5Tdc73x7s0fGtLwqc4LYET5xB7anegNXAbv37f8Y2vO Oj2RZnDJlQglw4vP05DH71C3DaJaa5CVCICgya1YITBbMYLTkJBpMXWa3wqcQc1o ZDbYHjqvKFEkejcBo9k7jjiLEHJgq/JIL8xoceErL7L6Opg3rZcUAcYsdd67lYzz dgoYjzOVR46r3QwUY8Kt9UgWvLvhwLpnAn8Z6Mm7D6KlnWu2irHKM7UQJCpSpZjp JR95TyBNsa2YJd5tDcdFaiO4pBSotS3UMBwjKJVMT+KEArKUC5A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:48 2025 by rpki-client