This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json)
Hash identifier: 0zr9ptlKejZAr4W32sMUplwRc+97LaJ2fHHEfztRnB4=
Subject key identifier: 82:67:2B:88:3A:E8:AC:17:C6:8A:0D:12:0D:58:CD:FA:10:11:B8:C4
Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3
Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3
Certificate serial: 7664B59D6EAA0A51DA59C75C9B09BEFFE5FB729B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
Manifest number: 0281
Signing time: Sun 01 Feb 2026 11:50:40 +0000
Manifest this update: Sun 01 Feb 2026 11:45:40 +0000
Manifest next update: Wed 04 Feb 2026 13:44:40 +0000
Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: sNolYWaILX2xK9/pK4m0NXodNWLnl5UkA+L6SUdOka0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl
rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 13:44:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:64:b5:9d:6e:aa:0a:51:da:59:c7:5c:9b:09:be:ff:e5:fb:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3
Validity
Not Before: Feb 1 11:45:40 2026 GMT
Not After : Feb 4 13:44:40 2026 GMT
Subject: CN=82672B883AE8AC17C68A0D120D58CDFA1011B8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:a3:58:73:e8:3d:38:2a:c9:41:cb:2a:61:
32:31:3e:04:11:b3:74:77:9d:5c:70:17:2e:83:6e:
39:b6:08:17:90:df:f3:cc:1f:21:41:21:88:b5:e9:
41:da:a9:96:c7:2a:60:1d:4a:c2:07:02:b0:34:01:
60:c2:6a:49:65:fc:f3:92:41:35:75:eb:a2:34:a1:
a1:52:a4:11:af:e9:eb:8e:96:30:f0:ed:fb:af:f1:
ea:35:65:ed:34:8c:77:cb:9b:51:0a:b3:8e:18:e9:
8e:8f:7d:5a:41:30:d4:12:82:dc:75:d6:70:9e:9c:
fd:16:5f:9a:8a:f8:20:e3:c9:29:a3:6c:2a:c1:09:
96:59:64:6e:28:a7:cb:30:4c:07:63:11:5a:54:e5:
66:5f:9c:15:ea:11:d0:88:4e:c9:82:10:32:f4:48:
ca:57:69:33:40:cb:40:5e:db:2a:88:da:4f:c9:e6:
d8:de:0e:ed:12:06:66:94:34:37:b1:ee:e0:f3:9e:
e8:7a:bf:96:04:0b:9a:87:71:ba:be:14:e0:93:5a:
48:bb:cc:f5:ae:78:45:18:10:ec:02:d5:16:06:bd:
b2:54:f1:85:8c:2d:82:84:73:71:d8:9d:07:65:1f:
96:f9:86:75:59:1f:f4:fd:34:12:30:4c:ab:39:87:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:67:2B:88:3A:E8:AC:17:C6:8A:0D:12:0D:58:CD:FA:10:11:B8:C4
X509v3 Authority Key Identifier:
keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:23:8c:da:5e:e9:f1:1f:e8:ee:ce:8f:86:71:7d:b7:82:9b:
0f:f0:af:cf:4d:83:11:cf:88:56:92:76:95:e6:eb:9d:f5:42:
a7:e3:15:ae:34:4b:08:7a:68:54:7b:f5:ab:c1:cc:ca:bd:a8:
a7:6e:b4:b7:de:76:45:65:e1:ea:11:12:fa:4f:c6:1e:ea:bf:
cb:ef:65:92:7f:a3:b5:1a:03:16:e8:e7:4a:e6:27:91:87:1f:
f4:29:0a:d0:1e:2c:b6:2a:e4:33:ac:12:ef:7b:b5:3b:fa:54:
45:a3:0d:ed:e9:d3:76:87:c5:8e:09:2f:2e:3f:03:db:23:95:
16:95:e5:9f:e6:6b:a9:3b:34:0a:58:be:9f:58:38:23:15:59:
f5:0a:4b:3e:4a:04:2f:b1:62:6f:58:a7:53:b7:fc:5e:3a:7a:
e6:db:f9:f6:56:3b:fb:ab:42:83:14:fd:6e:3c:d7:29:4a:a6:
4a:1e:9b:dd:1e:3b:eb:bb:73:42:88:3f:4a:e0:77:98:06:a0:
1a:c9:9e:93:f1:a0:c2:14:4b:d4:e0:2c:35:8e:32:bb:cb:8e:
a7:b4:da:01:c5:1a:84:36:dc:21:6a:20:6c:f7:d4:29:46:a2:
42:ba:93:87:3e:b6:bd:ae:f9:3d:68:c4:74:2e:46:24:6d:8b:
3c:dc:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:58:31 2026 by rpki-client