This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft File: AE20FE4D558717B21540D21662C30716B19723F3.mft (raw, json) Hash identifier: OxS2pmd5cfQe0yjvJZYzrfGvFongNtvnMe4syqTKz5A= Subject key identifier: 26:06:14:FE:86:63:DA:AF:2C:F7:B3:29:95:B9:3F:C5:52:59:53:E7 Authority key identifier: AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 Certificate issuer: /CN=AE20FE4D558717B21540D21662C30716B19723F3 Certificate serial: 306C80C4B56E8C37D66BE75C64A2DFD04DB53AF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft Manifest number: 026B Signing time: Fri 12 Dec 2025 04:00:39 +0000 Manifest this update: Fri 12 Dec 2025 03:55:39 +0000 Manifest next update: Mon 15 Dec 2025 14:51:39 +0000 Files and hashes: 1: AE20FE4D558717B21540D21662C30716B19723F3.crl (hash: LZ4ep2jnylQUhKvSeJjP8HZnLUy6QuqudK9AmbwfjuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 14:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6c:80:c4:b5:6e:8c:37:d6:6b:e7:5c:64:a2:df:d0:4d:b5:3a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE20FE4D558717B21540D21662C30716B19723F3 Validity Not Before: Dec 12 03:55:39 2025 GMT Not After : Dec 15 14:51:39 2025 GMT Subject: CN=260614FE8663DAAF2CF7B32995B93FC5525953E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:22:b4:fa:1b:24:0e:00:a5:78:b5:96:16:f9: 9f:09:07:ae:57:05:50:3e:c4:1f:da:43:6b:dc:8f: 49:53:96:df:35:d9:38:d4:c0:bc:04:e9:a6:c7:08: 04:52:55:aa:13:9c:2e:6c:3d:86:96:ba:ae:45:a1: dd:65:5f:37:e7:b5:94:89:f2:8f:9f:8a:f5:a1:f9: 7b:74:f1:ec:dd:b5:bd:88:fe:bb:90:cf:6c:a5:92: cf:f5:49:3f:42:1a:37:d1:48:81:20:f0:8e:6e:c6: 22:ca:40:60:d5:6b:75:b2:22:e1:73:6e:b7:22:27: bc:c3:69:ba:14:59:88:20:8c:bb:f7:6e:33:7d:81: ca:19:96:eb:7d:e2:d7:9b:55:0a:43:6d:2b:76:f3: 1f:9a:e0:1b:76:f2:d0:0a:5c:7d:db:11:11:d6:74: be:4e:de:0d:2e:91:5f:dd:bd:e9:1d:37:1e:20:5d: 66:99:6d:ac:ff:e6:ea:1d:6a:d9:01:ce:85:ff:87: fa:d0:98:c6:80:30:35:38:ee:0d:36:12:d5:cb:33: dc:de:a8:ef:bf:e3:26:be:e7:84:0d:d5:c2:ac:d7: 35:0e:3d:14:30:e1:c5:29:6d:45:88:a4:48:e8:14: b8:fb:6b:bc:7d:e1:44:c1:e8:1f:46:25:59:b4:10: 31:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:06:14:FE:86:63:DA:AF:2C:F7:B3:29:95:B9:3F:C5:52:59:53:E7 X509v3 Authority Key Identifier: keyid:AE:20:FE:4D:55:87:17:B2:15:40:D2:16:62:C3:07:16:B1:97:23:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE20FE4D558717B21540D21662C30716B19723F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d21646be-3d6a-4257-b77c-b33c10f35d32/0/AE20FE4D558717B21540D21662C30716B19723F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:60:c2:0b:ba:45:92:e9:e9:57:9f:a9:9a:7c:ce:b7:58:bd: 8e:88:73:f3:bb:c4:ab:ca:fa:85:cc:20:3d:10:cc:d9:d4:88: 55:4e:d1:23:61:f1:ba:ec:89:95:83:ac:f7:52:2d:dc:6b:fd: f4:af:c4:53:40:a9:d1:01:10:22:00:32:b9:f4:69:40:9f:19: ed:b1:27:e0:69:6d:32:51:f3:18:ca:b8:36:dc:76:2d:a0:42: 0c:c9:7c:95:a2:d4:92:3f:40:3d:64:a9:20:64:16:67:a8:d2: 1d:4c:49:78:96:1e:36:b4:6a:26:2d:2f:d0:74:9e:16:57:50: 9f:b0:5d:cf:70:ca:92:3b:cb:60:69:65:74:e3:c5:e5:ea:56: 66:2d:23:c2:f8:1f:66:fa:ff:52:51:a9:70:a9:6a:fe:08:a0: 34:78:b6:fa:e7:d0:3c:fe:c8:05:06:88:6b:5a:13:83:ed:7f: c7:2f:f5:2d:e4:89:5b:e3:e4:f6:ed:e1:64:86:1a:0c:06:5a: d0:a8:f9:fb:fc:a5:05:e3:1b:93:c8:25:ba:da:59:6e:81:68: e2:f5:fb:84:d2:c4:78:38:3d:97:b8:95:f1:68:cb:38:8b:8c: 8f:1b:a4:b0:e4:1a:18:53:5e:08:76:68:b3:4b:40:a6:3b:5b: 3b:e0:80:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMGyAxLVujDfWa+dcZKLf0E21OvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZC MTk3MjNGMzAeFw0yNTEyMTIwMzU1MzlaFw0yNTEyMTUxNDUxMzlaMDMxMTAvBgNV BAMTKDI2MDYxNEZFODY2M0RBQUYyQ0Y3QjMyOTk1QjkzRkM1NTI1OTUzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIrT6GyQOAKV4tZYW+Z8JB65X BVA+xB/aQ2vcj0lTlt812TjUwLwE6abHCARSVaoTnC5sPYaWuq5Fod1lXzfntZSJ 8o+fivWh+Xt08ezdtb2I/ruQz2ylks/1ST9CGjfRSIEg8I5uxiLKQGDVa3WyIuFz brciJ7zDaboUWYggjLv3bjN9gcoZlut94tebVQpDbSt28x+a4Bt28tAKXH3bERHW dL5O3g0ukV/dvekdNx4gXWaZbaz/5uodatkBzoX/h/rQmMaAMDU47g02EtXLM9ze qO+/4ya+54QN1cKs1zUOPRQw4cUpbUWIpEjoFLj7a7x94UTB6B9GJVm0EDHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgYU/oZj2q8s97Mplbk/xVJZU+cwHwYDVR0j BBgwFoAUriD+TVWHF7IVQNIWYsMHFrGXI/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjE2NDZiZS0zZDZhLTQyNTctYjc3Yy1iMzNjMTBmMzVkMzIvMC9BRTIwRkU0RDU1 ODcxN0IyMTU0MEQyMTY2MkMzMDcxNkIxOTcyM0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3MTZCMTk3 MjNGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIxNjQ2YmUtM2Q2YS00MjU3LWI3 N2MtYjMzYzEwZjM1ZDMyLzAvQUUyMEZFNEQ1NTg3MTdCMjE1NDBEMjE2NjJDMzA3 MTZCMTk3MjNGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5gwgu6RZLp6VefqZp8zrdYvY6Ic/O7xKvK +oXMID0QzNnUiFVO0SNh8brsiZWDrPdSLdxr/fSvxFNAqdEBECIAMrn0aUCfGe2x J+BpbTJR8xjKuDbcdi2gQgzJfJWi1JI/QD1kqSBkFmeo0h1MSXiWHja0aiYtL9B0 nhZXUJ+wXc9wypI7y2BpZXTjxeXqVmYtI8L4H2b6/1JRqXCpav4IoDR4tvrn0Dz+ yAUGiGtaE4Ptf8cv9S3kiVvj5Pbt4WSGGgwGWtCo+fv8pQXjG5PIJbraWW6BaOL1 +4TSxHg4PZe4lfFoyziLjI8bpLDkGhhTXgh2aLNLQKY7WzvggDg= -----END CERTIFICATE-----Generated at Sun Dec 14 07:47:01 2025 by rpki-client