This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: 0TDvHXIzW5B7JrTPqkCjAJbyT/1T438MdwgCEf1CwtA= Subject key identifier: 21:95:78:EB:F4:04:42:27:59:AF:F3:63:F8:7A:F7:94:CA:39:28:7A Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 26243C3F5F2D37A66CF8C9FB7942E742401E4FEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03AC Signing time: Tue 02 Dec 2025 18:21:22 +0000 Manifest this update: Tue 02 Dec 2025 18:16:22 +0000 Manifest next update: Sat 06 Dec 2025 06:12:22 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: 0e8oJanrcH1XsEpc6kQlKaNMym0InjigmkLPam/NDY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:24:3c:3f:5f:2d:37:a6:6c:f8:c9:fb:79:42:e7:42:40:1e:4f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Dec 2 18:16:22 2025 GMT Not After : Dec 6 06:12:22 2025 GMT Subject: CN=219578EBF404422759AFF363F87AF794CA39287A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:70:a9:37:f0:f0:1a:cd:58:eb:93:0a:2a: e5:c0:64:6c:1f:72:d4:81:9c:e6:1d:7a:f6:2a:76: 73:b6:23:cf:1d:ac:3f:96:2f:2a:1f:fd:ca:78:c8: 18:23:60:81:7c:33:e6:b3:e8:58:6b:18:e3:df:c0: f7:cc:df:7d:be:a5:a1:34:15:58:a7:78:b1:12:30: 14:d0:6e:0d:3c:93:11:47:97:72:82:5e:11:1a:0e: 67:b4:ee:ba:b6:e5:a9:2d:61:aa:19:ae:9d:01:94: 8a:83:af:64:88:f5:9a:0d:fe:9d:ed:55:c7:4b:a7: fe:b0:8c:fe:91:3f:cd:c9:fc:30:8a:be:28:16:c0: 65:62:5f:c3:16:df:6a:5b:4c:c8:56:7e:30:a1:2b: 31:ce:8d:1f:b1:5f:4d:14:17:f3:ff:3a:18:e8:b2: fa:66:ab:13:18:e2:17:e1:bf:87:72:a3:a4:d8:80: a7:aa:bb:91:9a:54:1b:10:ff:53:3a:24:06:72:36: 0d:de:6b:5b:37:c2:41:6b:b1:35:b0:87:55:14:c1: 34:fd:6c:12:eb:e0:2d:98:6f:5c:25:de:b4:69:e4: 51:55:55:04:f1:19:0f:a1:8e:6d:5a:3b:04:f3:3a: 87:30:1d:0b:45:d3:b2:c6:dc:f6:10:a4:96:cc:11: cb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:95:78:EB:F4:04:42:27:59:AF:F3:63:F8:7A:F7:94:CA:39:28:7A X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:59:a1:9d:16:b7:12:b2:b5:88:2c:5d:51:ad:09:b2:05:97: cd:78:95:56:e5:a1:1f:a3:1d:0c:10:ac:d9:3d:7b:31:14:0e: 1e:1c:b9:68:72:0c:b5:a0:a1:f4:e2:55:84:97:f3:d9:f6:79: b6:13:e4:7b:56:98:00:2b:3b:3d:c3:55:e6:cd:a4:e2:a8:30: 5b:7c:3b:2d:56:20:48:19:f4:80:56:76:ae:db:3c:9f:dd:a0: 0a:63:d0:92:3a:42:77:8f:83:9a:fc:4c:ac:e1:11:59:97:5b: ce:1f:33:64:43:fb:39:e3:37:35:a4:19:09:08:b5:e2:13:93: 98:1f:70:aa:c5:95:17:d6:0a:da:86:53:61:d1:37:54:5a:86: 82:bb:b2:e0:a9:d5:0f:bd:87:e9:a8:23:8a:c4:23:c7:67:af: e3:42:d2:ec:00:36:52:bf:a3:fc:b7:8d:a0:4e:f8:b3:cc:4d: 92:00:95:8e:01:b3:74:fa:24:f0:70:d8:33:6f:88:f5:0c:2e: c7:f9:77:90:e5:c0:13:4a:41:fa:85:a5:3e:b9:6a:94:2d:0e: 07:3e:fc:30:62:36:9a:e8:dd:e7:c4:98:93:23:c5:a6:12:a4: 24:ac:cb:85:03:d6:db:e0:1b:2a:1e:fc:38:30:a4:01:3d:3a: 47:91:da:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJiQ8P18tN6Zs+Mn7eULnQkAeT+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTEyMDIxODE2MjJaFw0yNTEyMDYwNjEyMjJaMDMxMTAvBgNV BAMTKDIxOTU3OEVCRjQwNDQyMjc1OUFGRjM2M0Y4N0FGNzk0Q0EzOTI4N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkHCpN/DwGs1Y65MKKuXAZGwf ctSBnOYdevYqdnO2I88drD+WLyof/cp4yBgjYIF8M+az6FhrGOPfwPfM332+paE0 FVineLESMBTQbg08kxFHl3KCXhEaDme07rq25aktYaoZrp0BlIqDr2SI9ZoN/p3t VcdLp/6wjP6RP83J/DCKvigWwGViX8MW32pbTMhWfjChKzHOjR+xX00UF/P/Ohjo svpmqxMY4hfhv4dyo6TYgKequ5GaVBsQ/1M6JAZyNg3ea1s3wkFrsTWwh1UUwTT9 bBLr4C2Yb1wl3rRp5FFVVQTxGQ+hjm1aOwTzOocwHQtF07LG3PYQpJbMEcuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIZV46/QEQidZr/Nj+Hr3lMo5KHowHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhZoZ0WtxKytYgsXVGtCbIFl814lVbloR+j HQwQrNk9ezEUDh4cuWhyDLWgofTiVYSX89n2ebYT5HtWmAArOz3DVebNpOKoMFt8 Oy1WIEgZ9IBWdq7bPJ/doApj0JI6QnePg5r8TKzhEVmXW84fM2RD+znjNzWkGQkI teITk5gfcKrFlRfWCtqGU2HRN1RahoK7suCp1Q+9h+moI4rEI8dnr+NC0uwANlK/ o/y3jaBO+LPMTZIAlY4Bs3T6JPBw2DNviPUMLsf5d5DlwBNKQfqFpT65apQtDgc+ /DBiNpro3efEmJMjxaYSpCSsy4UD1tvgGyoe/DgwpAE9OkeR2hc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:27 2025 by rpki-client