This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft File: AA97B959271291FBE142491B81063AD5B04487FA.mft (raw, json) Hash identifier: RnbF5iMrQZ94EB1sOJt19gWnjsF6/Szk9ynFnvt3aPQ= Subject key identifier: 66:40:1C:90:53:E4:FB:F4:EF:44:D9:C2:C4:93:05:D1:5A:42:89:DD Authority key identifier: AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA Certificate issuer: /CN=AA97B959271291FBE142491B81063AD5B04487FA Certificate serial: 609BC21752F47519D9575BF6DB2571676F52FD78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft Manifest number: 0110 Signing time: Sat 06 Dec 2025 08:10:41 +0000 Manifest this update: Sat 06 Dec 2025 08:05:41 +0000 Manifest next update: Tue 09 Dec 2025 15:02:41 +0000 Files and hashes: 1: AA97B959271291FBE142491B81063AD5B04487FA.crl (hash: RyneHqAWPagnxhYd926qYNWmwZ0rR7wS08lHR0eAccM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9b:c2:17:52:f4:75:19:d9:57:5b:f6:db:25:71:67:6f:52:fd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA97B959271291FBE142491B81063AD5B04487FA Validity Not Before: Dec 6 08:05:41 2025 GMT Not After : Dec 9 15:02:41 2025 GMT Subject: CN=66401C9053E4FBF4EF44D9C2C49305D15A4289DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:2a:6f:7d:0e:2f:0f:f3:8d:77:fe:ee:21: 95:0a:9b:7d:b8:3f:95:4f:db:89:5c:d8:2b:56:92: 83:42:68:6e:b2:ea:99:14:7e:ec:da:c9:ba:d5:0f: c0:d1:fd:b9:b4:c9:da:79:0e:23:42:4b:5c:5c:82: 1a:5a:2c:b0:de:34:9f:d2:b8:df:02:5c:fc:5d:df: e2:97:5f:eb:fa:6d:b8:4b:53:dd:28:d7:00:73:25: b8:67:a4:25:c8:38:b2:28:bc:7c:c1:f3:a8:ec:8b: 50:ca:03:96:8f:26:04:87:26:64:07:65:f7:78:a8: c5:95:ba:64:f5:f8:de:67:55:5c:99:4f:7a:15:99: 2f:75:ac:ba:41:9b:05:e6:c1:3d:7d:d5:d2:59:9c: b3:70:9a:8e:af:90:13:94:b7:d6:5a:92:2c:b1:5f: 72:a8:01:be:7a:3d:fe:bb:b5:6b:70:e2:cc:51:b7: a7:ff:8f:73:c9:d5:96:4b:7d:61:e4:e1:87:d9:f0: ac:23:9f:5d:68:68:7c:38:a0:9f:47:01:5c:4e:00: d7:96:2f:f5:a7:80:b0:cb:95:07:96:f6:da:4d:a4: 93:7c:ec:d0:96:d6:f1:4d:b4:6c:19:a0:35:10:82: 91:5d:2d:8b:75:82:e6:2d:69:6f:f2:43:ac:bf:c8: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:40:1C:90:53:E4:FB:F4:EF:44:D9:C2:C4:93:05:D1:5A:42:89:DD X509v3 Authority Key Identifier: keyid:AA:97:B9:59:27:12:91:FB:E1:42:49:1B:81:06:3A:D5:B0:44:87:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA97B959271291FBE142491B81063AD5B04487FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ede8ccb9-0a63-49a9-aa8a-ed016ee351f0/0/AA97B959271291FBE142491B81063AD5B04487FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:aa:c7:c1:be:29:fe:d2:b5:09:28:33:00:cb:88:99:7a:6b: 8b:ef:53:78:47:e9:91:2e:0c:a7:23:cf:06:4f:3e:72:97:18: 83:20:da:c8:1d:31:df:d9:b2:ca:8c:c9:9c:48:d7:e2:ff:6a: 3a:49:55:dc:87:86:0e:51:77:fc:0f:c9:6c:10:f7:4a:91:13: 8c:73:53:67:d7:9a:91:be:c1:f3:5a:99:2d:86:82:96:14:3a: b4:d2:92:54:97:26:66:ce:5d:ba:0c:55:f7:4d:04:81:61:a3: 2f:7b:0d:82:a2:a0:2f:06:b9:25:19:ae:d0:c2:74:38:91:e6: 36:41:30:07:89:81:0f:59:d6:19:f2:10:2b:2d:d7:bb:9a:76: b0:a8:2b:e3:80:de:f0:a0:67:72:6d:11:a7:f9:62:f6:47:b9: 63:bf:b1:b9:d4:c7:b9:2c:35:b4:e1:d1:84:87:3e:c7:0f:c7: f3:75:3f:d9:29:f8:5e:07:fb:f5:06:51:d2:54:b0:d6:fc:d3: f7:3f:18:d5:8b:b9:64:b6:27:98:d7:f2:9c:90:f2:01:2b:f7: 22:ff:61:1f:4e:74:95:39:ac:05:c2:f7:82:52:95:35:ea:4e: 21:3e:6a:56:61:c0:46:87:27:e1:16:26:d1:3b:d8:91:cb:23: 0f:81:fa:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJvCF1L0dRnZV1v22yVxZ29S/XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVC MDQ0ODdGQTAeFw0yNTEyMDYwODA1NDFaFw0yNTEyMDkxNTAyNDFaMDMxMTAvBgNV BAMTKDY2NDAxQzkwNTNFNEZCRjRFRjQ0RDlDMkM0OTMwNUQxNUE0Mjg5REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYCpvfQ4vD/ONd/7uIZUKm324 P5VP24lc2CtWkoNCaG6y6pkUfuzaybrVD8DR/bm0ydp5DiNCS1xcghpaLLDeNJ/S uN8CXPxd3+KXX+v6bbhLU90o1wBzJbhnpCXIOLIovHzB86jsi1DKA5aPJgSHJmQH Zfd4qMWVumT1+N5nVVyZT3oVmS91rLpBmwXmwT191dJZnLNwmo6vkBOUt9Zakiyx X3KoAb56Pf67tWtw4sxRt6f/j3PJ1ZZLfWHk4YfZ8Kwjn11oaHw4oJ9HAVxOANeW L/WngLDLlQeW9tpNpJN87NCW1vFNtGwZoDUQgpFdLYt1guYtaW/yQ6y/yM+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkAckFPk+/TvRNnCxJMF0VpCid0wHwYDVR0j BBgwFoAUqpe5WScSkfvhQkkbgQY61bBEh/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGU4Y2NiOS0wYTYzLTQ5YTktYWE4YS1lZDAxNmVlMzUxZjAvMC9BQTk3Qjk1OTI3 MTI5MUZCRTE0MjQ5MUI4MTA2M0FENUIwNDQ4N0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNBRDVCMDQ0 ODdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRlOGNjYjktMGE2My00OWE5LWFh OGEtZWQwMTZlZTM1MWYwLzAvQUE5N0I5NTkyNzEyOTFGQkUxNDI0OTFCODEwNjNB RDVCMDQ0ODdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6qx8G+Kf7StQkoMwDLiJl6a4vvU3hH6ZEu DKcjzwZPPnKXGIMg2sgdMd/ZssqMyZxI1+L/ajpJVdyHhg5Rd/wPyWwQ90qRE4xz U2fXmpG+wfNamS2GgpYUOrTSklSXJmbOXboMVfdNBIFhoy97DYKioC8GuSUZrtDC dDiR5jZBMAeJgQ9Z1hnyECst17uadrCoK+OA3vCgZ3JtEaf5YvZHuWO/sbnUx7ks NbTh0YSHPscPx/N1P9kp+F4H+/UGUdJUsNb80/c/GNWLuWS2J5jX8pyQ8gEr9yL/ YR9OdJU5rAXC94JSlTXqTiE+alZhwEaHJ+EWJtE72JHLIw+B+pg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:40 2025 by rpki-client