This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft File: AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft (raw, json) Hash identifier: 9zX1HsOgfPRdRQeLRaoC/E3Q11MZeQ/KqSD/6fT5Dfs= Subject key identifier: 99:93:D1:86:45:BB:91:3F:4A:B5:17:8B:FF:6A:3E:29:42:22:AA:1F Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 Certificate issuer: /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Certificate serial: 4B1A339E09ED9DA5AF3B7E746C4B03065B2119C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft Manifest number: 01D0 Signing time: Tue 02 Dec 2025 21:11:15 +0000 Manifest this update: Tue 02 Dec 2025 21:06:15 +0000 Manifest next update: Fri 05 Dec 2025 23:32:15 +0000 Files and hashes: 1: 3130332e3132312e3138302e302f32332d3234203d3e20313335343738.roa (hash: 1u3Z1lk6zXunvZlCpm0Bd5q9QPJyu+B5fC/Cft7A8RQ=) 2: AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl (hash: yjOzj8yl4QlL11sP6ogVfv7NC1acrqEyo/rWgFsEmwk=) 3: 3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (hash: x8NZlNlUyvGMlN8hhsJWtoHxl7LoXb2c6+KaZM2DY1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1a:33:9e:09:ed:9d:a5:af:3b:7e:74:6c:4b:03:06:5b:21:19:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20 Validity Not Before: Dec 2 21:06:15 2025 GMT Not After : Dec 5 23:32:15 2025 GMT Subject: CN=9993D18645BB913F4AB5178BFF6A3E294222AA1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:c0:70:08:e5:e3:46:f1:d8:4d:27:52:3f: 72:be:1a:8a:f5:c1:69:bd:f1:8f:b8:8a:2e:75:85: 34:6e:34:18:64:22:f5:d9:11:06:5b:b7:eb:02:57: 72:f0:58:0c:34:1c:48:38:58:4e:cd:d0:96:a2:8c: 63:1c:e1:42:34:8f:15:53:40:1e:8d:cb:de:f4:61: 41:4f:31:99:fb:9e:81:1a:af:d9:7b:03:5a:29:16: 66:21:4e:7c:d3:f1:bb:82:91:9f:5e:35:5a:b5:81: f7:7e:06:c5:ab:4b:91:92:e9:03:97:00:81:ff:5e: 92:3c:74:05:20:87:65:92:95:e8:4f:58:07:1c:27: 30:9b:18:42:2d:9b:b6:a5:a3:0b:76:31:fc:19:d7: 37:a6:89:fe:c9:20:a6:1d:e0:4a:da:36:5c:8c:a4: b6:87:d1:b7:18:3b:1a:78:30:a9:e9:27:af:e8:b2: 88:49:48:61:19:3f:0d:4a:aa:3b:3b:30:d6:24:fe: f5:f7:ea:dd:bb:a7:e1:ea:6a:ea:05:87:5a:0d:8b: f1:b2:ce:8a:cd:51:d0:63:76:f0:7f:ec:50:69:4f: 95:e0:ce:ba:62:5b:2b:ce:6f:d0:57:21:f8:62:fe: 40:7a:81:32:26:99:d0:db:3b:d3:35:eb:d7:23:ea: a2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:D1:86:45:BB:91:3F:4A:B5:17:8B:FF:6A:3E:29:42:22:AA:1F X509v3 Authority Key Identifier: keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cb:fd:da:3d:7e:a7:65:a0:70:32:2c:c2:02:50:25:b9:c3: c0:12:fe:36:52:0c:89:24:73:4d:ed:2f:3d:87:dd:7e:5c:e5: cb:2d:0d:a7:86:3e:ab:db:aa:82:97:5d:bc:2e:ab:74:e3:ac: fc:bb:d7:2b:ff:91:81:21:0c:0a:25:e2:e6:09:ee:3a:69:8f: 76:0e:a8:f0:d0:89:ec:87:b2:09:db:3c:0b:5f:87:98:32:6e: f6:33:a4:38:48:35:23:68:1a:fe:17:53:cb:6f:20:9d:8d:e5: 1b:4a:59:e0:51:2e:31:e9:34:73:07:9d:1a:fc:b4:16:8c:0f: db:98:86:13:1d:54:ba:7f:e8:68:dc:9a:ac:10:2f:3f:67:e6: 6f:96:95:64:4a:e0:f3:47:6a:fa:1a:70:6a:46:b7:44:24:81: fc:b1:66:e7:ca:8a:30:39:72:8c:82:0c:bd:d5:a2:6a:ce:a7: 55:da:f2:08:2f:a2:ef:d4:8c:c2:ef:be:79:f7:c7:92:86:c0: e5:7c:f3:6a:75:6e:7c:25:05:25:21:ad:79:fb:b9:ed:85:9d: 96:6d:fb:19:d9:d6:0c:93:d1:82:04:c1:59:e5:ec:73:20:f6: c3:fa:fa:44:ff:eb:61:26:04:4d:43:c4:83:34:06:9d:1f:a2: 35:1e:a1:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxozngntnaWvO350bEsDBlshGcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2 OUZGNUUyMDAeFw0yNTEyMDIyMTA2MTVaFw0yNTEyMDUyMzMyMTVaMDMxMTAvBgNV BAMTKDk5OTNEMTg2NDVCQjkxM0Y0QUI1MTc4QkZGNkEzRTI5NDIyMkFBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJcBwCOXjRvHYTSdSP3K+Gor1 wWm98Y+4ii51hTRuNBhkIvXZEQZbt+sCV3LwWAw0HEg4WE7N0JaijGMc4UI0jxVT QB6Ny970YUFPMZn7noEar9l7A1opFmYhTnzT8buCkZ9eNVq1gfd+BsWrS5GS6QOX AIH/XpI8dAUgh2WSlehPWAccJzCbGEItm7alowt2MfwZ1zemif7JIKYd4EraNlyM pLaH0bcYOxp4MKnpJ6/osohJSGEZPw1Kqjs7MNYk/vX36t27p+HqauoFh1oNi/Gy zorNUdBjdvB/7FBpT5XgzrpiWyvOb9BXIfhi/kB6gTImmdDbO9M169cj6qJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZPRhkW7kT9KtReL/2o+KUIiqh8wHwYDVR0j BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG NUUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWU4OTVjZWItMjc3Ny00YWQ5LTky ZGItNDg3M2U0ODVjMWY2LzAvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUx NkM2OUZGNUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/L/do9fqdloHAyLMICUCW5w8AS/jZSDIkk c03tLz2H3X5c5cstDaeGPqvbqoKXXbwuq3TjrPy71yv/kYEhDAol4uYJ7jppj3YO qPDQieyHsgnbPAtfh5gybvYzpDhINSNoGv4XU8tvIJ2N5RtKWeBRLjHpNHMHnRr8 tBaMD9uYhhMdVLp/6GjcmqwQLz9n5m+WlWRK4PNHavoacGpGt0QkgfyxZufKijA5 coyCDL3VomrOp1Xa8ggvou/UjMLvvnn3x5KGwOV882p1bnwlBSUhrXn7ue2FnZZt +xnZ1gyT0YIEwVnl7HMg9sP6+kT/62EmBE1DxIM0Bp0fojUeoe0= -----END CERTIFICATE-----Generated at Wed Dec 3 12:44:55 2025 by rpki-client