This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: mk4DgZqtk7CC1eMz531b9JPsodGIgzjMFlt1PeniU+I= Subject key identifier: 9E:83:F6:60:C7:17:C4:39:39:BF:04:6C:69:F8:BB:99:18:B2:F2:6A Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 1B7E9BEDEB174FABC2CA3B58C19E3663C470AC1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 0324 Signing time: Mon 15 Dec 2025 13:01:52 +0000 Manifest this update: Mon 15 Dec 2025 12:56:52 +0000 Manifest next update: Thu 18 Dec 2025 19:17:52 +0000 Files and hashes: 1: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) 2: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: 8zu6JA6w/333w/eKVqZfaBA0rqrC4QpXMFbPkDWgEOg=) 3: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) 4: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 19:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7e:9b:ed:eb:17:4f:ab:c2:ca:3b:58:c1:9e:36:63:c4:70:ac:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Dec 15 12:56:52 2025 GMT Not After : Dec 18 19:17:52 2025 GMT Subject: CN=9E83F660C717C43939BF046C69F8BB9918B2F26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:3d:a2:1e:f2:c2:92:b3:a7:81:47:05:3c: 5b:8c:62:c5:40:03:e3:fa:a3:4e:28:79:2f:bc:d0: 12:cc:f4:a7:70:65:ff:ea:30:5f:fc:ba:39:4e:72: e6:ae:f2:96:23:a3:f3:a2:16:3b:a3:87:fe:d1:f4: 88:bf:f3:6c:c7:4d:ea:28:42:ed:9c:86:5b:c1:0b: 04:33:9e:17:98:44:79:32:54:3d:c3:1b:78:b6:c3: 30:e7:89:6e:30:d8:50:71:70:24:42:02:7a:8b:72: 21:65:23:0d:53:ab:da:e4:18:82:53:c7:af:06:23: b5:84:02:b9:5e:73:7e:0f:5b:73:14:b4:82:4c:76: 97:31:d6:08:f8:ca:b4:6f:db:0c:a5:f1:e8:19:d4: 20:3e:8a:6b:68:43:20:d7:f7:f7:f2:76:64:2e:8e: f5:fa:0e:b4:29:53:8b:30:45:74:8e:89:20:30:46: 46:e5:70:e8:b8:fa:ea:8e:98:e6:3a:e0:70:a3:b4: f9:1e:6e:a5:5f:df:81:41:ea:99:c7:5e:de:a7:dd: 40:4a:13:29:cd:f2:74:ae:83:41:8d:76:17:b9:cf: d3:25:99:4f:9f:7c:62:f6:2b:d4:6d:1f:28:5a:11: 70:90:17:f4:b4:66:f5:59:b7:9b:ca:96:25:28:bb: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:83:F6:60:C7:17:C4:39:39:BF:04:6C:69:F8:BB:99:18:B2:F2:6A X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:93:4f:70:c0:c4:da:30:bf:b1:f3:46:f7:a0:81:7b:b1:b9: 6e:72:f0:5d:54:18:56:85:4e:27:28:e7:51:c5:c6:8c:8e:fe: 14:70:5c:65:e3:58:aa:53:64:e0:fd:5d:ef:f4:1a:3e:f8:18: 8a:8a:54:50:25:8e:89:44:fc:39:f3:65:36:ca:6c:11:5d:20: 7b:d1:ce:ba:f0:2e:ca:8c:bf:88:d9:67:7b:24:e6:9e:b3:f3: 8b:0f:0c:17:ad:6e:04:9c:93:28:28:28:76:49:f2:64:76:da: a0:e3:5e:67:c9:31:1a:30:80:ff:1a:0a:a7:1d:39:03:1e:37: 9c:19:52:37:cd:63:2d:4c:e2:5a:02:9b:79:b7:29:45:47:ef: e4:4c:f0:7c:f4:1d:f9:c1:42:a7:b2:71:1a:58:74:b0:11:8c: ad:b5:c9:5a:d4:47:35:52:24:fe:4d:59:0b:b1:a2:92:67:58: a2:fd:4a:e8:00:f6:78:06:f0:0f:09:1b:5f:d6:67:d1:ef:cd: 79:6a:5a:2a:77:ea:73:db:b2:15:d8:c5:a3:75:24:42:01:d9: 05:01:9b:87:fc:57:81:93:97:d4:08:ee:ad:ae:99:3f:92:4c: 8c:2a:f3:10:b1:49:f9:ab:0f:ba:b4:f4:2b:3f:46:da:a3:d6: 75:b2:9a:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG36b7esXT6vCyjtYwZ42Y8RwrBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTEyMTUxMjU2NTJaFw0yNTEyMTgxOTE3NTJaMDMxMTAvBgNV BAMTKDlFODNGNjYwQzcxN0M0MzkzOUJGMDQ2QzY5RjhCQjk5MThCMkYyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWlT2iHvLCkrOngUcFPFuMYsVA A+P6o04oeS+80BLM9KdwZf/qMF/8ujlOcuau8pYjo/OiFjujh/7R9Ii/82zHTeoo Qu2chlvBCwQznheYRHkyVD3DG3i2wzDniW4w2FBxcCRCAnqLciFlIw1Tq9rkGIJT x68GI7WEArlec34PW3MUtIJMdpcx1gj4yrRv2wyl8egZ1CA+imtoQyDX9/fydmQu jvX6DrQpU4swRXSOiSAwRkblcOi4+uqOmOY64HCjtPkebqVf34FB6pnHXt6n3UBK EynN8nSug0GNdhe5z9MlmU+ffGL2K9RtHyhaEXCQF/S0ZvVZt5vKliUou42RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnoP2YMcXxDk5vwRsafi7mRiy8mowHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaTT3DAxNowv7HzRveggXuxuW5y8F1UGFaF Tico51HFxoyO/hRwXGXjWKpTZOD9Xe/0Gj74GIqKVFAljolE/DnzZTbKbBFdIHvR zrrwLsqMv4jZZ3sk5p6z84sPDBetbgSckygoKHZJ8mR22qDjXmfJMRowgP8aCqcd OQMeN5wZUjfNYy1M4loCm3m3KUVH7+RM8Hz0HfnBQqeycRpYdLARjK21yVrURzVS JP5NWQuxopJnWKL9SugA9ngG8A8JG1/WZ9HvzXlqWip36nPbshXYxaN1JEIB2QUB m4f8V4GTl9QI7q2umT+STIwq8xCxSfmrD7q09Cs/Rtqj1nWymlw= -----END CERTIFICATE-----Generated at Tue Dec 16 06:36:36 2025 by rpki-client