This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft File: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft (raw, json) Hash identifier: kOoyFbkeVjIS9m+LIZt4jZlUZ2gPypmM6U4KbcDJEqA= Subject key identifier: 78:AD:5D:04:22:8C:FA:AD:D1:13:BB:7E:53:38:EF:69:8C:B1:0F:AF Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 Certificate issuer: /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Certificate serial: 3B151101D1B6A260422E28C113E7111B5D9DEA36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft Manifest number: 0208 Signing time: Sat 20 Dec 2025 02:42:28 +0000 Manifest this update: Sat 20 Dec 2025 02:37:27 +0000 Manifest next update: Tue 23 Dec 2025 03:42:27 +0000 Files and hashes: 1: 3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (hash: aDPjpRT6pfd3T7ltNqLLQRA6RqqiOtEG5C4gW/hEaTI=) 2: 3130332e31372e3134332e302f32342d3234203d3e2039333431.roa (hash: 0GFIWUiUrqRfAE/w3eKveKOv4M+2LjJoosY6Pp8ypUc=) 3: 3130332e31372e3134322e302f32332d3233203d3e2039333431.roa (hash: 7zBTS0bU7PgzGa8PCcebIzMScdeyLBIAzKr1yoDxbbo=) 4: AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl (hash: eGwcsr9aKkpDQzrcm4iKG0p20LaoXUx/ApAzMFm39IM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 03:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:15:11:01:d1:b6:a2:60:42:2e:28:c1:13:e7:11:1b:5d:9d:ea:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40 Validity Not Before: Dec 20 02:37:27 2025 GMT Not After : Dec 23 03:42:27 2025 GMT Subject: CN=78AD5D04228CFAADD113BB7E5338EF698CB10FAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:06:0d:c7:37:19:0b:7f:a4:6f:59:7b:3a:9f: f2:32:44:e4:c1:6d:01:7d:65:60:84:59:56:c9:d1: bb:e3:8f:a2:97:7c:19:de:d5:f8:13:e4:d6:84:e3: 0e:20:95:b2:92:44:1d:db:3b:47:e0:ce:6d:7c:b2: 5e:0c:08:61:33:78:2b:bc:d1:bc:1d:da:44:fe:40: a4:b3:86:4a:85:3b:34:0c:4a:76:22:50:aa:4a:53: ec:50:a6:70:d1:a4:c5:e4:b3:97:1b:da:e3:1c:bc: 2b:f4:f3:f7:ad:d0:e2:5c:c6:32:ef:4b:1b:4e:8a: 64:6f:6e:ae:3b:54:19:5e:63:00:48:2b:ed:cd:32: ad:f2:e3:6b:6a:10:00:88:7a:ca:56:c8:8b:47:2f: bb:04:2e:c6:4c:c2:05:75:16:ac:02:45:ab:6f:3d: e0:db:fc:64:85:1d:f5:8e:fe:1b:2b:75:30:c8:2a: 99:39:7e:2b:8c:c7:c1:ae:c6:61:4f:32:e1:ed:17: e7:94:dd:1c:ac:e3:aa:07:6f:b0:0c:91:e8:c2:29: ec:44:76:5d:0e:fc:81:53:c7:55:b4:6b:f7:55:a7: db:4b:11:a6:c7:84:1d:48:ab:54:f7:61:e0:e1:c5: b2:ae:38:45:82:64:99:3c:df:6c:ed:47:86:3c:96: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:5D:04:22:8C:FA:AD:D1:13:BB:7E:53:38:EF:69:8C:B1:0F:AF X509v3 Authority Key Identifier: keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:db:65:1d:87:6b:00:b1:0c:3b:80:86:d6:8c:f6:df:03:53: 4a:38:05:94:09:98:71:c9:e0:2a:fc:be:1e:d2:ab:22:ce:c4: f4:4d:1c:09:de:f6:c5:8c:31:84:e3:ea:15:54:d1:70:81:ab: 05:9e:97:2d:97:ef:c3:0c:90:97:9b:ed:05:38:4d:a4:e1:f9: 53:26:9d:40:4e:a6:d6:d6:ad:68:26:5a:fd:fb:92:4d:5d:29: 26:ed:ed:22:c8:85:e4:23:ee:8e:70:e2:61:fc:86:77:e1:0e: 8a:6b:53:e0:51:c5:cb:95:59:e2:9b:de:b8:70:4a:5d:1d:10: 07:7c:c1:11:22:15:b8:ed:35:0c:23:22:c8:16:32:d4:91:0d: c9:8a:33:aa:f6:df:55:bb:32:20:13:54:3c:9c:7b:f5:f4:66: af:33:5e:9e:a9:b2:3f:94:95:c9:b1:6a:32:01:51:5b:5d:6e: 7c:ac:fd:bb:84:9a:16:36:19:dc:4c:23:cf:c7:f3:c8:9d:b8: 44:a8:80:a7:d4:67:af:a2:ce:82:9a:ee:61:c5:00:b7:00:a8: 21:c9:69:4c:19:ed:dc:8b:08:c1:04:a2:b3:be:49:42:f1:1e: 99:79:bf:63:62:08:f8:28:cb:7c:13:a2:8d:8e:11:f1:ae:16: f6:07:08:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxURAdG2omBCLijBE+cRG12d6jYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2 QzgwREM0MDAeFw0yNTEyMjAwMjM3MjdaFw0yNTEyMjMwMzQyMjdaMDMxMTAvBgNV BAMTKDc4QUQ1RDA0MjI4Q0ZBQUREMTEzQkI3RTUzMzhFRjY5OENCMTBGQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQBg3HNxkLf6RvWXs6n/IyROTB bQF9ZWCEWVbJ0bvjj6KXfBne1fgT5NaE4w4glbKSRB3bO0fgzm18sl4MCGEzeCu8 0bwd2kT+QKSzhkqFOzQMSnYiUKpKU+xQpnDRpMXks5cb2uMcvCv08/et0OJcxjLv SxtOimRvbq47VBleYwBIK+3NMq3y42tqEACIespWyItHL7sELsZMwgV1FqwCRatv PeDb/GSFHfWO/hsrdTDIKpk5fiuMx8GuxmFPMuHtF+eU3Rys46oHb7AMkejCKexE dl0O/IFTx1W0a/dVp9tLEabHhB1Iq1T3YeDhxbKuOEWCZJk832ztR4Y8lrSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeK1dBCKM+q3RE7t+UzjvaYyxD68wHwYDVR0j BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2 RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw REM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc1OTQ3NmUtNmFkYi00ZjJlLWJl NzUtODQ2NzI1OWUxMjhmLzAvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5 RjM2QzgwREM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXbZR2HawCxDDuAhtaM9t8DU0o4BZQJmHHJ 4Cr8vh7SqyLOxPRNHAne9sWMMYTj6hVU0XCBqwWely2X78MMkJeb7QU4TaTh+VMm nUBOptbWrWgmWv37kk1dKSbt7SLIheQj7o5w4mH8hnfhDoprU+BRxcuVWeKb3rhw Sl0dEAd8wREiFbjtNQwjIsgWMtSRDcmKM6r231W7MiATVDyce/X0Zq8zXp6psj+U lcmxajIBUVtdbnys/buEmhY2GdxMI8/H88iduESogKfUZ6+izoKa7mHFALcAqCHJ aUwZ7dyLCMEEorO+SULxHpl5v2NiCPgoy3wToo2OEfGuFvYHCOw= -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:21 2025 by rpki-client