This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft File: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft (raw, json) Hash identifier: oVwqVnGQHmozFQlU24g94dU+uuf49J7Cp8+MK6dPgT0= Subject key identifier: 46:FE:B5:48:B4:C3:F0:1B:75:F2:87:5D:DD:0F:C6:4F:80:4A:9A:A8 Authority key identifier: AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 Certificate issuer: /CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Certificate serial: 53C7A7A44149D33C337EBA93E63CF43040091746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft Manifest number: 01A5 Signing time: Sat 20 Dec 2025 07:02:20 +0000 Manifest this update: Sat 20 Dec 2025 06:57:20 +0000 Manifest next update: Tue 23 Dec 2025 16:46:20 +0000 Files and hashes: 1: AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl (hash: d1MZJhzYT1ElNd+ns+rivJ/0s1ARCLeYX92WYN2e+Mc=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: ojZj7Wb0FBggpx1qoMKEQ4y4llf8TivjR+QLGf4S/Ho=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: /+BkRdwruGJSc4HKq7OroI3EOR0OkznWLl2A9PIobww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c7:a7:a4:41:49:d3:3c:33:7e:ba:93:e6:3c:f4:30:40:09:17:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7 Validity Not Before: Dec 20 06:57:20 2025 GMT Not After : Dec 23 16:46:20 2025 GMT Subject: CN=46FEB548B4C3F01B75F2875DDD0FC64F804A9AA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:bd:5a:be:f1:df:98:ce:b8:a9:5e:ef:93: 15:38:f4:b6:d4:c2:61:2d:e0:eb:75:f7:28:6b:ca: 08:63:95:1a:58:9f:e2:b9:25:59:f2:80:eb:33:54: 8c:22:1a:31:a5:fb:44:e2:7b:5a:61:d3:be:cd:aa: 8d:f0:28:02:f0:da:f2:ee:e4:df:e4:66:cf:c3:90: 02:d7:12:30:f1:f5:87:9a:4b:c5:09:5b:ac:9c:3a: 7d:a5:5a:c9:8f:95:c2:5a:8b:c4:25:75:52:ab:d9: b4:18:bf:5f:56:0e:2a:16:ac:e0:7e:1a:bb:ad:6f: 5c:74:6c:34:e5:5d:98:56:72:2a:2a:92:48:b4:d9: 51:20:56:ff:fc:71:0c:2f:12:49:95:81:93:7b:e4: 17:e5:2d:77:88:16:bf:88:a4:b7:ca:43:4b:41:33: 95:39:27:d5:23:49:03:6b:a8:aa:79:a6:50:3a:b8: 69:35:89:f8:9d:a9:c3:b5:43:f9:ec:14:0e:36:05: 2d:da:e2:cc:04:b2:23:f6:c9:26:7c:de:2e:89:45: c1:5b:66:9e:e2:be:d7:dd:44:f7:6b:9d:06:e6:5e: 5a:22:5e:69:53:d3:63:c9:bf:9e:21:c7:3e:aa:2e: 12:9c:1c:ba:ab:64:79:a1:c8:7c:60:36:f2:d2:0d: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FE:B5:48:B4:C3:F0:1B:75:F2:87:5D:DD:0F:C6:4F:80:4A:9A:A8 X509v3 Authority Key Identifier: keyid:AE:A1:1B:A0:E9:BE:13:4F:2A:F5:C9:C6:9E:B1:FF:58:5E:4F:3A:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/AEA11BA0E9BE134F2AF5C9C69EB1FF585E4F3AB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:77:3f:b5:71:ea:a9:58:54:10:aa:95:42:ab:36:82:fb:b3: e8:1c:27:32:1d:0f:8a:40:0b:f9:85:96:88:82:65:e1:b1:e5: bd:3e:7a:48:53:53:fe:0c:c8:04:79:73:be:74:5f:d2:59:04: 9b:db:76:4b:e1:09:f0:66:22:c4:aa:f5:48:a2:85:aa:74:61: 89:97:50:64:8e:80:3a:fb:74:be:9e:ce:e7:c2:4c:72:bd:ca: ff:36:49:e1:05:94:b5:b3:ce:80:50:28:ef:cd:c0:38:6c:95: c0:6d:40:97:9b:d7:78:dd:d5:51:8a:a7:57:ff:fc:7d:0d:bf: 57:21:ca:93:72:66:8b:73:88:8f:c6:62:59:68:0c:24:1c:4d: 71:8c:29:00:b2:56:f0:2b:c9:40:bc:3c:ad:29:b2:fb:3d:e2: cd:4c:0b:4a:ea:4d:60:b7:8e:7a:a1:b9:aa:f7:37:51:b0:7a: bc:70:9d:62:1c:b4:d0:3f:c1:be:95:4d:ae:ab:67:6a:59:e5: 61:b8:aa:7a:82:bd:b2:35:4e:ad:ec:1b:96:01:ac:29:17:2a: 6d:a0:8d:a1:34:4c:b1:14:fd:89:af:0e:b7:ba:77:00:5d:35: 7b:f2:c1:37:e9:03:61:b6:18:90:5a:8b:47:b5:d3:f6:d1:3e: 8d:a7:a5:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8enpEFJ0zwzfrqT5jz0MEAJF0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1 RTRGM0FCNzAeFw0yNTEyMjAwNjU3MjBaFw0yNTEyMjMxNjQ2MjBaMDMxMTAvBgNV BAMTKDQ2RkVCNTQ4QjRDM0YwMUI3NUYyODc1REREMEZDNjRGODA0QTlBQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZ71avvHfmM64qV7vkxU49LbU wmEt4Ot19yhryghjlRpYn+K5JVnygOszVIwiGjGl+0Tie1ph077Nqo3wKALw2vLu 5N/kZs/DkALXEjDx9YeaS8UJW6ycOn2lWsmPlcJai8QldVKr2bQYv19WDioWrOB+ Grutb1x0bDTlXZhWcioqkki02VEgVv/8cQwvEkmVgZN75BflLXeIFr+IpLfKQ0tB M5U5J9UjSQNrqKp5plA6uGk1ifidqcO1Q/nsFA42BS3a4swEsiP2ySZ83i6JRcFb Zp7ivtfdRPdrnQbmXloiXmlT02PJv54hxz6qLhKcHLqrZHmhyHxgNvLSDUcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURv61SLTD8Bt18odd3Q/GT4BKmqgwHwYDVR0j BBgwFoAUrqEboOm+E08q9cnGnrH/WF5POrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MzYzNWUyNS04NTk5LTQ4YWUtYmRjYi1lMzIzZGZjODk2ZWMvMC9BRUExMUJBMEU5 QkUxMzRGMkFGNUM5QzY5RUIxRkY1ODVFNEYzQUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZGNTg1RTRG M0FCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvQUVBMTFCQTBFOUJFMTM0RjJBRjVDOUM2OUVCMUZG NTg1RTRGM0FCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ3P7Vx6qlYVBCqlUKrNoL7s+gcJzIdD4pA C/mFloiCZeGx5b0+ekhTU/4MyAR5c750X9JZBJvbdkvhCfBmIsSq9Uiihap0YYmX UGSOgDr7dL6ezufCTHK9yv82SeEFlLWzzoBQKO/NwDhslcBtQJeb13jd1VGKp1f/ /H0Nv1chypNyZotziI/GYlloDCQcTXGMKQCyVvAryUC8PK0psvs94s1MC0rqTWC3 jnqhuar3N1GwerxwnWIctNA/wb6VTa6rZ2pZ5WG4qnqCvbI1Tq3sG5YBrCkXKm2g jaE0TLEU/YmvDre6dwBdNXvywTfpA2G2GJBai0e10/bRPo2npes= -----END CERTIFICATE-----Generated at Sun Dec 21 18:57:33 2025 by rpki-client