This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft File: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft (raw, json) Hash identifier: 7thqjA/eIV1H/B4QyuVYM7RIXkqeEnUU1PhvONXUT4E= Subject key identifier: 00:22:61:C7:F8:F8:35:76:1C:AF:E7:B2:8E:39:15:91:F0:DD:C6:11 Authority key identifier: AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 Certificate issuer: /CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Certificate serial: 0E7A4D11F500923BE567A8429718746D1ECA6EE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft Manifest number: 026C Signing time: Fri 19 Dec 2025 00:10:06 +0000 Manifest this update: Fri 19 Dec 2025 00:05:06 +0000 Manifest next update: Mon 22 Dec 2025 01:29:06 +0000 Files and hashes: 1: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: 6/L9OB0QhOR5SC/rJGv7qWwyRwcieoK2AORJh70ewMo=) 2: AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl (hash: Fb6bjnQBRteoAM7MpyRhPzio0IXgUFGRX7pCm63RhdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7a:4d:11:f5:00:92:3b:e5:67:a8:42:97:18:74:6d:1e:ca:6e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEFE27D29E7A975983A240B53A6F71C785F7E9A6 Validity Not Before: Dec 19 00:05:06 2025 GMT Not After : Dec 22 01:29:06 2025 GMT Subject: CN=002261C7F8F835761CAFE7B28E391591F0DDC611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:7b:57:3d:89:1d:ef:52:b8:6e:e3:bf:2a: 2a:e0:33:80:ed:d3:8d:50:9d:8e:c7:d3:ca:35:10: f3:78:d8:23:83:97:02:63:b6:f0:65:2f:94:ec:2d: 5d:78:0e:b2:38:b9:ea:f5:e0:32:1e:bd:97:c2:27: 37:ad:54:de:69:b7:25:73:10:8d:96:df:14:78:4a: 2a:60:16:6b:df:1a:b4:3e:9f:32:3e:1f:ae:55:84: d4:df:58:b4:10:ba:cf:5d:57:b3:b4:41:e6:89:6c: 4f:16:d1:ec:d7:16:04:25:d9:a5:7f:b1:e7:8f:9a: 24:b4:9c:df:5e:f0:ef:14:ad:88:5a:6f:58:87:2c: 3d:62:58:a9:7e:82:f0:cb:9e:e0:41:83:bf:5f:2b: 6d:74:e2:a7:3f:c9:a2:b9:32:69:6d:e4:64:f2:17: 4a:73:05:68:14:5b:3a:ab:89:79:51:62:7b:18:76: d8:b6:42:7c:da:ba:08:d9:e9:96:ae:58:02:71:6d: 59:3f:d5:db:75:9c:e6:f1:aa:a5:37:5e:2b:60:81: 85:ab:e7:49:51:88:f9:f9:16:2d:87:43:79:56:88: b6:26:c8:6a:be:2d:c1:39:d5:af:36:f7:4c:48:75: 8c:38:06:6c:49:08:9f:01:ef:7a:5b:dc:09:85:34: 04:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:22:61:C7:F8:F8:35:76:1C:AF:E7:B2:8E:39:15:91:F0:DD:C6:11 X509v3 Authority Key Identifier: keyid:AE:FE:27:D2:9E:7A:97:59:83:A2:40:B5:3A:6F:71:C7:85:F7:E9:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/AEFE27D29E7A975983A240B53A6F71C785F7E9A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e4:e7:07:3e:43:f6:0e:ee:5a:4e:7d:0d:e8:11:e8:71:dc: 8e:d2:bf:0a:34:92:3c:64:01:78:45:f9:8a:48:7e:ea:a5:4e: 36:b5:11:ec:f2:74:15:b4:b5:05:2b:ab:29:7b:31:84:66:ad: dd:ca:06:b1:ff:29:b6:27:81:31:33:ad:55:14:7c:2a:21:44: 01:40:09:c8:f0:cc:d2:f8:88:c2:3c:0c:e5:b6:32:4c:ce:43: 1d:a3:c4:bd:a0:00:ac:a2:32:77:be:f5:f0:5a:55:db:a4:cd: ef:8c:e9:1c:21:2c:b2:55:55:5b:e8:a4:dc:ad:aa:0b:0c:11: 22:64:e2:3d:16:71:09:68:d7:55:e2:2c:07:36:ef:25:5a:03: ec:58:00:1a:5f:3e:f4:e5:1a:06:0f:0a:c2:cb:6d:a5:6c:7e: fe:1b:7e:e0:32:56:a9:d5:8c:29:d9:27:33:63:05:59:87:dc: 64:ed:b2:88:18:3a:c3:91:18:da:45:fa:4f:cf:21:b4:18:e3: f2:d7:b2:c4:25:9b:e2:3a:e0:81:b9:87:75:5a:1c:97:36:e3: 89:c8:51:4b:a8:1f:69:f5:1e:92:62:14:4e:6d:9c:15:38:36: 44:ac:2d:81:9e:af:0f:05:ae:3c:5f:0d:04:51:b5:84:be:04: bb:74:da:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnpNEfUAkjvlZ6hClxh0bR7KbuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4 NUY3RTlBNjAeFw0yNTEyMTkwMDA1MDZaFw0yNTEyMjIwMTI5MDZaMDMxMTAvBgNV BAMTKDAwMjI2MUM3RjhGODM1NzYxQ0FGRTdCMjhFMzkxNTkxRjBEREM2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVntXPYkd71K4buO/KirgM4Dt 041QnY7H08o1EPN42CODlwJjtvBlL5TsLV14DrI4uer14DIevZfCJzetVN5ptyVz EI2W3xR4SipgFmvfGrQ+nzI+H65VhNTfWLQQus9dV7O0QeaJbE8W0ezXFgQl2aV/ seePmiS0nN9e8O8UrYhab1iHLD1iWKl+gvDLnuBBg79fK2104qc/yaK5Mmlt5GTy F0pzBWgUWzqriXlRYnsYdti2QnzaugjZ6ZauWAJxbVk/1dt1nObxqqU3XitggYWr 50lRiPn5Fi2HQ3lWiLYmyGq+LcE51a8290xIdYw4BmxJCJ8B73pb3AmFNAQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUACJhx/j4NXYcr+eyjjkVkfDdxhEwHwYDVR0j BBgwFoAUrv4n0p56l1mDokC1Om9xx4X36aYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzc2ZjJlNS1kZmJkLTRmN2YtOGIzZC03Yjk3MGQ1NDFiOGYvMC9BRUZFMjdEMjlF N0E5NzU5ODNBMjQwQjUzQTZGNzFDNzg1RjdFOUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2RjcxQzc4NUY3 RTlBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvQUVGRTI3RDI5RTdBOTc1OTgzQTI0MEI1M0E2Rjcx Qzc4NUY3RTlBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXk5wc+Q/YO7lpOfQ3oEehx3I7Svwo0kjxk AXhF+YpIfuqlTja1EezydBW0tQUrqyl7MYRmrd3KBrH/KbYngTEzrVUUfCohRAFA CcjwzNL4iMI8DOW2MkzOQx2jxL2gAKyiMne+9fBaVdukze+M6RwhLLJVVVvopNyt qgsMESJk4j0WcQlo11XiLAc27yVaA+xYABpfPvTlGgYPCsLLbaVsfv4bfuAyVqnV jCnZJzNjBVmH3GTtsogYOsORGNpF+k/PIbQY4/LXssQlm+I64IG5h3VaHJc244nI UUuoH2n1HpJiFE5tnBU4NkSsLYGerw8FrjxfDQRRtYS+BLt02p0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:02 2025 by rpki-client