This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: Wpa3hBywn7JvW6ucf5OCCjFXVS/Yj7k0RA0RCs1WUD4= Subject key identifier: 1A:F7:66:EB:34:4E:2A:73:51:73:FE:AD:A3:29:A2:06:45:09:B2:E7 Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 31A7EC12DDC5F307B45EF6BCC440D0198769ED2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01AE Signing time: Tue 30 Dec 2025 18:21:16 +0000 Manifest this update: Tue 30 Dec 2025 18:16:16 +0000 Manifest next update: Fri 02 Jan 2026 21:56:16 +0000 Files and hashes: 1: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) 2: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: F2yHIdC3lD8ISD9s5ANU4Z9Jb4Uz2hxe3ZvO/Kf715k=) 3: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 4: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 5: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 6: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 21:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a7:ec:12:dd:c5:f3:07:b4:5e:f6:bc:c4:40:d0:19:87:69:ed:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Dec 30 18:16:16 2025 GMT Not After : Jan 2 21:56:16 2026 GMT Subject: CN=1AF766EB344E2A735173FEADA329A2064509B2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:9a:18:1f:ea:7a:e9:98:a4:62:61:cd:f5: 97:9e:e1:69:f6:27:1d:71:f9:5f:ef:b6:9c:d6:2c: fb:8f:a7:90:f4:c1:fb:28:c8:ad:d0:4a:0e:c2:5b: ec:31:1e:b7:da:e9:e0:1a:fe:31:b1:46:62:c4:7a: 7b:40:a0:5c:e8:f2:34:4d:d6:a5:81:65:a4:6a:9c: 33:31:18:6c:2f:8b:fa:2c:ee:47:4c:eb:7d:db:e1: 07:57:9e:dc:1b:42:73:27:e3:f5:8d:73:b5:72:fc: aa:9d:c0:e1:94:06:e9:80:44:5a:9f:34:c4:17:27: aa:e4:a9:a2:74:e1:89:bc:e8:fb:c8:d1:1e:e9:1b: d6:08:4a:a8:36:34:ba:a5:79:c7:bd:7b:58:cc:84: 55:4c:21:fe:1e:39:10:3a:a1:89:73:67:21:61:15: d7:77:ac:b1:4c:06:2f:c4:91:4a:e1:b2:68:5a:c8: fb:55:fa:d9:b6:a9:a0:17:c9:c6:f6:64:e2:25:08: 1f:ff:d1:93:57:89:92:82:c6:a0:b6:fa:f9:07:af: 10:1d:96:51:ed:83:7b:b7:3a:57:dc:a8:b8:5e:c9: 95:57:d8:8f:aa:e3:83:d0:12:b5:c6:25:20:cc:b7: 56:be:1e:12:d7:5f:54:51:36:16:da:b7:0b:c8:6b: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F7:66:EB:34:4E:2A:73:51:73:FE:AD:A3:29:A2:06:45:09:B2:E7 X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:0d:ae:d0:cf:4c:0d:5f:57:bf:88:9f:3b:b8:2c:ee:e0:d6: 05:0c:78:b4:07:44:e7:2f:13:63:3f:f9:09:ea:e6:47:f9:9b: df:7e:4b:b7:f2:e4:36:17:af:6c:de:6d:4f:b0:a4:d1:09:5b: 63:d8:da:a8:1b:9d:23:77:57:92:23:f6:5d:e4:d8:dd:65:00: ed:b3:c7:47:b7:36:ad:45:ad:e3:49:28:9a:a5:b7:3a:2d:f3: ce:9e:d3:ff:b2:f1:4b:a1:f9:29:1f:a1:30:d8:2f:62:5c:da: 2d:74:dc:94:9b:b4:20:98:31:72:89:c8:cb:29:dd:ff:9e:4b: ab:54:64:50:47:e3:cb:7b:7e:a6:2c:d3:7d:f0:b8:51:7f:ea: 80:72:de:7a:7c:76:36:24:c3:2b:4d:f0:56:0e:ef:2e:f3:71: ee:3a:f8:ed:f5:e5:b5:10:73:b7:72:81:38:bc:1d:0a:ef:80: 63:a7:00:a5:31:1c:0c:55:5a:c6:76:79:c5:ec:21:9d:2d:3a: 1b:dc:83:86:85:11:7a:67:5e:69:d1:ad:07:c0:14:ba:c8:41: e1:0e:90:50:0f:c4:01:09:e5:c2:84:c9:31:e4:67:f0:f7:fe: d5:db:9a:fd:8e:23:92:ed:5f:2c:0a:36:af:a1:00:76:4b:5b: 27:84:8a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMafsEt3F8we0Xva8xEDQGYdp7S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTEyMzAxODE2MTZaFw0yNjAxMDIyMTU2MTZaMDMxMTAvBgNV BAMTKDFBRjc2NkVCMzQ0RTJBNzM1MTczRkVBREEzMjlBMjA2NDUwOUIyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbJoYH+p66ZikYmHN9Zee4Wn2 Jx1x+V/vtpzWLPuPp5D0wfsoyK3QSg7CW+wxHrfa6eAa/jGxRmLEentAoFzo8jRN 1qWBZaRqnDMxGGwvi/os7kdM633b4QdXntwbQnMn4/WNc7Vy/KqdwOGUBumARFqf NMQXJ6rkqaJ04Ym86PvI0R7pG9YISqg2NLqlece9e1jMhFVMIf4eORA6oYlzZyFh Fdd3rLFMBi/EkUrhsmhayPtV+tm2qaAXycb2ZOIlCB//0ZNXiZKCxqC2+vkHrxAd llHtg3u3OlfcqLheyZVX2I+q44PQErXGJSDMt1a+HhLXX1RRNhbatwvIa0hhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvdm6zROKnNRc/6toymiBkUJsucwHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsNrtDPTA1fV7+Inzu4LO7g1gUMeLQHROcv E2M/+Qnq5kf5m99+S7fy5DYXr2zebU+wpNEJW2PY2qgbnSN3V5Ij9l3k2N1lAO2z x0e3Nq1FreNJKJqltzot886e0/+y8Uuh+SkfoTDYL2Jc2i103JSbtCCYMXKJyMsp 3f+eS6tUZFBH48t7fqYs033wuFF/6oBy3np8djYkwytN8FYO7y7zce46+O315bUQ c7dygTi8HQrvgGOnAKUxHAxVWsZ2ecXsIZ0tOhvcg4aFEXpnXmnRrQfAFLrIQeEO kFAPxAEJ5cKEyTHkZ/D3/tXbmv2OI5LtXywKNq+hAHZLWyeEinI= -----END CERTIFICATE-----Generated at Wed Dec 31 02:00:57 2025 by rpki-client