This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft File: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft (raw, json) Hash identifier: xz1LnSeZyLREc0pov1q+8ZqLgG3RIsyIeRaTzmiXwQY= Subject key identifier: B0:26:35:08:E5:E7:80:24:B8:84:D8:89:B7:6C:43:EE:B7:D2:BF:CA Authority key identifier: 0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 Certificate issuer: /CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Certificate serial: 6ED045824DC83491E880DF11283C51A6CA55DEBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft Manifest number: 01AB Signing time: Tue 23 Dec 2025 19:31:52 +0000 Manifest this update: Tue 23 Dec 2025 19:26:52 +0000 Manifest next update: Sat 27 Dec 2025 01:54:52 +0000 Files and hashes: 1: 3130332e38342e3230392e302f32342d3234203d3e20313336303735.roa (hash: aKqDqYBnpCKhc8gJwr/XqiZQGx53wEdqRvJeZczMctg=) 2: 323430303a613334303a3a2f33322d3332203d3e20313336303735.roa (hash: lN/0N+kBLkh9oCnDV7GHH4dEry+Eu95iWP1NL/JaKa0=) 3: 0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl (hash: w+sYxbw8u8sOh6Se99Ff7uce2Dg96zf5EafUddRujR4=) 4: 3130332e38342e3231302e302f32342d3234203d3e20313336303735.roa (hash: YVW6U8qaSLxFWjHeTdwpm9kiRp4vZO+dMYcJdXXF9qE=) 5: 3130332e38342e3231312e302f32342d3234203d3e20313336303735.roa (hash: yEcjBYMEhWAt95OnuEgZE8+ngUIiXOyjNrn3KEwiAMQ=) 6: 3130332e38342e3230382e302f32342d3234203d3e20313336303735.roa (hash: 5vckiyQJuSi5InScnRJB6lh0igVA9LU4uDMI9g1nnHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d0:45:82:4d:c8:34:91:e8:80:df:11:28:3c:51:a6:ca:55:de:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96 Validity Not Before: Dec 23 19:26:52 2025 GMT Not After : Dec 27 01:54:52 2025 GMT Subject: CN=B0263508E5E78024B884D889B76C43EEB7D2BFCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:9e:f8:52:37:01:a9:43:a3:c3:54:a8:e7: ef:df:f0:23:86:0a:5d:b7:ba:63:28:32:c9:90:b6: 3e:cd:06:06:d3:f3:78:33:99:bb:2e:de:b7:80:a5: 49:99:dd:8d:26:db:20:06:9c:3d:62:ff:0f:70:a1: f3:5b:16:1d:15:9b:ad:b7:61:97:24:4c:c5:27:92: e0:b7:d3:02:98:b7:e7:42:a2:b6:fd:23:9e:72:dc: e8:fa:6f:d3:4d:f7:ff:19:16:81:74:87:2c:3d:84: c5:e3:62:35:76:e0:87:31:c7:38:86:4c:4f:6f:f9: 90:bc:ac:39:1a:7d:58:e9:69:e8:47:69:06:08:6c: 5d:0b:ad:1d:5c:c9:b5:1d:95:7a:2c:d2:bc:f4:81: e8:82:a4:15:b9:c4:d2:a0:2b:3e:67:27:24:80:c7: b8:c8:13:eb:82:57:0a:23:e7:5a:96:f7:fb:c1:30: d2:80:f6:93:bb:d4:30:38:0c:19:45:96:d9:20:2f: 95:78:94:16:51:f5:f5:1c:eb:10:fc:d6:32:f1:60: 62:ae:3f:8b:e0:df:49:1c:39:fe:7a:d0:76:5f:00: 7a:11:55:c2:a3:96:26:92:f3:21:b7:dd:a0:35:d1: dc:ce:f1:8c:aa:e0:30:57:fc:12:1c:4d:c5:4e:bd: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:26:35:08:E5:E7:80:24:B8:84:D8:89:B7:6C:43:EE:B7:D2:BF:CA X509v3 Authority Key Identifier: keyid:0E:42:26:A5:F1:76:6A:EA:E7:68:A2:A6:76:C3:E8:B2:CA:EA:DC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae0e5ac2-b6bb-4bec-9dc9-e430a6733216/0/0E4226A5F1766AEAE768A2A676C3E8B2CAEADC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:0e:71:6c:f5:63:86:e1:60:19:e0:96:83:c0:44:fe:d2:62: d8:6c:5e:09:9b:6f:49:a5:a2:6f:9b:00:1f:92:22:ad:13:f5: 60:cb:42:a7:5b:d4:2b:ca:f9:4a:8d:8e:55:88:e9:6c:45:a9: c9:f3:e1:48:c1:49:00:e6:eb:61:30:23:57:9f:ad:f0:41:f9: 9a:fd:a1:5f:76:14:ee:4d:87:c7:d4:96:47:0d:4b:6c:e8:69: e6:6a:3e:54:58:11:c3:87:cc:dd:80:c5:c6:8e:70:2d:81:99: be:04:62:95:01:45:26:f4:be:81:9d:3b:8a:58:35:a0:87:e3: 62:2d:0a:0b:0c:f9:67:4b:bd:7a:61:05:48:03:75:39:ab:d4: 29:fd:a4:5b:9c:c5:42:45:57:b1:96:20:ea:d0:84:e9:ea:29: 8c:c6:6e:9f:86:cf:cf:3c:69:5c:19:88:01:6b:e1:cb:ea:40: f1:0e:2e:42:c9:98:e9:f3:2f:11:6d:67:be:6a:de:cd:12:ad: 52:52:08:d9:fb:1b:1e:b7:71:59:20:95:11:5e:96:94:09:79: 8f:7c:6f:3a:90:25:7d:fe:2e:ea:58:df:ef:82:ae:ae:3f:ed: 09:7c:b8:aa:22:43:ca:4d:b1:15:c4:df:8c:9c:d1:bd:0a:94: f8:52:ce:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtBFgk3INJHogN8RKDxRpspV3r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJD QUVBREM5NjAeFw0yNTEyMjMxOTI2NTJaFw0yNTEyMjcwMTU0NTJaMDMxMTAvBgNV BAMTKEIwMjYzNTA4RTVFNzgwMjRCODg0RDg4OUI3NkM0M0VFQjdEMkJGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8QJ74UjcBqUOjw1So5+/f8COG Cl23umMoMsmQtj7NBgbT83gzmbsu3reApUmZ3Y0m2yAGnD1i/w9wofNbFh0Vm623 YZckTMUnkuC30wKYt+dCorb9I55y3Oj6b9NN9/8ZFoF0hyw9hMXjYjV24IcxxziG TE9v+ZC8rDkafVjpaehHaQYIbF0LrR1cybUdlXos0rz0geiCpBW5xNKgKz5nJySA x7jIE+uCVwoj51qW9/vBMNKA9pO71DA4DBlFltkgL5V4lBZR9fUc6xD81jLxYGKu P4vg30kcOf560HZfAHoRVcKjliaS8yG33aA10dzO8Yyq4DBX/BIcTcVOvcmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsCY1COXngCS4hNiJt2xD7rfSv8owHwYDVR0j BBgwFoAUDkImpfF2aurnaKKmdsPossrq3JYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTBlNWFjMi1iNmJiLTRiZWMtOWRjOS1lNDMwYTY3MzMyMTYvMC8wRTQyMjZBNUYx NzY2QUVBRTc2OEEyQTY3NkMzRThCMkNBRUFEQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4QjJDQUVB REM5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUwZTVhYzItYjZiYi00YmVjLTlk YzktZTQzMGE2NzMzMjE2LzAvMEU0MjI2QTVGMTc2NkFFQUU3NjhBMkE2NzZDM0U4 QjJDQUVBREM5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEOcWz1Y4bhYBngloPARP7SYthsXgmbb0ml om+bAB+SIq0T9WDLQqdb1CvK+UqNjlWI6WxFqcnz4UjBSQDm62EwI1efrfBB+Zr9 oV92FO5Nh8fUlkcNS2zoaeZqPlRYEcOHzN2AxcaOcC2Bmb4EYpUBRSb0voGdO4pY NaCH42ItCgsM+WdLvXphBUgDdTmr1Cn9pFucxUJFV7GWIOrQhOnqKYzGbp+Gz888 aVwZiAFr4cvqQPEOLkLJmOnzLxFtZ75q3s0SrVJSCNn7Gx63cVkglRFelpQJeY98 bzqQJX3+LupY3++Crq4/7Ql8uKoiQ8pNsRXE34yc0b0KlPhSzvc= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:02 2025 by rpki-client