This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: XIJYkVgd0tERvHcJkDfzRS/641CqxV/fwWmbGUTSfXo= Subject key identifier: 03:77:6B:B4:77:F4:AD:41:7D:A2:0B:7A:17:57:89:F4:0E:E9:C5:35 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 185AA9D67B0EA571727E91B249CB20E5374ADCF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01BC Signing time: Wed 17 Dec 2025 05:21:01 +0000 Manifest this update: Wed 17 Dec 2025 05:16:01 +0000 Manifest next update: Sat 20 Dec 2025 15:01:01 +0000 Files and hashes: 1: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: 8bTSo8VckY2jheZIFao1Z4LsI9yCOjaZ16PSFmFswF0=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 3: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:5a:a9:d6:7b:0e:a5:71:72:7e:91:b2:49:cb:20:e5:37:4a:dc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Dec 17 05:16:01 2025 GMT Not After : Dec 20 15:01:01 2025 GMT Subject: CN=03776BB477F4AD417DA20B7A175789F40EE9C535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:24:1d:91:9a:db:55:43:e7:42:ce:ec:09: de:ab:b6:9f:cd:cb:f9:ab:2e:ad:3b:e8:f9:36:8a: 31:50:71:04:a4:15:db:63:07:fe:d1:a6:4c:0e:49: 29:b1:72:2f:ac:2b:ed:9b:52:ca:be:d5:43:9b:38: 77:dd:7b:93:d8:8d:7d:5b:05:fb:ac:2b:0d:ee:de: 3d:12:d3:7b:ec:08:ed:f4:c4:8a:b9:96:7f:cc:bd: 89:9f:ed:a2:18:67:95:f6:2d:02:5e:67:fc:e4:50: be:81:e6:9f:01:10:01:fc:c1:ca:47:c0:25:be:73: ff:6b:86:42:17:7b:b4:1a:40:2d:40:e3:51:7f:d8: c5:56:35:0f:d4:cc:18:77:f6:3a:84:00:63:36:70: 5d:66:a7:d7:f7:93:21:3a:f3:a5:d7:72:76:19:02: c3:75:89:3a:5a:b3:19:72:19:30:62:8d:f7:58:64: 33:3a:a6:80:59:df:ef:01:f4:40:df:5f:5a:dc:08: 46:7e:14:f1:7e:ba:ed:f4:48:67:bb:e0:39:c2:bc: ae:cd:f2:5f:52:5b:bd:57:ff:f4:5b:c1:a7:b9:a0: 17:b4:60:7f:61:b4:c1:e8:16:36:56:b7:5d:e2:ad: 11:72:e4:52:5c:bc:4b:e2:6b:ef:e0:91:3a:ad:4b: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:77:6B:B4:77:F4:AD:41:7D:A2:0B:7A:17:57:89:F4:0E:E9:C5:35 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ee:7a:7e:a6:ae:7c:59:67:43:7b:71:10:5e:00:f7:46:f8: 2d:2f:00:0f:b4:38:20:d9:9d:1e:38:15:8b:aa:0c:7d:41:8b: 60:b5:c9:10:f9:e0:99:a9:c5:fd:36:b1:f3:56:d4:51:b9:dd: c7:0d:c5:18:d9:a2:db:68:dc:21:e1:d6:43:41:aa:34:f5:54: 1a:90:24:6e:de:13:9e:22:dc:02:35:8b:26:78:10:3d:90:78: 9f:d8:df:16:8c:ba:6e:aa:f3:9e:f5:7e:b6:ad:27:f7:6c:4d: d2:3e:6c:53:e7:4f:ae:78:34:6f:92:7b:fe:5a:36:b1:68:3a: 1e:29:1f:d6:df:75:59:d9:97:d7:26:2d:47:62:e2:24:60:9c: bd:d2:d5:e8:44:67:87:56:85:68:ae:16:1f:11:4f:a8:96:13: 9b:5b:e1:dc:bd:fa:7b:ae:28:fd:33:c1:2c:e5:3e:31:b2:f8: 4c:c0:a1:62:7f:9a:0c:0b:0a:2c:60:47:9c:9f:71:33:ef:b0: fd:7e:bb:8a:04:59:c0:63:32:54:69:5d:3d:70:b1:f2:73:b9: 66:b2:88:3b:0c:ed:03:7d:1c:19:d0:02:b3:46:6b:9c:d4:83: cc:17:d6:a9:a6:ad:86:fe:bc:60:f7:f8:b1:0f:48:e9:41:68: 9e:af:95:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFqp1nsOpXFyfpGyScsg5TdK3PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTEyMTcwNTE2MDFaFw0yNTEyMjAxNTAxMDFaMDMxMTAvBgNV BAMTKDAzNzc2QkI0NzdGNEFENDE3REEyMEI3QTE3NTc4OUY0MEVFOUM1MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMSQdkZrbVUPnQs7sCd6rtp/N y/mrLq076Pk2ijFQcQSkFdtjB/7RpkwOSSmxci+sK+2bUsq+1UObOHfde5PYjX1b BfusKw3u3j0S03vsCO30xIq5ln/MvYmf7aIYZ5X2LQJeZ/zkUL6B5p8BEAH8wcpH wCW+c/9rhkIXe7QaQC1A41F/2MVWNQ/UzBh39jqEAGM2cF1mp9f3kyE686XXcnYZ AsN1iTpasxlyGTBijfdYZDM6poBZ3+8B9EDfX1rcCEZ+FPF+uu30SGe74DnCvK7N 8l9SW71X//Rbwae5oBe0YH9htMHoFjZWt13irRFy5FJcvEvia+/gkTqtS74xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3drtHf0rUF9ogt6F1eJ9A7pxTUwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjuen6mrnxZZ0N7cRBeAPdG+C0vAA+0OCDZ nR44FYuqDH1Bi2C1yRD54Jmpxf02sfNW1FG53ccNxRjZotto3CHh1kNBqjT1VBqQ JG7eE54i3AI1iyZ4ED2QeJ/Y3xaMum6q8571fratJ/dsTdI+bFPnT654NG+Se/5a NrFoOh4pH9bfdVnZl9cmLUdi4iRgnL3S1ehEZ4dWhWiuFh8RT6iWE5tb4dy9+nuu KP0zwSzlPjGy+EzAoWJ/mgwLCixgR5yfcTPvsP1+u4oEWcBjMlRpXT1wsfJzuWay iDsM7QN9HBnQArNGa5zUg8wX1qmmrYb+vGD3+LEPSOlBaJ6vlf8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:42 2025 by rpki-client