This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft File: AEB84984B4021FC01344F3D02190FDED8607E7FA.mft (raw, json) Hash identifier: jFexr/+r90+90FKLw+s6zF0UJm1EklP8fqcH5c2Eh0I= Subject key identifier: E3:F8:19:74:8F:09:CE:70:32:9B:9A:55:85:33:1E:1F:08:A2:82:47 Authority key identifier: AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA Certificate issuer: /CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Certificate serial: 43FB581F03714CA1AECC5A64866910F4ECBE5F16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft Manifest number: 01BD Signing time: Fri 19 Dec 2025 15:01:05 +0000 Manifest this update: Fri 19 Dec 2025 14:56:05 +0000 Manifest next update: Mon 22 Dec 2025 15:27:05 +0000 Files and hashes: 1: 3130332e3132322e322e302f32342d3234203d3e20313430333839.roa (hash: tbN19feblT3PguVaZeJVSZOFHq52R/v7NXiFpVjRDJ4=) 2: 3130332e3132322e332e302f32342d3234203d3e20313430333839.roa (hash: H/C8JBNaVqOow9m1g+QZ6kwM7JKkj4ce0Cna5R3evE0=) 3: AEB84984B4021FC01344F3D02190FDED8607E7FA.crl (hash: ZGvA0WyYLCgy+YtGawcLKw7daK1fIPxYlUKgnYRqDSE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 15:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fb:58:1f:03:71:4c:a1:ae:cc:5a:64:86:69:10:f4:ec:be:5f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB84984B4021FC01344F3D02190FDED8607E7FA Validity Not Before: Dec 19 14:56:05 2025 GMT Not After : Dec 22 15:27:05 2025 GMT Subject: CN=E3F819748F09CE70329B9A5585331E1F08A28247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ae:00:e5:46:0d:7f:28:8b:b4:e7:2b:34:aa: c5:f1:22:3e:58:db:87:c0:db:8b:9e:69:0e:17:ca: f3:e9:d0:68:b5:88:2b:61:97:57:db:6f:df:0a:fa: 71:b2:66:29:79:77:57:f4:74:f9:cf:87:b2:9c:f2: da:73:a6:44:76:cb:f0:6f:40:d7:ae:04:a7:79:5d: b2:e9:89:c7:72:7c:be:be:b7:f6:37:24:04:4d:15: a7:a7:f7:f6:34:bf:a8:13:e6:b9:1c:f6:dc:dd:9b: fb:c1:d0:a4:2d:c2:d8:d9:e3:d0:f2:9b:d6:2d:93: 55:ce:16:a8:ba:7c:9f:bb:86:b2:33:03:1f:ee:ac: 0a:bb:cd:b3:04:89:db:6d:42:0e:59:95:30:ca:ae: 79:59:82:0c:99:54:92:4c:8a:ac:e7:12:dd:7e:2b: ca:71:51:b4:e4:40:4c:76:55:ce:0e:9c:4c:c3:6d: 4b:0d:28:44:fb:56:94:83:b6:04:81:87:8b:e7:6a: b3:6a:98:a5:3d:d8:64:73:dd:cb:25:d7:d4:bd:71: b1:1a:4b:f8:1c:69:6c:97:fa:b5:2d:ef:47:30:ba: d4:6c:55:72:6e:72:f2:9c:36:29:2a:57:97:db:b0: 17:b9:1d:7a:88:4f:f5:a3:77:ca:13:62:26:dc:4c: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F8:19:74:8F:09:CE:70:32:9B:9A:55:85:33:1E:1F:08:A2:82:47 X509v3 Authority Key Identifier: keyid:AE:B8:49:84:B4:02:1F:C0:13:44:F3:D0:21:90:FD:ED:86:07:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB84984B4021FC01344F3D02190FDED8607E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b21955f0-4b40-4c3b-9fff-9f9258c3975a/0/AEB84984B4021FC01344F3D02190FDED8607E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:af:21:a4:70:01:86:f3:51:62:15:0c:85:47:46:e9:ed:3f: 77:66:1f:b9:a0:30:40:a8:16:cc:7e:7b:0c:16:81:d9:5c:ab: 2c:ce:66:65:9f:9b:ce:48:08:1f:81:97:05:e1:79:b4:55:e4: d6:d3:26:7e:e9:79:36:16:89:dc:3b:9d:3e:a1:d7:25:d8:e3: bf:8e:72:03:72:72:8c:b9:25:d4:2d:65:12:fb:b1:3e:b5:34: fc:f9:f9:76:9b:a1:f3:5d:91:0b:a4:50:11:5d:f2:9f:4b:b4: f7:3b:de:3f:07:b4:d6:30:1b:e2:24:50:36:1d:72:79:7c:14: a7:b9:ba:b1:d7:0a:e2:c7:ee:e6:bc:03:27:92:f9:23:98:9c: 3c:67:55:28:d6:b1:f6:23:2c:6e:9f:19:87:43:93:57:aa:47: f4:e0:66:5b:e9:e1:7d:41:2f:77:57:2b:3e:c1:65:e1:5c:aa: 2a:19:a9:44:3d:0b:dd:ef:d0:59:79:4f:14:a1:40:9b:f8:e8: 3c:99:79:08:50:03:42:e3:b5:f4:d8:52:17:18:46:84:f9:16: 07:9b:63:8f:e1:4b:bd:c0:b2:18:98:1e:e1:0a:de:e2:32:26: b2:3c:1f:3d:2e:f9:45:38:fa:2f:e9:3f:f4:c2:ec:d7:b9:ae: 90:49:61:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/tYHwNxTKGuzFpkhmkQ9Oy+XxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4 NjA3RTdGQTAeFw0yNTEyMTkxNDU2MDVaFw0yNTEyMjIxNTI3MDVaMDMxMTAvBgNV BAMTKEUzRjgxOTc0OEYwOUNFNzAzMjlCOUE1NTg1MzMxRTFGMDhBMjgyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrgDlRg1/KIu05ys0qsXxIj5Y 24fA24ueaQ4XyvPp0Gi1iCthl1fbb98K+nGyZil5d1f0dPnPh7Kc8tpzpkR2y/Bv QNeuBKd5XbLpicdyfL6+t/Y3JARNFaen9/Y0v6gT5rkc9tzdm/vB0KQtwtjZ49Dy m9Ytk1XOFqi6fJ+7hrIzAx/urAq7zbMEidttQg5ZlTDKrnlZggyZVJJMiqznEt1+ K8pxUbTkQEx2Vc4OnEzDbUsNKET7VpSDtgSBh4vnarNqmKU92GRz3csl19S9cbEa S/gcaWyX+rUt70cwutRsVXJucvKcNikqV5fbsBe5HXqIT/Wjd8oTYibcTHYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4/gZdI8JznAym5pVhTMeHwiigkcwHwYDVR0j BBgwFoAUrrhJhLQCH8ATRPPQIZD97YYH5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjE5NTVmMC00YjQwLTRjM2ItOWZmZi05ZjkyNThjMzk3NWEvMC9BRUI4NDk4NEI0 MDIxRkMwMTM0NEYzRDAyMTkwRkRFRDg2MDdFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZERUQ4NjA3 RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIxOTU1ZjAtNGI0MC00YzNiLTlm ZmYtOWY5MjU4YzM5NzVhLzAvQUVCODQ5ODRCNDAyMUZDMDEzNDRGM0QwMjE5MEZE RUQ4NjA3RTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESvIaRwAYbzUWIVDIVHRuntP3dmH7mgMECo Fsx+ewwWgdlcqyzOZmWfm85ICB+BlwXhebRV5NbTJn7peTYWidw7nT6h1yXY47+O cgNycoy5JdQtZRL7sT61NPz5+XabofNdkQukUBFd8p9LtPc73j8HtNYwG+IkUDYd cnl8FKe5urHXCuLH7ua8AyeS+SOYnDxnVSjWsfYjLG6fGYdDk1eqR/TgZlvp4X1B L3dXKz7BZeFcqioZqUQ9C93v0Fl5TxShQJv46DyZeQhQA0LjtfTYUhcYRoT5Fgeb Y4/hS73AshiYHuEK3uIyJrI8Hz0u+UU4+i/pP/TC7Ne5rpBJYUw= -----END CERTIFICATE-----Generated at Sat Dec 20 06:53:52 2025 by rpki-client