This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft File: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft (raw, json) Hash identifier: PRwNCZtkshAOxnNtdX4YFoQN3YvgWmLzPiSfLj7GkXk= Subject key identifier: 99:A6:83:63:76:0B:D7:FE:BA:95:51:8E:81:A2:D1:6F:C3:1A:AC:DB Authority key identifier: AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 Certificate issuer: /CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Certificate serial: 70C64F841FC7FFB1D563F245882183446B2C44F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft Manifest number: 01D9 Signing time: Wed 17 Dec 2025 11:50:02 +0000 Manifest this update: Wed 17 Dec 2025 11:45:02 +0000 Manifest next update: Sat 20 Dec 2025 12:01:02 +0000 Files and hashes: 1: 3130332e3132312e39382e302f32332d3234203d3e20313335343738.roa (hash: GPnT4OvDeWk1bAtYzHobscFEm6YNT5Lhx62DmcP7fds=) 2: AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl (hash: husaB9og/FJnaGGZzoOYWR79/rm+4JshGRkBiTM0DWc=) 3: 3130332e3132312e39362e302f32332d3234203d3e20313335343738.roa (hash: RnKgDW9wdrC56sDhfWMDinF+rBG/5N7j8kbqHRnbaj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c6:4f:84:1f:c7:ff:b1:d5:63:f2:45:88:21:83:44:6b:2c:44:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE12581F3D20A87088DAAE24374CC2D8FE34FA12 Validity Not Before: Dec 17 11:45:02 2025 GMT Not After : Dec 20 12:01:02 2025 GMT Subject: CN=99A68363760BD7FEBA95518E81A2D16FC31AACDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bd:69:19:a5:64:99:c8:d2:1b:9c:fd:46:29: 7b:23:54:c7:a0:bd:04:32:4b:83:ff:aa:9a:eb:cb: be:35:54:49:b2:1d:aa:fb:50:28:6c:66:9b:e1:8c: 16:16:ec:44:9c:86:c8:a9:f6:6f:f6:a9:18:ab:52: 1e:cf:90:e0:c5:d3:1c:d9:2c:2c:ac:0a:7c:7d:e6: 45:94:28:dc:a8:f5:7d:0d:82:fa:1f:62:5b:40:a7: 6d:a9:02:76:99:db:49:94:8d:bc:46:16:f5:02:9f: 4b:f7:07:02:12:9b:46:80:1b:e2:1b:d0:f4:13:75: bf:78:0a:ae:56:03:b2:93:2b:25:02:b3:8e:20:7f: be:9f:ba:63:1f:d0:2e:80:31:3f:ac:2d:54:b8:3d: 80:20:f9:6b:00:12:69:17:36:e1:91:60:2d:07:10: f6:90:a1:00:d5:42:23:c3:d9:ed:62:43:11:47:03: cc:05:d6:db:b3:a8:87:36:bb:6a:45:ea:e6:7c:e8: bc:e0:09:15:84:86:dc:d6:10:31:2f:86:51:41:5a: f3:33:45:41:2a:b4:7a:49:37:3d:71:f7:fd:1b:2c: 5b:d7:d0:38:90:92:cb:c6:50:97:ee:b6:03:c7:db: b3:8a:81:d7:94:b1:10:b3:cb:78:89:0a:82:15:d1: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A6:83:63:76:0B:D7:FE:BA:95:51:8E:81:A2:D1:6F:C3:1A:AC:DB X509v3 Authority Key Identifier: keyid:AE:12:58:1F:3D:20:A8:70:88:DA:AE:24:37:4C:C2:D8:FE:34:FA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b377461d-fe4f-4961-92e5-9655af25754a/0/AE12581F3D20A87088DAAE24374CC2D8FE34FA12.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:6c:f2:20:65:7c:4b:53:78:c2:26:f7:a8:7e:88:30:f2: f5:b5:aa:7a:e9:73:b8:94:db:9a:90:73:62:1c:35:49:6e:9f: 18:e0:6f:68:a7:87:54:6a:62:12:20:69:00:d8:17:0a:90:d7: 1c:f5:3a:e9:45:e5:f3:c6:55:67:1d:9d:ad:38:ac:90:11:9c: b7:88:04:0c:73:39:06:93:78:e0:42:01:bb:2e:3f:8b:73:92: bb:fa:dc:56:0d:d1:52:65:c3:e2:69:b4:cd:4b:dc:fb:d6:d0: ac:b3:71:3d:9a:20:c7:4a:cc:c3:56:cf:28:c9:b6:4d:93:70: 9d:09:a8:17:0e:45:6d:23:20:d1:e4:4a:ad:a1:f5:e7:b2:46: 99:8e:71:6a:53:af:ce:dc:89:75:6a:69:80:80:56:d3:9a:83: d9:73:82:f0:94:bb:06:9b:0f:d5:a8:93:d8:80:6c:b3:02:96: 79:6c:0d:7a:34:5d:df:e9:f2:8d:f7:6c:cc:d9:c7:63:bd:81: 7b:53:40:2d:42:79:ef:8d:e0:6c:76:a5:b3:dd:b7:c1:0c:0b: cf:0f:6f:ab:6b:f3:90:8f:32:37:bf:a5:17:a9:2f:38:3f:bd: 7b:d2:e1:ac:7b:d2:5e:77:20:93:2a:7a:0b:06:c0:b5:b1:3c: 51:82:b3:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMZPhB/H/7HVY/JFiCGDRGssRPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhG RTM0RkExMjAeFw0yNTEyMTcxMTQ1MDJaFw0yNTEyMjAxMjAxMDJaMDMxMTAvBgNV BAMTKDk5QTY4MzYzNzYwQkQ3RkVCQTk1NTE4RTgxQTJEMTZGQzMxQUFDREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvWkZpWSZyNIbnP1GKXsjVMeg vQQyS4P/qprry741VEmyHar7UChsZpvhjBYW7ESchsip9m/2qRirUh7PkODF0xzZ LCysCnx95kWUKNyo9X0NgvofYltAp22pAnaZ20mUjbxGFvUCn0v3BwISm0aAG+Ib 0PQTdb94Cq5WA7KTKyUCs44gf76fumMf0C6AMT+sLVS4PYAg+WsAEmkXNuGRYC0H EPaQoQDVQiPD2e1iQxFHA8wF1tuzqIc2u2pF6uZ86LzgCRWEhtzWEDEvhlFBWvMz RUEqtHpJNz1x9/0bLFvX0DiQksvGUJfutgPH27OKgdeUsRCzy3iJCoIV0WIxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmaaDY3YL1/66lVGOgaLRb8MarNswHwYDVR0j BBgwFoAUrhJYHz0gqHCI2q4kN0zC2P40+hIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzc3NDYxZC1mZTRmLTQ5NjEtOTJlNS05NjU1YWYyNTc1NGEvMC9BRTEyNTgxRjNE MjBBODcwODhEQUFFMjQzNzRDQzJEOEZFMzRGQTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0MyRDhGRTM0 RkExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM3NzQ2MWQtZmU0Zi00OTYxLTky ZTUtOTY1NWFmMjU3NTRhLzAvQUUxMjU4MUYzRDIwQTg3MDg4REFBRTI0Mzc0Q0My RDhGRTM0RkExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWobPIgZXxLU3jCJveofogw8vW1qnrpc7iU 25qQc2IcNUlunxjgb2inh1RqYhIgaQDYFwqQ1xz1OulF5fPGVWcdna04rJARnLeI BAxzOQaTeOBCAbsuP4tzkrv63FYN0VJlw+JptM1L3PvW0KyzcT2aIMdKzMNWzyjJ tk2TcJ0JqBcORW0jINHkSq2h9eeyRpmOcWpTr87ciXVqaYCAVtOag9lzgvCUuwab D9Wok9iAbLMClnlsDXo0Xd/p8o33bMzZx2O9gXtTQC1Cee+N4Gx2pbPdt8EMC88P b6tr85CPMje/pRepLzg/vXvS4ax70l53IJMqegsGwLWxPFGCs4M= -----END CERTIFICATE-----Generated at Fri Dec 19 18:13:18 2025 by rpki-client