This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft File: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft (raw, json) Hash identifier: GT9KxWxTET7cJn7SeNeeVhQLaASOa09bZ52DQPQ4ZMI= Subject key identifier: E5:40:04:19:B0:9C:B0:C0:B3:CB:21:65:35:8C:EA:AD:4C:41:38:EF Authority key identifier: AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC Certificate issuer: /CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Certificate serial: 030340DBA2633FE317E3F3A655E6CFA9707F4653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft Manifest number: 17 Signing time: Wed 17 Dec 2025 16:31:44 +0000 Manifest this update: Wed 17 Dec 2025 16:26:44 +0000 Manifest next update: Sun 21 Dec 2025 03:57:44 +0000 Files and hashes: 1: AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl (hash: lvwYBjy3Riyhd109Gx1VSjxBSdXD+ArgjgiOBGC58Eo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 03:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:03:40:db:a2:63:3f:e3:17:e3:f3:a6:55:e6:cf:a9:70:7f:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE770A20B89B0B5C494310A5DC21DE5EE2417CDC Validity Not Before: Dec 17 16:26:44 2025 GMT Not After : Dec 21 03:57:44 2025 GMT Subject: CN=E5400419B09CB0C0B3CB2165358CEAAD4C4138EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:87:b1:b3:0f:b5:ae:e9:75:1c:06:d0:34:7b: da:2f:db:81:27:0a:90:2b:7b:16:fd:f9:3f:49:a6: 7a:0d:f4:83:78:30:90:a2:e2:6d:20:5a:32:15:36: b5:c8:21:30:18:a6:2f:fb:9b:ce:1d:75:5e:e6:34: 19:49:df:79:e2:3c:72:b1:f9:b6:07:a3:4a:2c:c4: fa:24:a1:f3:c0:c0:ea:42:f5:c3:a4:05:18:b2:09: e9:f1:cb:b8:c8:f9:25:db:1f:01:41:4b:13:41:15: f8:7f:eb:44:3d:f7:b6:3a:e2:59:a1:93:e5:ab:e2: 25:a5:7c:c4:fc:95:8b:3b:f1:6b:f6:20:b6:1c:a3: 96:ba:8f:aa:2a:64:84:f7:57:7d:7a:e5:67:e1:2e: 49:f4:eb:5a:08:4e:cb:96:b7:e2:ce:95:db:d5:46: 11:78:e3:f2:3b:c2:9d:96:f8:e1:c4:59:dc:a6:22: 3a:89:e0:0e:53:af:ed:ea:19:dc:e9:e5:38:77:e4: 95:4e:ac:61:7c:71:38:64:52:e7:68:ee:cc:d3:ec: 1c:4d:64:58:f1:b1:e2:96:65:3f:34:27:21:36:58: 21:14:0c:b4:3a:7e:e4:b8:af:d2:bb:f6:b8:64:82: 7a:4b:1e:99:64:58:4b:be:15:08:26:80:c4:4d:fe: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:40:04:19:B0:9C:B0:C0:B3:CB:21:65:35:8C:EA:AD:4C:41:38:EF X509v3 Authority Key Identifier: keyid:AE:77:0A:20:B8:9B:0B:5C:49:43:10:A5:DC:21:DE:5E:E2:41:7C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b783762e-2b26-4374-ae64-0b6f0552211e/0/AE770A20B89B0B5C494310A5DC21DE5EE2417CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:69:06:2c:ac:bf:8d:a9:16:cc:77:d3:ff:ad:49:45:d3:49: 1d:1b:c1:9b:bd:7c:09:68:ac:0b:a4:a4:77:3b:8c:fa:8b:07: 51:84:08:42:8e:c5:d3:69:f5:d5:43:9b:35:9c:60:43:f4:5b: e3:57:33:fd:49:b3:7e:24:22:b8:90:6b:5c:f4:f3:2d:e5:ee: 74:93:52:d3:36:32:15:f2:26:a9:05:01:ec:71:6d:3d:af:f8: e7:08:e9:45:30:9e:d5:3d:fa:80:8d:47:68:e7:cb:d8:5e:79: 3f:fb:0e:c7:0d:67:f9:51:2b:9e:f6:35:bf:0c:29:7a:86:9f: db:d2:b5:2e:25:d0:ea:bb:d9:29:0e:a2:7d:ed:48:4f:e9:64: ac:c9:43:34:ee:7e:83:aa:85:1c:d2:3f:2f:4b:d0:11:dd:86: ad:bb:83:35:9e:ea:06:fa:e6:c0:5d:ca:49:eb:7f:eb:24:46: 3b:06:cc:b8:18:fd:0e:4c:10:d3:63:00:a6:1a:95:19:0d:bf: 45:2b:2b:a5:c7:be:82:e7:60:b3:79:5a:78:d1:44:1f:57:ed: 71:12:6d:c1:ab:51:94:89:d5:11:62:24:c8:a5:6c:34:94:0a: e9:1b:b0:a7:bf:14:2d:d7:9d:82:bc:e2:cb:c3:fa:e4:ee:ac: 8d:b1:1d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwNA26JjP+MX4/OmVebPqXB/RlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVF MjQxN0NEQzAeFw0yNTEyMTcxNjI2NDRaFw0yNTEyMjEwMzU3NDRaMDMxMTAvBgNV BAMTKEU1NDAwNDE5QjA5Q0IwQzBCM0NCMjE2NTM1OENFQUFENEM0MTM4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZh7GzD7Wu6XUcBtA0e9ov24En CpArexb9+T9JpnoN9IN4MJCi4m0gWjIVNrXIITAYpi/7m84ddV7mNBlJ33niPHKx +bYHo0osxPokofPAwOpC9cOkBRiyCenxy7jI+SXbHwFBSxNBFfh/60Q997Y64lmh k+Wr4iWlfMT8lYs78Wv2ILYco5a6j6oqZIT3V3165WfhLkn061oITsuWt+LOldvV RhF44/I7wp2W+OHEWdymIjqJ4A5Tr+3qGdzp5Th35JVOrGF8cThkUudo7szT7BxN ZFjxseKWZT80JyE2WCEUDLQ6fuS4r9K79rhkgnpLHplkWEu+FQgmgMRN/hLDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5UAEGbCcsMCzyyFlNYzqrUxBOO8wHwYDVR0j BBgwFoAUrncKILibC1xJQxCl3CHeXuJBfNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzgzNzYyZS0yYjI2LTQzNzQtYWU2NC0wYjZmMDU1MjIxMWUvMC9BRTc3MEEyMEI4 OUIwQjVDNDk0MzEwQTVEQzIxREU1RUUyNDE3Q0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURFNUVFMjQx N0NEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjc4Mzc2MmUtMmIyNi00Mzc0LWFl NjQtMGI2ZjA1NTIyMTFlLzAvQUU3NzBBMjBCODlCMEI1QzQ5NDMxMEE1REMyMURF NUVFMjQxN0NEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtpBiysv42pFsx30/+tSUXTSR0bwZu9fAlo rAukpHc7jPqLB1GECEKOxdNp9dVDmzWcYEP0W+NXM/1Js34kIriQa1z08y3l7nST UtM2MhXyJqkFAexxbT2v+OcI6UUwntU9+oCNR2jny9heeT/7DscNZ/lRK572Nb8M KXqGn9vStS4l0Oq72SkOon3tSE/pZKzJQzTufoOqhRzSPy9L0BHdhq27gzWe6gb6 5sBdyknrf+skRjsGzLgY/Q5MENNjAKYalRkNv0UrK6XHvoLnYLN5WnjRRB9X7XES bcGrUZSJ1RFiJMilbDSUCukbsKe/FC3XnYK84svD+uTurI2xHbg= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:26 2025 by rpki-client