This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft (raw, json) Hash identifier: UyYWCVgu678CsxNBRl43Iz1ctjzoWAZTVdno7lAVmZM= Subject key identifier: 08:54:96:95:93:56:E2:4C:29:34:E5:F2:57:F6:2B:99:D4:F9:6B:EC Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Certificate issuer: /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Certificate serial: 31D25AA1660DE7485A99BEC0AD4996D6DE620900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft Manifest number: 03B3 Signing time: Fri 19 Dec 2025 00:11:25 +0000 Manifest this update: Fri 19 Dec 2025 00:06:25 +0000 Manifest next update: Mon 22 Dec 2025 03:28:25 +0000 Files and hashes: 1: 3130332e3136362e362e302f32332d3234203d3e203137393935.roa (hash: c8ZBxIkYu4lQhPh7KOJpCZXHyG4WojlA9cssQRO5Q3k=) 2: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl (hash: e9l1eOIwudkdaSK+00EaRtG1iuAvs4ICpckM2i0Ha/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d2:5a:a1:66:0d:e7:48:5a:99:be:c0:ad:49:96:d6:de:62:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Validity Not Before: Dec 19 00:06:25 2025 GMT Not After : Dec 22 03:28:25 2025 GMT Subject: CN=085496959356E24C2934E5F257F62B99D4F96BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:09:73:87:c9:36:59:cc:98:d8:52:98:9f: 1c:39:68:86:5d:65:69:b3:92:0d:a9:95:f1:5d:dd: 55:bb:0e:37:c4:d4:27:a4:5c:c8:92:58:02:a0:08: ef:09:3b:07:cf:f6:c0:17:cd:d3:39:c1:43:42:4e: 94:5f:aa:23:b5:04:86:3e:c2:f9:e1:77:ab:63:4f: 8d:47:e7:e0:83:ed:92:12:65:cc:f5:3a:70:5f:3b: d0:0a:6b:aa:8e:1e:04:2f:6f:12:45:fa:6d:4f:17: d2:df:46:6f:66:ec:c1:31:c0:bb:ac:77:f5:aa:f1: da:e0:e9:4c:97:33:64:eb:4d:29:dd:9f:2e:a4:14: 0b:99:fd:19:e0:ea:26:11:c7:4a:e0:9d:f6:6f:0a: 80:2f:b0:10:b3:c9:af:3d:a5:b5:a1:47:74:2a:5d: d2:c3:49:b4:90:69:58:6e:08:4a:e6:e2:2e:d7:dc: 68:9f:27:4c:80:79:91:d9:28:1e:3e:0b:a5:df:35: 16:dd:b9:35:69:99:9e:6c:05:5e:47:0b:e3:5f:fd: a6:12:ce:4c:23:98:9c:84:06:57:34:c1:17:ce:a3: d7:d5:e8:85:ab:77:49:1e:23:9b:6e:d6:95:43:55: 69:20:46:0e:18:c2:8c:1f:5d:5a:60:94:cf:19:18: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:96:95:93:56:E2:4C:29:34:E5:F2:57:F6:2B:99:D4:F9:6B:EC X509v3 Authority Key Identifier: keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:49:f3:9b:cf:cd:53:7d:72:d7:06:2b:c2:03:a9:e4:62:c0: bc:ba:89:db:e3:c9:00:3c:be:44:d8:9c:26:fb:e3:41:a2:23: 29:54:d1:68:0c:86:4a:e0:7a:25:f9:45:b0:53:58:11:33:0f: c8:03:a5:a3:0d:3b:38:3a:30:0b:62:c9:7d:56:7c:06:40:a3: b6:9c:07:95:9a:73:18:43:59:f6:96:d6:51:c8:49:56:88:67: 4a:d3:98:cd:bb:01:bb:14:a1:5d:25:56:13:79:93:62:a6:7d: 5f:f3:1e:a8:1d:6a:18:7e:ea:66:5a:97:1a:73:06:2e:12:87: dc:a7:ea:97:3b:e2:2d:e7:4f:d6:5c:23:7b:82:2d:3b:36:4c: 5f:c6:36:06:8f:19:6d:b3:51:21:55:5a:f8:67:e1:20:88:c3: 32:47:a4:62:75:9e:8d:7d:3c:eb:c1:55:7a:a7:15:fa:ec:b5: 26:ba:be:a7:a7:4a:4f:09:82:4a:97:8a:d2:df:0d:72:63:7e: 40:42:b3:4a:44:1c:7d:0b:0f:a6:b7:53:2a:39:c5:d4:0e:5d: 0a:94:8f:c0:33:2a:c4:20:87:17:ef:a4:de:3c:ce:74:6d:a9: 3d:f6:35:57:7f:20:be:18:f0:f8:10:f1:a8:14:37:4a:c7:f8: a1:49:50:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdJaoWYN50hamb7ArUmW1t5iCQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB NDIzRDMxODAeFw0yNTEyMTkwMDA2MjVaFw0yNTEyMjIwMzI4MjVaMDMxMTAvBgNV BAMTKDA4NTQ5Njk1OTM1NkUyNEMyOTM0RTVGMjU3RjYyQjk5RDRGOTZCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcfglzh8k2WcyY2FKYnxw5aIZd ZWmzkg2plfFd3VW7DjfE1CekXMiSWAKgCO8JOwfP9sAXzdM5wUNCTpRfqiO1BIY+ wvnhd6tjT41H5+CD7ZISZcz1OnBfO9AKa6qOHgQvbxJF+m1PF9LfRm9m7MExwLus d/Wq8drg6UyXM2TrTSndny6kFAuZ/Rng6iYRx0rgnfZvCoAvsBCzya89pbWhR3Qq XdLDSbSQaVhuCErm4i7X3GifJ0yAeZHZKB4+C6XfNRbduTVpmZ5sBV5HC+Nf/aYS zkwjmJyEBlc0wRfOo9fV6IWrd0keI5tu1pVDVWkgRg4YwowfXVpglM8ZGEJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCFSWlZNW4kwpNOXyV/YrmdT5a+wwHwYDVR0j BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz RDMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOTJlODktOTJkNS00MDY0LTk1 MTEtMDY3ZTM1MzY3OWNlLzAvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2 NzlBNDIzRDMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBJ85vPzVN9ctcGK8IDqeRiwLy6idvjyQA8 vkTYnCb740GiIylU0WgMhkrgeiX5RbBTWBEzD8gDpaMNOzg6MAtiyX1WfAZAo7ac B5WacxhDWfaW1lHISVaIZ0rTmM27AbsUoV0lVhN5k2KmfV/zHqgdahh+6mZalxpz Bi4Sh9yn6pc74i3nT9ZcI3uCLTs2TF/GNgaPGW2zUSFVWvhn4SCIwzJHpGJ1no19 POvBVXqnFfrstSa6vqenSk8JgkqXitLfDXJjfkBCs0pEHH0LD6a3Uyo5xdQOXQqU j8AzKsQghxfvpN48znRtqT32NVd/IL4Y8PgQ8agUN0rH+KFJUM0= -----END CERTIFICATE-----Generated at Sat Dec 20 18:04:38 2025 by rpki-client