This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: q/ry4TxJVERLciqIid0ahxCAC6rWT18Vj4XUKk+uRes= Subject key identifier: 84:40:79:13:DD:B1:1E:87:C9:4B:D3:6C:28:EA:74:6F:A9:E0:37:8A Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 08DA63B2D53146B21ADE9E930FE3430B701DD042 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: EB Signing time: Fri 19 Dec 2025 13:52:46 +0000 Manifest this update: Fri 19 Dec 2025 13:47:46 +0000 Manifest next update: Tue 23 Dec 2025 01:43:46 +0000 Files and hashes: 1: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) 2: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) 3: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: zEcprL9/bVAr3+lEYjGaFvYjFMzyLbi9cIQimza0nSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 01:43:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:da:63:b2:d5:31:46:b2:1a:de:9e:93:0f:e3:43:0b:70:1d:d0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Dec 19 13:47:46 2025 GMT Not After : Dec 23 01:43:46 2025 GMT Subject: CN=84407913DDB11E87C94BD36C28EA746FA9E0378A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:43:eb:3d:3b:1e:7e:67:03:13:5d:f8:11: 98:b0:24:07:94:15:e2:e9:64:2a:29:c1:58:81:60: 95:ce:11:04:c1:fb:85:26:bd:db:43:20:3b:0e:16: b3:01:46:69:fd:bc:ff:0e:90:3b:4c:8f:22:89:75: 6d:c4:c5:4e:cb:cd:ed:f0:eb:be:d5:38:3b:bb:67: 97:75:fe:b0:1d:1c:4c:88:a2:29:f5:91:a1:03:69: fb:68:5f:0a:bb:c4:41:72:40:63:f9:fa:48:5f:d8: 17:20:46:c6:e3:8a:f3:9a:fd:4d:d2:2a:92:62:32: 84:ce:15:52:e0:ef:a2:b1:bc:ef:0c:1c:12:8c:f9: b6:3c:56:98:14:86:77:6d:9d:6e:7d:7c:c5:fc:77: 6b:23:1f:23:9e:16:4a:14:5d:44:67:b5:73:6c:15: 95:45:b0:42:cc:d9:1f:5b:bd:de:87:84:e4:78:e3: ae:20:a3:a0:d8:d3:8d:1e:b4:13:0c:84:ba:f0:fe: 52:cc:ec:e8:e0:d1:ef:bd:3a:75:5f:8a:e1:11:c4: f7:24:c4:48:12:7c:fb:6e:4e:c2:a2:bc:52:ea:e2: 5c:33:12:fc:53:47:19:87:3c:2e:1f:32:d5:a0:68: f1:33:fb:99:5d:56:95:90:6a:14:7f:56:27:48:a9: 06:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:40:79:13:DD:B1:1E:87:C9:4B:D3:6C:28:EA:74:6F:A9:E0:37:8A X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f7:1e:4f:76:4a:d2:af:19:bf:57:ee:65:9a:80:f1:94:e9: 61:52:ea:4b:3f:fc:ee:08:a3:db:42:fc:4e:be:97:7e:03:f5: 19:ad:ae:35:61:67:20:5a:47:ed:eb:e5:34:70:4c:87:0c:de: 35:ba:91:9c:c8:9d:f3:a0:87:f0:f2:a1:e8:c7:c4:90:cb:e7: 26:72:8e:32:f4:c5:86:d6:02:3d:1a:e2:8a:37:dc:62:fc:c6: 18:3f:08:1f:1e:c7:19:b1:6d:9b:66:8e:68:3d:c0:70:c9:74: d0:42:9b:2b:fc:b2:5a:06:a7:65:6e:32:84:14:56:48:00:6a: 26:54:e5:f6:ae:df:ef:7a:d9:f9:e2:35:7e:c2:85:ef:3f:32: 7d:0c:c7:79:d2:ab:fd:d9:88:26:6d:24:5e:92:f1:a6:d9:05: 60:4e:ad:e8:79:11:be:06:eb:fa:d3:65:6e:1e:e8:9d:f7:6e: 52:43:cf:ba:40:cb:fa:7b:94:13:54:6a:f8:bf:e2:b3:2d:69: 6b:a1:84:0b:18:08:d6:c9:79:e1:d1:68:fe:7a:3a:1d:5b:ec: 5d:65:67:99:72:45:36:7e:3f:ae:71:f4:a0:4b:43:3e:3f:9c: e0:a9:1b:10:09:64:44:24:c4:0d:0e:3f:f5:25:61:2f:5a:de: 94:d5:3f:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCNpjstUxRrIa3p6TD+NDC3Ad0EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNTEyMTkxMzQ3NDZaFw0yNTEyMjMwMTQzNDZaMDMxMTAvBgNV BAMTKDg0NDA3OTEzRERCMTFFODdDOTRCRDM2QzI4RUE3NDZGQTlFMDM3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKEPrPTsefmcDE134EZiwJAeU FeLpZCopwViBYJXOEQTB+4UmvdtDIDsOFrMBRmn9vP8OkDtMjyKJdW3ExU7Lze3w 677VODu7Z5d1/rAdHEyIoin1kaEDaftoXwq7xEFyQGP5+khf2BcgRsbjivOa/U3S KpJiMoTOFVLg76KxvO8MHBKM+bY8VpgUhndtnW59fMX8d2sjHyOeFkoUXURntXNs FZVFsELM2R9bvd6HhOR4464go6DY040etBMMhLrw/lLM7Ojg0e+9OnVfiuERxPck xEgSfPtuTsKivFLq4lwzEvxTRxmHPC4fMtWgaPEz+5ldVpWQahR/VidIqQYtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEB5E92xHofJS9NsKOp0b6ngN4owHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD3Hk92StKvGb9X7mWagPGU6WFS6ks//O4I o9tC/E6+l34D9RmtrjVhZyBaR+3r5TRwTIcM3jW6kZzInfOgh/DyoejHxJDL5yZy jjL0xYbWAj0a4oo33GL8xhg/CB8exxmxbZtmjmg9wHDJdNBCmyv8sloGp2VuMoQU VkgAaiZU5fau3+962fniNX7Che8/Mn0Mx3nSq/3ZiCZtJF6S8abZBWBOreh5Eb4G 6/rTZW4e6J33blJDz7pAy/p7lBNUavi/4rMtaWuhhAsYCNbJeeHRaP56Oh1b7F1l Z5lyRTZ+P65x9KBLQz4/nOCpGxAJZEQkxA0OP/UlYS9a3pTVPwE= -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:45 2025 by rpki-client