This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft File: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft (raw, json) Hash identifier: Q3iUzvSOm5lzcMQP31H4RoRpIS17GZiUak2m5L7FEBc= Subject key identifier: 45:72:EF:C7:3F:D4:B0:25:C3:CB:D8:84:76:E2:FA:A9:2F:1F:07:3B Authority key identifier: AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 Certificate issuer: /CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Certificate serial: 59B21769C844641824EBC42BD6EC89922C5F7731 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft Manifest number: 0325 Signing time: Wed 17 Dec 2025 19:21:57 +0000 Manifest this update: Wed 17 Dec 2025 19:16:57 +0000 Manifest next update: Sun 21 Dec 2025 05:26:57 +0000 Files and hashes: 1: 3130332e32312e3232342e302f32342d3234203d3e20313331373430.roa (hash: gOoZfgSIZIk3IBqctpdE6ERoqLaD97A4ApFjnTt/tAE=) 2: 34332e3234352e3234392e302f32342d3234203d3e20313331373430.roa (hash: jtOEt7E3nAQ6Fw9cITIUUkvRpfUDsJxH4CxbFv1xpGk=) 3: AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl (hash: /zgCNhzNIbj8gtlPiy98bWqlTL84LR8JFCkwggmKEC0=) 4: 34332e3234352e3234382e302f32342d3234203d3e20313331373430.roa (hash: U53MbJZVdHMZelcGWK9+w7EaXlcDpDpc+jeZ3MbM1Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b2:17:69:c8:44:64:18:24:eb:c4:2b:d6:ec:89:92:2c:5f:77:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AEB32FFA0007C0A067FB8CE9DD77CFEF92310504 Validity Not Before: Dec 17 19:16:57 2025 GMT Not After : Dec 21 05:26:57 2025 GMT Subject: CN=4572EFC73FD4B025C3CBD88476E2FAA92F1F073B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:31:34:0b:de:93:e6:50:d5:63:03:50:f1: 09:e4:8b:73:35:e9:d6:88:cc:2a:96:57:f4:46:0d: f5:07:9d:73:3d:7b:ec:5a:be:17:24:3e:35:1e:44: ee:08:f1:dc:38:e0:77:99:08:bb:1e:3e:0c:8c:34: cc:d2:4b:7d:2b:b7:71:a4:f7:50:ed:11:60:08:ec: 95:de:ec:31:00:58:c7:fb:11:9d:f6:23:23:39:b0: e5:8e:6e:36:73:57:29:61:e6:ad:19:77:ed:9b:c6: cf:5b:83:5a:7a:c5:13:22:c3:db:85:c2:11:dc:a7: 8e:a2:ec:39:a1:06:90:48:84:68:1e:f6:81:ee:4c: 62:db:f1:eb:41:03:52:85:71:fb:6a:a9:da:8f:4f: 8b:e2:8c:ce:df:20:68:cd:1e:3c:50:6f:de:e9:21: 20:c0:4e:8c:5a:12:1e:79:aa:07:91:ad:bd:4a:44: 95:68:8c:1f:a4:92:a0:8f:f3:5f:04:51:87:f1:00: b1:ba:11:a0:b1:00:19:69:6c:b8:72:03:14:ce:21: 8c:cf:ce:c2:e7:9a:b4:de:8d:77:13:8d:60:d4:26: 83:5a:60:6e:14:dc:19:cb:6a:da:a3:91:a3:dd:f7: b1:ca:92:62:61:80:5f:32:8f:3a:36:a9:ea:89:d8: 1f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:72:EF:C7:3F:D4:B0:25:C3:CB:D8:84:76:E2:FA:A9:2F:1F:07:3B X509v3 Authority Key Identifier: keyid:AE:B3:2F:FA:00:07:C0:A0:67:FB:8C:E9:DD:77:CF:EF:92:31:05:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f832b-5a9e-4caa-bdd4-2634727a9ed4/0/AEB32FFA0007C0A067FB8CE9DD77CFEF92310504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:1f:b4:4f:55:28:1d:b3:5c:8c:5d:3a:f7:4c:3f:85:29:1c: dc:a1:47:85:66:09:70:59:0a:8e:23:6e:a0:07:f4:21:b2:b8: f2:9b:49:15:97:da:d6:94:7a:95:20:b2:9f:e4:76:20:16:54: 91:db:47:50:9b:f4:36:1d:75:93:19:9c:14:8a:a3:f6:ed:f7: b3:51:b5:94:8a:fe:a4:4e:5c:4b:bc:ad:4f:94:57:65:c5:93: 74:43:fd:c4:4a:69:47:27:22:e7:38:fe:27:d5:e0:5c:3e:8b: a1:06:fd:04:9c:b4:34:f6:47:26:6d:2b:7f:41:38:a0:9b:3d: 2f:2e:ee:ab:4a:d1:d8:ce:1b:c7:23:d0:cb:34:37:57:92:19: ce:05:a6:f6:b9:67:ca:1d:91:e0:bb:ef:d8:a6:63:16:3b:34: da:77:6e:24:aa:de:48:bf:ce:f1:23:b8:a9:51:d8:ba:c8:20: e0:93:94:77:f1:4e:5e:d4:ee:23:1b:41:68:a4:57:9f:06:5d: b4:6f:2b:ab:d4:a0:40:2c:c6:52:11:d3:d2:94:30:bd:2f:57: 0d:27:86:ee:55:8f:92:78:89:95:2f:f9:7d:89:3f:04:fe:99: e4:55:25:e7:92:08:d8:06:1c:fb:bf:62:70:20:29:63:b1:67: 52:2b:c9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWbIXachEZBgk68Qr1uyJkixfdzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5 MjMxMDUwNDAeFw0yNTEyMTcxOTE2NTdaFw0yNTEyMjEwNTI2NTdaMDMxMTAvBgNV BAMTKDQ1NzJFRkM3M0ZENEIwMjVDM0NCRDg4NDc2RTJGQUE5MkYxRjA3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpzE0C96T5lDVYwNQ8Qnki3M1 6daIzCqWV/RGDfUHnXM9e+xavhckPjUeRO4I8dw44HeZCLsePgyMNMzSS30rt3Gk 91DtEWAI7JXe7DEAWMf7EZ32IyM5sOWObjZzVylh5q0Zd+2bxs9bg1p6xRMiw9uF whHcp46i7DmhBpBIhGge9oHuTGLb8etBA1KFcftqqdqPT4vijM7fIGjNHjxQb97p ISDAToxaEh55qgeRrb1KRJVojB+kkqCP818EUYfxALG6EaCxABlpbLhyAxTOIYzP zsLnmrTejXcTjWDUJoNaYG4U3BnLatqjkaPd97HKkmJhgF8yjzo2qeqJ2B9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURXLvxz/UsCXDy9iEduL6qS8fBzswHwYDVR0j BBgwFoAUrrMv+gAHwKBn+4zp3XfP75IxBQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmODMyYi01YTllLTRjYWEtYmRkNC0yNjM0NzI3YTllZDQvMC9BRUIzMkZGQTAw MDdDMEEwNjdGQjhDRTlERDc3Q0ZFRjkyMzEwNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NGRUY5MjMx MDUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjgzMmItNWE5ZS00Y2FhLWJk ZDQtMjYzNDcyN2E5ZWQ0LzAvQUVCMzJGRkEwMDA3QzBBMDY3RkI4Q0U5REQ3N0NG RUY5MjMxMDUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEftE9VKB2zXIxdOvdMP4UpHNyhR4VmCXBZ Co4jbqAH9CGyuPKbSRWX2taUepUgsp/kdiAWVJHbR1Cb9DYddZMZnBSKo/bt97NR tZSK/qROXEu8rU+UV2XFk3RD/cRKaUcnIuc4/ifV4Fw+i6EG/QSctDT2RyZtK39B OKCbPS8u7qtK0djOG8cj0Ms0N1eSGc4Fpva5Z8odkeC779imYxY7NNp3biSq3ki/ zvEjuKlR2LrIIOCTlHfxTl7U7iMbQWikV58GXbRvK6vUoEAsxlIR09KUML0vVw0n hu5Vj5J4iZUv+X2JPwT+meRVJeeSCNgGHPu/YnAgKWOxZ1IryeY= -----END CERTIFICATE-----Generated at Fri Dec 19 19:35:48 2025 by rpki-client