This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: tvbrgI8ghikvRl53DvaFNCP8luSKuqKEWKFK/o68t1Y= Subject key identifier: BA:13:AC:28:E4:F3:A3:D2:14:F7:D3:2A:52:DC:84:DF:8C:12:0C:65 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 6F4A5DA4E454A333527852DE2C516BF2C306F59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 03A7 Signing time: Tue 02 Dec 2025 10:12:04 +0000 Manifest this update: Tue 02 Dec 2025 10:07:04 +0000 Manifest next update: Fri 05 Dec 2025 18:06:04 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: aPo0ZSPwGrg/hfBKnfXu4YOdiFKzpZy/xisIoJ0Xqdc=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4a:5d:a4:e4:54:a3:33:52:78:52:de:2c:51:6b:f2:c3:06:f5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Dec 2 10:07:04 2025 GMT Not After : Dec 5 18:06:04 2025 GMT Subject: CN=BA13AC28E4F3A3D214F7D32A52DC84DF8C120C65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:5a:b5:6a:76:b3:b2:f8:06:03:6d:67:3e: 0a:93:5b:a5:3b:3e:bb:3f:c0:2e:ab:75:e3:a3:6e: 4e:3b:47:52:e6:65:f3:cf:26:7e:09:e2:7f:20:b5: 21:54:6d:ff:af:dc:62:74:b1:01:00:79:84:25:3c: 40:56:68:7e:86:b7:cd:aa:ad:b9:22:1b:fd:23:be: 49:5f:49:b5:49:75:65:f0:a2:89:fe:99:ce:81:16: 10:c0:b2:67:94:0d:ae:9c:1c:a7:6e:1b:90:4b:36: 09:e4:90:75:3b:df:f0:90:ab:85:c7:9e:5f:b7:3c: fd:ec:d2:79:e7:b0:22:08:71:a4:36:34:f6:6b:67: 10:6e:80:8a:09:30:fc:b4:2a:81:0a:73:f6:a2:25: 7e:a0:fd:4d:d3:91:6b:14:57:4a:57:83:2b:5d:2f: e4:79:05:58:09:d4:18:7d:44:ed:a8:01:19:e3:00: b2:cc:91:7e:3b:22:fc:c7:c9:3d:49:a8:82:a8:8c: 37:2f:a7:c3:d2:09:b6:01:62:2d:67:27:64:c4:b9: 3e:c2:8e:43:de:a0:aa:33:7f:86:b0:5f:5d:b8:11: 24:89:34:d8:d2:39:af:94:82:0e:68:d0:c2:5e:2a: 92:2e:80:91:12:40:13:fe:e7:aa:f5:88:53:17:1a: e5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:13:AC:28:E4:F3:A3:D2:14:F7:D3:2A:52:DC:84:DF:8C:12:0C:65 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:71:95:95:f3:76:9f:e5:da:26:95:a7:21:4e:25:b0:df:29: 03:11:e4:98:f7:8e:ac:7f:ae:7d:fb:e2:ab:54:09:81:8a:b2: 89:3f:b6:df:3e:34:39:2e:bd:bf:a2:59:8b:8f:a4:47:d1:ee: 8f:ee:f9:23:50:bd:3f:12:d4:91:68:c8:b1:49:36:f9:eb:66: 2e:d8:b7:2d:5c:87:65:32:d8:17:f1:83:4a:81:77:20:21:1f: 9a:fc:e8:f6:24:fd:7f:e5:20:41:af:00:1e:3e:45:b9:1e:e4: 0e:dd:9d:bd:d0:d2:2d:90:54:dc:f9:68:04:1e:f6:51:25:9b: 78:be:ae:09:18:d7:f8:6f:bb:40:0e:aa:89:3a:a5:01:94:e1: 2e:8f:cf:34:c0:00:79:ab:cc:95:41:dc:a2:77:ae:21:27:de: 72:8f:c3:a5:08:48:1c:f1:4c:b0:ea:4f:c5:67:fc:3a:50:f3: 3f:2e:a9:da:b2:a4:ea:6c:a1:2a:12:be:2d:4c:18:8d:aa:60: 73:ae:a7:b4:7e:aa:3e:94:08:ea:f9:9b:e4:ea:e5:b1:43:85: 2f:a2:ee:48:a0:96:5b:47:30:03:31:49:11:19:49:d1:8a:d5: 49:af:b2:9e:47:63:ae:b1:b8:40:b0:af:a4:cf:41:bf:1d:db: 95:9f:6d:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0pdpORUozNSeFLeLFFr8sMG9ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTEyMDIxMDA3MDRaFw0yNTEyMDUxODA2MDRaMDMxMTAvBgNV BAMTKEJBMTNBQzI4RTRGM0EzRDIxNEY3RDMyQTUyREM4NERGOEMxMjBDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgVq1anazsvgGA21nPgqTW6U7 Prs/wC6rdeOjbk47R1LmZfPPJn4J4n8gtSFUbf+v3GJ0sQEAeYQlPEBWaH6Gt82q rbkiG/0jvklfSbVJdWXwoon+mc6BFhDAsmeUDa6cHKduG5BLNgnkkHU73/CQq4XH nl+3PP3s0nnnsCIIcaQ2NPZrZxBugIoJMPy0KoEKc/aiJX6g/U3TkWsUV0pXgytd L+R5BVgJ1Bh9RO2oARnjALLMkX47IvzHyT1JqIKojDcvp8PSCbYBYi1nJ2TEuT7C jkPeoKozf4awX124ESSJNNjSOa+Ugg5o0MJeKpIugJESQBP+56r1iFMXGuU5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuhOsKOTzo9IU99MqUtyE34wSDGUwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVxlZXzdp/l2iaVpyFOJbDfKQMR5Jj3jqx/ rn374qtUCYGKsok/tt8+NDkuvb+iWYuPpEfR7o/u+SNQvT8S1JFoyLFJNvnrZi7Y ty1ch2Uy2Bfxg0qBdyAhH5r86PYk/X/lIEGvAB4+Rbke5A7dnb3Q0i2QVNz5aAQe 9lElm3i+rgkY1/hvu0AOqok6pQGU4S6PzzTAAHmrzJVB3KJ3riEn3nKPw6UISBzx TLDqT8Vn/DpQ8z8uqdqypOpsoSoSvi1MGI2qYHOup7R+qj6UCOr5m+Tq5bFDhS+i 7kiglltHMAMxSREZSdGK1Umvsp5HY66xuECwr6TPQb8d25WfbUI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:42 2025 by rpki-client