This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: bo9KOfY+eGzeh5ry4p0MfFZZ5DBTSxrl4l2rZRozfr4= Subject key identifier: 22:E7:81:F8:6F:D1:2C:1F:AB:F6:85:D7:03:81:B8:92:FC:CA:11:F6 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 4E844E6B613E5CD4B5A98A41B5508006CBBBE0B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 021D Signing time: Sat 31 Jan 2026 17:30:39 +0000 Manifest this update: Sat 31 Jan 2026 17:25:39 +0000 Manifest next update: Tue 03 Feb 2026 22:54:39 +0000 Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: 2xZ8kcCgbhGKAuuVyHLmlIxSArjfdeVpH7vUX4cdhm0=) 2: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 22:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:84:4e:6b:61:3e:5c:d4:b5:a9:8a:41:b5:50:80:06:cb:bb:e0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Jan 31 17:25:39 2026 GMT Not After : Feb 3 22:54:39 2026 GMT Subject: CN=22E781F86FD12C1FABF685D70381B892FCCA11F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:ab:9c:5f:19:6e:0d:8b:64:4c:5f:83:26: c9:76:93:04:9a:ee:c8:31:59:46:79:48:2c:68:c3: da:98:c6:6f:fb:18:30:c5:6e:4d:d7:16:c2:13:03: e3:51:41:f4:07:90:45:e1:48:ab:be:68:bd:01:8e: 55:98:13:cc:54:85:3b:c8:9b:4a:e4:d7:c6:a0:22: 10:5e:20:3b:b5:3b:d3:cc:cd:b2:7d:e8:f8:11:f3: 47:4a:c3:99:b9:a4:f0:5c:e5:53:e9:6b:b6:cd:93: f8:7e:ed:f3:2b:4b:41:fa:50:6b:89:41:e0:43:92: 61:7e:97:d6:26:48:20:bf:07:40:b2:2c:64:be:69: 4b:bc:4d:65:39:ea:df:88:c0:93:1f:92:f1:13:d7: c0:2d:8a:03:88:ab:5a:5a:68:2d:ba:e8:79:a5:41: e4:16:69:c5:b5:5a:86:28:1b:e8:80:09:d9:47:0f: 54:a5:ba:3e:d5:8e:63:8d:b1:82:35:0d:31:86:69: 3b:1f:4c:cc:91:ed:96:af:05:78:2a:e3:81:3b:37: 90:5d:08:2b:44:f1:c9:05:f1:00:a9:7c:42:33:74: 7b:31:a8:38:b8:c6:3e:b0:e5:15:82:bb:88:3f:7f: 0d:86:4d:23:74:be:fe:82:9b:90:0f:95:7f:c3:ec: b4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:81:F8:6F:D1:2C:1F:AB:F6:85:D7:03:81:B8:92:FC:CA:11:F6 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:22:89:ab:f1:1e:0e:df:b3:4f:20:64:75:be:08:e4:69: aa:eb:70:ac:55:2a:a2:ae:ed:10:23:3e:71:0a:40:38:68:06: 0a:5e:e4:66:29:e4:42:34:77:d5:34:2c:c0:3d:94:b1:e7:d7: 58:96:91:54:72:d7:52:c7:2b:b6:89:4b:e0:90:f8:ac:d6:68: 85:9c:c8:2a:d8:49:5f:03:78:8c:59:da:9f:9e:8b:05:b5:89: e7:df:9e:b0:e5:c2:68:22:b0:ed:be:f1:61:1a:30:ac:af:5c: fa:9f:83:88:54:4b:fe:44:be:c9:bf:83:66:1b:60:22:ca:5a: de:40:11:1c:d2:63:bb:56:a1:be:9b:ff:a7:21:d9:05:fe:9d: 71:35:47:38:9a:17:7b:69:92:4e:92:c7:16:81:61:a0:ae:b9: 21:0d:47:e9:e4:19:72:d0:90:39:7d:9e:43:31:66:1f:ff:ea: 1a:58:f1:49:85:f6:d8:a5:3c:f9:16:e5:34:f4:c4:44:f0:19: cd:9f:89:a0:0a:a9:01:b4:70:d5:d9:37:be:c9:48:86:00:a4: 9b:40:4c:cc:f3:49:85:55:31:4b:96:b3:e5:51:8f:e6:06:61: 7d:35:62:0d:3b:66:e0:5e:dd:e0:52:72:8f:15:ce:e7:a8:b4: 7d:a3:c1:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToROa2E+XNS1qYpBtVCABsu74LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNjAxMzExNzI1MzlaFw0yNjAyMDMyMjU0MzlaMDMxMTAvBgNV BAMTKDIyRTc4MUY4NkZEMTJDMUZBQkY2ODVENzAzODFCODkyRkNDQTExRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWKucXxluDYtkTF+DJsl2kwSa 7sgxWUZ5SCxow9qYxm/7GDDFbk3XFsITA+NRQfQHkEXhSKu+aL0BjlWYE8xUhTvI m0rk18agIhBeIDu1O9PMzbJ96PgR80dKw5m5pPBc5VPpa7bNk/h+7fMrS0H6UGuJ QeBDkmF+l9YmSCC/B0CyLGS+aUu8TWU56t+IwJMfkvET18AtigOIq1paaC266Hml QeQWacW1WoYoG+iACdlHD1Sluj7VjmONsYI1DTGGaTsfTMyR7ZavBXgq44E7N5Bd CCtE8ckF8QCpfEIzdHsxqDi4xj6w5RWCu4g/fw2GTSN0vv6Cm5APlX/D7LRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIueB+G/RLB+r9oXXA4G4kvzKEfYwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS2Iomr8R4O37NPIGR1vgjkaarrcKxVKqKu 7RAjPnEKQDhoBgpe5GYp5EI0d9U0LMA9lLHn11iWkVRy11LHK7aJS+CQ+KzWaIWc yCrYSV8DeIxZ2p+eiwW1ieffnrDlwmgisO2+8WEaMKyvXPqfg4hUS/5Evsm/g2Yb YCLKWt5AERzSY7tWob6b/6ch2QX+nXE1RziaF3tpkk6SxxaBYaCuuSENR+nkGXLQ kDl9nkMxZh//6hpY8UmF9tilPPkW5TT0xETwGc2fiaAKqQG0cNXZN77JSIYApJtA TMzzSYVVMUuWs+VRj+YGYX01Yg07ZuBe3eBSco8VzueotH2jwc8= -----END CERTIFICATE-----Generated at Mon Feb 2 09:52:04 2026 by rpki-client