This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: O9/QgnJFtDyXtinegGwg4epZxuKRPLsLIZjPa9+SJ2M= Subject key identifier: 02:EB:79:2C:FF:E1:58:68:F0:B7:34:E1:45:A6:C9:32:07:03:0E:A9 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 30B3A27657CAC727FBCBDC98078E6D2F06C92097 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 0202 Signing time: Mon 01 Dec 2025 20:40:39 +0000 Manifest this update: Mon 01 Dec 2025 20:35:39 +0000 Manifest next update: Fri 05 Dec 2025 05:45:39 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: goSbNiGm0MnO8N5Qc97qECNv3A/4k2NutWIj5FuHG3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b3:a2:76:57:ca:c7:27:fb:cb:dc:98:07:8e:6d:2f:06:c9:20:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Dec 1 20:35:39 2025 GMT Not After : Dec 5 05:45:39 2025 GMT Subject: CN=02EB792CFFE15868F0B734E145A6C93207030EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dd:d4:30:da:d5:59:f8:f4:15:01:72:f4:51: a0:95:ad:42:4d:18:65:ff:54:75:6f:f0:42:c6:27: 68:22:da:46:99:f7:d4:04:3e:cc:97:3f:3e:48:2a: e9:32:52:1e:b2:6d:c5:25:4a:9c:ca:42:c9:bf:b5: 22:44:4b:2f:7f:d5:ef:50:3f:ff:a6:c4:c2:3b:63: c3:eb:06:d6:b0:6c:7f:3d:f3:da:7b:ba:5c:5f:ae: 3c:f9:b0:21:ea:a6:ab:41:62:36:e6:44:e6:fc:c6: a7:c4:ec:4b:5f:a0:3c:a6:4c:a4:19:b0:4a:8d:02: 47:af:9e:a2:b1:77:ff:48:d3:4b:3f:31:4b:f1:48: 47:fc:78:fc:36:4d:74:9b:d4:d5:3f:b7:a4:11:e4: 83:8c:9c:99:62:4f:34:ce:e1:36:aa:c0:8e:b1:43: 5c:37:e5:29:65:58:c8:b9:67:fc:ef:0b:bb:c9:c5: 76:99:71:a5:2a:93:9d:37:70:ee:38:7b:a0:30:27: 61:6e:c8:3b:45:95:97:60:7d:15:9a:03:64:43:36: 7a:31:e9:f6:9e:86:15:9b:b2:79:9f:70:22:a5:b4: 8d:c7:a3:87:37:e0:15:70:52:5a:f5:d9:c3:d4:05: 15:15:e4:c9:78:43:67:d6:4d:fc:7e:66:66:35:3f: 38:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EB:79:2C:FF:E1:58:68:F0:B7:34:E1:45:A6:C9:32:07:03:0E:A9 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b4:40:5e:81:55:3c:d8:a3:55:cf:b9:b3:e2:cf:41:fd:d4: 1a:f7:3b:da:c6:19:52:a9:10:aa:e5:c8:53:f3:d8:d7:ec:7a: d4:ae:30:24:0d:6e:1f:f1:e9:d0:02:e8:ff:9d:77:35:bb:8c: 2a:af:b6:da:82:1c:56:51:7c:0d:56:cd:78:99:1a:d8:52:f8: ca:37:26:b8:12:8a:f4:fb:46:89:49:96:be:b0:b0:d9:68:c7: 97:2f:57:16:6d:0c:d1:7d:e7:6b:99:a4:35:09:df:e7:32:5d: 01:25:04:a4:5e:3d:e9:ac:7f:ab:e0:c5:8e:df:32:dc:b9:55: 5e:3e:07:ae:54:70:33:3e:23:e2:31:55:a6:85:28:c9:81:66: 06:78:80:2d:58:fc:a9:d9:f8:31:d6:47:61:9a:59:18:7b:f0: 24:f6:30:9b:2f:63:d0:0f:2f:c7:c6:2c:eb:de:93:de:5e:eb: 42:4c:21:ae:1b:c9:75:c5:e4:ab:69:dd:4f:3a:c4:94:61:a3: 97:72:22:7c:a1:96:14:c7:13:6d:44:c1:96:99:da:36:f1:75: 3c:b3:5d:8f:a0:ee:d6:99:68:a5:2c:1a:14:4b:d3:57:89:24: 0a:7e:f7:1f:eb:e2:2e:94:c9:ba:38:54:55:59:92:e4:f9:4e: 43:31:4b:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLOidlfKxyf7y9yYB45tLwbJIJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTEyMDEyMDM1MzlaFw0yNTEyMDUwNTQ1MzlaMDMxMTAvBgNV BAMTKDAyRUI3OTJDRkZFMTU4NjhGMEI3MzRFMTQ1QTZDOTMyMDcwMzBFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC03dQw2tVZ+PQVAXL0UaCVrUJN GGX/VHVv8ELGJ2gi2kaZ99QEPsyXPz5IKukyUh6ybcUlSpzKQsm/tSJESy9/1e9Q P/+mxMI7Y8PrBtawbH8989p7ulxfrjz5sCHqpqtBYjbmROb8xqfE7EtfoDymTKQZ sEqNAkevnqKxd/9I00s/MUvxSEf8ePw2TXSb1NU/t6QR5IOMnJliTzTO4TaqwI6x Q1w35SllWMi5Z/zvC7vJxXaZcaUqk503cO44e6AwJ2FuyDtFlZdgfRWaA2RDNnox 6faehhWbsnmfcCKltI3Ho4c34BVwUlr12cPUBRUV5Ml4Q2fWTfx+ZmY1PzilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAut5LP/hWGjwtzThRabJMgcDDqkwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAq0QF6BVTzYo1XPubPiz0H91Br3O9rGGVKp EKrlyFPz2NfsetSuMCQNbh/x6dAC6P+ddzW7jCqvttqCHFZRfA1WzXiZGthS+Mo3 JrgSivT7RolJlr6wsNlox5cvVxZtDNF952uZpDUJ3+cyXQElBKRePemsf6vgxY7f Mty5VV4+B65UcDM+I+IxVaaFKMmBZgZ4gC1Y/KnZ+DHWR2GaWRh78CT2MJsvY9AP L8fGLOvek95e60JMIa4byXXF5Ktp3U86xJRho5dyInyhlhTHE21EwZaZ2jbxdTyz XY+g7taZaKUsGhRL01eJJAp+9x/r4i6Uybo4VFVZkuT5TkMxS/M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:47 2025 by rpki-client