This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: Kk7QDj0zn2eKrj00Rand9HtDNUZk5VTmN9tkxyCw4gU= Subject key identifier: 4D:43:E7:FC:84:73:11:9D:20:6B:79:A4:4B:85:2A:47:F8:7C:4F:F4 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 284D5F7DFDB8B52CEB40BB8DC85974C3FBA4235A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0546 Signing time: Mon 02 Feb 2026 03:50:01 +0000 Manifest this update: Mon 02 Feb 2026 03:45:01 +0000 Manifest next update: Thu 05 Feb 2026 10:10:01 +0000 Files and hashes: 1: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 2: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 3: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 4: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: t4GMryTEdr1gL/2HCWFWLGosmDsLIg9V5hVOFPUvO0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4d:5f:7d:fd:b8:b5:2c:eb:40:bb:8d:c8:59:74:c3:fb:a4:23:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Feb 2 03:45:01 2026 GMT Not After : Feb 5 10:10:01 2026 GMT Subject: CN=4D43E7FC8473119D206B79A44B852A47F87C4FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:72:a2:22:df:dd:f5:48:18:9d:34:11:ec: eb:41:d4:50:46:98:68:e4:e9:36:3d:2c:2b:36:a0: b0:0e:a4:d4:6e:94:20:82:b5:95:5b:52:ce:12:01: c8:e1:62:f4:77:ff:b2:1a:79:db:c7:fa:5c:46:9a: cd:30:c6:3e:5b:f1:a4:36:da:79:2c:6c:b1:9e:a4: a6:b4:12:b4:8c:a4:11:2a:03:55:67:3b:a7:0c:dc: 3b:00:41:aa:5d:ed:3c:38:88:71:d6:c9:59:67:96: 79:46:a1:f7:ba:88:ba:14:46:8a:e2:06:33:c9:51: 9c:c4:62:69:71:39:39:c6:70:60:3e:46:fd:3f:ef: 61:d4:76:a8:44:1b:ff:55:dc:e7:01:d9:b6:98:18: f1:f6:13:14:20:f1:bd:a7:fe:da:25:32:2b:39:10: e1:a9:7c:65:51:cd:e4:15:e6:1c:00:26:22:65:41: 2e:f7:05:9d:32:f4:1d:c1:15:b8:1d:91:5e:ae:64: 5a:4d:d4:94:83:c4:24:84:23:c4:7b:e1:94:2c:17: 93:2e:65:1b:6f:3a:90:68:96:e5:85:64:9f:4f:ec: ed:cd:a9:69:b5:c8:1b:77:70:28:91:c7:be:a4:ca: 3d:25:b7:99:f3:91:61:9f:21:36:34:d9:24:8b:2a: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:43:E7:FC:84:73:11:9D:20:6B:79:A4:4B:85:2A:47:F8:7C:4F:F4 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b2:9a:b5:df:ee:6b:2f:d0:9d:cd:8e:a3:b7:76:c0:88:a8: 7f:c1:8d:5f:5c:64:17:7c:88:ac:f9:07:7e:1b:bb:a9:4d:43: a9:17:c6:bc:22:e2:ac:19:f0:8f:ac:c4:f2:9e:f2:7f:bd:86: f1:ae:d5:7e:74:b0:33:10:22:e8:dd:fa:52:b2:98:7e:80:a5: 87:5f:de:4e:35:dd:5b:fc:1f:b8:11:3a:40:38:a8:25:9d:86: a2:bb:63:16:1a:a7:26:6f:7c:a3:64:c2:98:81:04:f7:72:05: fe:da:c5:c8:9d:93:d2:5f:82:40:16:d2:eb:8f:8d:69:a4:fd: 4f:0a:43:85:c0:7c:98:79:08:9f:5a:eb:c0:65:05:29:cf:52: 05:82:80:59:3f:26:09:8f:75:68:8d:47:99:5d:cf:36:66:72: bf:18:95:ae:ed:cb:47:cf:e4:f1:1b:d8:96:57:bc:f2:3b:29: 52:d4:1b:03:4a:be:af:f5:c6:73:37:2b:3a:af:54:04:fd:06: c7:a9:fd:df:c4:6f:f4:20:df:3d:01:1e:52:f3:c5:33:14:84: b9:6d:0c:72:c8:f2:c9:55:2f:48:f4:a4:18:d8:4f:5d:0f:e8: 08:45:0e:1b:41:08:48:25:23:f5:b1:92:5c:e7:0f:42:f8:ce: 86:37:36:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKE1fff24tSzrQLuNyFl0w/ukI1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNjAyMDIwMzQ1MDFaFw0yNjAyMDUxMDEwMDFaMDMxMTAvBgNV BAMTKDRENDNFN0ZDODQ3MzExOUQyMDZCNzlBNDRCODUyQTQ3Rjg3QzRGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8nKiIt/d9UgYnTQR7OtB1FBG mGjk6TY9LCs2oLAOpNRulCCCtZVbUs4SAcjhYvR3/7IaedvH+lxGms0wxj5b8aQ2 2nksbLGepKa0ErSMpBEqA1VnO6cM3DsAQapd7Tw4iHHWyVlnlnlGofe6iLoURori BjPJUZzEYmlxOTnGcGA+Rv0/72HUdqhEG/9V3OcB2baYGPH2ExQg8b2n/tolMis5 EOGpfGVRzeQV5hwAJiJlQS73BZ0y9B3BFbgdkV6uZFpN1JSDxCSEI8R74ZQsF5Mu ZRtvOpBoluWFZJ9P7O3NqWm1yBt3cCiRx76kyj0lt5nzkWGfITY02SSLKkS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUPn/IRzEZ0ga3mkS4UqR/h8T/QwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGymrXf7msv0J3NjqO3dsCIqH/BjV9cZBd8 iKz5B34bu6lNQ6kXxrwi4qwZ8I+sxPKe8n+9hvGu1X50sDMQIujd+lKymH6ApYdf 3k413Vv8H7gROkA4qCWdhqK7YxYapyZvfKNkwpiBBPdyBf7axcidk9JfgkAW0uuP jWmk/U8KQ4XAfJh5CJ9a68BlBSnPUgWCgFk/JgmPdWiNR5ldzzZmcr8Yla7ty0fP 5PEb2JZXvPI7KVLUGwNKvq/1xnM3KzqvVAT9Bsep/d/Eb/Qg3z0BHlLzxTMUhLlt DHLI8slVL0j0pBjYT10P6AhFDhtBCEglI/WxklznD0L4zoY3Ni4= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:21 2026 by rpki-client