This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: hF9iqj3B4Cg1OqfMaKgiQgbMSo3Uasl9gJbSRHko2/s= Subject key identifier: FB:2C:9E:82:F6:C5:0C:3E:78:79:02:68:3A:58:3A:E0:70:D7:E3:81 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 0A0CC7E89D07FEA79649B1AC719F9F9D2270822E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 13:30:01 +0000 Manifest this update: Mon 01 Dec 2025 13:25:01 +0000 Manifest next update: Fri 05 Dec 2025 00:43:01 +0000 Files and hashes: 1: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 2: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: wP5zLf7SON67tCU76VuViyybMAboN1zarLNBoRA8QCk=) 3: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 4: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0c:c7:e8:9d:07:fe:a7:96:49:b1:ac:71:9f:9f:9d:22:70:82:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Dec 1 13:25:01 2025 GMT Not After : Dec 5 00:43:01 2025 GMT Subject: CN=FB2C9E82F6C50C3E787902683A583AE070D7E381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:45:66:25:62:fa:d4:37:bc:ca:12:07:46:10: 69:f7:16:a0:e6:3f:2b:c3:2d:ad:13:dd:c4:0c:11: 92:e6:fc:00:1e:cd:7b:3b:4f:8f:55:40:eb:0e:23: 01:2b:19:54:28:d9:72:8a:24:c7:b7:af:4e:67:19: f1:37:7e:a9:15:ff:17:16:7b:3f:5a:58:ae:68:48: 6f:67:56:c3:ab:4e:44:ef:b4:31:c3:72:0f:91:f4: 64:85:89:81:42:fb:c3:38:c4:35:1c:44:0c:77:12: 53:27:0e:53:b3:c2:52:de:06:57:07:17:8f:0a:3c: 90:1c:52:a0:d1:47:64:02:c6:3f:15:16:77:3d:06: 0e:b7:48:e8:b0:5a:12:df:66:be:c7:6a:4c:d9:78: 79:9f:b0:b0:9d:1b:58:d1:3b:12:6e:1f:1a:79:1b: 75:f6:dd:7e:54:1e:d8:f2:0a:92:06:40:2b:fb:3b: 8d:b8:a8:8f:08:7b:2e:35:cb:ff:80:4f:d7:83:e1: 01:78:98:43:b8:2a:35:92:97:89:48:eb:ac:46:e8: a0:64:83:46:3b:36:16:02:52:f7:06:3e:d5:78:9a: db:8d:f6:8c:bc:94:66:b0:da:5e:46:30:26:4f:5c: 08:0a:8b:08:45:f1:85:64:2b:4d:cb:f4:99:72:a1: c2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2C:9E:82:F6:C5:0C:3E:78:79:02:68:3A:58:3A:E0:70:D7:E3:81 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6b:2d:29:0b:aa:3e:9a:05:b4:e7:d2:d3:a9:f2:09:96:6c: fd:72:12:1f:61:21:fc:5a:76:b1:d5:0a:c2:88:8b:3c:ec:86: 12:6f:fa:6b:f1:3e:f7:7a:69:5a:bc:62:32:2b:19:f3:e0:f7: b3:da:db:90:ec:fb:0c:b1:ac:76:e0:5f:de:bc:90:13:c7:c8: 29:3e:eb:6c:b9:5e:ba:8f:ad:ee:a6:66:b2:32:07:54:1a:e0: da:df:c3:de:d3:d6:e3:a6:99:48:56:f9:b4:db:80:e0:30:4c: d6:f9:5b:69:bb:af:2e:a1:2e:ed:8d:29:ea:51:ff:35:be:a8: c7:53:25:96:e8:15:e3:5d:12:1d:54:13:eb:dd:5f:22:fa:8b: 77:c9:7c:a1:64:1e:b1:f9:3f:49:9c:0e:d9:e8:3d:57:5f:5b: bb:2f:98:5a:27:9d:58:e0:fa:92:43:78:a9:91:24:3c:3a:b3: 67:9c:23:e2:f6:d9:c7:33:0e:40:fb:9d:e4:7d:8d:12:25:a8: e4:dc:33:97:60:c7:8f:81:0a:0d:9b:f5:1f:a9:a9:ab:37:9d: 71:e5:3d:fa:72:ec:7d:57:12:5e:b2:1c:6d:b7:f7:21:0a:2d: c9:ef:08:74:90:3a:9f:f1:67:af:7a:d5:2f:04:e0:01:3e:4c: 1b:b2:df:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgzH6J0H/qeWSbGscZ+fnSJwgi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTEyMDExMzI1MDFaFw0yNTEyMDUwMDQzMDFaMDMxMTAvBgNV BAMTKEZCMkM5RTgyRjZDNTBDM0U3ODc5MDI2ODNBNTgzQUUwNzBEN0UzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2RWYlYvrUN7zKEgdGEGn3FqDm PyvDLa0T3cQMEZLm/AAezXs7T49VQOsOIwErGVQo2XKKJMe3r05nGfE3fqkV/xcW ez9aWK5oSG9nVsOrTkTvtDHDcg+R9GSFiYFC+8M4xDUcRAx3ElMnDlOzwlLeBlcH F48KPJAcUqDRR2QCxj8VFnc9Bg63SOiwWhLfZr7HakzZeHmfsLCdG1jROxJuHxp5 G3X23X5UHtjyCpIGQCv7O424qI8Iey41y/+AT9eD4QF4mEO4KjWSl4lI66xG6KBk g0Y7NhYCUvcGPtV4mtuN9oy8lGaw2l5GMCZPXAgKiwhF8YVkK03L9JlyocK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+yyegvbFDD54eQJoOlg64HDX44EwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBrLSkLqj6aBbTn0tOp8gmWbP1yEh9hIfxa drHVCsKIizzshhJv+mvxPvd6aVq8YjIrGfPg97Pa25Ds+wyxrHbgX968kBPHyCk+ 62y5XrqPre6mZrIyB1Qa4Nrfw97T1uOmmUhW+bTbgOAwTNb5W2m7ry6hLu2NKepR /zW+qMdTJZboFeNdEh1UE+vdXyL6i3fJfKFkHrH5P0mcDtnoPVdfW7svmFonnVjg +pJDeKmRJDw6s2ecI+L22cczDkD7neR9jRIlqOTcM5dgx4+BCg2b9R+pqas3nXHl Pfpy7H1XEl6yHG239yEKLcnvCHSQOp/xZ6961S8E4AE+TBuy36g= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client