This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: NEntuQMTs3XVXfnTQoBh/K/gTRuLvBcjGRt/ZEld+Lw= Subject key identifier: B1:58:4A:65:F7:9B:0D:9C:F7:BF:DA:44:D1:DC:1E:F6:E9:DF:CA:9B Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 6455CEA1DC7624B3204452A960294075426AB0B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 052A Signing time: Wed 03 Dec 2025 04:02:56 +0000 Manifest this update: Wed 03 Dec 2025 03:57:56 +0000 Manifest next update: Sat 06 Dec 2025 10:36:56 +0000 Files and hashes: 1: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) 2: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: bEAhbLJ0BYfUsCnraI3Sz65q39h++7NLUJdGZPYAtHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:55:ce:a1:dc:76:24:b3:20:44:52:a9:60:29:40:75:42:6a:b0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Dec 3 03:57:56 2025 GMT Not After : Dec 6 10:36:56 2025 GMT Subject: CN=B1584A65F79B0D9CF7BFDA44D1DC1EF6E9DFCA9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d6:12:c4:8a:40:f4:ff:3f:b5:93:3f:75:91: 5a:70:21:b4:ce:1c:13:c9:e7:b1:5c:34:e7:7c:33: b4:94:21:ab:7d:71:0a:ee:fd:5e:83:51:23:7c:e0: 40:9d:59:71:e2:6f:20:fe:8e:b3:e9:67:7a:53:52: d8:b5:75:16:86:d7:a5:1e:1d:ac:8f:02:2e:25:85: 3b:20:23:a6:54:7a:a7:b5:c4:2a:29:55:c7:2d:77: 5c:5a:66:95:04:77:61:26:51:71:88:c1:41:02:56: 98:fd:27:5e:81:0f:ef:e7:3f:67:39:17:72:26:f0: 9f:88:db:1a:26:b0:d6:68:5b:78:ed:28:0a:17:76: fd:37:e1:57:20:07:7d:f1:32:ba:b6:1c:e8:d4:35: 04:dd:9f:25:58:f2:25:9a:2a:05:1f:38:a3:4a:a0: d1:27:71:39:8a:6c:49:36:36:18:8d:3e:e6:0a:5f: 02:9c:b4:98:b0:89:c6:43:f9:50:76:75:aa:c1:aa: 58:12:31:af:f4:d1:a7:c7:a6:cc:98:cb:f2:e9:c0: d4:2f:3b:16:f1:5f:88:00:b5:5d:d6:eb:00:a4:a7: 93:fa:59:b7:df:7d:b1:22:c4:d5:32:c5:b8:09:da: 75:5f:26:ee:40:8e:3f:82:06:fb:48:ef:1d:d4:4c: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:58:4A:65:F7:9B:0D:9C:F7:BF:DA:44:D1:DC:1E:F6:E9:DF:CA:9B X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:3f:2b:10:60:73:9d:f7:37:11:2f:a1:84:95:7c:50:fe:61: c2:9e:00:28:04:d5:ff:c6:19:b9:a4:f0:17:ec:d9:39:08:5d: a2:e1:4c:9a:fa:23:82:b3:31:40:2e:86:cd:47:57:13:49:0a: 7b:53:b3:2c:4b:07:7d:0c:43:21:06:68:15:43:3d:c6:f0:6d: af:54:2d:8a:6d:2c:1d:f4:30:93:b4:a6:b5:3d:4c:1d:aa:07: 53:07:78:a2:e7:33:c2:90:64:71:c4:4b:ba:58:53:1e:67:c1: d7:95:f2:d4:bb:57:f1:33:69:a9:2b:74:fb:31:37:c9:6e:03: 5b:0d:4b:07:63:26:f5:d1:05:71:3b:5c:7f:71:be:0f:90:76: 1a:e7:0c:42:d7:55:6b:a8:80:61:7c:52:ee:9e:f8:a1:df:36: 3d:90:53:33:46:6b:a9:db:54:c6:b0:ac:7d:e4:a6:9f:7d:8b: 55:a7:18:c6:6d:b9:33:dd:b0:ea:3f:cb:11:6c:91:26:c7:ec: 8a:0d:13:aa:7b:41:90:77:42:5f:af:6d:21:29:18:0f:e0:b8: 3a:d1:ba:d0:52:d8:6f:22:fd:02:25:08:48:e9:fc:7d:34:c4: 66:d5:8b:e2:dd:b1:b6:5f:ea:4e:ad:bb:21:3e:42:1e:8b:3f: 78:a2:af:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZFXOodx2JLMgRFKpYClAdUJqsLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTEyMDMwMzU3NTZaFw0yNTEyMDYxMDM2NTZaMDMxMTAvBgNV BAMTKEIxNTg0QTY1Rjc5QjBEOUNGN0JGREE0NEQxREMxRUY2RTlERkNBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv1hLEikD0/z+1kz91kVpwIbTO HBPJ57FcNOd8M7SUIat9cQru/V6DUSN84ECdWXHibyD+jrPpZ3pTUti1dRaG16Ue HayPAi4lhTsgI6ZUeqe1xCopVcctd1xaZpUEd2EmUXGIwUECVpj9J16BD+/nP2c5 F3Im8J+I2xomsNZoW3jtKAoXdv034VcgB33xMrq2HOjUNQTdnyVY8iWaKgUfOKNK oNEncTmKbEk2NhiNPuYKXwKctJiwicZD+VB2darBqlgSMa/00afHpsyYy/LpwNQv OxbxX4gAtV3W6wCkp5P6WbfffbEixNUyxbgJ2nVfJu5Ajj+CBvtI7x3UTLfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsVhKZfebDZz3v9pE0dwe9unfypswHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJA/KxBgc533NxEvoYSVfFD+YcKeACgE1f/G Gbmk8Bfs2TkIXaLhTJr6I4KzMUAuhs1HVxNJCntTsyxLB30MQyEGaBVDPcbwba9U LYptLB30MJO0prU9TB2qB1MHeKLnM8KQZHHES7pYUx5nwdeV8tS7V/EzaakrdPsx N8luA1sNSwdjJvXRBXE7XH9xvg+QdhrnDELXVWuogGF8Uu6e+KHfNj2QUzNGa6nb VMawrH3kpp99i1WnGMZtuTPdsOo/yxFskSbH7IoNE6p7QZB3Ql+vbSEpGA/guDrR utBS2G8i/QIlCEjp/H00xGbVi+LdsbZf6k6tuyE+Qh6LP3iir9E= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:30 2025 by rpki-client