This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: EGzFUU/3AL8beiIYuF5drlU1kAWH9WdUr04VVdH+mrc= Subject key identifier: EA:50:EF:57:24:61:7A:25:13:01:C7:0C:01:10:22:16:A9:7B:97:26 Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 072E51FE774709DB4B63AF1A9DB111382562C604 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: B6 Signing time: Sun 07 Dec 2025 14:10:01 +0000 Manifest this update: Sun 07 Dec 2025 14:05:01 +0000 Manifest next update: Wed 10 Dec 2025 22:30:01 +0000 Files and hashes: 1: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=) 2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: mdkonKtWtJjXIYpxpMSfxnnpj7r4/HYd0a+zsPMpukc=) 3: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=) 4: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:2e:51:fe:77:47:09:db:4b:63:af:1a:9d:b1:11:38:25:62:c6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Dec 7 14:05:01 2025 GMT Not After : Dec 10 22:30:01 2025 GMT Subject: CN=EA50EF5724617A251301C70C01102216A97B9726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:de:70:bf:de:6d:56:b2:3f:74:50:dc:75: ad:a0:f4:55:85:c5:6b:ec:25:9f:f4:ae:e5:24:80: d2:a0:3a:d9:e4:67:a3:4d:6d:cb:90:00:3d:20:ad: 76:c9:ed:e8:e0:fe:4c:4e:65:73:ee:4f:85:73:7d: ce:cd:3e:8f:04:9a:18:4d:2e:29:92:c2:53:33:31: 90:3e:01:e5:8a:88:ea:b0:65:9b:6b:38:4d:bb:26: 72:b1:f8:fb:0b:c6:e4:f3:69:69:57:a0:25:1e:fb: 58:52:6d:62:8a:8c:45:14:b9:de:ae:2e:0d:82:39: 74:fd:e4:69:91:d8:af:b3:be:7f:7a:4b:ef:8b:ff: 40:c7:31:46:fe:1e:9e:b0:19:ec:f1:c5:9f:bc:c0: 6d:8e:eb:5d:ce:75:40:0e:59:66:16:8b:e0:22:db: d5:d5:f4:96:6d:06:f4:f7:cc:6e:0d:dd:55:20:6b: 91:25:0f:ca:81:b3:04:a3:c8:99:be:30:fc:f6:3d: 7d:96:10:95:dc:5f:7c:31:3b:bb:7e:73:7d:d1:d2: 87:d5:0a:b2:1e:c3:c6:36:8d:2a:cd:12:48:f4:3a: 0e:89:bc:c3:27:15:ff:54:da:8a:41:f6:4a:57:bb: 85:6e:17:fb:57:6d:b6:40:ed:22:06:aa:9c:71:93: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:50:EF:57:24:61:7A:25:13:01:C7:0C:01:10:22:16:A9:7B:97:26 X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:66:b6:bc:33:26:2b:52:65:2f:05:5f:bb:23:73:4d:96:9e: 3c:a7:f9:8a:2d:96:87:e3:99:cc:e7:78:a3:68:65:60:32:68: c4:ab:ab:83:b7:e4:eb:08:2b:87:dd:8d:0c:57:e9:b7:83:f1: d5:60:51:1c:c3:15:76:b8:0c:d9:e1:83:7c:27:9f:d3:81:ce: 94:cd:48:2f:3f:28:ac:cc:64:76:d3:4e:3d:f8:43:30:55:d6: f5:ec:eb:01:79:53:3e:b5:7e:00:e2:fd:05:51:f4:8e:c3:44: a7:0a:ca:72:47:a2:54:d0:83:95:a0:c0:b9:5b:fc:a1:ba:51: 5d:98:e7:fd:65:9a:e9:19:7c:89:c7:7a:fd:01:15:f4:c6:81: f6:87:ff:dc:f1:5c:13:b4:2b:f5:f4:c7:af:ea:27:8c:81:39: f7:2b:c0:7a:8f:c5:39:e8:f3:b4:b8:13:d6:02:0a:f9:fd:7a: a3:44:3d:28:74:69:7c:ea:80:72:cc:18:a5:8b:7a:23:73:b4: e6:ea:af:e6:26:94:e5:28:c0:76:0d:3a:b5:17:3d:06:3f:d2: 8c:f9:3d:22:37:13:53:33:84:0f:83:41:cf:7a:47:72:b6:1b: bd:11:f7:8d:5b:32:2a:47:d4:31:1e:ab:24:8f:6c:0e:c8:a5: 43:6c:ce:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBy5R/ndHCdtLY68anbEROCVixgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTEyMDcxNDA1MDFaFw0yNTEyMTAyMjMwMDFaMDMxMTAvBgNV BAMTKEVBNTBFRjU3MjQ2MTdBMjUxMzAxQzcwQzAxMTAyMjE2QTk3Qjk3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/N5wv95tVrI/dFDcda2g9FWF xWvsJZ/0ruUkgNKgOtnkZ6NNbcuQAD0grXbJ7ejg/kxOZXPuT4Vzfc7NPo8EmhhN LimSwlMzMZA+AeWKiOqwZZtrOE27JnKx+PsLxuTzaWlXoCUe+1hSbWKKjEUUud6u Lg2COXT95GmR2K+zvn96S++L/0DHMUb+Hp6wGezxxZ+8wG2O613OdUAOWWYWi+Ai 29XV9JZtBvT3zG4N3VUga5ElD8qBswSjyJm+MPz2PX2WEJXcX3wxO7t+c33R0ofV CrIew8Y2jSrNEkj0Og6JvMMnFf9U2opB9kpXu4VuF/tXbbZA7SIGqpxxkzzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6lDvVyRheiUTAccMARAiFql7lyYwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhmtrwzJitSZS8FX7sjc02Wnjyn+Yotlofj mczneKNoZWAyaMSrq4O35OsIK4fdjQxX6beD8dVgURzDFXa4DNnhg3wnn9OBzpTN SC8/KKzMZHbTTj34QzBV1vXs6wF5Uz61fgDi/QVR9I7DRKcKynJHolTQg5WgwLlb /KG6UV2Y5/1lmukZfInHev0BFfTGgfaH/9zxXBO0K/X0x6/qJ4yBOfcrwHqPxTno 87S4E9YCCvn9eqNEPSh0aXzqgHLMGKWLeiNztObqr+YmlOUowHYNOrUXPQY/0oz5 PSI3E1MzhA+DQc96R3K2G70R941bMipH1DEeqySPbA7IpUNszuI= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:12 2025 by rpki-client