This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: 9OexYk9Rx9q07I1G7+s1L7MyJ555bX5OBMfKe8pIBGA= Subject key identifier: D0:D7:97:05:8C:E8:01:D3:F2:B9:EC:CC:8E:9C:07:5E:04:AD:F7:22 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 0D9005B35C6719893F270F23DE4281A886F69A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 0487 Signing time: Tue 02 Dec 2025 01:20:03 +0000 Manifest this update: Tue 02 Dec 2025 01:15:03 +0000 Manifest next update: Fri 05 Dec 2025 03:38:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: CuID1s42rX9dZuYT8nIFtWGO+gcybvapZ19uK2pkY0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:90:05:b3:5c:67:19:89:3f:27:0f:23:de:42:81:a8:86:f6:9a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Dec 2 01:15:03 2025 GMT Not After : Dec 5 03:38:03 2025 GMT Subject: CN=D0D797058CE801D3F2B9ECCC8E9C075E04ADF722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:cf:e8:e5:71:b5:9f:6e:e9:50:fe:cd:19: 50:ee:4e:65:3a:93:13:af:7d:0a:4d:32:50:07:31: 78:ba:ee:3c:12:f6:94:37:08:15:a8:79:06:62:9b: 8b:f4:2f:82:92:e6:38:bf:28:70:42:86:67:04:be: 87:3d:73:9a:04:a6:51:fa:43:d6:fb:39:70:c0:2b: 50:89:be:1d:22:f9:0e:28:79:32:fd:73:51:ec:e3: 3f:46:72:da:ef:df:61:2a:e5:23:84:27:40:0c:27: 97:01:b1:ac:e5:4c:88:9f:72:6a:d3:73:52:99:da: 06:7c:6a:56:8b:e2:12:d7:54:d7:03:44:5d:b3:e5: 5f:d2:e5:ff:ea:94:6c:93:81:fc:f8:bc:3b:15:c8: 1e:fd:e0:58:6f:1c:af:f9:c9:c8:a9:6a:c2:2d:85: b4:b4:74:b9:05:29:7c:29:7c:26:e1:43:4e:db:24: 59:26:23:18:2e:73:1b:72:8d:9d:9b:f5:95:5b:c0: 40:9b:f7:a3:37:e7:fa:e9:f3:0d:4e:a8:a5:09:10: 99:fc:50:ac:f0:fe:04:b6:a0:dc:0a:f9:7d:97:20: 6b:8c:17:bb:27:8c:5c:da:73:0d:8d:6d:ec:2c:f0: a5:b3:86:62:6a:74:a8:5b:da:3e:57:62:03:f3:1e: d4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D7:97:05:8C:E8:01:D3:F2:B9:EC:CC:8E:9C:07:5E:04:AD:F7:22 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d4:88:07:d8:c8:b3:d4:de:68:65:c6:21:30:ac:01:ad:85: 9c:9b:51:89:c7:24:8a:38:aa:9a:1f:d7:0c:5f:cd:97:3e:7b: b2:6e:b9:78:78:59:70:43:69:3e:28:bc:59:6b:d3:e5:e7:d0: 80:a3:99:dc:8a:11:d2:70:de:d1:9f:3a:b0:34:0a:52:7b:89: f3:ea:2a:9d:56:45:80:f6:cd:d5:d5:28:81:50:c6:e8:db:01: 46:ec:61:8f:b6:9c:f1:7d:71:be:c0:46:ed:5b:ce:53:d9:6c: f5:58:9a:01:80:ff:50:7b:72:47:e2:d4:bf:a5:10:7a:82:ac: 8f:37:b7:8e:32:86:15:5d:fa:a8:bf:ed:5f:66:fb:f4:7b:59: c2:9f:99:ac:e1:75:a9:84:41:d6:32:6c:58:4b:18:7e:c9:09: 05:60:29:32:6a:85:47:38:1c:2b:86:03:38:c3:d7:63:3c:9c: d1:3e:bb:71:45:21:5e:6d:a1:de:ef:3d:20:a6:48:34:b3:92: 7a:10:9e:71:40:1e:40:a7:3f:dc:01:21:7b:4d:ec:89:f0:61: 27:4c:d9:da:b4:b2:a9:ec:06:a9:95:62:ae:2e:57:13:96:76: 4c:df:a4:14:9f:a9:7f:cb:bb:9a:db:f8:45:5d:23:ba:a7:ee: 2c:70:02:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDZAFs1xnGYk/Jw8j3kKBqIb2mlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTEyMDIwMTE1MDNaFw0yNTEyMDUwMzM4MDNaMDMxMTAvBgNV BAMTKEQwRDc5NzA1OENFODAxRDNGMkI5RUNDQzhFOUMwNzVFMDRBREY3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRc/o5XG1n27pUP7NGVDuTmU6 kxOvfQpNMlAHMXi67jwS9pQ3CBWoeQZim4v0L4KS5ji/KHBChmcEvoc9c5oEplH6 Q9b7OXDAK1CJvh0i+Q4oeTL9c1Hs4z9Gctrv32Eq5SOEJ0AMJ5cBsazlTIifcmrT c1KZ2gZ8alaL4hLXVNcDRF2z5V/S5f/qlGyTgfz4vDsVyB794FhvHK/5ycipasIt hbS0dLkFKXwpfCbhQ07bJFkmIxgucxtyjZ2b9ZVbwECb96M35/rp8w1OqKUJEJn8 UKzw/gS2oNwK+X2XIGuMF7snjFzacw2Nbews8KWzhmJqdKhb2j5XYgPzHtS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0NeXBYzoAdPyuezMjpwHXgSt9yIwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrUiAfYyLPU3mhlxiEwrAGthZybUYnHJIo4 qpof1wxfzZc+e7JuuXh4WXBDaT4ovFlr0+Xn0ICjmdyKEdJw3tGfOrA0ClJ7ifPq Kp1WRYD2zdXVKIFQxujbAUbsYY+2nPF9cb7ARu1bzlPZbPVYmgGA/1B7ckfi1L+l EHqCrI83t44yhhVd+qi/7V9m+/R7WcKfmazhdamEQdYybFhLGH7JCQVgKTJqhUc4 HCuGAzjD12M8nNE+u3FFIV5tod7vPSCmSDSzknoQnnFAHkCnP9wBIXtN7InwYSdM 2dq0sqnsBqmVYq4uVxOWdkzfpBSfqX/Lu5rb+EVdI7qn7ixwApc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client