This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: Lo65eAXYY9GR3GZQV/YCMNoo8XX8qupAxxAssczz/jI= Subject key identifier: 3F:FE:10:72:ED:F7:84:CF:7C:45:7D:81:9B:7C:F7:C8:46:9C:79:FE Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 1BE256A6E907A084600675AE2EC50F2F9F176F32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0250 Signing time: Sat 31 Jan 2026 06:41:28 +0000 Manifest this update: Sat 31 Jan 2026 06:36:28 +0000 Manifest next update: Tue 03 Feb 2026 18:21:28 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: KGZkYla1zuJUuqo0hS6dBEvPvYAchdhVLuNhRNQSLM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 18:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e2:56:a6:e9:07:a0:84:60:06:75:ae:2e:c5:0f:2f:9f:17:6f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Jan 31 06:36:28 2026 GMT Not After : Feb 3 18:21:28 2026 GMT Subject: CN=3FFE1072EDF784CF7C457D819B7CF7C8469C79FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:5a:77:10:91:bf:42:31:93:9c:6a:94:85: 53:18:7f:1c:fa:07:c9:af:f4:3b:eb:8f:80:de:a2: 5e:16:d2:43:45:8e:d9:63:ed:78:bf:ba:08:87:50: 7e:42:b0:e7:25:e7:e8:50:8e:62:a0:a6:fa:86:af: ac:37:b9:48:7c:de:4c:c8:ce:7e:9d:76:e4:1a:2a: c6:6b:ac:73:ed:fa:ed:78:10:e7:18:62:e6:e0:e4: 05:1a:4b:66:7f:b6:d8:4c:ca:0d:08:79:8b:c8:a2: 9e:d6:64:b1:df:52:6a:bd:db:0a:78:b3:7f:80:ea: cb:39:0c:68:31:c4:5b:0d:81:82:78:98:b5:a9:57: 0b:96:70:b1:78:52:46:0e:b3:f7:ee:a4:a1:60:f1: e4:90:6f:82:5e:b4:94:71:c7:4b:72:3e:ca:85:2b: 84:f2:92:d0:44:b3:27:5a:3e:b5:1f:16:d2:ce:03: ff:56:09:0a:33:b6:63:d2:fb:b2:91:2f:dd:e8:1c: bd:ac:66:17:79:71:7a:c7:55:0e:83:9b:f0:48:c9: e9:4b:df:53:ac:ff:53:eb:8a:3d:13:64:a0:e9:9d: c5:5a:2a:d6:f8:46:92:a4:d7:8c:81:be:a9:8a:70: 08:18:f4:9c:01:5c:91:63:a8:27:5a:d8:e7:3f:0e: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:10:72:ED:F7:84:CF:7C:45:7D:81:9B:7C:F7:C8:46:9C:79:FE X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:83:1d:ef:31:87:cf:d3:5d:24:4f:92:45:be:5c:0a:44:86: 6a:1e:0c:07:1a:82:f6:41:1a:7c:85:15:c5:cf:e9:96:07:37: 60:05:98:1a:98:37:96:a6:b5:41:aa:bc:be:9e:49:b7:29:eb: 13:13:37:b4:7a:85:66:2c:14:26:cb:63:93:1c:5c:5d:34:54: 24:f2:6b:48:a8:ce:37:0a:ce:89:f3:2d:8f:8c:62:1d:f1:60: 47:29:37:f8:50:61:5d:52:d5:d1:6c:03:d9:fa:29:7d:ff:9c: 4b:d7:48:b3:b6:fb:5f:b1:87:80:2d:fa:65:89:31:f2:e2:65: 00:ec:4b:90:0a:f6:65:81:03:79:e6:03:5c:55:a4:6a:59:c4: b9:31:80:38:bc:0c:c7:aa:6f:90:e3:61:bf:61:b0:d4:6f:ca: a9:97:11:b7:ed:c2:32:8d:e0:d2:29:32:36:30:37:a8:3a:f4: 49:e9:08:ac:49:13:33:1e:8f:64:e9:29:f1:57:93:8e:2b:25: b3:63:a5:43:51:ea:fa:54:4e:e4:be:3d:29:57:f0:c4:03:2f: a9:a6:30:4e:28:dd:4a:9f:3f:46:b1:f0:4d:e1:ac:db:02:89: 75:90:9b:3c:03:7f:3d:06:53:00:7b:32:39:00:11:b4:e8:f9: 46:34:a3:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+JWpukHoIRgBnWuLsUPL58XbzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNjAxMzEwNjM2MjhaFw0yNjAyMDMxODIxMjhaMDMxMTAvBgNV BAMTKDNGRkUxMDcyRURGNzg0Q0Y3QzQ1N0Q4MTlCN0NGN0M4NDY5Qzc5RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuHlp3EJG/QjGTnGqUhVMYfxz6 B8mv9Dvrj4Deol4W0kNFjtlj7Xi/ugiHUH5CsOcl5+hQjmKgpvqGr6w3uUh83kzI zn6dduQaKsZrrHPt+u14EOcYYubg5AUaS2Z/tthMyg0IeYvIop7WZLHfUmq92wp4 s3+A6ss5DGgxxFsNgYJ4mLWpVwuWcLF4UkYOs/fupKFg8eSQb4JetJRxx0tyPsqF K4TyktBEsydaPrUfFtLOA/9WCQoztmPS+7KRL93oHL2sZhd5cXrHVQ6Dm/BIyelL 31Os/1Prij0TZKDpncVaKtb4RpKk14yBvqmKcAgY9JwBXJFjqCda2Oc/Ds8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP/4Qcu33hM98RX2Bm3z3yEacef4wHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuDHe8xh8/TXSRPkkW+XApEhmoeDAcagvZB GnyFFcXP6ZYHN2AFmBqYN5amtUGqvL6eSbcp6xMTN7R6hWYsFCbLY5McXF00VCTy a0iozjcKzonzLY+MYh3xYEcpN/hQYV1S1dFsA9n6KX3/nEvXSLO2+1+xh4At+mWJ MfLiZQDsS5AK9mWBA3nmA1xVpGpZxLkxgDi8DMeqb5DjYb9hsNRvyqmXEbftwjKN 4NIpMjYwN6g69EnpCKxJEzMej2TpKfFXk44rJbNjpUNR6vpUTuS+PSlX8MQDL6mm ME4o3UqfP0ax8E3hrNsCiXWQmzwDfz0GUwB7MjkAEbTo+UY0o90= -----END CERTIFICATE-----Generated at Mon Feb 2 12:49:49 2026 by rpki-client