This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: 6aypoqMNcOsxKu+xWvIttdXz9iBsY22pxOb/a2tM2TM= Subject key identifier: B2:7F:9F:23:17:7F:F3:BC:4C:96:1F:F1:CF:38:19:C9:7E:27:CD:70 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 1FFA0C8C846C3AC719891F4027EA48B9FA4EAF00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0235 Signing time: Tue 02 Dec 2025 14:52:59 +0000 Manifest this update: Tue 02 Dec 2025 14:47:59 +0000 Manifest next update: Fri 05 Dec 2025 17:53:59 +0000 Files and hashes: 1: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) 2: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 5lsR/QDvUExRAoo1Fc/18N8T0XUBNaDuQdk6EyLFH1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:fa:0c:8c:84:6c:3a:c7:19:89:1f:40:27:ea:48:b9:fa:4e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Dec 2 14:47:59 2025 GMT Not After : Dec 5 17:53:59 2025 GMT Subject: CN=B27F9F23177FF3BC4C961FF1CF3819C97E27CD70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:4c:33:38:8e:15:6f:2c:57:23:84:34:c9: e5:7f:2d:39:73:1f:45:30:2f:42:6c:28:0a:20:79: 41:8a:7f:33:b4:72:fb:fe:e2:67:87:f0:46:22:5e: f7:11:c2:e6:3d:68:8d:04:f8:20:fd:3e:80:b5:04: e2:61:92:fc:20:2e:78:64:4e:58:fb:7f:6e:c6:81: 2d:96:89:55:27:85:5b:a2:41:1b:88:a4:eb:a5:a4: b8:bc:89:58:85:47:2a:27:cc:3b:a4:8c:d9:bc:6e: 43:44:f6:43:44:7d:2a:2a:9d:5c:f9:09:3a:87:88: 13:81:66:c0:d1:30:51:13:5e:15:10:77:e6:95:75: fc:72:14:49:20:cf:93:9f:df:de:58:a2:b0:ab:0e: 48:3d:38:0e:30:f0:42:4e:bb:f1:50:dd:c2:4c:17: 16:eb:8c:12:3d:1c:9b:bd:14:6f:79:3c:77:cf:68: 09:e6:3e:de:6b:51:01:05:7e:02:5a:7f:34:c8:a9: 6f:be:50:ed:47:da:f2:12:11:b2:a1:dc:c3:d2:1e: ef:48:f1:c6:aa:a9:52:98:37:ba:7a:c2:3b:41:d6: 61:77:b5:65:9b:32:e1:c3:19:80:3f:d7:6f:db:79: 8a:1d:63:cf:80:19:bf:6d:89:66:e0:15:3d:83:a3: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7F:9F:23:17:7F:F3:BC:4C:96:1F:F1:CF:38:19:C9:7E:27:CD:70 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:aa:c8:55:81:64:68:68:d8:cb:9a:ce:7f:95:dc:b2:6c: 6f:36:36:06:fb:d3:77:27:cb:b8:ce:cf:ce:b4:e2:d4:c4:29: 1b:ba:63:d0:b6:a7:5f:65:b1:cd:80:46:48:4f:75:ee:60:a5: 53:1c:6a:81:8b:cc:0f:77:5a:ea:23:86:9a:e7:24:fd:b5:24: 71:30:0e:aa:89:a8:69:11:b7:79:3f:fb:e0:af:ae:58:0a:85: ba:03:1b:5d:51:3a:f4:65:67:28:7e:cf:14:57:5a:f5:bc:fd: 26:56:62:c7:ab:6a:5c:41:94:06:09:36:57:4b:a7:2f:a1:57: d7:1e:ea:f9:17:7b:6b:c7:87:01:ec:77:e9:50:15:73:7c:77: 92:c9:39:8b:2d:52:c1:61:3d:cb:2c:a0:32:21:41:72:72:7a: 01:98:51:60:b5:c6:90:8e:c4:9d:2f:65:42:4e:b2:e3:6d:38: 00:82:a2:0b:a5:0a:d4:2f:68:0c:ab:2f:8e:52:cd:0a:12:1a: f7:00:53:f0:7e:03:4f:ed:de:b5:e6:d5:c7:ca:d5:45:4f:4a: 0d:53:47:87:bb:a6:f9:3d:21:1e:c7:f2:e7:dd:68:5c:62:03: b8:b5:d0:6c:71:c6:fc:92:7c:a4:5e:ba:2c:83:2e:5f:eb:84: 71:ea:5a:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/oMjIRsOscZiR9AJ+pIufpOrwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTEyMDIxNDQ3NTlaFw0yNTEyMDUxNzUzNTlaMDMxMTAvBgNV BAMTKEIyN0Y5RjIzMTc3RkYzQkM0Qzk2MUZGMUNGMzgxOUM5N0UyN0NENzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMikwzOI4VbyxXI4Q0yeV/LTlz H0UwL0JsKAogeUGKfzO0cvv+4meH8EYiXvcRwuY9aI0E+CD9PoC1BOJhkvwgLnhk Tlj7f27GgS2WiVUnhVuiQRuIpOulpLi8iViFRyonzDukjNm8bkNE9kNEfSoqnVz5 CTqHiBOBZsDRMFETXhUQd+aVdfxyFEkgz5Of395YorCrDkg9OA4w8EJOu/FQ3cJM FxbrjBI9HJu9FG95PHfPaAnmPt5rUQEFfgJafzTIqW++UO1H2vISEbKh3MPSHu9I 8caqqVKYN7p6wjtB1mF3tWWbMuHDGYA/12/beYodY8+AGb9tiWbgFT2Do5EpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsn+fIxd/87xMlh/xzzgZyX4nzXAwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTXqshVgWRoaNjLms5/ldyybG82Ngb703cn y7jOz8604tTEKRu6Y9C2p19lsc2ARkhPde5gpVMcaoGLzA93WuojhprnJP21JHEw DqqJqGkRt3k/++CvrlgKhboDG11ROvRlZyh+zxRXWvW8/SZWYseralxBlAYJNldL py+hV9ce6vkXe2vHhwHsd+lQFXN8d5LJOYstUsFhPcssoDIhQXJyegGYUWC1xpCO xJ0vZUJOsuNtOACCogulCtQvaAyrL45SzQoSGvcAU/B+A0/t3rXm1cfK1UVPSg1T R4e7pvk9IR7H8ufdaFxiA7i10GxxxvySfKReuiyDLl/rhHHqWrI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:25 2025 by rpki-client