This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: D982GeoWbeidcDXkzERCzLbEUvQ5sEF7eovelT/1EnA= Subject key identifier: 91:D6:84:CA:FE:F2:52:94:D9:66:CA:E6:92:4C:E0:BF:92:EF:4B:38 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 652F99D6BCB276698DA0D88A45CB98F95DE8696D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 03D9 Signing time: Mon 01 Dec 2025 19:51:39 +0000 Manifest this update: Mon 01 Dec 2025 19:46:39 +0000 Manifest next update: Fri 05 Dec 2025 06:40:39 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: 8Z848UXgNwwcOPWp3iE4dI8hSpKDPl8LXIa8yLONgX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2f:99:d6:bc:b2:76:69:8d:a0:d8:8a:45:cb:98:f9:5d:e8:69:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Dec 1 19:46:39 2025 GMT Not After : Dec 5 06:40:39 2025 GMT Subject: CN=91D684CAFEF25294D966CAE6924CE0BF92EF4B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:8c:d1:a3:8f:f0:9b:f9:c1:62:c7:17:c0: 2c:a1:4b:60:69:b0:19:52:bf:a1:9c:3f:07:02:53: ed:61:66:da:00:49:5a:58:2d:65:cb:78:9b:a1:9c: f6:7b:ad:d4:72:2b:cc:dd:48:7b:df:70:c7:da:21: 06:3f:fd:df:58:a8:cb:d7:b7:3b:16:6f:48:9b:97: d6:5f:6f:2e:f2:a4:ae:34:9d:e0:f7:54:df:88:06: 2c:21:20:39:49:57:0c:db:3e:1b:de:5e:59:5f:8c: 93:0e:48:2c:a8:fc:31:5a:95:8c:b0:bd:ea:a1:31: cd:5d:8c:81:1f:67:ae:59:67:11:2d:35:89:59:66: 0a:80:63:d5:eb:90:c2:dc:62:36:4d:98:6d:9d:10: eb:46:9d:0a:d4:17:ef:13:5b:ed:c3:34:ad:89:d5: ab:cc:d7:68:3e:cd:58:97:89:c2:91:b4:cb:cd:23: d6:1a:71:c9:db:48:ca:54:79:ca:36:1a:6b:4c:02: 10:0c:46:6e:3a:fe:c6:7a:96:c6:86:0e:05:74:5a: e4:98:d1:10:64:35:bf:7d:23:59:34:1f:15:a6:2d: 32:df:0f:60:22:9d:f1:b3:3e:99:73:43:f9:42:98: bb:18:62:6d:b8:d9:8d:35:31:fe:06:f2:93:ec:e6: 0f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D6:84:CA:FE:F2:52:94:D9:66:CA:E6:92:4C:E0:BF:92:EF:4B:38 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:cb:65:0b:44:74:c5:7f:12:d6:a2:4e:dc:7c:9f:60:82:91: 71:57:f7:91:5f:3f:19:fb:96:1f:7e:89:7d:45:e9:28:33:31: b4:61:f3:25:cc:74:d5:df:da:b8:99:c3:4f:b7:16:f7:52:4c: 14:52:2c:fe:1a:2f:ea:09:90:37:61:df:53:f1:b8:a7:70:51: b7:fa:ff:9e:77:9e:78:ef:3c:d7:2b:5c:87:06:f8:c2:7b:d5: 14:12:79:5a:6f:65:46:25:b3:72:b3:29:cf:b0:db:59:02:1d: 39:3f:c6:fb:9c:16:bb:72:e8:48:e0:40:95:ad:84:7b:c5:1c: fc:85:12:a4:58:55:c1:8c:84:ab:94:4e:bb:a4:1a:ee:f2:5a: 72:b3:6d:fe:57:d9:ba:59:0b:f9:43:23:78:60:23:0b:77:22: cb:ab:46:c3:f0:18:41:1d:81:d3:73:93:69:8b:fb:ce:71:70: 8f:b4:11:d0:84:b6:05:da:41:b3:11:f9:bb:37:eb:7e:70:1f: d1:ce:b4:81:21:ed:b3:d1:03:06:0d:d2:cc:3b:bb:fa:b7:58: af:2b:f7:0b:53:7f:cb:26:e2:8e:9b:73:a0:ca:a8:df:22:53: 07:1e:c1:e7:03:c9:02:7a:49:08:75:da:43:e0:85:23:5a:29: e2:92:9e:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS+Z1ryydmmNoNiKRcuY+V3oaW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTEyMDExOTQ2MzlaFw0yNTEyMDUwNjQwMzlaMDMxMTAvBgNV BAMTKDkxRDY4NENBRkVGMjUyOTREOTY2Q0FFNjkyNENFMEJGOTJFRjRCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC54ozRo4/wm/nBYscXwCyhS2Bp sBlSv6GcPwcCU+1hZtoASVpYLWXLeJuhnPZ7rdRyK8zdSHvfcMfaIQY//d9YqMvX tzsWb0ibl9Zfby7ypK40neD3VN+IBiwhIDlJVwzbPhveXllfjJMOSCyo/DFalYyw veqhMc1djIEfZ65ZZxEtNYlZZgqAY9XrkMLcYjZNmG2dEOtGnQrUF+8TW+3DNK2J 1avM12g+zViXicKRtMvNI9YaccnbSMpUeco2GmtMAhAMRm46/sZ6lsaGDgV0WuSY 0RBkNb99I1k0HxWmLTLfD2AinfGzPplzQ/lCmLsYYm242Y01Mf4G8pPs5g/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdaEyv7yUpTZZsrmkkzgv5LvSzgwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPLZQtEdMV/EtaiTtx8n2CCkXFX95FfPxn7 lh9+iX1F6SgzMbRh8yXMdNXf2riZw0+3FvdSTBRSLP4aL+oJkDdh31PxuKdwUbf6 /553nnjvPNcrXIcG+MJ71RQSeVpvZUYls3KzKc+w21kCHTk/xvucFrty6EjgQJWt hHvFHPyFEqRYVcGMhKuUTrukGu7yWnKzbf5X2bpZC/lDI3hgIwt3IsurRsPwGEEd gdNzk2mL+85xcI+0EdCEtgXaQbMR+bs3635wH9HOtIEh7bPRAwYN0sw7u/q3WK8r 9wtTf8sm4o6bc6DKqN8iUwcewecDyQJ6SQh12kPghSNaKeKSnoE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:27 2025 by rpki-client