This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: ut+WA+a84vihkiDsT0yZBGaKOvtO93Tt/w79b8IIVTY= Subject key identifier: 24:44:78:26:09:06:A0:4B:6F:24:A9:8F:28:46:CE:B0:0D:35:A1:BC Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 147CB1175DE9E5F82FE8EEB7A73F38DB8A1781BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 0116 Signing time: Mon 15 Dec 2025 16:41:31 +0000 Manifest this update: Mon 15 Dec 2025 16:36:31 +0000 Manifest next update: Thu 18 Dec 2025 20:09:31 +0000 Files and hashes: 1: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: RCVzNFSIMEAdl2ZLX7tqFgxn56iy2BZSnES26YK0OYQ=) 2: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 20:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:7c:b1:17:5d:e9:e5:f8:2f:e8:ee:b7:a7:3f:38:db:8a:17:81:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Dec 15 16:36:31 2025 GMT Not After : Dec 18 20:09:31 2025 GMT Subject: CN=244478260906A04B6F24A98F2846CEB00D35A1BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e6:38:9f:10:98:d3:a5:b0:2e:c7:04:b2:72: 12:ea:a4:80:5e:4b:15:9d:97:a8:6f:06:c9:fb:c7: 88:86:a5:ac:dc:ad:99:f8:bc:2e:58:9b:74:48:a2: 2d:5b:c6:e9:ec:22:0d:fe:a8:49:d7:58:85:34:98: f7:5a:1f:c4:a5:c1:f7:a7:50:5f:45:8b:3f:a7:31: df:36:12:b6:4a:06:f0:d5:9d:e5:85:27:6e:06:92: 45:5c:57:54:6b:4d:b0:56:d1:e4:a0:32:81:d9:8c: dc:a6:d8:3c:55:6b:12:f0:44:d2:01:40:f2:e9:02: 3f:da:dc:b2:14:e7:58:4b:71:f7:6f:b1:ea:2e:91: 69:36:c3:b2:66:72:c7:f6:08:98:03:07:9d:fd:1d: fd:cf:c4:26:d4:31:70:b3:70:9b:2c:25:44:b7:02: 42:4b:37:4d:b6:ee:e9:76:6a:91:31:18:77:e0:45: 54:b4:23:97:2a:c9:76:5a:40:66:42:c7:ba:46:9d: 4c:af:d6:52:80:e7:36:81:52:23:f2:d6:eb:24:3c: 7e:52:86:d7:41:df:ae:43:76:23:87:8c:d6:35:dc: 96:cd:92:bf:6f:d1:38:52:e4:82:23:af:d1:2e:7d: b7:c7:d1:e2:67:2e:ff:18:4a:bb:cb:ab:18:c3:88: e1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:44:78:26:09:06:A0:4B:6F:24:A9:8F:28:46:CE:B0:0D:35:A1:BC X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:4f:f9:f0:98:7a:e1:5d:ac:e3:b1:0b:c8:75:c2:c0:9d:97: 8e:97:0a:d7:83:59:9c:5c:5a:e2:a1:e8:d8:4e:70:e5:e6:26: 5d:98:73:a0:56:f4:3d:3a:d8:b9:2f:71:a3:5d:bd:3d:08:6f: 26:43:12:fb:d3:1d:7b:94:ea:02:80:5c:48:ec:76:43:38:5f: 6e:3c:73:ae:3d:e6:0d:f2:fb:5b:25:95:09:ce:b0:2b:dd:56: 12:5b:59:37:a9:99:8a:95:c0:ed:c2:7b:c0:6d:b3:81:1a:9f: bb:9b:1f:fa:35:95:7e:1f:4f:20:96:bd:4a:3b:f3:55:f4:fe: ea:45:74:2a:61:e0:91:4a:ff:e6:76:8a:83:44:05:eb:c9:2e: 7f:ea:a9:5b:5a:4b:e3:11:fe:eb:71:f7:97:77:96:09:bd:06: c7:05:53:e5:99:f9:7d:e7:da:3c:4c:4a:3b:f7:4b:2b:5a:fe: 19:5a:28:07:9b:05:37:85:b1:a5:36:30:6d:4b:fd:ed:0d:24: d1:85:e5:d3:a3:98:f3:05:ea:dd:4e:45:a2:68:85:4c:bd:ac: e3:c2:ad:ba:39:6a:26:12:a5:aa:b5:8e:75:b0:4a:e6:71:3c: 1a:4c:2d:ef:4a:34:a5:94:c7:76:a6:0d:35:c8:d0:f9:9e:74: e0:de:2f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFHyxF13p5fgv6O63pz8424oXgbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTEyMTUxNjM2MzFaFw0yNTEyMTgyMDA5MzFaMDMxMTAvBgNV BAMTKDI0NDQ3ODI2MDkwNkEwNEI2RjI0QTk4RjI4NDZDRUIwMEQzNUExQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5jifEJjTpbAuxwSychLqpIBe SxWdl6hvBsn7x4iGpazcrZn4vC5Ym3RIoi1bxunsIg3+qEnXWIU0mPdaH8Slwfen UF9Fiz+nMd82ErZKBvDVneWFJ24GkkVcV1RrTbBW0eSgMoHZjNym2DxVaxLwRNIB QPLpAj/a3LIU51hLcfdvseoukWk2w7Jmcsf2CJgDB539Hf3PxCbUMXCzcJssJUS3 AkJLN0227ul2apExGHfgRVS0I5cqyXZaQGZCx7pGnUyv1lKA5zaBUiPy1uskPH5S htdB365DdiOHjNY13JbNkr9v0ThS5IIjr9EufbfH0eJnLv8YSrvLqxjDiOH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJER4JgkGoEtvJKmPKEbOsA01obwwHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdP+fCYeuFdrOOxC8h1wsCdl46XCteDWZxc WuKh6NhOcOXmJl2Yc6BW9D062LkvcaNdvT0IbyZDEvvTHXuU6gKAXEjsdkM4X248 c6495g3y+1sllQnOsCvdVhJbWTepmYqVwO3Ce8Bts4Ean7ubH/o1lX4fTyCWvUo7 81X0/upFdCph4JFK/+Z2ioNEBevJLn/qqVtaS+MR/utx95d3lgm9BscFU+WZ+X3n 2jxMSjv3Syta/hlaKAebBTeFsaU2MG1L/e0NJNGF5dOjmPMF6t1ORaJohUy9rOPC rbo5aiYSpaq1jnWwSuZxPBpMLe9KNKWUx3amDTXI0PmedODeLxc= -----END CERTIFICATE-----Generated at Wed Dec 17 20:37:17 2025 by rpki-client