This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: Fq4lBmHUe1A1PnuQ50yV8AnKG/0/nrVqTR5ilYMcnKI= Subject key identifier: 68:55:54:2D:06:BA:18:2C:67:FB:F4:0F:29:62:19:D1:F0:7F:5E:24 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 7AF28950E0394363CE535017E41A443337FEF09C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01CB Signing time: Mon 02 Feb 2026 00:52:06 +0000 Manifest this update: Mon 02 Feb 2026 00:47:06 +0000 Manifest next update: Thu 05 Feb 2026 03:08:06 +0000 Files and hashes: 1: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: T6EE7CbW35s45e0263f+URwYA2lm21nSH0YTz5UoU4o=) 2: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: Up8u54DMGD8cddfI5EpFYKvXtAbwRaFhkau3HprohNo=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: jW8jdRnHuWV/CGzvWek2GgncM27aFTLWkhF7bsF25vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f2:89:50:e0:39:43:63:ce:53:50:17:e4:1a:44:33:37:fe:f0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Feb 2 00:47:06 2026 GMT Not After : Feb 5 03:08:06 2026 GMT Subject: CN=6855542D06BA182C67FBF40F296219D1F07F5E24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:72:c9:76:83:90:e1:5d:18:22:6f:30:9d:0d: c7:16:82:54:ac:39:77:c5:62:ce:16:fe:ec:6c:fa: 18:9c:8d:60:03:fe:da:74:02:0f:e8:5b:05:4b:c4: 46:17:a9:88:91:ff:a8:14:8f:46:e5:38:52:fc:23: 4a:aa:b5:05:f8:4c:49:65:1b:28:ba:bc:e2:bf:4a: b9:91:ee:ae:78:18:81:74:e5:06:d8:df:66:28:dc: 2c:ab:06:1b:fd:d4:0d:97:4c:76:b8:8f:c1:69:81: 98:de:9b:95:34:2a:1f:c5:0d:6b:3f:04:cb:26:6f: 71:b0:4c:69:c4:66:28:5b:73:d1:1d:a2:41:f1:6e: 06:50:fb:a8:64:39:1a:90:1c:3f:ba:60:5a:a3:5d: 1e:66:89:10:e9:0a:4b:33:b0:5a:b0:c4:c3:32:47: fe:46:71:26:bd:5a:e2:83:53:09:5c:43:db:02:9e: 0b:df:11:8e:59:87:94:7c:85:a8:2f:11:1c:17:49: df:25:34:de:71:d7:d5:4c:8e:d9:0e:f1:a7:74:3b: cd:38:96:6a:c0:64:1a:db:3c:cc:5d:cc:d1:cc:57: 96:dd:c4:c2:6d:dd:89:61:b9:9e:31:d7:7b:36:ac: 2e:fb:9b:3b:38:89:c6:26:ff:f2:42:57:1f:fd:24: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:55:54:2D:06:BA:18:2C:67:FB:F4:0F:29:62:19:D1:F0:7F:5E:24 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:85:b7:a9:f3:61:c7:49:4f:82:d5:26:45:ad:88:7d:b8:05: 7b:8d:d8:9e:ca:97:89:ab:74:f7:96:74:a3:a4:e7:a2:ba:cb: 3b:f8:cf:99:4a:b1:dc:0b:06:a0:fb:15:51:e1:ea:40:34:dc: a0:ce:e8:3f:0a:29:e0:ac:de:55:a3:06:fc:e2:54:5e:89:5d: 74:f9:d2:34:89:f8:75:fe:ec:eb:28:4c:dd:08:61:6c:d0:b4: 69:e8:c4:4c:8f:1c:f5:1b:d6:9b:2e:68:c4:17:c8:8b:f2:0e: 45:0a:0b:be:57:b2:40:bc:c4:f0:b1:1b:39:53:c3:21:fa:5c: 60:bc:b6:5e:95:19:52:3b:b9:ee:cb:a4:03:27:3f:b7:36:8b: d5:9c:ca:68:5e:99:42:6d:6b:b3:12:f9:dd:e0:b2:14:2e:6d: 44:06:99:6d:41:fe:b2:ad:03:17:e7:53:8c:3e:65:68:52:45: 37:9d:74:03:a7:1b:09:d0:53:35:d8:60:98:3b:34:4b:00:7d: 02:a0:c3:8a:e1:b2:88:dc:f9:82:b7:fd:c8:d9:1a:d6:d8:de: a9:af:74:3e:46:42:4e:5c:db:dc:68:6f:67:af:52:3b:7c:34: fa:a4:35:1c:bd:83:57:d1:4d:ac:0e:2f:64:aa:6e:79:ba:46: 6a:d9:35:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUevKJUOA5Q2POU1AX5BpEMzf+8JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNjAyMDIwMDQ3MDZaFw0yNjAyMDUwMzA4MDZaMDMxMTAvBgNV BAMTKDY4NTU1NDJEMDZCQTE4MkM2N0ZCRjQwRjI5NjIxOUQxRjA3RjVFMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcsl2g5DhXRgibzCdDccWglSs OXfFYs4W/uxs+hicjWAD/tp0Ag/oWwVLxEYXqYiR/6gUj0blOFL8I0qqtQX4TEll Gyi6vOK/SrmR7q54GIF05QbY32Yo3CyrBhv91A2XTHa4j8FpgZjem5U0Kh/FDWs/ BMsmb3GwTGnEZihbc9EdokHxbgZQ+6hkORqQHD+6YFqjXR5miRDpCkszsFqwxMMy R/5GcSa9WuKDUwlcQ9sCngvfEY5Zh5R8hagvERwXSd8lNN5x19VMjtkO8ad0O804 lmrAZBrbPMxdzNHMV5bdxMJt3YlhuZ4x13s2rC77mzs4icYm//JCVx/9JFm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaFVULQa6GCxn+/QPKWIZ0fB/XiQwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKFt6nzYcdJT4LVJkWtiH24BXuN2J7Kl4mr dPeWdKOk56K6yzv4z5lKsdwLBqD7FVHh6kA03KDO6D8KKeCs3lWjBvziVF6JXXT5 0jSJ+HX+7OsoTN0IYWzQtGnoxEyPHPUb1psuaMQXyIvyDkUKC75XskC8xPCxGzlT wyH6XGC8tl6VGVI7ue7LpAMnP7c2i9WcymhemUJta7MS+d3gshQubUQGmW1B/rKt AxfnU4w+ZWhSRTeddAOnGwnQUzXYYJg7NEsAfQKgw4rhsojc+YK3/cjZGtbY3qmv dD5GQk5c29xob2evUjt8NPqkNRy9g1fRTawOL2Sqbnm6RmrZNWE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:32 2026 by rpki-client