This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: VMi5Y0eMwAVssa3Co5VIQ7a2/St7h4DfNmuSTotyuAM= Subject key identifier: D9:15:3A:25:A9:44:57:25:99:E6:D0:88:D0:62:EC:67:02:C0:26:92 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 5FE8A2B03CFFA8CB5AE276B46D80C31426001B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01AF Signing time: Tue 02 Dec 2025 07:52:06 +0000 Manifest this update: Tue 02 Dec 2025 07:47:06 +0000 Manifest next update: Fri 05 Dec 2025 17:22:06 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: h/M4bWp9k9kdNcUet/NCmZPlkeQAOt5gIPRWRlH0JEQ=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e8:a2:b0:3c:ff:a8:cb:5a:e2:76:b4:6d:80:c3:14:26:00:1b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Dec 2 07:47:06 2025 GMT Not After : Dec 5 17:22:06 2025 GMT Subject: CN=D9153A25A944572599E6D088D062EC6702C02692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:86:32:80:f1:4a:5a:a3:96:ef:fb:59:9e: 79:51:58:53:be:b8:0e:77:de:73:e3:95:55:7b:ec: f0:bd:67:20:ba:63:fa:20:0f:67:06:fa:f1:f0:48: c6:b1:64:26:30:bb:41:79:90:8a:ea:cb:34:8c:32: fd:c1:ca:a4:3a:01:1c:3c:ff:c1:d4:9c:dd:d0:04: f7:8c:1e:02:04:c7:8c:09:b9:9f:23:36:b3:f8:db: 2c:4c:d0:04:0f:ef:d6:ba:bb:a2:7e:84:e8:27:38: 04:98:87:cf:40:77:d3:ef:a8:e2:fd:83:3d:58:ff: 59:c9:e2:f9:4d:d3:db:bd:97:af:56:63:8c:f9:e1: 20:15:4d:ad:f2:c4:4d:f1:94:98:0b:37:97:77:17: e8:e7:c9:e5:99:28:3e:bb:2c:2b:04:35:e0:30:e5: 98:c4:ce:44:23:ba:4d:63:cf:42:02:ae:f2:2d:34: d0:88:87:09:d3:2e:54:4a:55:cd:ad:1c:7b:01:ac: f0:ac:cd:6c:88:ed:bb:63:96:ee:18:9d:3c:40:a0: f5:99:5a:9d:9f:04:44:e3:d3:69:4d:37:0d:62:a7: 2b:1d:17:7e:b7:8f:18:c3:da:71:48:c4:8a:5f:06: 2b:15:7b:e8:63:c1:6b:18:78:2c:b2:2f:8e:32:32: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:3A:25:A9:44:57:25:99:E6:D0:88:D0:62:EC:67:02:C0:26:92 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:a6:e2:7b:c0:3d:6a:f7:09:3f:d7:27:2f:92:73:b5:af:27: 8a:2d:89:35:65:71:9d:f5:a1:91:ab:c6:be:d6:29:50:13:a1: 04:26:89:39:fe:b7:73:13:1a:b2:f3:0d:e8:96:7e:85:81:47: 42:95:01:c3:d6:ae:82:34:73:50:e0:a2:35:2e:bb:54:41:88: 4a:3c:e8:98:d3:43:66:cd:4c:38:ba:a1:ea:64:0b:2d:17:2a: a2:f6:86:ee:bf:5a:9b:c7:1a:59:4a:1d:25:eb:e2:ff:26:0a: 7c:82:e3:88:1c:a9:1c:69:fa:84:78:74:2f:24:b4:37:87:4d: 0a:95:ab:87:cf:fc:bc:43:22:e1:55:9b:08:22:eb:37:3e:13: 3d:31:a2:b2:d6:5c:f9:97:ec:9f:4c:68:e8:07:64:6e:41:1f: ca:aa:ff:0e:e9:93:0e:02:32:71:4b:99:d5:8c:35:e2:e9:1d: fd:0d:7f:41:fe:e6:2a:cf:3e:2b:85:93:c7:82:62:81:5c:94: 57:2a:28:76:ee:75:92:e6:97:70:6a:4f:59:88:c1:25:a8:4b: 37:04:a9:45:aa:7c:fa:84:60:d8:d3:3d:fa:cf:5c:4b:e9:2a: 9c:8e:b0:7f:22:7e:c4:7b:56:37:76:ce:f9:2a:48:2b:1c:6b: d7:f0:e9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+iisDz/qMta4na0bYDDFCYAGywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTEyMDIwNzQ3MDZaFw0yNTEyMDUxNzIyMDZaMDMxMTAvBgNV BAMTKEQ5MTUzQTI1QTk0NDU3MjU5OUU2RDA4OEQwNjJFQzY3MDJDMDI2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDakYYygPFKWqOW7/tZnnlRWFO+ uA533nPjlVV77PC9ZyC6Y/ogD2cG+vHwSMaxZCYwu0F5kIrqyzSMMv3ByqQ6ARw8 /8HUnN3QBPeMHgIEx4wJuZ8jNrP42yxM0AQP79a6u6J+hOgnOASYh89Ad9PvqOL9 gz1Y/1nJ4vlN09u9l69WY4z54SAVTa3yxE3xlJgLN5d3F+jnyeWZKD67LCsENeAw 5ZjEzkQjuk1jz0ICrvItNNCIhwnTLlRKVc2tHHsBrPCszWyI7btjlu4YnTxAoPWZ Wp2fBETj02lNNw1ipysdF363jxjD2nFIxIpfBisVe+hjwWsYeCyyL44yMjNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RU6JalEVyWZ5tCI0GLsZwLAJpIwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKm4nvAPWr3CT/XJy+Sc7WvJ4otiTVlcZ31 oZGrxr7WKVAToQQmiTn+t3MTGrLzDeiWfoWBR0KVAcPWroI0c1DgojUuu1RBiEo8 6JjTQ2bNTDi6oepkCy0XKqL2hu6/WpvHGllKHSXr4v8mCnyC44gcqRxp+oR4dC8k tDeHTQqVq4fP/LxDIuFVmwgi6zc+Ez0xorLWXPmX7J9MaOgHZG5BH8qq/w7pkw4C MnFLmdWMNeLpHf0Nf0H+5irPPiuFk8eCYoFclFcqKHbudZLml3BqT1mIwSWoSzcE qUWqfPqEYNjTPfrPXEvpKpyOsH8ifsR7Vjd2zvkqSCsca9fw6WY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client