This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: JZorPo0Pmv5omUCqA1+sL+zd/7KBOcEQORxm+oj6BEE= Subject key identifier: 42:65:37:C9:44:85:75:14:C1:0A:C7:39:12:43:D9:26:40:08:02:D0 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 724FE6A29C19C4B77C031A4938F25EB579A00704 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 03AE Signing time: Thu 18 Dec 2025 08:44:05 +0000 Manifest this update: Thu 18 Dec 2025 08:39:05 +0000 Manifest next update: Sun 21 Dec 2025 16:35:05 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: 6nZk+73boYqxOqf28Ev26gNRNzWDI4pdskW2WocP/4c=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4f:e6:a2:9c:19:c4:b7:7c:03:1a:49:38:f2:5e:b5:79:a0:07:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Dec 18 08:39:05 2025 GMT Not After : Dec 21 16:35:05 2025 GMT Subject: CN=426537C944857514C10AC7391243D926400802D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:bc:67:76:df:9b:85:5b:7f:c7:f9:cc:93: 8d:90:fd:9c:c4:25:f0:78:ac:34:8f:3d:6a:91:b8: 93:1b:e6:28:b1:0c:53:a7:11:79:51:92:a5:af:a6: 5b:e1:45:35:74:e7:2b:82:49:5b:98:cf:1d:07:64: ca:ae:16:f2:33:23:33:41:03:ae:ce:d9:5a:50:f4: 74:ca:f0:12:63:f2:53:03:ed:69:31:3c:cb:b7:0a: 5e:ca:05:20:7e:fa:2a:1d:af:6e:8d:b9:87:01:6f: 7c:f6:a1:ef:b7:a4:e7:85:3d:c3:87:e7:b5:47:be: c2:a5:af:51:c1:a0:43:07:29:b0:06:90:92:ca:6e: 9d:96:01:1b:66:34:8e:2a:59:35:a3:02:be:c7:71: 87:bb:9d:5c:14:69:87:ad:d7:12:b5:ce:96:65:da: 7c:1e:65:32:35:63:2a:1e:4a:18:af:ec:7c:83:09: 41:6a:bb:42:7c:56:03:b2:42:ba:86:47:5b:c0:a7: 8a:6e:52:72:8c:75:a3:be:ca:b6:ad:41:b3:9c:f3: c3:f3:fe:1b:cd:1d:5a:2d:04:a3:e8:c3:c3:e5:60: 56:c2:dc:59:a4:ab:9d:8f:de:c3:63:ea:9c:0f:4d: 04:b4:32:04:c7:f0:1b:e7:be:b9:29:77:56:02:0b: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:65:37:C9:44:85:75:14:C1:0A:C7:39:12:43:D9:26:40:08:02:D0 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a7:bb:0c:10:22:3b:d9:e5:43:9a:e2:47:73:21:e6:89:4d: 9b:35:a8:20:01:6d:c4:51:e9:e1:89:a1:31:34:9d:ff:33:8c: 57:3c:84:36:46:1f:8a:01:ae:c4:45:1c:82:e6:86:a3:39:69: d0:5f:9c:25:51:35:78:e6:05:f4:27:b9:34:16:a2:b5:c6:6f: 9d:8d:6e:0c:b7:87:84:d8:00:d7:5e:38:4c:11:18:3f:43:df: 2a:3b:47:22:e5:75:75:e5:41:1c:f0:11:6c:a8:ed:8c:91:9f: 08:ee:05:bd:3f:1f:58:ac:f0:04:e5:91:cb:56:dd:d9:2c:98: 45:9c:19:39:3a:73:78:db:cc:70:2f:f9:3a:0c:87:4c:d8:7e: 31:d4:a6:b8:79:ef:c3:cf:26:01:e3:f6:41:95:55:5a:10:74: bc:cc:2c:c2:73:d9:11:c4:76:32:7d:b5:ce:5d:49:90:fa:6c: 92:51:7c:7d:bd:8d:5c:7f:e1:4d:78:06:61:b4:eb:fc:45:20: ad:b6:23:84:d8:c5:0a:6a:aa:4a:e9:1d:8d:08:03:82:1c:55: 20:af:49:15:14:35:dd:52:be:d0:6a:58:13:4b:39:48:19:a2: c3:b0:7b:62:87:54:5c:d4:5d:f1:b0:22:5a:4d:6b:0f:64:8a: 44:98:cd:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUck/mopwZxLd8AxpJOPJetXmgBwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNTEyMTgwODM5MDVaFw0yNTEyMjExNjM1MDVaMDMxMTAvBgNV BAMTKDQyNjUzN0M5NDQ4NTc1MTRDMTBBQzczOTEyNDNEOTI2NDAwODAyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3Lxndt+bhVt/x/nMk42Q/ZzE JfB4rDSPPWqRuJMb5iixDFOnEXlRkqWvplvhRTV05yuCSVuYzx0HZMquFvIzIzNB A67O2VpQ9HTK8BJj8lMD7WkxPMu3Cl7KBSB++iodr26NuYcBb3z2oe+3pOeFPcOH 57VHvsKlr1HBoEMHKbAGkJLKbp2WARtmNI4qWTWjAr7HcYe7nVwUaYet1xK1zpZl 2nweZTI1YyoeShiv7HyDCUFqu0J8VgOyQrqGR1vAp4puUnKMdaO+yratQbOc88Pz /hvNHVotBKPow8PlYFbC3Fmkq52P3sNj6pwPTQS0MgTH8Bvnvrkpd1YCC3dNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmU3yUSFdRTBCsc5EkPZJkAIAtAwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOnuwwQIjvZ5UOa4kdzIeaJTZs1qCABbcRR 6eGJoTE0nf8zjFc8hDZGH4oBrsRFHILmhqM5adBfnCVRNXjmBfQnuTQWorXGb52N bgy3h4TYANdeOEwRGD9D3yo7RyLldXXlQRzwEWyo7YyRnwjuBb0/H1is8ATlkctW 3dksmEWcGTk6c3jbzHAv+ToMh0zYfjHUprh578PPJgHj9kGVVVoQdLzMLMJz2RHE djJ9tc5dSZD6bJJRfH29jVx/4U14BmG06/xFIK22I4TYxQpqqkrpHY0IA4IcVSCv SRUUNd1SvtBqWBNLOUgZosOwe2KHVFzUXfGwIlpNaw9kikSYzTA= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:18 2025 by rpki-client