This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: RbpQZ0pPm+hulrhjg/UAOZx2PuyhTA5e3G0qZHOV9RM= Subject key identifier: 3A:29:45:76:4C:D7:96:4D:AA:67:DC:CE:72:19:2D:2E:72:5D:75:EE Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 035D9C4CD7E7DCF0FC67BEB4258F04B30C9A997A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 0209 Signing time: Thu 18 Dec 2025 05:40:39 +0000 Manifest this update: Thu 18 Dec 2025 05:35:39 +0000 Manifest next update: Sun 21 Dec 2025 11:13:39 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: FGFr8rp+JvEMA+6hvsJDe+wIjhqP099TqcU8bRnFCn0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5d:9c:4c:d7:e7:dc:f0:fc:67:be:b4:25:8f:04:b3:0c:9a:99:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Dec 18 05:35:39 2025 GMT Not After : Dec 21 11:13:39 2025 GMT Subject: CN=3A2945764CD7964DAA67DCCE72192D2E725D75EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:2d:84:0e:ea:5b:ae:f2:d5:57:0d:97:c8: a4:98:a1:09:fb:0f:fc:7f:d9:0b:39:40:e2:f2:fd: 82:dc:ef:b2:a7:17:03:63:48:1d:10:94:f0:fc:c7: d1:d6:ce:b2:e7:51:7e:18:5a:88:c9:65:31:05:74: 7f:8a:7e:b3:98:e7:99:7b:a5:7d:d7:13:8d:cf:0e: eb:8c:b9:ed:02:f9:c8:cd:cf:4f:cd:fe:4d:2a:5d: 7f:02:61:5c:c1:66:ea:42:25:0a:2f:da:b4:b9:ab: 2a:e1:79:49:a9:2c:a4:4e:0e:c8:3b:37:a4:9c:37: 39:1a:60:ea:1a:d1:7a:48:f1:c8:67:7c:f0:77:87: 99:11:7f:e9:49:35:be:a2:1e:10:6f:38:c1:c4:df: e1:78:1e:f4:c6:f5:74:1b:f7:91:7b:84:dc:0f:54: ab:37:79:f7:ac:b4:29:fd:6e:89:d5:22:09:33:43: fe:b1:2b:27:90:45:f5:b7:8f:c2:d7:ab:13:bd:87: ff:61:34:cb:d1:39:ba:e4:ba:2b:51:eb:d2:6f:71: e9:8d:d2:b8:68:27:53:03:a3:ea:eb:8a:48:f0:f6: 05:64:bc:3b:f7:c3:52:40:f6:43:a2:9f:8a:68:45: 24:79:4c:9b:54:c7:b4:1f:29:6d:58:c7:d3:13:f9: 58:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:29:45:76:4C:D7:96:4D:AA:67:DC:CE:72:19:2D:2E:72:5D:75:EE X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:81:25:e5:01:72:93:04:5b:8c:1f:d4:d7:20:c0:e3:99:f6: c0:4b:59:d7:30:59:a4:31:b4:b2:c1:6c:c6:8a:f3:45:27:54: c4:63:98:db:54:08:8c:aa:d8:55:8a:03:60:55:0e:5c:c5:5e: a8:9d:b4:61:22:d4:e8:d1:d6:7b:fe:07:24:65:c4:e2:9d:da: c8:39:a6:90:1b:68:74:fc:15:bd:63:a2:70:0f:6a:3c:e3:dd: 24:13:fa:da:ac:ac:94:43:64:d1:f0:5d:1a:0c:3f:ac:b0:8a: cb:03:6e:65:2c:27:8b:a5:10:19:eb:f1:98:13:66:14:31:92: 2c:43:44:32:63:b0:e3:84:4a:49:ba:91:66:95:f3:e5:b8:32: 9f:84:ee:ae:da:b0:9e:db:cc:84:36:b9:65:b1:dd:70:37:72: e9:27:d2:cc:28:bd:4a:a4:49:63:5b:f3:45:ad:8b:3f:4b:69: ac:5d:10:cb:49:20:0f:7e:b6:c7:cb:63:ac:95:5e:13:6b:01: b9:96:e7:e8:9f:b2:cd:14:a9:9b:e2:e0:1d:42:4d:d2:f3:57: aa:51:a8:ef:d0:4f:cb:d0:c6:22:88:1a:8a:02:c4:c9:53:22: c9:bc:7a:fc:50:81:27:fe:d9:28:fb:30:e0:00:f8:46:80:2b: ea:58:4b:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA12cTNfn3PD8Z760JY8EswyamXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTEyMTgwNTM1MzlaFw0yNTEyMjExMTEzMzlaMDMxMTAvBgNV BAMTKDNBMjk0NTc2NENENzk2NERBQTY3RENDRTcyMTkyRDJFNzI1RDc1RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQS2EDupbrvLVVw2XyKSYoQn7 D/x/2Qs5QOLy/YLc77KnFwNjSB0QlPD8x9HWzrLnUX4YWojJZTEFdH+KfrOY55l7 pX3XE43PDuuMue0C+cjNz0/N/k0qXX8CYVzBZupCJQov2rS5qyrheUmpLKRODsg7 N6ScNzkaYOoa0XpI8chnfPB3h5kRf+lJNb6iHhBvOMHE3+F4HvTG9XQb95F7hNwP VKs3efestCn9bonVIgkzQ/6xKyeQRfW3j8LXqxO9h/9hNMvRObrkuitR69JvcemN 0rhoJ1MDo+rrikjw9gVkvDv3w1JA9kOin4poRSR5TJtUx7QfKW1Yx9MT+VjrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOilFdkzXlk2qZ9zOchktLnJdde4wHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6BJeUBcpMEW4wf1NcgwOOZ9sBLWdcwWaQx tLLBbMaK80UnVMRjmNtUCIyq2FWKA2BVDlzFXqidtGEi1OjR1nv+ByRlxOKd2sg5 ppAbaHT8Fb1jonAPajzj3SQT+tqsrJRDZNHwXRoMP6ywissDbmUsJ4ulEBnr8ZgT ZhQxkixDRDJjsOOESkm6kWaV8+W4Mp+E7q7asJ7bzIQ2uWWx3XA3cukn0swovUqk SWNb80Wtiz9LaaxdEMtJIA9+tsfLY6yVXhNrAbmW5+ifss0UqZvi4B1CTdLzV6pR qO/QT8vQxiKIGooCxMlTIsm8evxQgSf+2Sj7MOAA+EaAK+pYS0Y= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:52 2025 by rpki-client