This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: TSeQ31ielHY4vB+2zqWAfW7u8m3XwLA1OgG529vpbso= Subject key identifier: 0E:08:F0:76:9B:1D:0E:07:7E:EE:C9:74:55:B4:A1:BA:7A:2C:35:B2 Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 71C0BA981FD319B85684175F502FCA735176A6AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 028D Signing time: Wed 17 Dec 2025 05:21:42 +0000 Manifest this update: Wed 17 Dec 2025 05:16:42 +0000 Manifest next update: Sat 20 Dec 2025 16:35:42 +0000 Files and hashes: 1: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: b2Z105KhWOPM+lYoNzNDb6fwAJcAmObyxFkEYsaM/+c=) 2: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 3: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:ba:98:1f:d3:19:b8:56:84:17:5f:50:2f:ca:73:51:76:a6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Dec 17 05:16:42 2025 GMT Not After : Dec 20 16:35:42 2025 GMT Subject: CN=0E08F0769B1D0E077EEEC97455B4A1BA7A2C35B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:54:63:cb:42:ad:f3:ba:65:a9:58:c8:3d: d3:93:e6:3d:df:36:f2:e7:4a:00:16:ae:76:d3:10: 64:eb:df:97:23:b4:97:f1:2c:74:b0:19:1b:df:75: f7:22:f9:f4:4e:98:f3:d6:84:b9:d6:32:29:30:41: 4d:0a:ca:75:f7:2d:18:87:6c:c3:70:ed:96:c8:40: a6:91:4b:cd:a1:8c:90:0f:b4:8e:0b:7b:4e:18:03: 53:f9:c2:50:a9:38:26:a5:ad:f5:73:b5:66:d0:5c: c3:e2:4d:12:08:46:56:90:75:9d:bb:7e:f7:eb:97: 80:09:b4:cf:34:9f:1e:5a:28:ac:8d:8a:ac:df:7c: 7c:64:98:df:0f:d3:a6:70:52:a9:34:d9:45:88:ad: 19:66:69:3c:14:b7:94:2c:97:47:1e:fe:b4:6a:b5: c1:b5:92:71:9b:88:5e:80:69:17:81:9a:4b:9b:9b: f5:3a:8f:4f:e9:45:23:73:5d:a3:55:84:61:28:2a: 6b:c5:1b:bd:ce:ff:b1:3a:32:96:e6:67:c6:b0:66: 2f:a4:2f:a4:d2:59:85:e3:4c:3c:fa:a3:7a:5d:ea: ec:47:fd:77:7f:0d:ff:84:bd:46:e2:74:fe:4e:3d: 73:b4:77:6e:c0:16:82:d5:ca:f5:3f:e0:ff:53:31: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:08:F0:76:9B:1D:0E:07:7E:EE:C9:74:55:B4:A1:BA:7A:2C:35:B2 X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:01:83:80:ce:93:7b:e8:44:f1:44:3d:24:ef:fe:d1:2e: d7:c6:d6:74:2c:69:1c:c1:96:c8:ec:c0:a5:4b:4c:c9:f5:ff: 8f:dd:b9:e5:ee:33:e8:72:c9:7f:5b:44:80:d7:1e:3a:a6:4e: 33:be:8d:58:88:e5:70:1a:3c:f4:b3:3c:39:6a:1e:9b:8f:10: 5e:87:79:6a:ac:de:23:1d:88:61:01:7f:eb:78:67:07:f0:c6: 2d:d2:62:9c:af:a8:74:7d:d7:17:36:e1:7e:43:28:3a:48:0e: c4:25:74:90:0e:0b:dd:24:8b:ca:b0:42:7c:8d:50:7f:3c:59: 66:5e:f5:1a:80:96:9f:90:11:b5:e2:41:a2:b3:bb:08:f2:99: eb:04:21:1d:b9:c6:82:46:1b:76:e3:97:68:a4:04:cb:1b:9a: 09:e9:10:4f:87:15:5b:72:a3:36:02:d7:d1:ca:f0:fe:11:cc: 89:24:31:34:95:8c:38:df:df:ad:0e:2e:94:f0:13:32:d6:ee: 58:fb:79:dc:83:64:7b:00:2f:31:73:6b:c5:5a:e9:cf:01:47: 2a:56:c6:c3:3b:d5:a3:5d:44:72:0b:5e:f7:17:ff:25:5a:b0: 08:e2:b8:a8:1d:e4:55:eb:1d:4d:85:f2:b1:6b:eb:c2:d7:2d: 8c:53:e2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccC6mB/TGbhWhBdfUC/Kc1F2pqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNTEyMTcwNTE2NDJaFw0yNTEyMjAxNjM1NDJaMDMxMTAvBgNV BAMTKDBFMDhGMDc2OUIxRDBFMDc3RUVFQzk3NDU1QjRBMUJBN0EyQzM1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLelRjy0Kt87plqVjIPdOT5j3f NvLnSgAWrnbTEGTr35cjtJfxLHSwGRvfdfci+fROmPPWhLnWMikwQU0KynX3LRiH bMNw7ZbIQKaRS82hjJAPtI4Le04YA1P5wlCpOCalrfVztWbQXMPiTRIIRlaQdZ27 fvfrl4AJtM80nx5aKKyNiqzffHxkmN8P06ZwUqk02UWIrRlmaTwUt5Qsl0ce/rRq tcG1knGbiF6AaReBmkubm/U6j0/pRSNzXaNVhGEoKmvFG73O/7E6MpbmZ8awZi+k L6TSWYXjTDz6o3pd6uxH/Xd/Df+EvUbidP5OPXO0d27AFoLVyvU/4P9TMbzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgjwdpsdDgd+7sl0VbShunosNbIwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1ZAYOAzpN76ETxRD0k7/7RLtfG1nQsaRzB lsjswKVLTMn1/4/dueXuM+hyyX9bRIDXHjqmTjO+jViI5XAaPPSzPDlqHpuPEF6H eWqs3iMdiGEBf+t4Zwfwxi3SYpyvqHR91xc24X5DKDpIDsQldJAOC90ki8qwQnyN UH88WWZe9RqAlp+QEbXiQaKzuwjymesEIR25xoJGG3bjl2ikBMsbmgnpEE+HFVty ozYC19HK8P4RzIkkMTSVjDjf360OLpTwEzLW7lj7edyDZHsALzFza8Va6c8BRypW xsM71aNdRHILXvcX/yVasAjiuKgd5FXrHU2F8rFr68LXLYxT4ps= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:14 2025 by rpki-client