This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: aRkDxObR9E78Eq8XFQanbJvWH8McsYFT/Uvd4GKtWxw= Subject key identifier: B8:2B:1D:BB:AA:AD:07:53:87:C7:0D:40:EE:FE:F5:5A:87:27:0D:2F Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 3B9518D93C5BE83C0599223C3C0CBA3440268909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 048E Signing time: Wed 17 Dec 2025 12:20:03 +0000 Manifest this update: Wed 17 Dec 2025 12:15:03 +0000 Manifest next update: Sat 20 Dec 2025 13:53:03 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: aolfJ62xKFX7RGXjouSr6tzNQE8L0EjEZRahUH4CvD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:95:18:d9:3c:5b:e8:3c:05:99:22:3c:3c:0c:ba:34:40:26:89:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Dec 17 12:15:03 2025 GMT Not After : Dec 20 13:53:03 2025 GMT Subject: CN=B82B1DBBAAAD075387C70D40EEFEF55A87270D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:39:61:e8:a8:69:30:0b:69:b6:fb:94:ab:3c: b3:f3:70:c7:fe:92:61:25:dc:38:2a:2e:7a:68:31: 80:02:46:5e:ba:79:bb:53:01:a0:b1:bc:d6:72:ea: b0:60:c5:30:d3:70:b6:3d:2d:c2:03:16:c1:4f:53: ca:13:83:a3:82:10:c3:ae:42:31:06:fe:0b:d2:19: 65:3d:e2:5b:b3:b0:b0:56:16:9b:b1:b5:6d:d8:cb: c9:5f:77:f8:28:c4:e3:35:62:e6:9e:66:40:0c:2e: 0f:31:e1:97:07:29:2f:97:42:a5:7c:79:a3:86:46: dc:4c:94:44:44:23:cf:d9:f4:b8:34:ac:82:86:78: c1:17:9c:32:7f:ab:c3:6a:6e:de:be:cb:30:f6:6f: a5:b0:b5:bf:2c:ae:cf:cc:31:60:f0:0b:69:1b:40: c5:43:04:02:68:c6:8a:67:85:55:e5:e2:4d:58:55: 96:1e:dc:c4:c5:fb:71:69:3e:09:c4:0d:9e:a9:5b: af:8a:51:26:d3:58:4c:54:b7:f4:3f:50:6e:fe:95: 93:ec:32:94:a9:ad:4f:cf:5b:7b:99:23:09:39:bf: 47:87:55:12:78:26:12:69:82:35:31:34:3c:8e:9e: 32:24:8c:0e:7f:b6:1e:0a:98:cb:71:d0:6e:d7:a2: 65:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2B:1D:BB:AA:AD:07:53:87:C7:0D:40:EE:FE:F5:5A:87:27:0D:2F X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:78:9e:40:a3:0d:7a:2e:bd:51:61:ad:7c:0a:1d:2e:f3:e5: 70:0f:b6:49:59:94:64:22:4c:f4:39:87:18:f9:05:e2:32:21: 0f:89:35:83:f4:2e:fb:ed:aa:67:c9:ae:66:d2:2f:81:b1:1f: a5:60:4a:60:e3:38:2d:32:b9:11:96:8a:ca:87:ba:b6:47:e5: f8:e6:10:55:85:44:a5:52:db:99:16:61:5e:e4:44:19:d3:c6: a5:a5:d0:83:2c:f5:ae:8b:0b:a9:36:27:c2:48:fb:70:91:4d: ac:60:fb:e0:6e:bd:ec:a3:1e:2d:2d:cd:b2:25:db:bc:1c:8f: 6d:62:55:a4:5f:ed:74:6c:92:db:3b:7b:a6:c8:97:54:30:27: bf:95:94:85:73:21:1e:6c:33:08:d0:34:30:e8:ac:04:29:9d: 48:98:84:33:75:94:2b:52:d4:80:12:0d:b5:0a:03:d6:55:88: 18:98:52:bb:05:11:fd:99:24:a3:e4:bd:71:fd:22:6a:d6:01: 74:b0:74:f3:f4:1d:5e:56:09:bd:e2:fc:48:a9:3c:98:56:49: 74:d9:19:de:7b:eb:ba:16:48:32:66:f7:f7:61:e0:f2:65:43: 7d:43:9f:e6:74:91:cd:b7:77:42:a8:da:ff:e6:b3:b7:a2:9f: 6b:19:04:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5UY2Txb6DwFmSI8PAy6NEAmiQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTEyMTcxMjE1MDNaFw0yNTEyMjAxMzUzMDNaMDMxMTAvBgNV BAMTKEI4MkIxREJCQUFBRDA3NTM4N0M3MEQ0MEVFRkVGNTVBODcyNzBEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OWHoqGkwC2m2+5SrPLPzcMf+ kmEl3DgqLnpoMYACRl66ebtTAaCxvNZy6rBgxTDTcLY9LcIDFsFPU8oTg6OCEMOu QjEG/gvSGWU94luzsLBWFpuxtW3Yy8lfd/goxOM1YuaeZkAMLg8x4ZcHKS+XQqV8 eaOGRtxMlEREI8/Z9Lg0rIKGeMEXnDJ/q8Nqbt6+yzD2b6Wwtb8srs/MMWDwC2kb QMVDBAJoxopnhVXl4k1YVZYe3MTF+3FpPgnEDZ6pW6+KUSbTWExUt/Q/UG7+lZPs MpSprU/PW3uZIwk5v0eHVRJ4JhJpgjUxNDyOnjIkjA5/th4KmMtx0G7XomWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCsdu6qtB1OHxw1A7v71WocnDS8wHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZ4nkCjDXouvVFhrXwKHS7z5XAPtklZlGQi TPQ5hxj5BeIyIQ+JNYP0LvvtqmfJrmbSL4GxH6VgSmDjOC0yuRGWisqHurZH5fjm EFWFRKVS25kWYV7kRBnTxqWl0IMs9a6LC6k2J8JI+3CRTaxg++BuveyjHi0tzbIl 27wcj21iVaRf7XRskts7e6bIl1QwJ7+VlIVzIR5sMwjQNDDorAQpnUiYhDN1lCtS 1IASDbUKA9ZViBiYUrsFEf2ZJKPkvXH9ImrWAXSwdPP0HV5WCb3i/EipPJhWSXTZ Gd5767oWSDJm9/dh4PJlQ31Dn+Z0kc23d0Ko2v/ms7ein2sZBAY= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:00 2025 by rpki-client