This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: QPD+PGjHO7gaRvm8FPq6gpHtC/eIQzC6C6j9uiwsMzE= Subject key identifier: BC:4C:29:1F:29:EA:E8:71:13:E1:BF:D9:57:65:3C:34:6A:65:F9:5C Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 202423D841BB02E470D8DBD044DBCF1A22D0A337 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 023C Signing time: Wed 17 Dec 2025 20:41:33 +0000 Manifest this update: Wed 17 Dec 2025 20:36:33 +0000 Manifest next update: Sun 21 Dec 2025 00:57:33 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 9puAWKQx1YODl3WMWxaKGpNEOdx1xBcl38FPyEHW/nc=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:24:23:d8:41:bb:02:e4:70:d8:db:d0:44:db:cf:1a:22:d0:a3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Dec 17 20:36:33 2025 GMT Not After : Dec 21 00:57:33 2025 GMT Subject: CN=BC4C291F29EAE87113E1BFD957653C346A65F95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:7c:ad:19:82:9b:23:a0:9e:66:be:75:0c: d0:e3:d4:e0:f0:6b:db:2e:69:ee:20:79:6c:51:8d: 14:9d:c6:f0:df:12:e7:5d:a5:5d:50:22:0a:b9:3e: 6b:e4:70:73:c0:c9:cc:20:4f:8f:ba:c0:75:54:66: a7:0b:91:a0:1b:8e:ad:4a:67:c6:33:5c:b8:b7:91: 6e:8a:2e:d8:f3:73:d1:1b:5f:d4:6f:48:63:e8:3a: 2f:61:c0:f2:f3:06:12:dc:b0:a6:8a:80:30:a9:fd: 27:8a:2c:d6:b5:58:6b:4b:84:9b:d6:fb:de:b1:85: bf:e2:81:5e:0c:4f:0b:78:31:28:09:06:25:f1:09: ac:6b:cf:78:30:b0:94:3a:ef:11:62:36:90:74:dd: e6:53:e7:bb:5c:c2:4a:6f:2d:cd:1d:b1:5f:29:ee: ae:53:90:45:3b:1f:9f:0e:63:38:45:d4:ab:7f:c4: 00:4d:e4:eb:9d:91:29:c1:38:6f:f1:7b:c2:37:47: 9c:37:2c:96:5c:3e:8c:5e:f2:42:9b:7a:13:cb:a5: fe:97:72:91:98:59:d5:09:0d:c6:9a:a4:5e:82:0b: 26:3f:df:cb:aa:4a:11:dc:16:a2:9a:f3:27:7d:2b: d4:40:fe:13:90:de:f4:69:79:1f:26:df:0a:89:da: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4C:29:1F:29:EA:E8:71:13:E1:BF:D9:57:65:3C:34:6A:65:F9:5C X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:bc:8b:55:e2:82:6d:49:89:8f:33:1f:c7:2e:ba:a0:40:81: 4e:45:01:47:05:f1:6f:de:39:f7:5b:8e:bc:7a:fa:cb:d7:a9: 3f:49:11:70:ed:f6:c7:46:91:aa:de:bc:05:03:6a:ae:10:e3: 4d:a0:ea:c3:a1:30:c2:f5:33:64:7b:8b:99:83:48:76:ee:59: 22:01:d5:32:70:ae:d3:8e:aa:e6:7e:bc:f9:4d:81:df:08:19: cf:66:aa:f3:de:20:57:99:bf:96:c0:78:c0:e0:ac:44:25:82: 2f:9e:bf:d8:99:45:3c:af:0d:c6:85:01:d8:f5:f5:7b:43:3c: 0d:74:32:2a:ff:37:b1:98:41:77:79:d9:d4:c5:1b:69:cf:25: b2:df:04:71:b4:78:19:b4:2c:2a:aa:73:a8:af:50:07:49:0a: 54:b6:6c:84:8c:0c:1b:48:52:7f:b7:34:3b:1f:89:f1:94:ae: 0a:96:bd:51:50:6b:2b:d8:65:12:42:f2:1a:3c:5e:c3:55:a2: 40:f9:3a:01:7e:29:2f:84:3a:7f:74:52:ed:24:00:ea:d0:91: bc:fa:a2:88:72:55:f1:08:6b:8c:6f:23:24:ef:a9:ae:8a:24: 01:e1:84:3f:0b:eb:26:ac:1e:2b:e2:c1:e7:9d:c4:65:49:89: 45:df:5e:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICQj2EG7AuRw2NvQRNvPGiLQozcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTEyMTcyMDM2MzNaFw0yNTEyMjEwMDU3MzNaMDMxMTAvBgNV BAMTKEJDNEMyOTFGMjlFQUU4NzExM0UxQkZEOTU3NjUzQzM0NkE2NUY5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmtHytGYKbI6CeZr51DNDj1ODw a9suae4geWxRjRSdxvDfEuddpV1QIgq5PmvkcHPAycwgT4+6wHVUZqcLkaAbjq1K Z8YzXLi3kW6KLtjzc9EbX9RvSGPoOi9hwPLzBhLcsKaKgDCp/SeKLNa1WGtLhJvW +96xhb/igV4MTwt4MSgJBiXxCaxrz3gwsJQ67xFiNpB03eZT57tcwkpvLc0dsV8p 7q5TkEU7H58OYzhF1Kt/xABN5OudkSnBOG/xe8I3R5w3LJZcPoxe8kKbehPLpf6X cpGYWdUJDcaapF6CCyY/38uqShHcFqKa8yd9K9RA/hOQ3vRpeR8m3wqJ2qzrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEwpHynq6HET4b/ZV2U8NGpl+VwwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGS8i1Xigm1JiY8zH8cuuqBAgU5FAUcF8W/e Ofdbjrx6+svXqT9JEXDt9sdGkarevAUDaq4Q402g6sOhMML1M2R7i5mDSHbuWSIB 1TJwrtOOquZ+vPlNgd8IGc9mqvPeIFeZv5bAeMDgrEQlgi+ev9iZRTyvDcaFAdj1 9XtDPA10Mir/N7GYQXd52dTFG2nPJbLfBHG0eBm0LCqqc6ivUAdJClS2bISMDBtI Un+3NDsfifGUrgqWvVFQayvYZRJC8ho8XsNVokD5OgF+KS+EOn90Uu0kAOrQkbz6 oohyVfEIa4xvIyTvqa6KJAHhhD8L6yasHiviweedxGVJiUXfXsI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:17:29 2025 by rpki-client