This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: lezvfA5dUDcwVCplvV4GQPtFWQDnQKS+NenItOOUmlc= Subject key identifier: B5:E1:C0:40:CB:47:96:1F:E9:80:4C:41:52:E4:73:E2:0C:50:D1:0E Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 1B62958B439476B369F9413ABBB9FBFACDBC55FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 011A Signing time: Sat 20 Dec 2025 18:52:06 +0000 Manifest this update: Sat 20 Dec 2025 18:47:06 +0000 Manifest next update: Tue 23 Dec 2025 21:11:06 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313432333832.roa (hash: Tq6eQwWr1rdCCJNVIsGIEm3Uh/gJAzWFs05ZKzvmuow=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: p8kRorAHyFzC8nEQjjIPuPITBSYYE/eXvubyP6AFztQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:62:95:8b:43:94:76:b3:69:f9:41:3a:bb:b9:fb:fa:cd:bc:55:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Dec 20 18:47:06 2025 GMT Not After : Dec 23 21:11:06 2025 GMT Subject: CN=B5E1C040CB47961FE9804C4152E473E20C50D10E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c3:20:7f:8a:6d:0e:c0:f4:ac:88:e9:7a:6a: 9d:50:2e:45:97:df:c6:0c:d9:2e:e9:7c:e8:96:3e: 7f:ef:99:35:47:4b:da:9d:ce:51:47:d5:cb:c5:82: 51:ae:0d:81:52:54:6f:df:28:f1:8d:ce:4a:f5:7f: 8b:da:4a:c7:1e:66:7e:41:f7:a3:e1:18:75:e3:39: 92:d2:0f:5f:5f:ea:22:da:0d:45:42:04:21:85:2d: 12:aa:b6:01:5e:b4:12:cd:40:85:fd:43:54:1c:1c: f7:ff:2c:d2:ed:2f:9d:30:4c:1c:5e:2d:f3:fc:54: b8:03:9d:ec:3c:9b:50:8f:4d:aa:40:55:fa:86:19: 0f:f1:66:55:ed:0f:4c:84:1d:0b:ec:c6:b3:94:bb: 47:7c:9a:e2:70:00:72:7e:4c:50:03:3d:e6:42:0b: f6:8b:50:22:88:1f:1d:62:83:c3:8e:70:b4:3c:0b: fd:f0:23:ed:04:66:d0:89:49:ce:f3:5a:fd:25:93: c2:88:0e:03:c4:3c:85:c6:1f:c8:0b:9d:d2:92:c1: 15:2a:a5:7f:90:bc:cc:9a:49:e7:63:c7:b8:a2:94: cc:3f:f5:19:a9:d4:ce:af:d9:28:69:26:30:b4:c5: fa:8f:ee:59:5a:e1:2d:a9:21:69:1d:5f:67:98:62: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E1:C0:40:CB:47:96:1F:E9:80:4C:41:52:E4:73:E2:0C:50:D1:0E X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e8:90:9d:ce:d1:0b:9c:cd:53:0f:ed:71:28:47:0b:33:bf: a0:54:c3:81:b2:25:ab:a7:c2:42:b0:20:42:39:ee:52:b2:fc: 3b:7c:6d:81:51:37:3d:a7:70:31:28:14:72:8a:c3:01:0d:d8: b8:23:1f:c8:28:a6:b2:07:e9:64:80:b6:c9:fe:79:c7:d7:83: 23:3e:a3:ef:37:96:0b:6a:a7:b8:02:30:1c:d0:f0:64:8e:2e: 09:b5:34:8b:3b:6d:ec:2a:6f:c5:2b:90:e4:1c:a8:21:72:13: 63:8c:ea:ef:98:9c:b7:10:6d:8e:ef:57:c2:cf:02:2e:61:ce: ea:5b:83:9c:81:71:f4:29:80:f3:b3:8f:4a:f9:d2:ad:1b:0c: 69:b1:3e:c3:8e:4f:1c:fb:f8:c7:30:54:29:0c:5c:1a:0c:66: cc:66:14:6a:7d:a8:ad:cd:57:d0:53:bd:a9:b9:56:60:51:ee: 52:4c:60:2d:71:78:86:20:5b:08:fc:3e:a4:5e:4e:63:a7:b1: c0:26:f1:ee:14:62:8f:a9:22:5c:18:90:31:41:2b:4e:73:c6: 27:89:0b:49:84:fd:cb:05:3c:a0:39:a2:30:a9:25:21:9a:4e: be:76:b6:3e:ce:06:93:48:28:da:c3:7f:bf:3e:d9:44:b8:3d: c4:75:de:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG2KVi0OUdrNp+UE6u7n7+s28Vf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTEyMjAxODQ3MDZaFw0yNTEyMjMyMTExMDZaMDMxMTAvBgNV BAMTKEI1RTFDMDQwQ0I0Nzk2MUZFOTgwNEM0MTUyRTQ3M0UyMEM1MEQxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqwyB/im0OwPSsiOl6ap1QLkWX 38YM2S7pfOiWPn/vmTVHS9qdzlFH1cvFglGuDYFSVG/fKPGNzkr1f4vaSsceZn5B 96PhGHXjOZLSD19f6iLaDUVCBCGFLRKqtgFetBLNQIX9Q1QcHPf/LNLtL50wTBxe LfP8VLgDnew8m1CPTapAVfqGGQ/xZlXtD0yEHQvsxrOUu0d8muJwAHJ+TFADPeZC C/aLUCKIHx1ig8OOcLQ8C/3wI+0EZtCJSc7zWv0lk8KIDgPEPIXGH8gLndKSwRUq pX+QvMyaSedjx7iilMw/9Rmp1M6v2ShpJjC0xfqP7lla4S2pIWkdX2eYYvUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUteHAQMtHlh/pgExBUuRz4gxQ0Q4wHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrokJ3O0QuczVMP7XEoRwszv6BUw4GyJaun wkKwIEI57lKy/Dt8bYFRNz2ncDEoFHKKwwEN2LgjH8goprIH6WSAtsn+ecfXgyM+ o+83lgtqp7gCMBzQ8GSOLgm1NIs7bewqb8UrkOQcqCFyE2OM6u+YnLcQbY7vV8LP Ai5hzupbg5yBcfQpgPOzj0r50q0bDGmxPsOOTxz7+McwVCkMXBoMZsxmFGp9qK3N V9BTvam5VmBR7lJMYC1xeIYgWwj8PqReTmOnscAm8e4UYo+pIlwYkDFBK05zxieJ C0mE/csFPKA5ojCpJSGaTr52tj7OBpNIKNrDf78+2US4PcR13us= -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:35 2025 by rpki-client