This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: bSrNMUhywoaAl+2skAIIfrwnh0P/pM17SW3hEI9hhm8= Subject key identifier: CB:3D:82:BB:A5:07:B1:5B:03:EE:31:D2:A2:9E:8C:1D:B1:EB:B2:62 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 1165E8478E832E38C7D27A1BD4081A0A673618F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02DE Signing time: Mon 22 Dec 2025 13:52:34 +0000 Manifest this update: Mon 22 Dec 2025 13:47:34 +0000 Manifest next update: Thu 25 Dec 2025 15:46:34 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: lopRKgMI1vX/Nd2yajp4T0RSN99lRlpLpoctgbGmb8U=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:65:e8:47:8e:83:2e:38:c7:d2:7a:1b:d4:08:1a:0a:67:36:18:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Dec 22 13:47:34 2025 GMT Not After : Dec 25 15:46:34 2025 GMT Subject: CN=CB3D82BBA507B15B03EE31D2A29E8C1DB1EBB262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:21:41:c3:2f:fb:99:f3:ad:d3:71:de:61: 6a:0d:c2:76:78:75:fb:92:01:06:fd:40:00:9c:8d: fa:bf:d3:4c:21:3d:40:2e:2b:ae:fc:1a:ab:f0:82: d1:a0:fe:5d:6a:4e:ce:7f:76:33:c6:b5:53:be:43: 8f:1c:a4:5e:b6:2a:85:c7:19:50:c9:f6:29:12:c5: 7a:9b:0b:52:cb:28:88:ba:03:72:9e:c6:1f:e8:94: ee:82:33:40:a0:18:9d:a7:9d:f3:f7:3a:90:e8:97: 63:c7:72:dd:1f:31:73:81:98:7e:62:81:3e:f1:60: c9:a4:e1:e2:9e:51:da:2e:da:d2:44:e9:5e:b7:8d: a4:c1:77:51:21:50:31:13:84:af:6c:5f:ac:7f:2f: fb:f5:01:90:e3:dd:dd:d8:01:c1:7d:e9:cf:3a:98: 07:07:78:b7:f3:77:c9:1f:bb:b8:d9:22:96:70:5f: 67:f2:dc:4c:39:82:bc:91:8a:d3:17:62:91:f2:ec: 03:a9:4c:63:45:32:54:4f:6d:62:2c:a0:a0:d9:bd: 89:00:8c:6c:88:ef:a5:3c:5a:bf:09:fe:5e:b7:b2: 1e:ba:3c:c9:9f:12:a9:09:11:78:e8:ad:86:33:b4: 23:f7:54:06:0a:fd:57:4d:fb:24:60:3f:55:39:13: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3D:82:BB:A5:07:B1:5B:03:EE:31:D2:A2:9E:8C:1D:B1:EB:B2:62 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:15:5a:72:dd:4c:21:0f:eb:09:b1:52:4b:ec:c9:a2:9c:47: 73:38:a7:37:3b:3f:e2:c4:e3:78:42:07:47:3e:3b:b0:c7:c2: ce:82:fb:d2:37:45:26:72:78:ec:08:3c:f7:f7:83:b0:4d:10: 86:fb:a9:4c:49:4f:5f:71:00:d7:92:d9:8d:7a:7b:a0:40:90: 7d:59:97:62:0a:41:1b:37:9e:47:c9:4d:8e:27:91:9a:ca:1f: 0b:4a:1a:a3:91:d1:21:5a:88:2c:b5:24:13:63:f5:23:a3:3f: 9a:94:5e:4d:8e:bb:1f:79:05:16:89:8c:3c:d4:e6:47:78:fc: 71:b7:5f:e6:9e:b6:9c:25:23:3c:e7:7f:d8:31:2f:3f:4d:66: c8:46:69:c8:1f:fb:c3:e2:0f:2d:df:f7:4b:70:78:6f:b1:82: 7d:db:e2:d3:13:53:7d:bd:b4:2d:b1:5f:5b:58:49:b6:8d:1e: 7c:1f:89:d7:2b:c5:d5:8e:cd:96:a6:f0:91:7a:f6:48:c4:69: 37:e0:1c:f7:a0:9d:0b:91:25:ea:8f:f1:9c:38:a9:27:1b:1e: 0d:0d:3c:df:c1:d8:36:22:eb:e7:f2:da:aa:7c:37:3c:0f:b8: 76:42:62:92:3a:7d:85:81:05:99:1a:3d:b5:59:64:67:4f:cc: 90:85:69:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWXoR46DLjjH0nob1AgaCmc2GPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTEyMjIxMzQ3MzRaFw0yNTEyMjUxNTQ2MzRaMDMxMTAvBgNV BAMTKENCM0Q4MkJCQTUwN0IxNUIwM0VFMzFEMkEyOUU4QzFEQjFFQkIyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5DyFBwy/7mfOt03HeYWoNwnZ4 dfuSAQb9QACcjfq/00whPUAuK678GqvwgtGg/l1qTs5/djPGtVO+Q48cpF62KoXH GVDJ9ikSxXqbC1LLKIi6A3Kexh/olO6CM0CgGJ2nnfP3OpDol2PHct0fMXOBmH5i gT7xYMmk4eKeUdou2tJE6V63jaTBd1EhUDEThK9sX6x/L/v1AZDj3d3YAcF96c86 mAcHeLfzd8kfu7jZIpZwX2fy3Ew5gryRitMXYpHy7AOpTGNFMlRPbWIsoKDZvYkA jGyI76U8Wr8J/l63sh66PMmfEqkJEXjorYYztCP3VAYK/VdN+yRgP1U5E1trAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyz2Cu6UHsVsD7jHSop6MHbHrsmIwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8VWnLdTCEP6wmxUkvsyaKcR3M4pzc7P+LE 43hCB0c+O7DHws6C+9I3RSZyeOwIPPf3g7BNEIb7qUxJT19xANeS2Y16e6BAkH1Z l2IKQRs3nkfJTY4nkZrKHwtKGqOR0SFaiCy1JBNj9SOjP5qUXk2Oux95BRaJjDzU 5kd4/HG3X+aetpwlIzznf9gxLz9NZshGacgf+8PiDy3f90tweG+xgn3b4tMTU329 tC2xX1tYSbaNHnwfidcrxdWOzZam8JF69kjEaTfgHPegnQuRJeqP8Zw4qScbHg0N PN/B2DYi6+fy2qp8NzwPuHZCYpI6fYWBBZkaPbVZZGdPzJCFabU= -----END CERTIFICATE-----Generated at Tue Dec 23 09:20:56 2025 by rpki-client