This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: VvloVSvSHdGKsaJIcynOamU8rXqY3XusvS04Al+awrk= Subject key identifier: 8A:00:FE:1C:6D:CC:90:9E:A6:B6:F8:78:B3:F2:04:C9:8E:D4:E7:F7 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 5467D47ADFBE8ECF33BB6095A158B67FED1DC5BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02DF Signing time: Wed 24 Dec 2025 15:54:06 +0000 Manifest this update: Wed 24 Dec 2025 15:49:06 +0000 Manifest next update: Sat 27 Dec 2025 22:34:06 +0000 Files and hashes: 1: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) 2: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: SULZP6FRgC7NrobJuEsqoiHLKQq0cuoYALVLxdUKHLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:67:d4:7a:df:be:8e:cf:33:bb:60:95:a1:58:b6:7f:ed:1d:c5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Dec 24 15:49:06 2025 GMT Not After : Dec 27 22:34:06 2025 GMT Subject: CN=8A00FE1C6DCC909EA6B6F878B3F204C98ED4E7F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:3b:88:3a:dd:d9:2d:88:b0:69:ea:10:f5: c5:b4:36:be:0f:39:f4:24:a9:b1:88:3d:ef:e6:2a: fa:d0:31:4e:77:26:61:ed:bb:c9:5e:41:95:f8:c6: b2:83:86:6c:02:0c:48:12:97:c3:c8:cb:f2:fe:4b: 08:0f:e7:45:ee:00:2f:84:5e:a6:c6:cb:0b:6d:ef: 35:e2:40:4b:80:26:74:a5:e1:9f:df:d9:46:2e:ac: 11:e1:7a:43:2e:a5:08:87:6f:c3:78:5e:05:0e:c9: bb:09:b0:3f:1f:37:0f:b0:27:62:d6:6d:6f:cf:4b: 58:b2:90:59:ba:0d:52:f5:3b:be:a3:22:c0:40:b6: 54:91:b8:0c:f4:80:60:f7:76:12:16:79:a0:9c:86: 5d:2d:23:b0:ff:1d:47:74:4c:02:aa:d6:94:01:b4: a1:86:d1:75:12:6a:c2:73:e5:0a:47:df:e3:dc:72: aa:dd:6f:75:6c:24:23:e3:2e:54:55:8f:d8:fd:fd: c3:d3:5d:03:4f:dd:3e:56:79:dd:d6:e6:09:04:ea: 6b:13:bf:ae:52:36:2d:0a:34:3c:80:97:48:6f:9b: 46:b8:5e:03:6a:da:aa:6b:fb:01:51:ce:32:08:ab: cd:5d:e5:97:d8:21:08:a2:f4:4f:e2:29:37:77:88: 81:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:00:FE:1C:6D:CC:90:9E:A6:B6:F8:78:B3:F2:04:C9:8E:D4:E7:F7 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:12:a7:f5:74:5e:ef:e6:50:a2:0a:b9:fc:1a:01:48:b0:a2: b4:9d:b3:86:1c:f4:25:4e:bf:e7:db:92:52:e8:75:95:17:49: 49:98:88:54:e8:04:0d:0e:70:37:18:7f:b1:a1:16:34:97:8e: 02:e5:cb:e0:7e:c6:68:96:08:3a:ed:73:cf:46:02:f5:f9:19: 3a:25:c4:36:8a:1d:af:87:fd:38:96:55:95:ac:2f:b2:ae:02: ae:c2:2a:69:37:22:26:41:aa:d0:a8:06:de:c6:e3:00:d4:5c: c2:4e:ee:8f:06:0d:10:bf:08:eb:da:86:2a:ba:33:7a:97:0c: 81:aa:70:7e:b0:59:6b:c4:9a:df:06:ea:f4:f3:4a:2e:c0:67: b2:df:35:1e:2a:5c:c6:36:2b:41:ec:d5:b5:08:9f:45:22:2e: 15:be:96:19:26:8d:af:4a:32:f4:be:0d:97:9e:a2:a3:6a:ee: 50:fe:a2:68:ae:e6:07:dc:80:01:4a:9b:ff:38:32:a3:48:26: b2:5b:81:96:40:08:2c:cb:8e:15:d1:c4:23:c3:21:f1:33:d2: 8a:43:2b:53:d2:3a:74:4a:0e:8f:ee:27:d8:61:b1:b4:8b:29: 01:8f:5d:fa:7e:e4:ab:98:bd:75:3a:58:a0:f0:b1:b9:4f:76: d6:f6:98:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGfUet++js8zu2CVoVi2f+0dxb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTEyMjQxNTQ5MDZaFw0yNTEyMjcyMjM0MDZaMDMxMTAvBgNV BAMTKDhBMDBGRTFDNkRDQzkwOUVBNkI2Rjg3OEIzRjIwNEM5OEVENEU3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwjuIOt3ZLYiwaeoQ9cW0Nr4P OfQkqbGIPe/mKvrQMU53JmHtu8leQZX4xrKDhmwCDEgSl8PIy/L+SwgP50XuAC+E XqbGywtt7zXiQEuAJnSl4Z/f2UYurBHhekMupQiHb8N4XgUOybsJsD8fNw+wJ2LW bW/PS1iykFm6DVL1O76jIsBAtlSRuAz0gGD3dhIWeaCchl0tI7D/HUd0TAKq1pQB tKGG0XUSasJz5QpH3+Pccqrdb3VsJCPjLlRVj9j9/cPTXQNP3T5Wed3W5gkE6msT v65SNi0KNDyAl0hvm0a4XgNq2qpr+wFRzjIIq81d5ZfYIQii9E/iKTd3iIGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigD+HG3MkJ6mtvh4s/IEyY7U5/cwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABsSp/V0Xu/mUKIKufwaAUiworSds4Yc9CVO v+fbklLodZUXSUmYiFToBA0OcDcYf7GhFjSXjgLly+B+xmiWCDrtc89GAvX5GTol xDaKHa+H/TiWVZWsL7KuAq7CKmk3IiZBqtCoBt7G4wDUXMJO7o8GDRC/COvahiq6 M3qXDIGqcH6wWWvEmt8G6vTzSi7AZ7LfNR4qXMY2K0Hs1bUIn0UiLhW+lhkmja9K MvS+DZeeoqNq7lD+omiu5gfcgAFKm/84MqNIJrJbgZZACCzLjhXRxCPDIfEz0opD K1PSOnRKDo/uJ9hhsbSLKQGPXfp+5KuYvXU6WKDwsblPdtb2mDc= -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:10 2025 by rpki-client