This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: ICM243wbzpZEe8FMwep3PrzrtfqzOPGrEeNFGdFsKYE= Subject key identifier: 67:8B:CA:AB:4F:5E:9A:70:04:34:77:87:0C:06:D5:BA:58:62:02:27 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 3B27BA1AC3AFD8ED310FF0769B6E8701FAF6BA98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02B4 Signing time: Tue 16 Dec 2025 19:02:11 +0000 Manifest this update: Tue 16 Dec 2025 18:57:11 +0000 Manifest next update: Sat 20 Dec 2025 02:55:11 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: /3oB+VeQI/Ed8CiuYyLZpD8F3vKIZvsv49Iz2p1T5xM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:ba:1a:c3:af:d8:ed:31:0f:f0:76:9b:6e:87:01:fa:f6:ba:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Dec 16 18:57:11 2025 GMT Not After : Dec 20 02:55:11 2025 GMT Subject: CN=678BCAAB4F5E9A70043477870C06D5BA58620227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:3f:ed:83:1b:97:d5:f9:9c:5b:ce:6f:5d: 4d:84:ab:98:87:aa:b9:cb:80:bd:f8:8b:46:ea:2a: 12:eb:38:b0:a5:01:5e:d2:dc:ee:c7:1b:d4:ba:f0: 88:d6:2e:45:4e:79:1e:3f:84:64:35:47:67:06:f8: 7f:12:62:4c:5f:e5:01:e1:ee:71:b0:a6:72:ba:dc: 20:2f:1b:8a:ea:cb:6c:6b:ac:1b:1a:fa:12:60:51: 7a:55:69:2b:b9:ed:50:fe:8e:93:8b:9d:15:f6:65: e9:ce:ee:b0:75:26:f5:b4:7a:c1:31:cb:3a:e4:07: 4f:96:ec:3f:a0:32:02:6f:96:e0:7e:ec:2d:67:36: c0:39:30:42:c8:a7:91:39:cf:49:55:c7:6b:00:1a: e3:28:9c:fd:5c:af:6f:89:1e:7a:8d:eb:57:41:13: 13:6b:61:06:e1:44:5b:9c:fd:b4:26:0a:87:80:93: 7c:99:f0:25:7c:c6:f6:3a:fc:c6:17:c9:4c:d7:93: 75:c7:d4:b6:c4:7f:cf:ad:9f:d5:14:48:54:2f:e7: d7:e5:fa:1f:18:be:fc:60:0f:bd:f6:ff:a3:bb:58: 74:18:c2:54:8e:02:76:3d:77:0a:15:a8:ef:1e:7b: a9:fa:f0:2b:6e:1d:84:80:c5:a3:55:a9:f3:7a:05: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8B:CA:AB:4F:5E:9A:70:04:34:77:87:0C:06:D5:BA:58:62:02:27 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:64:b9:2c:b1:f2:d6:31:ca:bb:ac:3f:e9:27:61:17:10:d3: 43:e0:a0:db:fb:1e:24:97:bc:56:d0:d1:ce:4c:29:29:03:9c: 06:0d:c0:26:b8:53:7f:58:7c:f1:9f:c5:53:29:d3:c9:fe:eb: 63:6f:08:bc:f5:b5:be:0c:33:5a:26:f0:df:e4:2e:4c:ef:fa: f2:9b:2a:ef:5d:ef:fa:c5:da:2c:3c:37:71:aa:b7:fa:6d:50: 38:13:71:8c:5a:4a:14:ba:5c:d1:19:5a:83:7e:c3:07:67:b1: 7f:55:32:d1:c8:58:36:53:63:59:42:14:6d:85:f5:be:67:74: 0b:b5:b1:27:53:24:61:12:a7:ad:87:ae:9a:a3:87:d3:b5:c9: c2:66:48:fe:91:05:a0:a6:24:08:72:5b:e3:fe:3f:18:68:16: 6f:b3:29:20:2e:18:6b:75:38:38:76:92:e4:71:c5:ce:00:62: 4f:b2:bb:8b:b0:7f:30:ae:13:91:11:5d:94:8f:bf:31:68:6f: 71:10:e4:f6:77:9d:4a:64:de:38:99:0f:e4:08:d8:27:15:9f: 1a:b4:aa:90:8d:ce:ee:9e:9a:af:d3:a0:87:98:8f:98:01:ad: 7f:d8:58:be:8c:80:fd:d1:8d:ee:d9:8c:2e:0c:d4:f8:cf:2f: 7c:02:bc:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOye6GsOv2O0xD/B2m26HAfr2upgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTEyMTYxODU3MTFaFw0yNTEyMjAwMjU1MTFaMDMxMTAvBgNV BAMTKDY3OEJDQUFCNEY1RTlBNzAwNDM0Nzc4NzBDMDZENUJBNTg2MjAyMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNMD/tgxuX1fmcW85vXU2Eq5iH qrnLgL34i0bqKhLrOLClAV7S3O7HG9S68IjWLkVOeR4/hGQ1R2cG+H8SYkxf5QHh 7nGwpnK63CAvG4rqy2xrrBsa+hJgUXpVaSu57VD+jpOLnRX2ZenO7rB1JvW0esEx yzrkB0+W7D+gMgJvluB+7C1nNsA5MELIp5E5z0lVx2sAGuMonP1cr2+JHnqN61dB ExNrYQbhRFuc/bQmCoeAk3yZ8CV8xvY6/MYXyUzXk3XH1LbEf8+tn9UUSFQv59fl +h8YvvxgD732/6O7WHQYwlSOAnY9dwoVqO8ee6n68CtuHYSAxaNVqfN6Bd6PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4vKq09emnAENHeHDAbVulhiAicwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdkuSyx8tYxyrusP+knYRcQ00PgoNv7HiSX vFbQ0c5MKSkDnAYNwCa4U39YfPGfxVMp08n+62NvCLz1tb4MM1om8N/kLkzv+vKb Ku9d7/rF2iw8N3Gqt/ptUDgTcYxaShS6XNEZWoN+wwdnsX9VMtHIWDZTY1lCFG2F 9b5ndAu1sSdTJGESp62Hrpqjh9O1ycJmSP6RBaCmJAhyW+P+PxhoFm+zKSAuGGt1 ODh2kuRxxc4AYk+yu4uwfzCuE5ERXZSPvzFob3EQ5PZ3nUpk3jiZD+QI2CcVnxq0 qpCNzu6emq/ToIeYj5gBrX/YWL6MgP3Rje7ZjC4M1PjPL3wCvBc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:55 2025 by rpki-client