This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: BTmg9KVlhzQ8E9RFpuvbit/8kiHv7qe+80zGfRSbWA8= Subject key identifier: 66:23:23:F9:38:D7:12:9B:5C:0F:F5:24:56:78:C2:F3:23:BB:72:09 Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 0F04AD49B82DD67318C7C404DA58F61CD0A0430B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01B8 Signing time: Mon 22 Dec 2025 20:22:10 +0000 Manifest this update: Mon 22 Dec 2025 20:17:10 +0000 Manifest next update: Fri 26 Dec 2025 08:17:10 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: wuku8Ye69ngH/IfB16T9MiQyoh9C99/+gR+rVUTPMHQ=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:17:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:04:ad:49:b8:2d:d6:73:18:c7:c4:04:da:58:f6:1c:d0:a0:43:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Dec 22 20:17:10 2025 GMT Not After : Dec 26 08:17:10 2025 GMT Subject: CN=662323F938D7129B5C0FF5245678C2F323BB7209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:52:62:69:40:e8:32:8b:5c:85:a1:0f:3d: b2:09:98:d4:f8:66:0c:40:45:bb:70:f2:5f:1c:6d: c6:11:8e:5f:81:b3:de:51:d0:68:e4:0d:da:c3:26: 9a:88:01:27:0f:a2:f7:e9:dd:d8:8f:6d:86:3d:f2: 9e:fb:be:2d:c8:75:7f:b0:40:b8:58:e7:66:f5:74: ca:af:2b:02:64:81:49:a7:86:c3:36:b1:55:64:4a: 8a:89:53:ec:3c:37:7a:f1:41:b0:dd:5b:cf:95:30: 72:5a:a8:cd:e9:f4:dd:6e:83:a9:9a:0f:46:46:47: 7c:40:af:63:06:c0:2a:89:23:3a:33:89:11:e8:27: e4:75:99:f8:a4:de:f9:ef:89:4c:88:48:f3:d5:0b: c4:ec:3f:e8:4f:83:5d:50:e4:5d:b5:1c:46:c3:65: 98:75:ce:7b:62:45:e0:2a:ec:85:3d:46:02:c3:00: 48:5a:a6:3e:ba:81:97:e0:31:44:77:1b:71:5d:42: 89:a2:3e:d0:dd:de:05:05:90:0e:a4:fa:8f:6f:46: c9:77:98:d1:0d:a4:71:cf:11:df:db:46:0f:83:c3: c7:8e:e5:f1:b1:24:db:aa:d9:b1:5c:00:ea:23:de: 80:aa:c4:bc:4a:fd:5e:81:8b:16:c6:55:21:05:16: e2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:23:F9:38:D7:12:9B:5C:0F:F5:24:56:78:C2:F3:23:BB:72:09 X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:cf:45:e5:31:3b:c0:e8:07:12:ed:c5:65:ec:90:f7:10:c1: 46:2a:f7:3f:c3:61:4d:f4:38:d0:b3:01:b9:70:49:c2:c2:f1: 6b:1f:c9:d6:64:b1:c8:e8:6b:2f:37:c7:a3:2b:ac:24:82:b7: b3:6b:3d:72:ee:46:91:74:8f:2a:f3:36:ca:28:7b:b8:d3:fc: ff:4b:f1:f7:87:3f:bd:ba:88:e3:7d:81:04:30:6a:a0:0f:4d: b9:c1:de:cb:c3:e6:a9:19:37:6c:0d:7f:5c:3b:20:9d:d8:27: e9:c2:3e:83:73:bf:e4:3d:a2:a7:30:65:73:aa:90:01:dd:fd: a7:96:0c:b6:68:bc:df:62:ce:38:b0:70:c3:dc:16:d3:44:f3: dd:51:7a:26:78:6a:fa:79:a0:c4:8e:b6:32:5d:82:f7:71:2a: 18:80:ff:a5:fa:ff:65:b3:02:90:d0:ae:a0:16:ec:01:17:c2: 45:62:5a:30:6b:22:05:43:6a:06:97:7b:97:a4:84:d8:23:37: c5:aa:d7:9d:a6:b5:6f:7f:aa:c7:04:20:22:8c:74:d0:d6:d9: da:f8:00:ca:7d:9c:a3:d1:7e:9c:d4:63:f3:95:70:62:c4:12: cf:7c:d4:26:d3:f2:25:2b:77:88:c1:a1:ce:7c:59:18:e0:a7: 0b:90:b6:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwStSbgt1nMYx8QE2lj2HNCgQwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTEyMjIyMDE3MTBaFw0yNTEyMjYwODE3MTBaMDMxMTAvBgNV BAMTKDY2MjMyM0Y5MzhENzEyOUI1QzBGRjUyNDU2NzhDMkYzMjNCQjcyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5VJiaUDoMotchaEPPbIJmNT4 ZgxARbtw8l8cbcYRjl+Bs95R0GjkDdrDJpqIAScPovfp3diPbYY98p77vi3IdX+w QLhY52b1dMqvKwJkgUmnhsM2sVVkSoqJU+w8N3rxQbDdW8+VMHJaqM3p9N1ug6ma D0ZGR3xAr2MGwCqJIzoziRHoJ+R1mfik3vnviUyISPPVC8TsP+hPg11Q5F21HEbD ZZh1zntiReAq7IU9RgLDAEhapj66gZfgMUR3G3FdQomiPtDd3gUFkA6k+o9vRsl3 mNENpHHPEd/bRg+Dw8eO5fGxJNuq2bFcAOoj3oCqxLxK/V6BixbGVSEFFuKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZiMj+TjXEptcD/UkVnjC8yO7cgkwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHPReUxO8DoBxLtxWXskPcQwUYq9z/DYU30 ONCzAblwScLC8WsfydZkscjoay83x6MrrCSCt7NrPXLuRpF0jyrzNsooe7jT/P9L 8feHP726iON9gQQwaqAPTbnB3svD5qkZN2wNf1w7IJ3YJ+nCPoNzv+Q9oqcwZXOq kAHd/aeWDLZovN9izjiwcMPcFtNE891ReiZ4avp5oMSOtjJdgvdxKhiA/6X6/2Wz ApDQrqAW7AEXwkViWjBrIgVDagaXe5ekhNgjN8Wq152mtW9/qscEICKMdNDW2dr4 AMp9nKPRfpzUY/OVcGLEEs981CbT8iUrd4jBoc58WRjgpwuQtl8= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:52 2025 by rpki-client