This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft File: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft (raw, json) Hash identifier: /pT6kX3xRnZIiiuMJormNUDYviuihHZ2Sa2dmBc8P0I= Subject key identifier: E7:CD:61:DC:2A:1D:BB:97:FD:DE:0E:E6:04:DA:99:3A:9A:3D:9D:C0 Authority key identifier: AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 Certificate issuer: /CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Certificate serial: 704F6880617080F1B6F89107C5D1A931551BDC09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft Manifest number: 03BE Signing time: Fri 23 Jan 2026 17:32:03 +0000 Manifest this update: Fri 23 Jan 2026 17:27:03 +0000 Manifest next update: Mon 26 Jan 2026 19:01:03 +0000 Files and hashes: 1: AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl (hash: +/lIqjr4RGCdXzkN23uA4qeWeEeKbPPfMMCotkSeHNA=) 2: 3130332e3136392e342e302f32332d3234203d3e203137393935.roa (hash: ylXHQm3DiD4h9n4NuN0yUGCouUxigE+BSv0spOzfo/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:4f:68:80:61:70:80:f1:b6:f8:91:07:c5:d1:a9:31:55:1b:dc:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38 Validity Not Before: Jan 23 17:27:03 2026 GMT Not After : Jan 26 19:01:03 2026 GMT Subject: CN=E7CD61DC2A1DBB97FDDE0EE604DA993A9A3D9DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:c3:0a:77:21:75:2c:b1:30:13:1d:ef:2a: 5f:54:cb:25:2c:1d:0f:e8:c1:d7:53:01:b3:86:40: ad:9b:59:ce:5e:55:ce:84:55:e5:de:d8:6d:b5:32: 7c:81:ff:a2:71:03:ef:a2:ac:f4:66:66:27:0f:cc: ef:96:4d:39:1f:31:45:2f:8b:8e:bd:6f:ff:e1:39: 52:f3:d8:35:d3:46:42:98:74:02:55:6a:f9:d7:2d: 4b:e4:2c:7b:2d:cb:88:b2:13:6a:e1:64:4d:51:cd: c1:47:e6:a9:e2:93:00:c9:15:1c:e4:85:10:f0:35: b0:1d:82:cc:aa:af:37:db:3e:24:21:9f:92:f3:13: 7c:65:8f:cc:ba:1b:d2:1f:cd:11:6a:48:ba:81:7f: 98:aa:68:84:b5:41:3d:bf:81:b5:a6:78:e7:41:b2: c3:7b:97:b9:1a:07:92:3c:50:69:fb:83:20:f6:aa: 18:07:07:52:15:e7:40:b4:6b:0a:2c:d2:f0:53:dc: eb:b7:0e:90:da:ef:40:7e:e2:8e:c8:8a:92:82:56: dc:b9:b7:02:58:80:07:5a:4f:73:ac:98:88:f2:e2: c4:4c:a4:7b:43:d3:a9:28:6a:98:5e:2f:99:9f:d5: c7:79:4b:2a:0c:3c:cf:31:1b:5e:6d:d7:53:33:c6: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:61:DC:2A:1D:BB:97:FD:DE:0E:E6:04:DA:99:3A:9A:3D:9D:C0 X509v3 Authority Key Identifier: keyid:AF:5A:2A:D0:C9:E5:CB:1D:9E:F8:5E:6F:8F:44:03:10:F1:00:CE:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/041e4ac9-c06b-4343-8526-3a1f1b1b5d82/0/AF5A2AD0C9E5CB1D9EF85E6F8F440310F100CE38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:17:a7:1b:6e:8c:1a:6a:5d:1d:bb:f6:78:5c:09:16:09: 79:a0:e8:41:87:1a:30:40:09:eb:69:eb:e1:f5:9f:cf:29:52: e7:75:8d:33:31:73:0a:1a:d1:63:06:f1:43:3b:53:92:87:7a: 30:53:7d:ca:82:9f:ce:82:8e:f0:2d:24:46:7d:bd:09:a6:63: 1e:93:1f:2b:65:96:a4:67:cc:d3:cc:a5:e2:9f:5e:c7:62:71: 3a:c3:85:0a:8d:46:13:3a:00:59:c6:49:79:ad:22:ff:09:08: 01:6c:22:ca:dc:26:ca:a7:99:1e:06:73:ff:45:d5:54:a4:d5: f3:99:06:dd:ce:41:b7:ac:43:c1:4c:fc:de:ab:93:91:f9:63: 40:de:15:c8:ee:a9:09:34:b7:f7:8e:6e:de:48:23:83:f3:7c: 80:be:91:ac:51:21:7a:03:d9:74:95:f4:32:a7:a7:50:c9:20: 5c:3c:2f:1f:1e:ac:15:c5:f6:28:fe:70:75:ac:4d:cb:21:42: be:da:f6:9b:2f:e0:91:c2:65:d8:30:bf:44:f7:87:dd:73:ec: f0:e4:37:a3:25:24:99:af:5e:c6:14:0f:f6:a2:6a:9c:09:16: ee:c1:1b:fc:b1:de:85:17:d9:10:09:73:c5:c4:cb:d8:00:78: b2:ba:98:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcE9ogGFwgPG2+JEHxdGpMVUb3AkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBG MTAwQ0UzODAeFw0yNjAxMjMxNzI3MDNaFw0yNjAxMjYxOTAxMDNaMDMxMTAvBgNV BAMTKEU3Q0Q2MURDMkExREJCOTdGRERFMEVFNjA0REE5OTNBOUEzRDlEQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42MMKdyF1LLEwEx3vKl9UyyUs HQ/owddTAbOGQK2bWc5eVc6EVeXe2G21MnyB/6JxA++irPRmZicPzO+WTTkfMUUv i469b//hOVLz2DXTRkKYdAJVavnXLUvkLHsty4iyE2rhZE1RzcFH5qnikwDJFRzk hRDwNbAdgsyqrzfbPiQhn5LzE3xlj8y6G9IfzRFqSLqBf5iqaIS1QT2/gbWmeOdB ssN7l7kaB5I8UGn7gyD2qhgHB1IV50C0awos0vBT3Ou3DpDa70B+4o7IipKCVty5 twJYgAdaT3OsmIjy4sRMpHtD06koapheL5mf1cd5SyoMPM8xG15t11MzxuetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU581h3Codu5f93g7mBNqZOpo9ncAwHwYDVR0j BBgwFoAUr1oq0Mnlyx2e+F5vj0QDEPEAzjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDFlNGFjOS1jMDZiLTQzNDMtODUyNi0zYTFmMWIxYjVkODIvMC9BRjVBMkFEMEM5 RTVDQjFEOUVGODVFNkY4RjQ0MDMxMEYxMDBDRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAzMTBGMTAw Q0UzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQxZTRhYzktYzA2Yi00MzQzLTg1 MjYtM2ExZjFiMWI1ZDgyLzAvQUY1QTJBRDBDOUU1Q0IxRDlFRjg1RTZGOEY0NDAz MTBGMTAwQ0UzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADD+F6cbbowaal0du/Z4XAkWCXmg6EGHGjBA Cetp6+H1n88pUud1jTMxcwoa0WMG8UM7U5KHejBTfcqCn86CjvAtJEZ9vQmmYx6T HytllqRnzNPMpeKfXsdicTrDhQqNRhM6AFnGSXmtIv8JCAFsIsrcJsqnmR4Gc/9F 1VSk1fOZBt3OQbesQ8FM/N6rk5H5Y0DeFcjuqQk0t/eObt5II4PzfIC+kaxRIXoD 2XSV9DKnp1DJIFw8Lx8erBXF9ij+cHWsTcshQr7a9psv4JHCZdgwv0T3h91z7PDk N6MlJJmvXsYUD/aiapwJFu7BG/yx3oUX2RAJc8XEy9gAeLK6mOc= -----END CERTIFICATE-----Generated at Sun Jan 25 14:23:07 2026 by rpki-client