This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: 5Y3I/Ae1it0ts1hE4rSbFiugkx+078ht2g98YJEFjng= Subject key identifier: AD:05:5B:52:2A:80:09:AC:F0:C2:99:ED:AA:84:9F:F3:D5:9B:4F:44 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 6132E76AF811B68B0F133FFC09E21EC989B0D6E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 021A Signing time: Sat 24 Jan 2026 20:40:42 +0000 Manifest this update: Sat 24 Jan 2026 20:35:42 +0000 Manifest next update: Tue 27 Jan 2026 21:58:42 +0000 Files and hashes: 1: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: 6sbdMRYdlgmor8OntDpeGrTpv6IP3QqBWorTtcQ28yQ=) 2: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:32:e7:6a:f8:11:b6:8b:0f:13:3f:fc:09:e2:1e:c9:89:b0:d6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Jan 24 20:35:42 2026 GMT Not After : Jan 27 21:58:42 2026 GMT Subject: CN=AD055B522A8009ACF0C299EDAA849FF3D59B4F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:e2:ec:49:45:91:ec:89:93:52:98:c2:68: f9:d4:6b:32:0d:d4:65:f7:fb:9d:88:40:3f:af:f4: d3:ff:ee:0f:e6:6c:1f:4f:51:60:8b:32:dc:10:3e: 30:9e:78:9f:b0:65:82:b4:aa:9c:e4:5f:e0:ab:ab: 17:4b:3a:e3:51:85:33:d3:33:45:08:d9:07:d6:5e: ee:88:f9:c8:8e:25:83:39:4f:a2:b0:cc:35:51:ae: 90:36:6d:b4:75:a9:81:8b:b6:89:b9:1f:02:38:49: 81:7e:23:94:b4:4f:ea:d0:63:6a:cd:65:d8:f0:9b: f3:35:84:27:d6:12:92:60:1f:b4:76:5f:51:fa:a1: 32:4f:9a:79:42:9f:b5:90:f0:6b:ab:bf:c1:a0:24: a7:51:4c:8b:b9:f2:11:5f:e6:1a:84:c1:2d:dc:e9: e2:1d:4e:13:ca:d8:90:f6:e7:28:fa:c3:47:d6:a5: 15:6c:46:a7:b1:9d:ae:58:bf:87:6a:ee:7a:9e:2b: 3c:b5:ab:13:2c:c8:b6:19:31:fc:43:9e:6a:79:14: 0d:49:0e:66:ca:29:05:87:42:35:13:da:82:22:9d: fc:e4:3a:4d:d3:a2:c5:8c:e2:13:f6:74:e7:c2:a3: 9a:d5:cb:ca:44:03:2d:68:19:96:83:7e:28:22:33: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:5B:52:2A:80:09:AC:F0:C2:99:ED:AA:84:9F:F3:D5:9B:4F:44 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:85:da:87:83:e7:1f:fd:dc:af:5f:b9:de:17:b0:4f:e7:8a: c6:f5:08:1b:5f:b1:d6:e1:14:56:1d:4f:84:45:02:a8:63:08: e2:b4:e0:10:88:5c:9a:29:a7:b7:f8:aa:39:3a:96:74:1f:71: 18:4c:26:17:50:cb:b5:c2:26:4c:d4:d5:2b:9b:83:00:3a:60: 8f:23:10:21:59:79:d7:82:6c:9c:76:3f:97:1d:7b:09:24:d7: 56:70:61:cc:95:18:06:bd:84:87:f5:70:27:05:0d:7a:f3:3f: aa:48:18:5a:ea:e5:27:d4:93:bd:6e:dc:2a:42:7c:a1:ad:c1: 82:b5:d2:08:19:32:09:9e:3f:76:4c:e4:42:45:40:f8:8f:d1: 74:b7:78:ee:5a:c3:91:4d:06:90:2b:55:30:42:dd:28:19:56: 53:e2:87:df:87:bd:9c:aa:e8:c5:5c:21:d1:e8:69:78:46:e8: f8:7e:dd:dd:9d:77:63:92:43:e6:9c:2a:17:61:95:f0:a6:73: f9:20:57:12:97:6a:05:a6:6f:40:fe:86:59:7c:84:44:02:bd: 69:9e:cf:b1:1d:d4:4a:51:e4:cf:3d:65:be:9f:bf:f5:86:8d: b9:09:f0:ac:e8:c9:b0:0b:4d:54:7b:25:e7:f5:95:76:75:02: b5:f3:ce:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTLnavgRtosPEz/8CeIeyYmw1uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNjAxMjQyMDM1NDJaFw0yNjAxMjcyMTU4NDJaMDMxMTAvBgNV BAMTKEFEMDU1QjUyMkE4MDA5QUNGMEMyOTlFREFBODQ5RkYzRDU5QjRGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRf+LsSUWR7ImTUpjCaPnUazIN 1GX3+52IQD+v9NP/7g/mbB9PUWCLMtwQPjCeeJ+wZYK0qpzkX+CrqxdLOuNRhTPT M0UI2QfWXu6I+ciOJYM5T6KwzDVRrpA2bbR1qYGLtom5HwI4SYF+I5S0T+rQY2rN Zdjwm/M1hCfWEpJgH7R2X1H6oTJPmnlCn7WQ8Gurv8GgJKdRTIu58hFf5hqEwS3c 6eIdThPK2JD25yj6w0fWpRVsRqexna5Yv4dq7nqeKzy1qxMsyLYZMfxDnmp5FA1J DmbKKQWHQjUT2oIinfzkOk3TosWM4hP2dOfCo5rVy8pEAy1oGZaDfigiM/k9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrQVbUiqACazwwpntqoSf89WbT0QwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJSF2oeD5x/93K9fud4XsE/nisb1CBtfsdbh FFYdT4RFAqhjCOK04BCIXJopp7f4qjk6lnQfcRhMJhdQy7XCJkzU1SubgwA6YI8j ECFZedeCbJx2P5cdewkk11ZwYcyVGAa9hIf1cCcFDXrzP6pIGFrq5SfUk71u3CpC fKGtwYK10ggZMgmeP3ZM5EJFQPiP0XS3eO5aw5FNBpArVTBC3SgZVlPih9+HvZyq 6MVcIdHoaXhG6Ph+3d2dd2OSQ+acKhdhlfCmc/kgVxKXagWmb0D+hll8hEQCvWme z7Ed1EpR5M89Zb6fv/WGjbkJ8KzoybALTVR7Jef1lXZ1ArXzzqE= -----END CERTIFICATE-----Generated at Mon Jan 26 01:23:40 2026 by rpki-client