This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft (raw, json) Hash identifier: JBt1d4mCe73/DdZefUmf32nZgLgEt3EGMOrzHcybkwc= Subject key identifier: F8:4D:3D:FD:2C:DD:61:93:91:BC:70:73:34:53:6D:3D:74:39:34:20 Authority key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Certificate issuer: /CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Certificate serial: 5D9646E479779C8F879585DBF25E170D1A617B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft Manifest number: 0204 Signing time: Sat 06 Dec 2025 15:50:39 +0000 Manifest this update: Sat 06 Dec 2025 15:45:39 +0000 Manifest next update: Wed 10 Dec 2025 00:19:39 +0000 Files and hashes: 1: 3130332e33302e3231322e302f32342d3234203d3e20313530313838.roa (hash: sF8zLAMjgs1FczFI2Z8JpQ/VusAoAJ74LI3j1E4hYto=) 2: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl (hash: cQ5hY/opwup+rG6XJp7QKKTvXpJXavsUpsM+fMpOeaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:96:46:e4:79:77:9c:8f:87:95:85:db:f2:5e:17:0d:1a:61:7b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Validity Not Before: Dec 6 15:45:39 2025 GMT Not After : Dec 10 00:19:39 2025 GMT Subject: CN=F84D3DFD2CDD619391BC707334536D3D74393420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9d:48:76:29:dc:66:de:9c:01:87:57:ee:60: 2c:3c:1a:02:07:4b:ad:42:48:f4:12:c7:a7:df:f0: e3:56:9f:44:83:1e:b8:4e:2a:b6:06:cd:8c:f7:f1: 23:65:71:fa:fb:e7:32:5b:1b:c5:e1:3c:3f:6c:96: c1:99:d5:98:00:b2:2c:9c:3e:96:c2:1b:dd:75:84: af:8f:6a:62:f6:fb:c9:99:ac:1f:5b:45:67:09:85: a7:e2:f7:73:95:68:80:b1:31:1a:11:68:3a:bd:a2: f0:07:a6:8d:74:d2:c7:51:d4:6c:1a:c8:03:5a:a6: 18:df:6c:d7:97:b5:8c:5a:de:c6:6e:c8:0d:70:c2: 78:c9:c3:56:08:ee:92:52:5f:09:e5:de:7d:ad:82: b1:59:e2:d6:15:32:8e:b2:e1:96:18:94:ef:ef:1b: 36:dd:2c:47:aa:29:5a:e7:d8:ec:25:c3:6b:8e:70: 95:29:57:ae:70:42:b0:f8:6d:0f:5e:65:f2:c7:35: 6f:24:ad:56:29:ea:50:72:ce:f5:08:5b:06:a8:60: 43:3f:88:5c:81:1a:e3:7c:0e:74:d1:d0:6d:18:f1: c3:40:b9:df:cf:64:3a:2a:ec:84:46:f1:e5:8a:3e: c1:e8:20:ed:ce:d8:2f:7d:d5:8c:03:f5:93:ae:da: 9e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4D:3D:FD:2C:DD:61:93:91:BC:70:73:34:53:6D:3D:74:39:34:20 X509v3 Authority Key Identifier: keyid:AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1f:8e:6e:de:f1:27:2e:a1:3e:05:cf:64:a8:3a:53:71:80: 1f:cf:16:73:0e:4d:15:09:60:30:f6:ff:6b:ed:8e:75:cd:2e: 30:fd:b0:1a:d7:5c:85:bd:22:b2:af:cf:98:e7:ce:37:d3:9c: 25:3c:cf:d4:e0:0c:e6:6a:ab:66:fc:ca:98:84:37:95:62:8a: 9d:8b:fa:3d:b1:23:43:07:08:17:88:33:ba:20:b9:63:df:5c: 6b:a4:ae:da:25:0e:5f:2e:1c:25:78:41:ff:a9:47:b5:85:48: 38:97:41:f3:8a:d5:a7:61:ab:e9:53:1e:61:8d:f2:71:cb:c9: 42:23:55:32:a8:ba:04:27:b3:ff:8e:b4:71:2b:7e:d6:a9:e0: aa:d2:bc:a4:d5:4e:39:3c:6d:f7:56:da:63:54:7a:c2:b1:22: 8c:4a:21:90:44:9b:f2:34:eb:c8:53:be:2f:02:71:21:1b:d6: 53:bb:43:da:03:ea:37:ee:91:63:68:01:bf:cd:04:a0:22:c6: ff:46:c5:40:dd:51:f4:2e:77:3e:e6:de:d9:a9:0b:85:8f:cb: e7:81:6c:5e:cf:15:a4:cc:db:91:63:cb:6c:ba:45:6f:f6:05: 49:34:05:c4:ac:f2:14:be:dd:de:d7:f6:a1:76:d6:b1:d5:b8: ba:3d:52:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZZG5Hl3nI+HlYXb8l4XDRphe3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0 REMwOTcxQzAeFw0yNTEyMDYxNTQ1MzlaFw0yNTEyMTAwMDE5MzlaMDMxMTAvBgNV BAMTKEY4NEQzREZEMkNERDYxOTM5MUJDNzA3MzM0NTM2RDNENzQzOTM0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDenUh2Kdxm3pwBh1fuYCw8GgIH S61CSPQSx6ff8ONWn0SDHrhOKrYGzYz38SNlcfr75zJbG8XhPD9slsGZ1ZgAsiyc PpbCG911hK+PamL2+8mZrB9bRWcJhafi93OVaICxMRoRaDq9ovAHpo100sdR1Gwa yANaphjfbNeXtYxa3sZuyA1wwnjJw1YI7pJSXwnl3n2tgrFZ4tYVMo6y4ZYYlO/v GzbdLEeqKVrn2Owlw2uOcJUpV65wQrD4bQ9eZfLHNW8krVYp6lByzvUIWwaoYEM/ iFyBGuN8DnTR0G0Y8cNAud/PZDoq7IRG8eWKPsHoIO3O2C991YwD9ZOu2p6NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+E09/SzdYZORvHBzNFNtPXQ5NCAwHwYDVR0j BBgwFoAUr88AqQt+nqHjAYKwv/k0vk3AlxwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMC9BRkNGMDBBOTBC N0U5RUExRTMwMTgyQjBCRkY5MzRCRTREQzA5NzFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0QkU0REMw OTcxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjU2NWExY2YtMjk1MC00N2RjLWEy MTItZjY1M2I4YzNmNWE5LzAvQUZDRjAwQTkwQjdFOUVBMUUzMDE4MkIwQkZGOTM0 QkU0REMwOTcxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAfjm7e8ScuoT4Fz2SoOlNxgB/PFnMOTRUJ YDD2/2vtjnXNLjD9sBrXXIW9IrKvz5jnzjfTnCU8z9TgDOZqq2b8ypiEN5Viip2L +j2xI0MHCBeIM7oguWPfXGukrtolDl8uHCV4Qf+pR7WFSDiXQfOK1adhq+lTHmGN 8nHLyUIjVTKougQns/+OtHErftap4KrSvKTVTjk8bfdW2mNUesKxIoxKIZBEm/I0 68hTvi8CcSEb1lO7Q9oD6jfukWNoAb/NBKAixv9GxUDdUfQudz7m3tmpC4WPy+eB bF7PFaTM25Fjy2y6RW/2BUk0BcSs8hS+3d7X9qF21rHVuLo9Utw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:56 2025 by rpki-client