This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft File: AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft (raw, json) Hash identifier: HArXWYs3E/6Iad/n1XrnccoNBsLONnfL3DOScAun62M= Subject key identifier: E6:4B:44:B9:B0:C1:1E:9D:CC:66:2D:0B:42:11:8B:71:EC:76:12:6C Authority key identifier: AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE Certificate issuer: /CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Certificate serial: 0297B410EA9C7667B7D548AA881EFD4E07B3E67F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft Manifest number: 029E Signing time: Sun 25 Jan 2026 10:41:45 +0000 Manifest this update: Sun 25 Jan 2026 10:36:45 +0000 Manifest next update: Wed 28 Jan 2026 20:09:45 +0000 Files and hashes: 1: AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl (hash: 0sFcPoqv4k4la/XdNcvFGr7dlP4g9wZxSGZiKoEgB4M=) 2: 3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (hash: cvr2rock59oqaJDiE9arMS+Z9L88+lzn8zN5bKyApVs=) 3: 3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (hash: K4U8d+sUzMLgrI4fy436tf9syDLx6SvZlYhSkGTWcb8=) 4: 3130332e3137392e37332e302f32342d3234203d3e2039333431.roa (hash: 36hFp4MNqRDgFjqepz99CP3U7evoSejJQb+GMWj9djo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:97:b4:10:ea:9c:76:67:b7:d5:48:aa:88:1e:fd:4e:07:b3:e6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFEE1C7B016628482294E3D894CFC6851BBB63BE Validity Not Before: Jan 25 10:36:45 2026 GMT Not After : Jan 28 20:09:45 2026 GMT Subject: CN=E64B44B9B0C11E9DCC662D0B42118B71EC76126C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:b0:ba:bf:8e:03:69:12:09:06:93:6e:c6: 65:30:b6:1c:a0:9b:c6:38:62:9c:ff:10:37:12:35: fc:3b:f5:7b:67:a5:a1:d0:01:c9:cf:aa:de:99:fb: 88:ae:9f:9b:77:1e:18:61:87:44:66:fa:d0:c2:5d: 53:49:ae:ac:f5:95:bc:d5:bd:bf:bc:90:57:2a:e9: 4d:97:99:27:75:a5:ce:f7:7b:cf:bd:ae:03:f1:e6: d9:6e:6c:5c:f2:39:0e:5a:b3:fd:42:d6:86:0e:02: bc:9f:7c:b8:80:e8:bf:20:7f:58:11:99:5b:96:13: 03:9c:41:db:3b:b7:ca:1f:c1:26:b8:0d:7b:69:fb: 09:71:94:3b:0c:09:05:ea:a4:10:ab:7c:83:0f:04: 2a:dd:1e:b1:29:0d:1f:ef:a3:ab:dd:8d:88:91:88: 6a:78:f7:9e:43:59:58:e4:c0:39:8f:46:70:dc:02: b3:78:77:fa:03:66:24:05:b2:b1:5d:54:1e:e9:c2: ab:ca:e4:78:87:2e:7e:5f:30:30:ca:13:76:07:2a: 80:6f:f0:16:e7:1b:09:48:04:a5:00:b8:04:97:40: e0:11:95:89:6c:82:4f:2d:ca:29:e4:ad:7a:eb:05: 92:44:61:86:14:d9:00:6a:76:64:fa:e6:cb:f8:d8: 81:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4B:44:B9:B0:C1:1E:9D:CC:66:2D:0B:42:11:8B:71:EC:76:12:6C X509v3 Authority Key Identifier: keyid:AF:EE:1C:7B:01:66:28:48:22:94:E3:D8:94:CF:C6:85:1B:BB:63:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFEE1C7B016628482294E3D894CFC6851BBB63BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/AFEE1C7B016628482294E3D894CFC6851BBB63BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d1:56:ad:69:47:97:f3:e8:d1:42:bb:b7:f2:82:7c:c8:ce: 4a:dc:f1:cd:ed:b7:d8:c0:3b:9c:f7:7a:80:13:7d:1b:ad:1b: be:8b:70:a0:04:24:81:2e:23:c0:78:bd:f8:a5:87:97:d2:db: 62:91:23:20:92:0d:83:56:0e:6a:6d:df:7a:cd:97:1f:2a:bc: a4:a3:40:78:b0:23:19:e1:ed:3f:b4:83:6d:67:9f:db:7f:ec: 3b:ba:ce:2c:1b:f6:c5:78:84:e5:1f:91:ad:6a:24:25:b9:c0: 2b:3c:38:1e:e7:1e:87:a6:10:d0:1b:14:8b:3e:d4:83:0c:10: fb:78:cb:1b:8d:cb:4e:de:20:11:bf:74:fd:21:fb:07:f5:07: fc:b1:50:78:bf:98:78:54:38:4f:6d:1a:46:13:31:3f:b7:6e: a6:1b:78:8f:94:e2:c4:d5:75:4d:04:9b:dc:f3:e7:1a:6c:57: a3:d8:56:bd:20:1b:b0:c9:8c:f7:53:78:0a:fe:01:ec:15:e5: 0c:3f:e0:bc:5b:13:b3:06:ae:a1:19:af:7d:67:f6:38:c8:bf: 0c:c1:8a:be:9a:39:e8:b7:ee:1a:b3:5a:19:56:52:9a:09:46: f5:73:e3:be:dc:55:8a:e4:e9:30:d3:f6:78:53:90:95:a5:25: 67:5e:eb:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApe0EOqcdme31UiqiB79Tgez5n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUx QkJCNjNCRTAeFw0yNjAxMjUxMDM2NDVaFw0yNjAxMjgyMDA5NDVaMDMxMTAvBgNV BAMTKEU2NEI0NEI5QjBDMTFFOURDQzY2MkQwQjQyMTE4QjcxRUM3NjEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd77C6v44DaRIJBpNuxmUwthyg m8Y4Ypz/EDcSNfw79XtnpaHQAcnPqt6Z+4iun5t3Hhhhh0Rm+tDCXVNJrqz1lbzV vb+8kFcq6U2XmSd1pc73e8+9rgPx5tlubFzyOQ5as/1C1oYOAryffLiA6L8gf1gR mVuWEwOcQds7t8ofwSa4DXtp+wlxlDsMCQXqpBCrfIMPBCrdHrEpDR/vo6vdjYiR iGp4955DWVjkwDmPRnDcArN4d/oDZiQFsrFdVB7pwqvK5HiHLn5fMDDKE3YHKoBv 8BbnGwlIBKUAuASXQOARlYlsgk8tyinkrXrrBZJEYYYU2QBqdmT65sv42IHpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ktEubDBHp3MZi0LQhGLcex2EmwwHwYDVR0j BBgwFoAUr+4cewFmKEgilOPYlM/GhRu7Y74wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWFiOGE1OC1mMTNmLTRmNzEtOWRkZS1hZWQ1N2VhNmRjYTcvMC9BRkVFMUM3QjAx NjYyODQ4MjI5NEUzRDg5NENGQzY4NTFCQkI2M0JFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2ODUxQkJC NjNCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFhYjhhNTgtZjEzZi00ZjcxLTlk ZGUtYWVkNTdlYTZkY2E3LzAvQUZFRTFDN0IwMTY2Mjg0ODIyOTRFM0Q4OTRDRkM2 ODUxQkJCNjNCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrRVq1pR5fz6NFCu7fygnzIzkrc8c3tt9jA O5z3eoATfRutG76LcKAEJIEuI8B4vfilh5fS22KRIyCSDYNWDmpt33rNlx8qvKSj QHiwIxnh7T+0g21nn9t/7Du6ziwb9sV4hOUfka1qJCW5wCs8OB7nHoemENAbFIs+ 1IMMEPt4yxuNy07eIBG/dP0h+wf1B/yxUHi/mHhUOE9tGkYTMT+3bqYbeI+U4sTV dU0Em9zz5xpsV6PYVr0gG7DJjPdTeAr+AewV5Qw/4LxbE7MGrqEZr31n9jjIvwzB ir6aOei37hqzWhlWUpoJRvVz477cVYrk6TDT9nhTkJWlJWde608= -----END CERTIFICATE-----Generated at Sun Jan 25 18:59:33 2026 by rpki-client