This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft File: AF504C4E6E3831F756E3BE07469483DFED452516.mft (raw, json) Hash identifier: lzi4+FYfLGWEuw4aw3OYecaQQqUcffTD84BqmhKl0VI= Subject key identifier: E2:9B:D2:88:74:41:2A:EF:DE:C0:8D:DA:44:A8:64:1F:44:C7:CD:25 Authority key identifier: AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 Certificate issuer: /CN=AF504C4E6E3831F756E3BE07469483DFED452516 Certificate serial: 0FB0293C8EDCCFCA39B07B6C65D5D7D5A4B73E0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft Manifest number: 0531 Signing time: Wed 17 Dec 2025 17:40:01 +0000 Manifest this update: Wed 17 Dec 2025 17:35:01 +0000 Manifest next update: Sat 20 Dec 2025 23:15:01 +0000 Files and hashes: 1: 3130332e31312e3133342e302f32332d3234203d3e203538333932.roa (hash: 94LnytYGAvUDKd9fbdJNB2oaz+VbJxQdkFyor1G2/5o=) 2: 3130332e34302e35342e302f32332d3234203d3e203538333932.roa (hash: 0Wfv6RMOBlkKWtS4PGTV+SDR95Cse6kPuVUxW2AHWIs=) 3: 323030313a6466323a363030303a3a2f34382d3438203d3e203538333932.roa (hash: QXih22W7nob87iMJpd/XyA7yQsTPs1LE60MpY8hw6ss=) 4: AF504C4E6E3831F756E3BE07469483DFED452516.crl (hash: saKJv1a+6C8A3bIhtp4nR1fYerF0srvTt5RBfp6Mts8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b0:29:3c:8e:dc:cf:ca:39:b0:7b:6c:65:d5:d7:d5:a4:b7:3e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF504C4E6E3831F756E3BE07469483DFED452516 Validity Not Before: Dec 17 17:35:01 2025 GMT Not After : Dec 20 23:15:01 2025 GMT Subject: CN=E29BD28874412AEFDEC08DDA44A8641F44C7CD25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:ba:35:48:a6:62:03:fe:da:08:69:6e:db: 05:1d:2e:42:c5:d5:9a:9c:ad:e0:6c:70:03:4a:88: 47:2f:b1:3f:fb:11:24:25:c6:18:c2:da:f1:08:d6: 36:6c:16:20:d4:0e:30:77:7f:bf:fc:9c:64:58:90: 67:66:f5:41:31:af:ff:7a:db:91:d8:bc:99:1d:7c: 20:27:76:f5:fb:bf:86:a3:33:76:59:d5:83:9e:dd: 80:08:a0:93:1c:54:96:ed:1f:10:de:45:a4:d7:38: 15:ae:03:7b:b4:6d:19:c5:f1:ee:86:76:d8:8f:5c: 62:e9:5e:fe:34:3e:50:43:5d:de:7a:76:ea:c2:46: 47:f5:54:ea:5a:06:4b:15:34:2b:80:50:c4:fb:ec: a6:6a:8e:e7:21:18:41:81:63:ad:11:81:38:13:9a: b1:21:4b:05:7a:d7:89:cf:25:01:9a:5b:52:74:5a: d5:23:6d:9f:11:a7:b6:50:90:67:30:21:6b:41:9d: 2d:d8:5d:73:df:83:45:36:9d:6b:c2:e6:ab:df:95: b8:19:7c:f4:c5:c9:8c:e2:bc:44:96:51:1e:13:d5: f6:c1:a7:8c:98:73:5f:b2:ea:03:0f:55:40:43:45: 1b:20:a3:eb:89:56:fc:cc:3e:e7:36:59:fc:64:77: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9B:D2:88:74:41:2A:EF:DE:C0:8D:DA:44:A8:64:1F:44:C7:CD:25 X509v3 Authority Key Identifier: keyid:AF:50:4C:4E:6E:38:31:F7:56:E3:BE:07:46:94:83:DF:ED:45:25:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF504C4E6E3831F756E3BE07469483DFED452516.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ffb7767-3de9-4833-b4e7-b1b62ee3cd99/0/AF504C4E6E3831F756E3BE07469483DFED452516.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b8:5c:37:28:4e:5e:07:7a:76:53:10:66:8e:f6:ff:a8:8d: 63:1a:cf:b0:07:8a:14:1e:0e:7b:41:d9:7a:60:ed:ae:17:c6: ce:fe:77:21:09:69:7b:1b:40:de:ea:15:4b:71:e0:7c:eb:bb: 85:b9:b0:a9:f2:b5:fa:e3:4f:1b:21:8a:6d:98:84:64:79:21: b2:7e:07:30:e5:f3:37:ae:f3:08:56:a9:a9:c6:59:34:58:13: f3:65:64:4a:26:7f:2b:0e:f2:64:39:e7:43:b6:2b:cf:8c:f9: 64:ec:53:b8:eb:57:e4:4d:fa:14:1f:47:f3:91:a5:91:74:42: d9:6c:6f:64:a9:74:3f:6f:a9:2c:10:7e:28:3f:13:db:09:cf: 77:7f:a3:4c:89:35:d9:3b:a0:c1:3d:58:1a:21:22:90:7d:7b: c9:34:89:8c:47:06:fd:3d:ed:80:59:09:e7:c6:4c:c6:60:58: 94:0c:73:ed:4f:64:88:9a:ba:64:b0:a6:d1:40:37:9f:f0:ac: 6e:d9:5e:c3:44:29:a1:a3:33:fb:91:eb:bf:30:e4:08:32:af: f1:f0:a2:a1:8d:c5:25:68:c8:64:a5:5d:fe:14:85:cc:00:92: ca:90:33:a5:22:4a:3c:fb:f6:77:02:e3:d5:0d:2b:ee:1b:47: 5f:93:fd:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7ApPI7cz8o5sHtsZdXX1aS3Pg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZF RDQ1MjUxNjAeFw0yNTEyMTcxNzM1MDFaFw0yNTEyMjAyMzE1MDFaMDMxMTAvBgNV BAMTKEUyOUJEMjg4NzQ0MTJBRUZERUMwOEREQTQ0QTg2NDFGNDRDN0NEMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgro1SKZiA/7aCGlu2wUdLkLF 1ZqcreBscANKiEcvsT/7ESQlxhjC2vEI1jZsFiDUDjB3f7/8nGRYkGdm9UExr/96 25HYvJkdfCAndvX7v4ajM3ZZ1YOe3YAIoJMcVJbtHxDeRaTXOBWuA3u0bRnF8e6G dtiPXGLpXv40PlBDXd56durCRkf1VOpaBksVNCuAUMT77KZqjuchGEGBY60RgTgT mrEhSwV614nPJQGaW1J0WtUjbZ8Rp7ZQkGcwIWtBnS3YXXPfg0U2nWvC5qvflbgZ fPTFyYzivESWUR4T1fbBp4yYc1+y6gMPVUBDRRsgo+uJVvzMPuc2Wfxkd0g5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4pvSiHRBKu/ewI3aRKhkH0THzSUwHwYDVR0j BBgwFoAUr1BMTm44MfdW474HRpSD3+1FJRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmZiNzc2Ny0zZGU5LTQ4MzMtYjRlNy1iMWI2MmVlM2NkOTkvMC9BRjUwNEM0RTZF MzgzMUY3NTZFM0JFMDc0Njk0ODNERkVENDUyNTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgzREZFRDQ1 MjUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZmYjc3NjctM2RlOS00ODMzLWI0 ZTctYjFiNjJlZTNjZDk5LzAvQUY1MDRDNEU2RTM4MzFGNzU2RTNCRTA3NDY5NDgz REZFRDQ1MjUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIm4XDcoTl4HenZTEGaO9v+ojWMaz7AHihQe DntB2Xpg7a4Xxs7+dyEJaXsbQN7qFUtx4Hzru4W5sKnytfrjTxshim2YhGR5IbJ+ BzDl8zeu8whWqanGWTRYE/NlZEomfysO8mQ550O2K8+M+WTsU7jrV+RN+hQfR/OR pZF0Qtlsb2SpdD9vqSwQfig/E9sJz3d/o0yJNdk7oME9WBohIpB9e8k0iYxHBv09 7YBZCefGTMZgWJQMc+1PZIiaumSwptFAN5/wrG7ZXsNEKaGjM/uR678w5Agyr/Hw oqGNxSVoyGSlXf4UhcwAksqQM6UiSjz79ncC49UNK+4bR1+T/UM= -----END CERTIFICATE-----Generated at Wed Dec 17 23:41:51 2025 by rpki-client