This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: Gs+5NVuXhrZPaJkfN3vFTx5qV5hOHsOCjAUvEWzwxrs= Subject key identifier: CE:36:D4:05:8E:BE:36:D7:DE:23:CC:70:EC:0A:E1:59:6E:B1:A2:E4 Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 7D9AAA49A2C34DEA0A56F1F6106AAF9E32AB1646 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 10:41:16 +0000 Manifest this update: Fri 05 Dec 2025 10:36:16 +0000 Manifest next update: Mon 08 Dec 2025 15:32:16 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: E+qOU6VlwPkTybMHN42dSScHtjzV4XSNh+uaYloQ9Qs=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:9a:aa:49:a2:c3:4d:ea:0a:56:f1:f6:10:6a:af:9e:32:ab:16:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Dec 5 10:36:16 2025 GMT Not After : Dec 8 15:32:16 2025 GMT Subject: CN=CE36D4058EBE36D7DE23CC70EC0AE1596EB1A2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f5:76:da:29:4b:26:43:af:5b:ff:d6:bd:08: 7b:78:58:5c:c8:3c:a1:cb:4d:2e:e5:02:58:e9:45: 32:3a:5b:52:9f:c0:fd:5b:13:5a:d0:85:10:15:1b: c3:67:9c:f3:2d:c1:23:82:01:22:a8:d8:d8:53:4f: b1:ba:8f:b5:69:7d:aa:d2:d5:23:57:b7:15:9d:5e: bf:81:1f:4f:4c:b8:d1:3b:a6:f5:ba:64:de:ad:a2: 7d:14:09:3c:17:94:0b:06:7e:60:ba:48:b0:14:94: 22:12:e7:5f:67:b1:e2:83:ac:10:5c:74:bc:fb:a5: 27:9e:81:65:ba:75:2c:9b:d9:50:48:e8:5c:0e:1b: 77:05:9d:5f:86:f1:e6:42:3f:e3:88:62:93:81:91: a0:01:7f:b0:dc:27:05:48:45:e9:61:76:c7:42:db: 24:54:d2:77:56:4a:0b:55:b3:06:7f:cc:92:b1:1f: 21:7c:71:89:7f:c2:f1:d7:34:93:8e:8e:d2:7a:07: ba:64:40:b5:31:2f:d7:b0:bd:3e:fc:3f:0b:de:1c: 3b:ab:f5:eb:57:65:8b:7b:e8:41:56:fa:ff:ea:07: de:a7:c6:f3:4e:ac:d7:99:fb:8a:a7:f5:d0:d0:fd: 42:08:16:ae:cc:40:14:3a:05:e5:c1:9c:de:fc:43: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:36:D4:05:8E:BE:36:D7:DE:23:CC:70:EC:0A:E1:59:6E:B1:A2:E4 X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:74:59:84:f6:d8:33:cf:e5:ea:68:60:71:d6:58:2d:ef:d7: eb:7d:9a:e9:09:3e:fb:48:3e:bd:4a:2f:a5:44:3e:9f:e3:00: 28:9c:d4:32:59:f6:a4:6a:f2:59:b6:94:f9:95:e1:4f:22:53: a4:b0:5d:57:d5:77:1e:4a:ee:8a:79:9a:36:70:25:d3:79:fa: af:ae:23:85:e2:92:b6:d3:62:68:59:ca:e7:40:6f:15:bc:2e: 2b:11:aa:2e:d3:c9:0a:16:ac:65:c8:ae:dc:08:6b:a5:4e:67: 5a:3a:f4:c2:46:d9:a3:ff:61:40:11:c5:46:5a:c1:f9:0c:65: 68:bc:79:53:f3:69:79:ba:8e:f5:6e:9e:76:f4:9b:79:b6:50: b7:41:de:b7:01:1c:40:09:57:cb:53:9f:a8:3c:28:be:27:15: 91:ef:7d:f9:2d:c1:78:52:74:1a:d9:a7:e6:f0:33:5c:d2:9d: fa:19:7b:37:f5:68:ce:e5:8c:58:e7:03:de:bb:dd:fd:9d:cf: 93:8f:0f:fc:5c:e5:84:eb:df:c2:62:a1:03:89:2c:31:6a:48: b9:3c:36:80:3f:61:79:83:e8:96:a2:d6:98:5c:62:43:8d:9a: 98:fa:63:ea:bc:98:bf:dc:40:eb:40:34:09:f0:f1:a2:eb:98: c8:d5:5d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfZqqSaLDTeoKVvH2EGqvnjKrFkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNTEyMDUxMDM2MTZaFw0yNTEyMDgxNTMyMTZaMDMxMTAvBgNV BAMTKENFMzZENDA1OEVCRTM2RDdERTIzQ0M3MEVDMEFFMTU5NkVCMUEyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb9XbaKUsmQ69b/9a9CHt4WFzI PKHLTS7lAljpRTI6W1KfwP1bE1rQhRAVG8NnnPMtwSOCASKo2NhTT7G6j7VpfarS 1SNXtxWdXr+BH09MuNE7pvW6ZN6ton0UCTwXlAsGfmC6SLAUlCIS519nseKDrBBc dLz7pSeegWW6dSyb2VBI6FwOG3cFnV+G8eZCP+OIYpOBkaABf7DcJwVIRelhdsdC 2yRU0ndWSgtVswZ/zJKxHyF8cYl/wvHXNJOOjtJ6B7pkQLUxL9ewvT78PwveHDur 9etXZYt76EFW+v/qB96nxvNOrNeZ+4qn9dDQ/UIIFq7MQBQ6BeXBnN78Q79nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzjbUBY6+NtfeI8xw7ArhWW6xouQwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF10WYT22DPP5epoYHHWWC3v1+t9mukJPvtI Pr1KL6VEPp/jACic1DJZ9qRq8lm2lPmV4U8iU6SwXVfVdx5K7op5mjZwJdN5+q+u I4XikrbTYmhZyudAbxW8LisRqi7TyQoWrGXIrtwIa6VOZ1o69MJG2aP/YUARxUZa wfkMZWi8eVPzaXm6jvVunnb0m3m2ULdB3rcBHEAJV8tTn6g8KL4nFZHvffktwXhS dBrZp+bwM1zSnfoZezf1aM7ljFjnA9673f2dz5OPD/xc5YTr38JioQOJLDFqSLk8 NoA/YXmD6Jai1phcYkONmpj6Y+q8mL/cQOtANAnw8aLrmMjVXSs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:52:10 2025 by rpki-client