This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft File: AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft (raw, json) Hash identifier: qqkvhTovL394GrHZ6ZiGFVg3nrFGEmSTACyBK2qml2g= Subject key identifier: 13:2A:59:40:E2:73:B9:E4:B0:D3:C3:6A:2B:FF:F6:DC:EB:79:FB:0C Authority key identifier: AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB Certificate issuer: /CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Certificate serial: 1EA8E47DCA7C20567A26CB230505DC9C9BAD4B26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft Manifest number: 0541 Signing time: Sat 24 Jan 2026 14:21:17 +0000 Manifest this update: Sat 24 Jan 2026 14:16:17 +0000 Manifest next update: Tue 27 Jan 2026 23:28:17 +0000 Files and hashes: 1: AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl (hash: Ab7kDH1tEMj9wmW5nVsQ5Ih7im9N8pt1rJp8dHt00ZM=) 2: 3230322e31342e39322e302f32332d3234203d3e203535363830.roa (hash: Gi5LYrKXPu/4WczeFJhBj073CRr7CsYa/Uq/0cRhCGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 23:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a8:e4:7d:ca:7c:20:56:7a:26:cb:23:05:05:dc:9c:9b:ad:4b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF15FD8CB4E452C76B55709743614F9B5448CCDB Validity Not Before: Jan 24 14:16:17 2026 GMT Not After : Jan 27 23:28:17 2026 GMT Subject: CN=132A5940E273B9E4B0D3C36A2BFFF6DCEB79FB0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:ff:44:97:a9:0d:db:c1:f2:8e:ef:4c:b0: 1a:1c:d4:d7:5b:36:ba:d8:b6:28:53:3d:06:5c:66: 46:be:e6:f1:d3:7b:36:de:4c:bb:d9:80:39:4b:f1: fc:dd:a0:d8:c7:e6:51:24:f1:05:a4:64:7a:9e:10: 10:16:d1:e0:1d:9e:86:3c:86:f8:65:72:2a:91:7f: 3d:4d:1e:23:19:8a:4a:e0:cc:d3:75:04:fa:4c:fb: 02:23:17:33:20:3c:cb:91:a8:0a:c7:2b:8b:27:df: 65:b3:de:80:2f:f8:c1:2e:62:e1:9b:58:52:28:5b: da:49:45:35:d3:39:7d:06:c2:92:af:d8:90:f5:37: 4f:00:95:5f:40:c1:f0:85:65:a3:e9:77:21:5e:f7: 15:56:77:a4:dc:0d:f6:f2:cf:16:79:7f:27:e2:54: 03:24:f2:f7:1d:58:14:96:9e:b0:aa:03:83:24:3e: 2c:f9:c2:29:0b:d3:06:12:9c:fd:c4:49:99:57:5b: d1:fb:00:06:0a:61:e3:7a:c6:ce:53:f5:85:d3:ce: 58:d3:3a:32:87:50:6a:54:87:e5:a2:15:92:0f:2d: ba:43:84:60:50:0e:7c:f5:db:1d:4c:b9:eb:62:47: 8a:6b:30:2b:27:42:a5:e5:70:78:ca:75:fd:4a:91: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:59:40:E2:73:B9:E4:B0:D3:C3:6A:2B:FF:F6:DC:EB:79:FB:0C X509v3 Authority Key Identifier: keyid:AF:15:FD:8C:B4:E4:52:C7:6B:55:70:97:43:61:4F:9B:54:48:CC:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF15FD8CB4E452C76B55709743614F9B5448CCDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/760e6a2d-84dc-48df-9b77-720853f47c6d/0/AF15FD8CB4E452C76B55709743614F9B5448CCDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:94:b8:1e:3a:8a:f9:65:a5:cc:a0:65:75:8c:b0:d4:db:fa: 78:5b:30:a5:75:c0:e5:90:cb:8b:34:fe:34:60:3a:95:55:38: f7:d9:5c:d7:ff:81:b1:89:fd:c4:eb:68:22:8f:0c:66:bc:fe: 3e:16:a3:6f:b5:2a:66:e3:49:95:7d:94:4c:a3:e8:e4:bf:bd: 9c:ac:7f:ac:db:14:be:65:34:eb:ad:35:3a:e6:28:79:82:57: 8f:e3:8b:01:1b:df:8b:d5:9d:46:4c:65:b7:a6:d0:38:7a:ff: 71:8f:16:f4:c0:04:a8:11:09:4c:5d:48:30:8d:0a:21:c9:64: 27:f7:da:fd:a3:06:9e:35:98:4c:95:f8:c0:cd:7f:bb:88:e7: e6:a3:4d:44:74:ba:09:a0:0b:b4:71:9d:22:5f:fe:b3:4a:98: ea:35:7e:50:25:8f:0f:4e:e5:79:3b:da:6d:3d:fb:ba:83:dd: 7d:a3:2a:1e:8a:e7:3b:81:0b:23:79:22:d5:42:40:61:d7:9c: 85:a2:45:e6:73:d0:99:98:07:37:6d:6c:ec:73:2f:18:3f:42: 52:24:17:c1:15:b4:cd:b7:6f:27:7d:f3:4d:c7:03:57:82:5f: 40:a5:1f:6f:fe:89:6e:65:5b:0b:31:ca:c9:ac:47:cb:97:2d: ba:c9:b9:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqjkfcp8IFZ6JssjBQXcnJutSyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1 NDQ4Q0NEQjAeFw0yNjAxMjQxNDE2MTdaFw0yNjAxMjcyMzI4MTdaMDMxMTAvBgNV BAMTKDEzMkE1OTQwRTI3M0I5RTRCMEQzQzM2QTJCRkZGNkRDRUI3OUZCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPP9El6kN28Hyju9MsBoc1Ndb NrrYtihTPQZcZka+5vHTezbeTLvZgDlL8fzdoNjH5lEk8QWkZHqeEBAW0eAdnoY8 hvhlciqRfz1NHiMZikrgzNN1BPpM+wIjFzMgPMuRqArHK4sn32Wz3oAv+MEuYuGb WFIoW9pJRTXTOX0GwpKv2JD1N08AlV9AwfCFZaPpdyFe9xVWd6TcDfbyzxZ5fyfi VAMk8vcdWBSWnrCqA4MkPiz5wikL0wYSnP3ESZlXW9H7AAYKYeN6xs5T9YXTzljT OjKHUGpUh+WiFZIPLbpDhGBQDnz12x1MuetiR4prMCsnQqXlcHjKdf1KkfrpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEypZQOJzueSw08NqK//23Ot5+wwwHwYDVR0j BBgwFoAUrxX9jLTkUsdrVXCXQ2FPm1RIzNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjBlNmEyZC04NGRjLTQ4ZGYtOWI3Ny03MjA4NTNmNDdjNmQvMC9BRjE1RkQ4Q0I0 RTQ1MkM3NkI1NTcwOTc0MzYxNEY5QjU0NDhDQ0RCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRGOUI1NDQ4 Q0NEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYwZTZhMmQtODRkYy00OGRmLTli NzctNzIwODUzZjQ3YzZkLzAvQUYxNUZEOENCNEU0NTJDNzZCNTU3MDk3NDM2MTRG OUI1NDQ4Q0NEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaUuB46ivllpcygZXWMsNTb+nhbMKV1wOWQ y4s0/jRgOpVVOPfZXNf/gbGJ/cTraCKPDGa8/j4Wo2+1KmbjSZV9lEyj6OS/vZys f6zbFL5lNOutNTrmKHmCV4/jiwEb34vVnUZMZbem0Dh6/3GPFvTABKgRCUxdSDCN CiHJZCf32v2jBp41mEyV+MDNf7uI5+ajTUR0ugmgC7RxnSJf/rNKmOo1flAljw9O 5Xk72m09+7qD3X2jKh6K5zuBCyN5ItVCQGHXnIWiReZz0JmYBzdtbOxzLxg/QlIk F8EVtM23byd9803HA1eCX0ClH2/+iW5lWwsxysmsR8uXLbrJuYM= -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:43 2026 by rpki-client