This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft File: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft (raw, json) Hash identifier: 6D2yKdAl1papDpxt1d2FxMcy6t78+g6L1Y1rnrr5KWk= Subject key identifier: 20:69:CD:32:2F:6B:76:73:42:09:E6:4C:8A:6B:BD:EF:1D:A7:A2:3C Authority key identifier: AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 Certificate issuer: /CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Certificate serial: 52BCB6BA7906F2CFD18FB6EFDFD10AC5882E22AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft Manifest number: BA Signing time: Tue 16 Dec 2025 13:20:01 +0000 Manifest this update: Tue 16 Dec 2025 13:15:01 +0000 Manifest next update: Fri 19 Dec 2025 18:51:01 +0000 Files and hashes: 1: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: 3Egq3cRo6EJ7UqcOfpeiiHWc5fNhn+xEtBo+/Cw0jbA=) 2: AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl (hash: iJZbcx4B5hEpyFcycXvWQVCauzj4SpK/79vzPo4xKR0=) 3: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: llbK8JVFmbrLSSzLv9Ovv2C1Mqs66Yxl6xm9VnsVOAw=) 4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: 9Rk+bLwCtN8F40lqmzQmjy2Qn3pf5qNIMJVV2njhbNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 18:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:bc:b6:ba:79:06:f2:cf:d1:8f:b6:ef:df:d1:0a:c5:88:2e:22:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5 Validity Not Before: Dec 16 13:15:01 2025 GMT Not After : Dec 19 18:51:01 2025 GMT Subject: CN=2069CD322F6B76734209E64C8A6BBDEF1DA7A23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:42:2a:bd:3a:03:88:a3:4b:cc:06:a8:f1: 51:05:58:4f:f4:fa:59:0a:3e:82:81:cd:60:3e:d1: 06:58:b3:47:71:c3:3c:b0:33:83:3a:ad:04:20:e8: a6:f5:ef:cd:49:63:9b:31:09:18:be:ce:1c:b0:56: a7:aa:8f:e6:fb:d8:76:44:f3:cd:6b:b9:31:95:22: 62:d5:f4:f3:e5:dd:10:0f:b3:a4:28:53:b6:07:78: 1e:49:ad:98:49:57:ce:b0:55:d4:a0:aa:e2:ca:fe: 7f:52:a0:2e:7f:a8:21:97:dc:d7:35:d0:82:68:d8: a2:a3:b4:62:d3:15:1b:42:76:a2:dd:d3:65:95:8e: da:ed:c0:27:cc:3f:d6:d1:68:65:bf:12:7f:db:69: c0:61:a7:4b:56:1f:63:b6:47:5b:5a:3f:6b:fa:39: 4c:6c:f2:12:22:6b:92:b6:1a:45:45:63:cc:09:68: 0f:94:e2:63:fe:9c:33:68:d5:05:93:c6:f9:fe:e9: 57:7f:10:d4:ba:cc:ae:ae:6d:39:0e:88:4b:81:52: b1:c5:0b:49:6e:ab:de:6a:b8:e9:c8:fe:73:8a:4b: 4e:f5:16:3c:68:8b:5c:03:49:e7:52:e5:cf:4c:44: 4f:27:b6:b3:86:93:d4:ad:4c:39:8a:a3:7e:c2:a9: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:69:CD:32:2F:6B:76:73:42:09:E6:4C:8A:6B:BD:EF:1D:A7:A2:3C X509v3 Authority Key Identifier: keyid:AF:68:71:CA:FD:05:C6:F6:25:9C:DC:9B:3F:E8:65:6F:CE:DE:C3:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/AF6871CAFD05C6F6259CDC9B3FE8656FCEDEC3D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2d:7d:77:eb:d0:d9:ce:72:94:19:5e:21:44:f3:82:2a:5e: 50:1f:ae:6b:c3:cd:52:3c:b5:48:4a:03:a0:61:30:3e:9b:26: 41:6c:0b:41:7d:fe:c1:f4:98:a8:bc:b3:36:b9:8b:4e:c1:da: cf:91:89:62:7f:ee:50:57:47:9b:1c:9f:b3:0e:6c:2e:8e:ff: eb:3d:b7:21:d8:6e:3a:ee:3c:80:b3:cf:9f:5b:3a:df:f0:45: 97:5a:53:d3:29:79:54:85:e9:16:01:0f:ac:80:e3:45:01:89: 51:42:5a:6a:aa:48:d1:ae:85:b1:53:65:92:8c:8d:5c:43:54: ce:eb:01:74:f8:3b:b2:aa:1f:97:93:99:60:57:21:89:50:83: 67:cd:58:36:82:04:fe:0a:39:f6:d7:9c:09:0b:8c:e4:c8:49: 77:64:d7:23:ee:c6:77:20:87:91:43:1b:01:69:eb:9d:c9:bd: c4:59:da:b3:f7:64:b6:ab:35:1f:d3:da:6d:5b:f6:49:6d:42: 6f:07:0a:e3:bf:ba:e5:51:0d:74:de:08:53:3e:b5:c8:fd:b3: 04:c2:52:f4:06:45:cd:75:c5:85:5b:03:e1:4d:60:dc:dc:d6: b6:dd:3f:32:a1:9a:36:01:d2:3f:b8:7d:d0:b4:e8:69:74:1a: a9:03:8c:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUry2unkG8s/Rj7bv39EKxYguIq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZD RURFQzNENTAeFw0yNTEyMTYxMzE1MDFaFw0yNTEyMTkxODUxMDFaMDMxMTAvBgNV BAMTKDIwNjlDRDMyMkY2Qjc2NzM0MjA5RTY0QzhBNkJCREVGMURBN0EyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7y0IqvToDiKNLzAao8VEFWE/0 +lkKPoKBzWA+0QZYs0dxwzywM4M6rQQg6Kb1781JY5sxCRi+zhywVqeqj+b72HZE 881ruTGVImLV9PPl3RAPs6QoU7YHeB5JrZhJV86wVdSgquLK/n9SoC5/qCGX3Nc1 0IJo2KKjtGLTFRtCdqLd02WVjtrtwCfMP9bRaGW/En/bacBhp0tWH2O2R1taP2v6 OUxs8hIia5K2GkVFY8wJaA+U4mP+nDNo1QWTxvn+6Vd/ENS6zK6ubTkOiEuBUrHF C0luq95quOnI/nOKS071Fjxoi1wDSedS5c9MRE8ntrOGk9StTDmKo37CqZolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIGnNMi9rdnNCCeZMimu97x2nojwwHwYDVR0j BBgwFoAUr2hxyv0FxvYlnNybP+hlb87ew9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 N2YyYzE5MC0zMGY1LTRmMTktYmZjYS0wYjk4N2E1MmZkNTUvMC9BRjY4NzFDQUZE MDVDNkY2MjU5Q0RDOUIzRkU4NjU2RkNFREVDM0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1NkZDRURF QzNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm Y2EtMGI5ODdhNTJmZDU1LzAvQUY2ODcxQ0FGRDA1QzZGNjI1OUNEQzlCM0ZFODY1 NkZDRURFQzNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMtfXfr0NnOcpQZXiFE84IqXlAfrmvDzVI8 tUhKA6BhMD6bJkFsC0F9/sH0mKi8sza5i07B2s+RiWJ/7lBXR5scn7MObC6O/+s9 tyHYbjruPICzz59bOt/wRZdaU9MpeVSF6RYBD6yA40UBiVFCWmqqSNGuhbFTZZKM jVxDVM7rAXT4O7KqH5eTmWBXIYlQg2fNWDaCBP4KOfbXnAkLjOTISXdk1yPuxncg h5FDGwFp653JvcRZ2rP3ZLarNR/T2m1b9kltQm8HCuO/uuVRDXTeCFM+tcj9swTC UvQGRc11xYVbA+FNYNzc1rbdPzKhmjYB0j+4fdC06Gl0GqkDjHw= -----END CERTIFICATE-----Generated at Wed Dec 17 21:57:48 2025 by rpki-client