This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: gpRbLie4Ar147Wyb5JGueEeQbF2GZvbTflMdeYq0d2M= Subject key identifier: 7B:52:39:58:4A:2E:47:7E:45:27:98:75:DF:CC:B5:F5:18:7A:D6:17 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 4796AA830F819A908CFDBDC2F8A09995FB54F6DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 0237 Signing time: Sat 06 Dec 2025 20:21:30 +0000 Manifest this update: Sat 06 Dec 2025 20:16:30 +0000 Manifest next update: Tue 09 Dec 2025 22:05:30 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: LuCj2fRI+lJCReheIkkISZQlv/8U0zg2kKxzvb2AFlc=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:96:aa:83:0f:81:9a:90:8c:fd:bd:c2:f8:a0:99:95:fb:54:f6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Dec 6 20:16:30 2025 GMT Not After : Dec 9 22:05:30 2025 GMT Subject: CN=7B5239584A2E477E45279875DFCCB5F5187AD617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:cf:93:fa:49:41:38:3b:39:5a:53:34:f0: 31:30:1f:e8:83:3d:f6:f7:f3:2a:74:2e:7e:5f:5c: c5:2b:09:90:e1:64:3c:3f:5b:6b:e2:59:c8:5c:64: a4:7b:e2:48:a2:be:ef:b9:92:4b:3f:91:ff:0e:4d: 5d:c3:b2:82:49:ce:bc:65:b5:8f:8b:d6:11:7e:7e: 35:ab:cd:6d:02:59:22:41:33:6a:d7:42:db:43:44: c4:62:c0:6e:a9:04:b2:2c:ea:69:05:96:ce:3e:74: 2b:9f:87:15:07:19:7d:3f:b9:18:49:56:48:d4:37: 9b:0b:a0:2f:4d:66:60:a0:49:bc:0a:d0:24:80:73: 6d:5e:31:d9:af:2a:2a:a7:58:3f:c8:de:ad:7c:ff: 9f:1b:9e:f9:86:c9:c3:34:6e:35:ed:14:55:18:7b: 77:ac:6b:8b:01:55:3e:d9:0b:a4:ea:06:1b:07:60: f1:3f:8f:a0:a7:38:68:8e:11:f9:fa:0f:b2:d5:e1: 3c:34:6e:44:e6:15:e2:2f:46:63:d4:dc:cd:d3:63: 03:c5:0f:e9:40:f8:2c:ee:56:ab:ee:1a:e0:64:b2: 0e:23:44:51:21:dc:98:ea:49:b6:9d:0d:48:3d:50: a2:5d:4b:3f:1c:ff:78:65:2c:27:66:58:18:bc:07: d7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:52:39:58:4A:2E:47:7E:45:27:98:75:DF:CC:B5:F5:18:7A:D6:17 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:49:43:9e:e1:df:2e:fe:31:36:21:b4:8d:34:f3:eb:7e:bf: 32:86:c8:9e:a5:b5:4c:23:97:9a:e6:3d:e1:fd:fb:6e:de:df: 24:6d:97:22:c8:d2:23:38:c3:51:24:9f:e8:f3:06:36:04:8b: ca:0b:3f:52:82:17:57:b5:39:9c:2d:0f:c5:cd:8e:8e:c4:a6: 64:cb:17:d1:59:f3:42:ce:d0:bb:2c:de:77:e8:e2:06:ed:25: 3f:b3:94:53:cb:ce:f5:69:3e:cd:e7:63:f9:ef:15:f2:6c:2a: 52:83:ad:42:c8:d4:f4:49:4e:ae:1b:8d:3d:b7:35:f9:5d:b2: 7c:e8:3b:94:37:f1:7c:1a:b2:6c:48:c4:78:fb:24:0c:4a:64: eb:f0:d2:4a:12:06:0a:f5:6b:51:04:f5:79:18:77:06:ab:84: 63:8e:68:99:0d:d5:22:31:12:2a:32:86:e4:e8:8a:f0:3e:ca: 73:0e:04:89:62:d2:ab:db:3b:33:b0:a0:ec:59:fa:fd:ba:51: ec:44:be:10:62:ff:16:84:20:75:6e:c5:87:ed:1a:31:44:b0: fa:69:d1:de:78:af:e5:b1:18:50:f6:ce:5d:0b:2b:13:68:ea: 8c:a1:16:38:04:b0:dd:35:60:ee:d3:64:4e:6f:36:67:aa:87: 00:10:cd:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5aqgw+BmpCM/b3C+KCZlftU9tswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNTEyMDYyMDE2MzBaFw0yNTEyMDkyMjA1MzBaMDMxMTAvBgNV BAMTKDdCNTIzOTU4NEEyRTQ3N0U0NTI3OTg3NURGQ0NCNUY1MTg3QUQ2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ys+T+klBODs5WlM08DEwH+iD Pfb38yp0Ln5fXMUrCZDhZDw/W2viWchcZKR74kiivu+5kks/kf8OTV3DsoJJzrxl tY+L1hF+fjWrzW0CWSJBM2rXQttDRMRiwG6pBLIs6mkFls4+dCufhxUHGX0/uRhJ VkjUN5sLoC9NZmCgSbwK0CSAc21eMdmvKiqnWD/I3q18/58bnvmGycM0bjXtFFUY e3esa4sBVT7ZC6TqBhsHYPE/j6CnOGiOEfn6D7LV4Tw0bkTmFeIvRmPU3M3TYwPF D+lA+CzuVqvuGuBksg4jRFEh3JjqSbadDUg9UKJdSz8c/3hlLCdmWBi8B9fLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe1I5WEouR35FJ5h138y19Rh61hcwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1JQ57h3y7+MTYhtI008+t+vzKGyJ6ltUwj l5rmPeH9+27e3yRtlyLI0iM4w1Ekn+jzBjYEi8oLP1KCF1e1OZwtD8XNjo7EpmTL F9FZ80LO0Lss3nfo4gbtJT+zlFPLzvVpPs3nY/nvFfJsKlKDrULI1PRJTq4bjT23 NfldsnzoO5Q38XwasmxIxHj7JAxKZOvw0koSBgr1a1EE9XkYdwarhGOOaJkN1SIx EioyhuToivA+ynMOBIli0qvbOzOwoOxZ+v26UexEvhBi/xaEIHVuxYftGjFEsPpp 0d54r+WxGFD2zl0LKxNo6oyhFjgEsN01YO7TZE5vNmeqhwAQzd0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:28 2025 by rpki-client