This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft File: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft (raw, json) Hash identifier: uvxCfAjeaquyvY3Y02/VCKvWXpIJotpdtZD3J01RAyM= Subject key identifier: 4D:53:4E:51:B0:EA:E8:4C:A2:70:17:ED:8E:E4:A0:AA:F4:89:9B:81 Authority key identifier: AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B Certificate issuer: /CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Certificate serial: 2AE8B9E77E236F5A6438B32AD141BF0EFC57E60B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft Manifest number: 024D Signing time: Sat 24 Jan 2026 11:21:27 +0000 Manifest this update: Sat 24 Jan 2026 11:16:27 +0000 Manifest next update: Tue 27 Jan 2026 15:08:27 +0000 Files and hashes: 1: AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl (hash: 8LvGaIr/Fimeg1ElwSKU3b0n70oeXJnFXZxKf0Q1LdM=) 2: 3130332e3138342e36332e302f32342d3234203d3e20313439363734.roa (hash: lO4uiYTW+B+xDrbytghsdYyKIH1h6VcZY1d24FUIzFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 15:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e8:b9:e7:7e:23:6f:5a:64:38:b3:2a:d1:41:bf:0e:fc:57:e6:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFB903F876CB3B8748A1C899458FF38A0D06D4B Validity Not Before: Jan 24 11:16:27 2026 GMT Not After : Jan 27 15:08:27 2026 GMT Subject: CN=4D534E51B0EAE84CA27017ED8EE4A0AAF4899B81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:48:11:42:9d:bf:40:68:b6:1a:82:e0:09: d1:20:53:b9:d0:8a:25:ee:f5:60:08:24:6d:40:62: fb:13:30:26:64:55:02:6a:b7:9b:4f:43:fb:7d:c0: ac:17:39:dc:4f:87:94:9b:b6:f5:1a:4e:d8:6c:31: 3b:7f:57:72:53:6d:0c:1e:ac:6a:5a:d3:f5:fa:6d: 85:da:4c:ac:58:ff:d2:a2:71:2a:f2:8f:66:02:4a: e1:c7:31:cd:f5:95:46:91:96:a3:6f:8f:df:de:43: 39:f6:29:3b:09:3e:fc:bc:27:46:71:5f:65:7d:aa: 2e:5d:19:f8:32:9f:a1:31:b8:33:a1:e5:71:11:85: 6e:33:6c:c4:98:08:14:14:30:c7:e8:e5:9d:72:e3: fc:47:d7:4f:60:82:46:ef:f6:a8:01:c3:cb:04:b3: cc:e1:ea:1d:79:91:22:5e:59:7a:d6:a7:9e:f1:e7: 87:d5:e3:b7:7b:37:73:00:49:52:b0:6f:b8:4b:ef: 0d:71:12:ca:94:5e:6a:a8:0e:0e:fc:78:a3:f6:40: b4:e0:12:d9:a6:12:95:62:00:b3:2e:52:68:e5:fe: e1:e4:f1:11:9a:62:a1:e2:f4:cc:ef:89:42:91:b6: 94:ad:fb:0e:03:28:82:a1:90:c0:84:66:ef:f8:c6: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:53:4E:51:B0:EA:E8:4C:A2:70:17:ED:8E:E4:A0:AA:F4:89:9B:81 X509v3 Authority Key Identifier: keyid:AF:FB:90:3F:87:6C:B3:B8:74:8A:1C:89:94:58:FF:38:A0:D0:6D:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94c4314f-d3b8-4e06-b245-4a0270b22ada/0/AFFB903F876CB3B8748A1C899458FF38A0D06D4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:75:48:93:f7:2c:da:0e:67:dd:c0:5f:e8:8e:ea:8e:07:e5: e8:4e:6c:06:24:59:b4:54:17:34:1c:8f:33:69:71:56:c6:c4: 5e:8f:81:01:7e:ae:d9:b5:d7:4c:e4:cd:64:bb:d2:9f:f6:73: e3:82:90:f7:67:31:29:6c:90:5a:c0:2a:7d:3f:10:27:1c:63: 12:36:73:78:e2:27:fe:55:98:a5:31:14:52:8c:d7:ce:f8:9c: 9c:d7:3e:6a:a5:da:d7:f1:e8:6b:2c:5b:b0:f4:91:e1:bd:61: 0d:44:c5:15:fe:83:8d:4a:52:d1:18:16:81:1a:03:7f:9d:09: ab:f9:fe:85:52:03:ad:99:a1:10:43:07:5c:89:5d:21:95:31: 80:77:f1:95:5e:86:b2:38:b2:15:a8:6b:54:06:ff:64:b5:8b: 06:46:e0:d8:b4:88:73:0b:e6:39:dd:7d:09:b2:b6:22:f5:cc: 09:a9:c7:2a:e3:a2:61:f9:69:07:43:88:6a:1c:ae:a6:c4:b6: 7f:a3:fe:76:9d:80:02:81:e8:fe:63:7c:95:03:d3:84:af:e0: 31:b5:94:9a:d6:1a:5b:f0:9d:5c:47:63:87:d4:71:93:e9:24: 26:e3:ec:99:d0:18:b2:10:20:30:5a:a7:71:58:71:1d:1c:54: 98:77:4b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKui5534jb1pkOLMq0UG/DvxX5gswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhB MEQwNkQ0QjAeFw0yNjAxMjQxMTE2MjdaFw0yNjAxMjcxNTA4MjdaMDMxMTAvBgNV BAMTKDRENTM0RTUxQjBFQUU4NENBMjcwMTdFRDhFRTRBMEFBRjQ4OTlCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9P0gRQp2/QGi2GoLgCdEgU7nQ iiXu9WAIJG1AYvsTMCZkVQJqt5tPQ/t9wKwXOdxPh5SbtvUaTthsMTt/V3JTbQwe rGpa0/X6bYXaTKxY/9KicSryj2YCSuHHMc31lUaRlqNvj9/eQzn2KTsJPvy8J0Zx X2V9qi5dGfgyn6ExuDOh5XERhW4zbMSYCBQUMMfo5Z1y4/xH109ggkbv9qgBw8sE s8zh6h15kSJeWXrWp57x54fV47d7N3MASVKwb7hL7w1xEsqUXmqoDg78eKP2QLTg EtmmEpViALMuUmjl/uHk8RGaYqHi9MzviUKRtpSt+w4DKIKhkMCEZu/4xoSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTVNOUbDq6EyicBftjuSgqvSJm4EwHwYDVR0j BBgwFoAUr/uQP4dss7h0ihyJlFj/OKDQbUswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGM0MzE0Zi1kM2I4LTRlMDYtYjI0NS00YTAyNzBiMjJhZGEvMC9BRkZCOTAzRjg3 NkNCM0I4NzQ4QTFDODk5NDU4RkYzOEEwRDA2RDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZGMzhBMEQw NkQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRjNDMxNGYtZDNiOC00ZTA2LWIy NDUtNGEwMjcwYjIyYWRhLzAvQUZGQjkwM0Y4NzZDQjNCODc0OEExQzg5OTQ1OEZG MzhBMEQwNkQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFt1SJP3LNoOZ93AX+iO6o4H5ehObAYkWbRU FzQcjzNpcVbGxF6PgQF+rtm110zkzWS70p/2c+OCkPdnMSlskFrAKn0/ECccYxI2 c3jiJ/5VmKUxFFKM1874nJzXPmql2tfx6GssW7D0keG9YQ1ExRX+g41KUtEYFoEa A3+dCav5/oVSA62ZoRBDB1yJXSGVMYB38ZVehrI4shWoa1QG/2S1iwZG4Ni0iHML 5jndfQmytiL1zAmpxyrjomH5aQdDiGocrqbEtn+j/nadgAKB6P5jfJUD04Sv4DG1 lJrWGlvwnVxHY4fUcZPpJCbj7JnQGLIQIDBap3FYcR0cVJh3S0w= -----END CERTIFICATE-----Generated at Sun Jan 25 18:48:22 2026 by rpki-client