This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft File: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft (raw, json) Hash identifier: vetnhyw5OErll3z68Gk4o6JkmnUqyS8TRdSmMQctN3k= Subject key identifier: 3B:3F:FA:6C:18:19:ED:F1:63:1D:D8:FC:D3:A6:0B:A6:C9:9A:C2:08 Authority key identifier: AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB Certificate issuer: /CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Certificate serial: 5DD809676889E814D00A6B086027D50E279B5EAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft Manifest number: 03DB Signing time: Sat 06 Dec 2025 08:51:32 +0000 Manifest this update: Sat 06 Dec 2025 08:46:32 +0000 Manifest next update: Tue 09 Dec 2025 15:30:32 +0000 Files and hashes: 1: AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl (hash: JXNPcfgqO0GMZ93pPDJYtd2nfSKACdgAZZO0mR+Y0po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:30:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d8:09:67:68:89:e8:14:d0:0a:6b:08:60:27:d5:0e:27:9b:5e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB Validity Not Before: Dec 6 08:46:32 2025 GMT Not After : Dec 9 15:30:32 2025 GMT Subject: CN=3B3FFA6C1819EDF1631DD8FCD3A60BA6C99AC208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:c6:1d:76:e9:cf:90:b3:6d:3c:a3:73:9c: 9d:bf:69:0b:e2:a8:c1:16:c4:46:20:85:5d:5b:1d: 5a:da:43:79:a2:52:4d:44:61:51:07:5f:1c:dc:0d: 97:9d:4b:75:4e:79:22:fc:a7:2d:49:18:4d:19:a7: ec:34:56:a1:90:ff:b1:27:96:fd:2f:e3:eb:a4:db: 70:fa:98:f7:46:6d:ee:eb:77:b3:46:31:e6:36:86: 2e:c1:ce:ad:eb:1c:2e:02:19:34:47:9b:de:92:2f: bb:9b:90:cf:61:8e:6b:c1:24:b1:c1:0a:e3:0b:5e: 01:30:10:fe:50:43:dd:38:e5:23:9f:a3:a3:85:ee: f0:5d:fd:a7:67:69:50:11:a9:b4:e8:90:cb:0f:30: b9:13:c9:8d:54:c9:23:33:2c:7a:23:c4:f1:2d:96: fd:26:cb:b3:5a:22:86:46:7c:17:da:e4:d6:b2:ac: 27:00:4e:04:9e:f0:04:6e:39:e0:3c:36:d6:81:d6: 2e:e0:87:6e:96:1c:a2:f9:dd:b4:06:2b:85:71:5f: 6e:3b:79:be:dc:3e:10:95:e3:ff:49:59:03:17:0c: c8:77:81:95:eb:5b:f8:2a:14:8f:ce:0a:a7:12:af: e7:db:6b:25:fa:9d:83:11:47:5c:38:51:f5:4c:19: e6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3F:FA:6C:18:19:ED:F1:63:1D:D8:FC:D3:A6:0B:A6:C9:9A:C2:08 X509v3 Authority Key Identifier: keyid:AF:DF:D5:D1:C4:B3:9F:2F:AA:BB:A5:BC:15:23:4C:2B:12:43:BF:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4fe1811-c03f-49d8-9217-13ff22a31ebe/0/AFDFD5D1C4B39F2FAABBA5BC15234C2B1243BFFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b3:e2:2b:95:d8:ee:7a:32:cf:ab:75:8f:17:cb:ef:7c:89: 65:d0:c1:b4:11:f0:37:7d:fa:7f:a3:a9:4b:47:44:bc:b8:83: a7:d3:f5:c9:28:f8:5a:9e:06:2a:22:22:92:af:2b:e1:17:6b: fb:bf:b1:3c:b9:b6:f9:3c:49:df:61:5d:06:db:25:4f:54:c0: 23:a0:bd:26:17:5f:af:51:34:9b:0b:68:1f:c9:a6:30:4d:72: 6a:90:5d:fa:da:f8:09:ec:97:a3:3d:80:d9:be:33:fd:87:b7: 9e:ef:52:69:a9:86:9d:43:40:ca:4b:fd:cd:22:66:54:09:22: 86:57:9c:9e:b8:56:55:62:5d:79:c0:9d:02:97:7d:c2:9c:8d: 78:53:c6:ca:b4:84:77:2e:b1:6d:a9:cc:6a:39:89:e0:e5:ee: bf:6e:f2:e6:e1:d5:2d:15:07:62:63:08:0c:66:87:bc:b9:54: c8:7a:a5:81:d2:45:d5:45:29:56:66:1d:f7:6f:43:35:fa:63: ec:26:92:6e:2a:a8:51:fc:1b:9b:1b:82:8c:38:d5:34:f8:5c: 57:47:fe:89:d4:18:28:ef:8e:27:9f:92:f7:51:0e:7d:7c:e4: e1:60:c7:9a:a9:e7:21:dd:17:cc:3c:f5:af:ec:51:22:da:f0: fb:18:5a:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdgJZ2iJ6BTQCmsIYCfVDiebXq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIx MjQzQkZGQjAeFw0yNTEyMDYwODQ2MzJaFw0yNTEyMDkxNTMwMzJaMDMxMTAvBgNV BAMTKDNCM0ZGQTZDMTgxOUVERjE2MzFERDhGQ0QzQTYwQkE2Qzk5QUMyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/8YddunPkLNtPKNznJ2/aQvi qMEWxEYghV1bHVraQ3miUk1EYVEHXxzcDZedS3VOeSL8py1JGE0Zp+w0VqGQ/7En lv0v4+uk23D6mPdGbe7rd7NGMeY2hi7Bzq3rHC4CGTRHm96SL7ubkM9hjmvBJLHB CuMLXgEwEP5QQ9045SOfo6OF7vBd/adnaVARqbTokMsPMLkTyY1UySMzLHojxPEt lv0my7NaIoZGfBfa5NayrCcATgSe8ARuOeA8NtaB1i7gh26WHKL53bQGK4VxX247 eb7cPhCV4/9JWQMXDMh3gZXrW/gqFI/OCqcSr+fbayX6nYMRR1w4UfVMGeYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOz/6bBgZ7fFjHdj806YLpsmawggwHwYDVR0j BBgwFoAUr9/V0cSzny+qu6W8FSNMKxJDv/swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NGZlMTgxMS1jMDNmLTQ5ZDgtOTIxNy0xM2ZmMjJhMzFlYmUvMC9BRkRGRDVEMUM0 QjM5RjJGQUFCQkE1QkMxNTIzNEMyQjEyNDNCRkZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRDMkIxMjQz QkZGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTRmZTE4MTEtYzAzZi00OWQ4LTky MTctMTNmZjIyYTMxZWJlLzAvQUZERkQ1RDFDNEIzOUYyRkFBQkJBNUJDMTUyMzRD MkIxMjQzQkZGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGz4iuV2O56Ms+rdY8Xy+98iWXQwbQR8Dd9 +n+jqUtHRLy4g6fT9cko+FqeBioiIpKvK+EXa/u/sTy5tvk8Sd9hXQbbJU9UwCOg vSYXX69RNJsLaB/JpjBNcmqQXfra+Ansl6M9gNm+M/2Ht57vUmmphp1DQMpL/c0i ZlQJIoZXnJ64VlViXXnAnQKXfcKcjXhTxsq0hHcusW2pzGo5ieDl7r9u8ubh1S0V B2JjCAxmh7y5VMh6pYHSRdVFKVZmHfdvQzX6Y+wmkm4qqFH8G5sbgow41TT4XFdH /onUGCjvjiefkvdRDn185OFgx5qp5yHdF8w89a/sUSLa8PsYWg8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:55 2025 by rpki-client