This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft File: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft (raw, json) Hash identifier: x9yW38/kEu9khgu3qQoTwvCOrYcEFsaBG4J4Pw1LA48= Subject key identifier: D5:DA:B6:90:E4:4D:3B:5A:4F:F8:EB:F2:EE:A6:61:00:22:57:BD:DD Authority key identifier: AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 Certificate issuer: /CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Certificate serial: 5413212374E84BD9667A37B7F80E967AF8655F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft Manifest number: 0112 Signing time: Sat 06 Dec 2025 06:21:31 +0000 Manifest this update: Sat 06 Dec 2025 06:16:31 +0000 Manifest next update: Tue 09 Dec 2025 17:36:31 +0000 Files and hashes: 1: 3135372e31302e3138312e302f32342d3234203d3e20313532333439.roa (hash: JcxcaxwKLkaXPPx4myqNJpdCaATZRCOkTz9pp1mz/yI=) 2: AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl (hash: lYXAcC4/ifcl50gYrhAuYGW6dc8CXZ1f0xr42FpyXno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:13:21:23:74:e8:4b:d9:66:7a:37:b7:f8:0e:96:7a:f8:65:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3 Validity Not Before: Dec 6 06:16:31 2025 GMT Not After : Dec 9 17:36:31 2025 GMT Subject: CN=D5DAB690E44D3B5A4FF8EBF2EEA661002257BDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:b4:9f:a1:a6:1b:c2:e9:bd:51:02:63:b4: 54:a4:67:ee:15:dd:b1:32:dc:c1:72:07:c9:83:ba: 3e:90:3e:36:ee:07:50:0d:84:e6:97:36:89:1a:2d: 68:1c:13:b7:43:d7:1c:dd:ce:34:8e:7c:7d:0e:7d: af:3f:f0:96:71:57:fc:38:b9:8f:69:e7:4c:58:93: 98:dc:ca:85:81:78:aa:f5:37:f6:ca:a8:ea:95:0a: 3e:c0:d8:73:fa:82:f3:6b:cf:c3:19:85:8a:d9:55: 0b:a0:f5:1b:ba:28:7b:67:0d:44:14:ef:4c:be:be: d6:84:e4:8e:af:da:d7:ff:6c:17:b8:5a:56:14:3a: 68:c5:65:1f:3a:61:7a:8f:78:01:d6:27:6a:e6:33: ed:76:9b:98:47:da:30:f6:28:e2:8e:8c:05:49:d1: a4:a5:10:c2:1c:b4:da:a7:4c:69:c0:3c:e1:9c:10: 2a:d4:3d:9e:7f:53:c1:29:84:d2:10:7b:c7:28:16: 61:e3:cc:f5:c6:f7:dd:bb:7a:3c:df:09:35:fe:9f: 95:5a:6f:37:fa:e2:00:cf:64:1f:23:e1:8f:d4:12: 94:8b:9d:c1:a5:18:64:8d:b9:eb:04:b8:69:57:47: b0:a6:9f:1f:1d:16:39:58:8f:4a:9b:dc:e1:54:8b: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DA:B6:90:E4:4D:3B:5A:4F:F8:EB:F2:EE:A6:61:00:22:57:BD:DD X509v3 Authority Key Identifier: keyid:AF:A7:AE:3D:79:0A:1F:0C:91:4B:83:99:E4:69:5F:4D:63:42:B4:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b90d0265-2cc1-463d-948b-cded13a20295/0/AFA7AE3D790A1F0C914B8399E4695F4D6342B4C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:50:2d:c8:62:6c:22:35:a4:6d:8a:a1:07:65:48:44:30: db:9a:85:81:7b:c6:a5:50:8d:bb:86:a1:c0:31:d7:88:57:7d: c6:da:a4:c1:f7:97:10:66:3b:80:a1:19:c6:f5:20:1a:0c:3c: aa:97:dd:8a:80:c3:84:3c:b8:35:aa:28:eb:b2:e4:22:e1:9e: 82:22:07:d7:b7:d6:3c:26:20:2d:fb:89:34:52:27:59:51:cd: b1:f8:cd:ba:33:1a:cf:3d:e4:05:24:b4:4c:91:7a:9e:8c:dc: 3a:8a:08:9d:e1:ae:3c:76:8e:48:5d:22:bb:1b:a6:d4:37:a1: 27:a3:29:2b:60:d0:fe:a6:de:39:2a:10:92:e5:1c:db:f8:83: 09:35:71:3d:ec:b2:21:d9:18:b6:f6:4d:58:10:44:cd:5e:a6: fd:e3:fe:4e:65:24:bc:2f:0e:c6:ca:87:a3:b9:0f:8e:95:29: 86:39:f9:ec:26:53:dd:93:c0:52:2c:f3:13:c2:99:2b:04:24: 92:a8:91:63:23:cd:15:01:26:01:66:fe:ee:6d:b9:46:b3:b3: e6:22:ee:6a:bc:ad:9a:ca:29:9f:a1:72:c1:dd:b2:f2:f3:c5: 03:77:c7:4c:79:20:52:5a:78:ba:93:63:5c:6c:f8:69:66:9c: 94:b9:b4:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBMhI3ToS9lmeje3+A6WevhlX2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2 MzQyQjRDMzAeFw0yNTEyMDYwNjE2MzFaFw0yNTEyMDkxNzM2MzFaMDMxMTAvBgNV BAMTKEQ1REFCNjkwRTQ0RDNCNUE0RkY4RUJGMkVFQTY2MTAwMjI1N0JEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7LSfoaYbwum9UQJjtFSkZ+4V 3bEy3MFyB8mDuj6QPjbuB1ANhOaXNokaLWgcE7dD1xzdzjSOfH0Ofa8/8JZxV/w4 uY9p50xYk5jcyoWBeKr1N/bKqOqVCj7A2HP6gvNrz8MZhYrZVQug9Ru6KHtnDUQU 70y+vtaE5I6v2tf/bBe4WlYUOmjFZR86YXqPeAHWJ2rmM+12m5hH2jD2KOKOjAVJ 0aSlEMIctNqnTGnAPOGcECrUPZ5/U8EphNIQe8coFmHjzPXG9927ejzfCTX+n5Va bzf64gDPZB8j4Y/UEpSLncGlGGSNuesEuGlXR7Cmnx8dFjlYj0qb3OFUi381AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1dq2kORNO1pP+Ovy7qZhACJXvd0wHwYDVR0j BBgwFoAUr6euPXkKHwyRS4OZ5GlfTWNCtMMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTBkMDI2NS0yY2MxLTQ2M2QtOTQ4Yi1jZGVkMTNhMjAyOTUvMC9BRkE3QUUzRDc5 MEExRjBDOTE0QjgzOTlFNDY5NUY0RDYzNDJCNEMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVGNEQ2MzQy QjRDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjkwZDAyNjUtMmNjMS00NjNkLTk0 OGItY2RlZDEzYTIwMjk1LzAvQUZBN0FFM0Q3OTBBMUYwQzkxNEI4Mzk5RTQ2OTVG NEQ2MzQyQjRDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJg4UC3IYmwiNaRtiqEHZUhEMNuahYF7xqVQ jbuGocAx14hXfcbapMH3lxBmO4ChGcb1IBoMPKqX3YqAw4Q8uDWqKOuy5CLhnoIi B9e31jwmIC37iTRSJ1lRzbH4zbozGs895AUktEyRep6M3DqKCJ3hrjx2jkhdIrsb ptQ3oSejKStg0P6m3jkqEJLlHNv4gwk1cT3ssiHZGLb2TVgQRM1epv3j/k5lJLwv DsbKh6O5D46VKYY5+ewmU92TwFIs8xPCmSsEJJKokWMjzRUBJgFm/u5tuUazs+Yi 7mq8rZrKKZ+hcsHdsvLzxQN3x0x5IFJaeLqTY1xs+GlmnJS5tMI= -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:34 2025 by rpki-client