This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft File: AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft (raw, json) Hash identifier: bI90KGYQXDSDccBQBkwr4fTiEixpTiHF8xWw94fBBuY= Subject key identifier: 71:90:D3:0C:6F:D9:3B:79:FF:12:49:24:16:EF:9F:E4:7A:6D:17:21 Authority key identifier: AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F Certificate issuer: /CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Certificate serial: 55086BA0CE6C9DD59A52694B6A72C7AA9C648734 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft Manifest number: 02D7 Signing time: Sat 06 Dec 2025 17:11:38 +0000 Manifest this update: Sat 06 Dec 2025 17:06:38 +0000 Manifest next update: Wed 10 Dec 2025 02:38:38 +0000 Files and hashes: 1: AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl (hash: d0GjEMeUV0O/CetP50/hmIdoDn3rUG4Qim/rIn07Gek=) 2: 3130332e3137352e3138382e302f32332d3234203d3e20313334363538.roa (hash: vFZDJyrW7Nf7Z4DcMgOnKecQwvqUWGovWuuXKrThLwM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:08:6b:a0:ce:6c:9d:d5:9a:52:69:4b:6a:72:c7:aa:9c:64:87:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFCEE1D439DB1441C4F21223918AC0811E65D56F Validity Not Before: Dec 6 17:06:38 2025 GMT Not After : Dec 10 02:38:38 2025 GMT Subject: CN=7190D30C6FD93B79FF12492416EF9FE47A6D1721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ae:c0:e9:54:7e:63:a2:a7:33:bf:a0:48:60: 06:aa:8a:c2:f7:71:38:bf:8a:3b:6c:91:bb:cf:a2: bc:63:1a:26:b0:85:78:f9:ce:ef:66:1d:81:e2:02: 38:e7:6e:25:2c:2e:fc:4b:9b:24:94:84:c3:f1:be: 80:9c:51:28:e4:d4:07:c9:6b:6f:d6:b2:86:93:8b: 0c:c3:51:26:84:65:ba:77:bc:87:2f:53:9c:93:5a: 83:cb:d0:8a:38:b6:35:c9:a2:32:28:8d:8a:1a:ff: f8:ac:a4:12:4b:1f:54:c7:74:fe:48:a9:19:5b:5b: b7:e0:bf:6a:74:d0:df:05:a7:0b:f0:ea:7a:2b:ef: eb:cb:16:7a:6a:ac:2c:ad:b5:ff:78:32:2f:80:2f: 6f:f8:71:11:f4:5a:f5:cb:26:90:80:8d:8e:a9:50: da:63:49:ba:d0:93:d2:dc:f7:5a:f4:f9:3d:b8:ea: 87:ab:18:08:50:bb:05:98:29:d8:e7:fa:c7:e8:cd: 3c:5c:22:ac:81:cc:16:d8:c7:ad:4f:d7:ea:07:40: 3a:e0:11:08:80:6d:9f:87:c2:f9:4e:76:f5:c8:c7: 31:69:2a:33:82:14:62:b4:55:2c:b4:35:66:eb:78: 9b:07:7e:97:5d:24:ea:be:ac:8c:cc:d8:46:bc:dd: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:D3:0C:6F:D9:3B:79:FF:12:49:24:16:EF:9F:E4:7A:6D:17:21 X509v3 Authority Key Identifier: keyid:AF:CE:E1:D4:39:DB:14:41:C4:F2:12:23:91:8A:C0:81:1E:65:D5:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCEE1D439DB1441C4F21223918AC0811E65D56F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b9f60927-1f34-4c54-9674-f9deaf75c2fc/0/AFCEE1D439DB1441C4F21223918AC0811E65D56F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:dc:5d:15:57:58:9a:a8:25:1a:f2:7d:9a:a0:8b:26:f5:6f: 13:97:0e:c6:7b:96:5b:4c:44:62:2a:51:8c:86:9e:2e:f2:34: 64:ec:dc:2a:0c:5a:19:7a:b0:07:81:71:65:77:2b:ce:72:36: d6:dc:4c:32:dc:77:ff:b0:65:d9:11:51:a0:69:84:46:a1:b8: c6:49:88:59:1e:53:56:5b:4f:e9:75:d6:4b:e0:8a:82:79:f6: 56:aa:fc:62:ce:1a:14:79:1a:f2:0c:03:3b:6f:41:f4:6f:09: 50:4f:c6:62:09:76:01:18:9a:eb:f3:35:f9:cc:f9:4c:50:8b: 84:9f:e8:b3:03:62:27:85:25:78:d9:1a:a1:b7:a4:f2:3f:9c: 16:f3:dc:2d:0a:90:8b:69:55:6e:82:89:ae:25:31:64:8e:ba: 57:af:04:25:ef:c0:72:a9:c3:b3:37:13:d7:03:f4:61:41:dd: c8:84:db:02:42:e0:3e:c9:9f:6f:6f:26:16:e2:0a:7e:9e:2a: ef:e8:56:94:f2:f9:63:8a:00:47:60:c0:59:4d:a6:3c:3f:74: a5:a0:26:c3:b5:0b:de:2c:f7:a3:23:0f:ef:f4:5e:81:a4:df: b6:ae:ef:ae:e6:b2:2e:17:df:d2:dc:9c:c4:cc:20:43:35:5d: 71:01:29:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQhroM5sndWaUmlLanLHqpxkhzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODEx RTY1RDU2RjAeFw0yNTEyMDYxNzA2MzhaFw0yNTEyMTAwMjM4MzhaMDMxMTAvBgNV BAMTKDcxOTBEMzBDNkZEOTNCNzlGRjEyNDkyNDE2RUY5RkU0N0E2RDE3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDprsDpVH5joqczv6BIYAaqisL3 cTi/ijtskbvPorxjGiawhXj5zu9mHYHiAjjnbiUsLvxLmySUhMPxvoCcUSjk1AfJ a2/WsoaTiwzDUSaEZbp3vIcvU5yTWoPL0Io4tjXJojIojYoa//ispBJLH1THdP5I qRlbW7fgv2p00N8Fpwvw6nor7+vLFnpqrCyttf94Mi+AL2/4cRH0WvXLJpCAjY6p UNpjSbrQk9Lc91r0+T246oerGAhQuwWYKdjn+sfozTxcIqyBzBbYx61P1+oHQDrg EQiAbZ+HwvlOdvXIxzFpKjOCFGK0VSy0NWbreJsHfpddJOq+rIzM2Ea83fjzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcZDTDG/ZO3n/EkkkFu+f5HptFyEwHwYDVR0j BBgwFoAUr87h1DnbFEHE8hIjkYrAgR5l1W8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OWY2MDkyNy0xZjM0LTRjNTQtOTY3NC1mOWRlYWY3NWMyZmMvMC9BRkNFRTFENDM5 REIxNDQxQzRGMjEyMjM5MThBQzA4MTFFNjVENTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMwODExRTY1 RDU2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjlmNjA5MjctMWYzNC00YzU0LTk2 NzQtZjlkZWFmNzVjMmZjLzAvQUZDRUUxRDQzOURCMTQ0MUM0RjIxMjIzOTE4QUMw ODExRTY1RDU2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/cXRVXWJqoJRryfZqgiyb1bxOXDsZ7lltM RGIqUYyGni7yNGTs3CoMWhl6sAeBcWV3K85yNtbcTDLcd/+wZdkRUaBphEahuMZJ iFkeU1ZbT+l11kvgioJ59laq/GLOGhR5GvIMAztvQfRvCVBPxmIJdgEYmuvzNfnM +UxQi4Sf6LMDYieFJXjZGqG3pPI/nBbz3C0KkItpVW6Cia4lMWSOulevBCXvwHKp w7M3E9cD9GFB3ciE2wJC4D7Jn29vJhbiCn6eKu/oVpTy+WOKAEdgwFlNpjw/dKWg JsO1C94s96MjD+/0XoGk37au767msi4X39LcnMTMIEM1XXEBKY0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:51 2025 by rpki-client