This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: ZQvs86tI+fnRC0fC4NPpVWZK5plL/Uan/Mlw+leCpa8= Subject key identifier: E5:7A:9F:AE:CA:18:C5:F4:8E:19:F8:BD:8F:F5:68:88:E4:48:46:98 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 6A99B6A1F08DB03FC8DD33302B95E6D9579BF248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02AF Signing time: Fri 05 Dec 2025 20:42:10 +0000 Manifest this update: Fri 05 Dec 2025 20:37:10 +0000 Manifest next update: Tue 09 Dec 2025 01:49:10 +0000 Files and hashes: 1: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) 2: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: yVNhm0RKWbJK7gameBrLMpCaSWhesThHSl5ypYXwt4Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:99:b6:a1:f0:8d:b0:3f:c8:dd:33:30:2b:95:e6:d9:57:9b:f2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Dec 5 20:37:10 2025 GMT Not After : Dec 9 01:49:10 2025 GMT Subject: CN=E57A9FAECA18C5F48E19F8BD8FF56888E4484698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:89:08:73:84:fe:a2:e1:e9:b9:5c:d4:d8:66: d8:5e:19:2b:58:63:e5:ba:9c:47:56:af:a7:a1:93: 27:ee:b6:88:1d:6d:39:84:d4:3f:55:83:cf:2f:8a: e7:2d:89:81:15:39:42:ab:69:70:a2:9e:8d:51:7a: dc:8b:53:68:05:ff:31:48:5c:cf:dd:b0:14:63:c8: 1f:ae:61:ff:a2:c9:2d:5a:ce:30:ea:e8:2b:4c:bf: 3e:ad:d9:cc:5e:88:fd:2e:18:f9:0c:06:ff:e6:33: c5:2e:ca:eb:ed:ba:8f:b7:fc:05:ea:c1:bc:13:6a: a2:6a:30:c7:2a:03:26:1f:d7:46:35:3e:79:1b:77: ed:5a:8e:ae:20:9b:48:82:e7:37:cd:63:b6:2b:f9: 83:85:6d:c3:f4:cb:6d:13:a3:bb:9c:d0:f6:c2:08: 6d:a3:8e:8f:de:46:16:9d:27:fb:e8:fb:50:9b:b2: 67:b3:2a:cd:f9:71:23:0e:4e:3d:f3:a9:ca:3f:e6: 77:f0:47:01:01:46:80:87:04:75:52:f4:39:53:a5: a7:6b:e4:28:91:56:b7:a3:a8:0f:2c:66:46:8b:d5: b1:6a:d3:39:6f:31:b9:a9:5a:5a:fc:90:a7:4e:25: a9:08:f2:dd:34:5a:79:d4:9a:c2:3a:ae:39:c5:91: a2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7A:9F:AE:CA:18:C5:F4:8E:19:F8:BD:8F:F5:68:88:E4:48:46:98 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:d4:31:ea:95:a6:7d:36:2c:37:7e:ba:29:aa:f0:51:00: 0c:70:3f:08:cb:f4:89:61:af:91:19:7e:ba:cd:f0:e6:00:61: 4f:ec:96:2b:6d:16:e8:21:0d:73:33:2e:b7:02:f2:5b:37:b2: fa:96:7b:51:78:01:4c:c9:a7:b9:eb:e6:4d:b2:cb:ad:a3:dd: b7:92:68:41:94:7d:01:c7:4a:7b:e7:38:d1:c0:95:b4:b4:ad: 66:43:66:fd:d8:bf:f0:50:e0:33:2c:ac:c2:70:93:2f:e0:ff: de:aa:a8:e9:21:aa:ca:db:74:a1:29:b5:b7:cf:18:9b:52:e8: 9a:80:b0:64:23:17:f1:89:54:ac:fd:7f:0c:1f:f6:e8:7d:c6: 51:8a:02:81:6b:ae:ea:72:de:a1:0a:25:e6:88:0f:ed:e9:cb: d1:93:5f:77:73:a4:e7:ec:83:51:b4:5a:70:1e:12:0f:68:d8: a7:fc:8b:7e:a8:8e:b5:9f:fa:69:61:53:e4:7f:30:f6:87:ae: 74:2e:b8:54:49:30:3e:82:73:44:6c:6a:03:83:8e:68:c8:ea: 59:0f:84:b6:2e:70:3e:67:5a:6f:2c:f7:3a:1d:ae:43:ca:e4: 00:c3:ca:0a:51:c5:ab:d3:7a:43:8a:ef:d6:d0:ba:e5:e0:af: 99:e2:a3:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUapm2ofCNsD/I3TMwK5Xm2Veb8kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNTEyMDUyMDM3MTBaFw0yNTEyMDkwMTQ5MTBaMDMxMTAvBgNV BAMTKEU1N0E5RkFFQ0ExOEM1RjQ4RTE5RjhCRDhGRjU2ODg4RTQ0ODQ2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDziQhzhP6i4em5XNTYZtheGStY Y+W6nEdWr6ehkyfutogdbTmE1D9Vg88viuctiYEVOUKraXCino1RetyLU2gF/zFI XM/dsBRjyB+uYf+iyS1azjDq6CtMvz6t2cxeiP0uGPkMBv/mM8Uuyuvtuo+3/AXq wbwTaqJqMMcqAyYf10Y1Pnkbd+1ajq4gm0iC5zfNY7Yr+YOFbcP0y20To7uc0PbC CG2jjo/eRhadJ/vo+1CbsmezKs35cSMOTj3zqco/5nfwRwEBRoCHBHVS9DlTpadr 5CiRVrejqA8sZkaL1bFq0zlvMbmpWlr8kKdOJakI8t00WnnUmsI6rjnFkaKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5XqfrsoYxfSOGfi9j/VoiORIRpgwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwF1DHqlaZ9Niw3fropqvBRAAxwPwjL9Ilh r5EZfrrN8OYAYU/slittFughDXMzLrcC8ls3svqWe1F4AUzJp7nr5k2yy62j3beS aEGUfQHHSnvnONHAlbS0rWZDZv3Yv/BQ4DMsrMJwky/g/96qqOkhqsrbdKEptbfP GJtS6JqAsGQjF/GJVKz9fwwf9uh9xlGKAoFrrupy3qEKJeaID+3py9GTX3dzpOfs g1G0WnAeEg9o2Kf8i36ojrWf+mlhU+R/MPaHrnQuuFRJMD6Cc0RsagODjmjI6lkP hLYucD5nWm8s9zodrkPK5ADDygpRxavTekOK79bQuuXgr5nio9o= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:56 2025 by rpki-client