This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft (raw, json) Hash identifier: Ci0Ob795HJxshSOIxbMcX0VH3vGvGcjlDRRDKBchVPI= Subject key identifier: 17:17:4F:A1:F5:72:B7:75:59:9C:9B:B9:70:BB:9A:DF:EA:E9:6C:14 Authority key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Certificate issuer: /CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Certificate serial: 7DB2E9A2FA7735D639263A2C8D6671A4AF4F13F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft Manifest number: 02C5 Signing time: Sat 24 Jan 2026 06:12:11 +0000 Manifest this update: Sat 24 Jan 2026 06:07:11 +0000 Manifest next update: Tue 27 Jan 2026 11:14:11 +0000 Files and hashes: 1: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl (hash: PckypsNLYYBABrDlGM2znT1d9+UatXRMWWhYIqVemVM=) 2: 3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (hash: ZUhqRkopz2aAEIpLVfRWO4+f532BAakRUcbL26qkTI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 11:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b2:e9:a2:fa:77:35:d6:39:26:3a:2c:8d:66:71:a4:af:4f:13:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Validity Not Before: Jan 24 06:07:11 2026 GMT Not After : Jan 27 11:14:11 2026 GMT Subject: CN=17174FA1F572B775599C9BB970BB9ADFEAE96C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:44:27:c1:61:4a:ad:ff:5f:f8:67:96:99: 73:57:56:92:a0:91:e9:61:97:e3:fd:d0:71:07:ca: 18:a5:10:8f:cf:06:59:4e:33:ef:f9:f2:3b:72:10: e7:06:05:e0:91:69:8c:08:98:d1:49:0f:38:21:e6: 65:44:34:4e:06:27:64:18:bb:3f:d8:24:98:4a:6d: 87:d7:4c:e7:ac:71:a0:23:e7:40:e1:fc:ce:12:bf: 72:e6:39:69:96:bd:9d:75:ac:a6:d0:e5:f1:64:33: 53:ee:7e:34:2f:6b:a1:09:89:ec:68:0f:7d:fc:83: 65:6f:a8:b7:e6:e6:1c:88:9b:21:d8:0c:71:9c:32: 1c:45:3d:43:05:17:e8:a3:a1:86:85:08:f3:9c:26: b8:85:20:05:70:15:52:f8:ef:51:92:97:72:82:5e: 77:6b:98:3e:68:0c:37:a9:00:ea:14:26:0f:16:cb: 66:36:19:16:ae:ca:2b:38:64:87:80:d1:38:5c:ce: 9d:3c:ae:a2:5e:93:ef:97:7b:7b:49:fc:b4:7f:e9: 01:d4:0c:f9:c2:4b:45:3f:52:2c:98:57:e8:18:47: eb:70:aa:d5:27:98:ff:5e:16:5c:cb:cb:72:62:c2: 2f:09:a1:69:f4:8d:21:5f:08:75:9d:aa:7d:99:eb: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:17:4F:A1:F5:72:B7:75:59:9C:9B:B9:70:BB:9A:DF:EA:E9:6C:14 X509v3 Authority Key Identifier: keyid:AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:c8:69:11:39:f4:38:29:b2:e9:85:74:bd:68:48:0b:4f:d8: 1b:cc:11:d4:06:7e:04:31:4d:06:e1:7d:b5:90:c4:c8:59:a6: 16:32:4b:25:8d:36:eb:73:c7:b3:c7:40:ab:9a:a9:17:31:4e: 7e:8c:80:ce:36:76:7c:09:96:0d:20:0c:ce:50:5d:d4:f1:3d: db:04:79:d5:6a:c3:55:8e:53:e7:97:9c:97:06:dc:6d:cb:ad: dc:8d:b8:2d:96:fe:47:a0:a2:d9:75:a0:99:5b:fc:19:04:c3: 19:f2:c2:87:e3:69:1a:7e:9f:8f:c5:35:ad:d1:d7:07:73:2d: d8:57:ea:4a:ad:8a:7a:68:53:57:56:ea:23:11:6c:0b:60:3e: 48:a0:03:3f:f4:3d:9c:26:34:0c:87:8d:67:ee:54:26:c4:39: c2:41:6c:d0:e6:35:09:6c:f4:31:45:a4:6d:78:70:17:99:1d: 0a:1b:8c:5a:b9:72:64:21:f2:7f:5b:ba:8e:e2:b5:ad:92:61: 86:ee:3c:9d:17:c9:8b:1f:11:50:65:34:76:f5:b9:69:04:1e: a2:1f:ca:3b:15:0a:f0:43:45:62:a0:92:06:c9:b2:20:98:2a: 87:f1:84:f5:8d:6c:c6:2a:14:a1:e9:6d:50:d4:d1:3f:05:86: a3:5d:e9:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbLpovp3NdY5JjosjWZxpK9PE/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4 MkMzQzJGNjAeFw0yNjAxMjQwNjA3MTFaFw0yNjAxMjcxMTE0MTFaMDMxMTAvBgNV BAMTKDE3MTc0RkExRjU3MkI3NzU1OTlDOUJCOTcwQkI5QURGRUFFOTZDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrakQnwWFKrf9f+GeWmXNXVpKg kelhl+P90HEHyhilEI/PBllOM+/58jtyEOcGBeCRaYwImNFJDzgh5mVENE4GJ2QY uz/YJJhKbYfXTOescaAj50Dh/M4Sv3LmOWmWvZ11rKbQ5fFkM1PufjQva6EJiexo D338g2VvqLfm5hyImyHYDHGcMhxFPUMFF+ijoYaFCPOcJriFIAVwFVL471GSl3KC XndrmD5oDDepAOoUJg8Wy2Y2GRauyis4ZIeA0Thczp08rqJek++Xe3tJ/LR/6QHU DPnCS0U/UiyYV+gYR+twqtUnmP9eFlzLy3Jiwi8JoWn0jSFfCHWdqn2Z6wblAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFxdPofVyt3VZnJu5cLua3+rpbBQwHwYDVR0j BBgwFoAUr5WN4OzoMLLAfBpYzpFf24LDwvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMC9BRjk1OERFMEVD RTgzMEIyQzA3QzFBNThDRTkxNUZEQjgyQzNDMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVGREI4MkMz QzJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzlkZTBjMzktODRkNS00NDA1LTk1 NGQtNGQzZDcxMjY5M2NlLzAvQUY5NThERTBFQ0U4MzBCMkMwN0MxQTU4Q0U5MTVG REI4MkMzQzJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXIaRE59DgpsumFdL1oSAtP2BvMEdQGfgQx TQbhfbWQxMhZphYySyWNNutzx7PHQKuaqRcxTn6MgM42dnwJlg0gDM5QXdTxPdsE edVqw1WOU+eXnJcG3G3LrdyNuC2W/kegotl1oJlb/BkEwxnywofjaRp+n4/FNa3R 1wdzLdhX6kqtinpoU1dW6iMRbAtgPkigAz/0PZwmNAyHjWfuVCbEOcJBbNDmNQls 9DFFpG14cBeZHQobjFq5cmQh8n9buo7ita2SYYbuPJ0XyYsfEVBlNHb1uWkEHqIf yjsVCvBDRWKgkgbJsiCYKofxhPWNbMYqFKHpbVDU0T8FhqNd6QI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:11 2026 by rpki-client