This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: CVOJXZ2UN1tjOjCouXkIxPD85TNyQmxGhmV7HLkm+t0= Subject key identifier: 00:CD:6A:BB:39:27:DE:88:69:30:93:E6:B5:AD:D6:13:A5:EE:0D:6A Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 7F085AC3270B209717EA50AA79922DF3D1F88B42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01B0 Signing time: Thu 04 Dec 2025 17:32:06 +0000 Manifest this update: Thu 04 Dec 2025 17:27:06 +0000 Manifest next update: Mon 08 Dec 2025 04:38:06 +0000 Files and hashes: 1: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: rNChHCnrnyJLLY34G4kDGVsTPJQ1hGT5BO6DP+1g09Y=) 2: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: Zn/mRLgJcAPw/B4LeoQNyY9Lq34HwGmBLP3JEPUrmtE=) 3: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: ogM+ZIyF0MDEPkGlIwQFvIYLgFk/yhJ4hvt5jIGpne8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:08:5a:c3:27:0b:20:97:17:ea:50:aa:79:92:2d:f3:d1:f8:8b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Dec 4 17:27:06 2025 GMT Not After : Dec 8 04:38:06 2025 GMT Subject: CN=00CD6ABB3927DE88693093E6B5ADD613A5EE0D6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:0e:78:a6:06:03:a5:7b:30:46:65:92:45: e2:d1:28:2f:51:4e:9a:d6:49:7b:68:04:79:9e:f1: f3:04:cd:1a:15:fc:6e:76:07:a6:3a:e1:af:93:04: b5:20:9b:bb:85:02:a6:36:a2:f7:0e:48:24:91:ae: c2:37:74:eb:15:82:9a:ad:6b:1a:6e:1e:cd:4f:1c: e3:61:19:e4:65:46:52:85:99:54:96:a3:30:61:1f: 4e:a1:41:88:e4:14:09:60:72:57:ac:70:a8:7d:c7: 0c:30:f8:64:45:9b:2d:3c:23:e0:1a:62:35:ba:4e: a3:e0:9b:95:03:ee:65:99:a4:63:f7:75:24:be:28: 23:57:6e:da:73:60:08:96:9d:6f:c2:12:63:b7:92: 50:83:1b:f2:ae:6e:3d:91:04:b9:e5:fd:ed:8a:2b: d8:d2:d9:69:27:c0:c0:38:f0:3c:54:cd:ee:bc:25: 17:4b:dc:6e:d2:8f:dc:d4:ac:3d:0a:ea:60:60:b1: e9:be:08:6a:05:6c:3d:c0:62:c1:5c:9f:e4:93:14: e6:be:8a:bb:94:13:90:18:f7:8d:ab:b1:a3:fd:de: 8e:5d:2f:c1:80:21:90:9a:0d:15:eb:5a:bb:dd:2d: 13:35:1d:cf:47:8d:f6:b0:e8:1f:d8:7a:db:1b:2f: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CD:6A:BB:39:27:DE:88:69:30:93:E6:B5:AD:D6:13:A5:EE:0D:6A X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:61:08:71:88:db:ad:81:c3:f1:8f:94:ea:d9:29:7f:67:56: 81:e9:28:bc:45:d4:c1:ee:16:0a:2f:1b:86:f3:11:0c:20:3d: 6d:91:65:c5:bf:02:b9:3b:08:f5:07:44:a9:2c:01:78:e7:00: da:f1:ba:80:92:f9:88:d2:6c:fc:f7:40:47:c4:0a:d8:98:5b: 6c:34:dc:c9:e2:a4:cb:09:a6:cc:7a:ff:69:cf:50:46:df:22: ef:80:05:e2:6f:bf:49:bb:dd:38:62:da:24:97:dd:a5:69:5e: 8d:4c:49:aa:ed:ef:cd:25:c0:31:ad:b0:bf:0d:ec:87:d8:9c: 5a:cd:50:ed:bc:68:ef:7c:3d:83:4e:a9:95:50:b3:a0:81:ac: 42:fb:e6:1a:95:cf:07:51:14:7d:ac:7a:6e:98:5d:0b:2f:6a: d6:9b:df:60:06:71:dc:f9:3d:b6:b4:ae:31:11:9c:2a:3c:7f: 0c:04:c9:6c:a7:b3:f6:aa:d2:10:3d:7a:4a:d9:44:b6:40:30: b9:f8:b8:91:76:bf:5e:2c:a7:e5:9b:82:f8:21:25:a0:67:3d: b2:cb:14:96:be:4f:e7:0a:c1:a7:8c:af:60:21:0d:a5:37:2b: 3b:4f:45:0b:af:fa:bf:d3:17:33:7a:e5:fc:73:93:06:89:e0: 11:4d:e4:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwhawycLIJcX6lCqeZIt89H4i0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNTEyMDQxNzI3MDZaFw0yNTEyMDgwNDM4MDZaMDMxMTAvBgNV BAMTKDAwQ0Q2QUJCMzkyN0RFODg2OTMwOTNFNkI1QURENjEzQTVFRTBENkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9A54pgYDpXswRmWSReLRKC9R TprWSXtoBHme8fMEzRoV/G52B6Y64a+TBLUgm7uFAqY2ovcOSCSRrsI3dOsVgpqt axpuHs1PHONhGeRlRlKFmVSWozBhH06hQYjkFAlgclescKh9xwww+GRFmy08I+Aa YjW6TqPgm5UD7mWZpGP3dSS+KCNXbtpzYAiWnW/CEmO3klCDG/Kubj2RBLnl/e2K K9jS2WknwMA48DxUze68JRdL3G7Sj9zUrD0K6mBgsem+CGoFbD3AYsFcn+STFOa+ iruUE5AY942rsaP93o5dL8GAIZCaDRXrWrvdLRM1Hc9Hjfaw6B/YetsbL5WDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAM1quzkn3ohpMJPmta3WE6XuDWowHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFthCHGI262Bw/GPlOrZKX9nVoHpKLxF1MHu FgovG4bzEQwgPW2RZcW/Ark7CPUHRKksAXjnANrxuoCS+YjSbPz3QEfECtiYW2w0 3MnipMsJpsx6/2nPUEbfIu+ABeJvv0m73Thi2iSX3aVpXo1MSart780lwDGtsL8N 7IfYnFrNUO28aO98PYNOqZVQs6CBrEL75hqVzwdRFH2sem6YXQsvatab32AGcdz5 Pba0rjERnCo8fwwEyWyns/aq0hA9ekrZRLZAMLn4uJF2v14sp+WbgvghJaBnPbLL FJa+T+cKwaeMr2AhDaU3KztPRQuv+r/TFzN65fxzkwaJ4BFN5K8= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:43 2025 by rpki-client