This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft File: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft (raw, json) Hash identifier: TJCxsuZC07MInO+pJ7zkFEmHCXr3wa4wWJc3W2aYvV0= Subject key identifier: 9A:A1:E9:20:77:AC:92:FF:86:FE:D3:93:62:67:1E:8C:B8:78:3D:7C Authority key identifier: AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 Certificate issuer: /CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Certificate serial: 278073FD5DFC6526CEF6CE0C9800B204CD98096F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft Manifest number: 01C7 Signing time: Fri 23 Jan 2026 22:52:05 +0000 Manifest this update: Fri 23 Jan 2026 22:47:05 +0000 Manifest next update: Tue 27 Jan 2026 06:33:05 +0000 Files and hashes: 1: AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl (hash: 6QDv5Nhy2NHR+42mQM9CJEB1wE0wJjkkp7sKruhiSbQ=) 2: 3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (hash: jW8jdRnHuWV/CGzvWek2GgncM27aFTLWkhF7bsF25vc=) 3: 3130332e3138362e35392e302f32342d3234203d3e20313439373034.roa (hash: T6EE7CbW35s45e0263f+URwYA2lm21nSH0YTz5UoU4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 06:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:80:73:fd:5d:fc:65:26:ce:f6:ce:0c:98:00:b2:04:cd:98:09:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF7B938E0644E55FE020E79C53BF11FD4B14C9B7 Validity Not Before: Jan 23 22:47:05 2026 GMT Not After : Jan 27 06:33:05 2026 GMT Subject: CN=9AA1E92077AC92FF86FED39362671E8CB8783D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:7a:4c:fb:ee:8b:e8:1e:88:74:06:37:5d: 41:11:31:21:aa:0c:27:a8:b4:83:37:52:57:64:ab: 96:a7:f3:f7:80:8e:93:19:db:c1:af:9b:5d:0c:47: 6c:28:ce:9c:02:12:96:a5:42:d4:95:51:27:04:a5: 6d:d0:7c:44:47:d8:ac:9f:8b:49:64:84:d1:1c:09: 30:a1:da:5f:57:b5:50:2c:fe:85:86:b6:1f:ea:3d: 98:5b:bc:c5:75:3b:ee:c0:48:1a:a6:65:c9:ac:48: 70:c2:08:25:72:35:10:d7:bd:34:96:87:f2:6d:cf: 35:8c:34:6e:9a:2c:7b:48:c6:19:84:bb:41:39:d3: ff:fc:97:bf:10:fd:95:6b:61:92:63:e4:de:65:9d: 77:2f:b6:62:8f:98:0e:0e:7a:9c:a1:46:28:7d:bc: b3:69:23:c9:99:2a:63:f6:64:72:71:08:62:fb:f2: 5f:75:80:19:ed:16:ab:be:af:f0:d2:92:c9:9c:e2: e3:87:13:ed:12:5e:87:7e:8a:af:0e:ba:6f:bc:16: 9e:f1:39:68:8c:a3:c5:c3:7c:e6:0f:9f:93:d4:48: b7:0d:fe:e0:d8:4b:e0:f7:ef:8e:ff:98:89:fd:cc: 3a:7e:92:08:7c:16:5d:a3:21:6e:87:91:bd:00:7b: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:E9:20:77:AC:92:FF:86:FE:D3:93:62:67:1E:8C:B8:78:3D:7C X509v3 Authority Key Identifier: keyid:AF:7B:93:8E:06:44:E5:5F:E0:20:E7:9C:53:BF:11:FD:4B:14:C9:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/AF7B938E0644E55FE020E79C53BF11FD4B14C9B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:ba:a1:05:dd:c8:09:35:7e:e9:3b:ed:17:57:d5:65:bf:50: 2e:99:55:d1:c8:85:fd:e1:67:25:8b:c8:7c:6a:70:cb:40:21: 90:fb:4e:b0:58:95:bb:87:bf:e8:ba:20:74:72:5f:f4:c9:2e: 2b:34:ec:d2:b8:af:33:eb:3b:7c:ac:08:19:a7:70:79:61:5f: 29:84:ee:4b:0b:ca:31:20:08:99:c5:14:97:e5:30:97:42:25: 8e:39:0c:67:d5:ae:93:d1:0d:1a:da:c6:23:ae:40:c9:cf:03: 74:b8:ba:b8:b6:2b:1d:e8:12:48:82:0f:fb:59:6a:ed:6b:69: c1:01:50:8f:6c:4c:fb:a3:6c:db:34:91:d1:ac:51:92:88:20: 7b:8a:a2:57:cf:71:70:49:34:89:ea:c5:2c:81:e2:b0:ca:49: 63:f7:a5:5d:44:27:21:96:56:21:c7:de:1f:c4:fe:30:36:e6: c1:0f:db:33:d3:70:d4:a7:96:1a:49:c8:aa:a3:9e:56:10:3c: 65:ec:99:14:6c:ff:7c:f1:fc:13:86:65:af:3f:59:e9:e2:39: 38:e8:2d:67:c1:e0:3f:17:d8:61:49:06:e5:30:96:88:7b:f8: 9f:a8:5c:62:26:ef:56:02:e1:e7:c5:26:fa:e0:d9:03:2c:53: 2c:d0:3a:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4Bz/V38ZSbO9s4MmACyBM2YCW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0 QjE0QzlCNzAeFw0yNjAxMjMyMjQ3MDVaFw0yNjAxMjcwNjMzMDVaMDMxMTAvBgNV BAMTKDlBQTFFOTIwNzdBQzkyRkY4NkZFRDM5MzYyNjcxRThDQjg3ODNEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDXpM++6L6B6IdAY3XUERMSGq DCeotIM3Uldkq5an8/eAjpMZ28Gvm10MR2wozpwCEpalQtSVUScEpW3QfERH2Kyf i0lkhNEcCTCh2l9XtVAs/oWGth/qPZhbvMV1O+7ASBqmZcmsSHDCCCVyNRDXvTSW h/JtzzWMNG6aLHtIxhmEu0E50//8l78Q/ZVrYZJj5N5lnXcvtmKPmA4OepyhRih9 vLNpI8mZKmP2ZHJxCGL78l91gBntFqu+r/DSksmc4uOHE+0SXod+iq8Oum+8Fp7x OWiMo8XDfOYPn5PUSLcN/uDYS+D3747/mIn9zDp+kgh8Fl2jIW6Hkb0AexzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqHpIHeskv+G/tOTYmcejLh4PXwwHwYDVR0j BBgwFoAUr3uTjgZE5V/gIOecU78R/UsUybcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTBlZGRjZC03ZDM4LTQ3NjUtYWEyNi03ZTQ1NzY3MDQyM2MvMC9BRjdCOTM4RTA2 NDRFNTVGRTAyMEU3OUM1M0JGMTFGRDRCMTRDOUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjExRkQ0QjE0 QzlCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDEwZWRkY2QtN2QzOC00NzY1LWFh MjYtN2U0NTc2NzA0MjNjLzAvQUY3QjkzOEUwNjQ0RTU1RkUwMjBFNzlDNTNCRjEx RkQ0QjE0QzlCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG6oQXdyAk1fuk77RdX1WW/UC6ZVdHIhf3h ZyWLyHxqcMtAIZD7TrBYlbuHv+i6IHRyX/TJLis07NK4rzPrO3ysCBmncHlhXymE 7ksLyjEgCJnFFJflMJdCJY45DGfVrpPRDRraxiOuQMnPA3S4uri2Kx3oEkiCD/tZ au1racEBUI9sTPujbNs0kdGsUZKIIHuKolfPcXBJNInqxSyB4rDKSWP3pV1EJyGW ViHH3h/E/jA25sEP2zPTcNSnlhpJyKqjnlYQPGXsmRRs/3zx/BOGZa8/WeniOTjo LWfB4D8X2GFJBuUwloh7+J+oXGIm71YC4efFJvrg2QMsUyzQOms= -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:18 2026 by rpki-client