This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: GuvbD4erMJURULMc7s6PC5hqqwhswE1U+cA0Wn69j9A= Subject key identifier: 0F:DD:A9:28:73:07:78:60:BC:D1:75:87:1F:7B:22:F9:BF:8B:F0:F0 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 2FBA12D06B7F389DA15418A9D404796FB44A3C57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0133 Signing time: Tue 02 Dec 2025 11:51:31 +0000 Manifest this update: Tue 02 Dec 2025 11:46:31 +0000 Manifest next update: Fri 05 Dec 2025 13:49:31 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: 7cY/ljK/uNMAtnvAEg8DJ2zxUOPdTYI41D/Xk47fhsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ba:12:d0:6b:7f:38:9d:a1:54:18:a9:d4:04:79:6f:b4:4a:3c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Dec 2 11:46:31 2025 GMT Not After : Dec 5 13:49:31 2025 GMT Subject: CN=0FDDA92873077860BCD175871F7B22F9BF8BF0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:b2:d5:79:42:46:88:5c:c5:22:e7:37:c7: fb:60:16:73:8e:59:c4:28:c5:40:d6:dc:69:c9:2e: af:82:b1:25:3a:a2:82:c0:4e:52:22:0c:78:28:6a: 53:f8:16:14:56:c5:e6:c5:61:75:79:39:c5:53:53: 9f:b2:3c:c1:cb:44:35:87:38:c3:42:7d:d0:c8:c3: 5a:07:f7:66:b7:a8:52:fe:f9:12:ba:fb:49:db:ff: 89:67:01:44:38:c0:ac:a9:5b:45:58:ff:aa:24:f9: 65:ab:b6:97:1e:dc:d2:2b:33:65:04:64:8f:2f:6a: 4e:7d:40:cd:88:97:b7:92:1f:87:0f:77:11:f0:f2: ae:f9:9d:97:02:b7:65:30:c9:01:6e:7c:4d:12:2c: 2b:af:1a:51:dc:fc:fb:da:a9:16:30:27:67:e9:51: 19:58:8d:aa:b3:42:df:bb:00:63:79:37:d6:92:e5: 74:1e:a5:4e:94:2e:e5:35:94:8b:87:fa:66:29:cd: be:ee:38:52:ca:94:bd:ae:86:00:e7:ac:4e:93:ce: 8d:c7:ca:5e:54:a4:41:f7:b2:3f:aa:1e:5b:b7:98: ae:c9:d3:7d:41:0b:89:ee:48:49:46:bf:f6:08:67: a5:31:87:5b:e2:5a:e7:e0:30:44:fa:98:f0:b2:74: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DD:A9:28:73:07:78:60:BC:D1:75:87:1F:7B:22:F9:BF:8B:F0:F0 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3b:21:8d:58:2d:34:91:6c:1d:ce:f5:c3:72:4f:9f:a6:c6: 6d:7c:35:b0:1b:84:b9:98:88:d4:45:94:95:b9:07:8f:b7:fe: ea:fb:6f:b4:7b:b0:91:29:cc:7f:4c:33:5d:e1:fc:5c:9a:64: 66:cf:46:18:79:22:46:0a:52:64:53:84:f8:38:5a:46:29:68: 18:98:cd:25:5e:dc:52:b8:5b:4e:93:69:b5:21:84:1c:e1:23: 89:4e:3b:4e:23:d8:c3:d4:92:40:f7:27:79:2a:1a:b4:6a:e3: e0:7f:63:86:89:9c:f4:fe:f9:8b:17:5e:02:88:54:4a:3d:7f: fe:89:f5:d4:56:ca:3b:16:d1:bc:4f:83:ac:3e:a5:0c:cf:7c: 9e:63:80:4f:88:5e:a5:f7:d7:0e:a6:51:80:3c:b4:0f:54:2c: af:77:29:22:6d:95:40:2c:d3:c3:97:38:b1:02:bc:ab:ce:95: f4:2b:81:c2:72:39:dd:6e:9d:c0:6a:f9:3b:ba:6e:8c:03:f4: 6e:c6:c7:98:4a:52:ff:46:67:c4:76:bb:70:06:13:64:0a:08: 29:82:97:8e:11:bd:18:32:80:c9:9b:31:b5:fc:26:f0:b8:36: 09:e7:69:f6:33:5d:e8:06:58:d9:6f:f3:ea:e3:8c:53:16:bc: 63:43:52:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7oS0Gt/OJ2hVBip1AR5b7RKPFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTEyMDIxMTQ2MzFaFw0yNTEyMDUxMzQ5MzFaMDMxMTAvBgNV BAMTKDBGRERBOTI4NzMwNzc4NjBCQ0QxNzU4NzFGN0IyMkY5QkY4QkYwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkLLVeUJGiFzFIuc3x/tgFnOO WcQoxUDW3GnJLq+CsSU6ooLATlIiDHgoalP4FhRWxebFYXV5OcVTU5+yPMHLRDWH OMNCfdDIw1oH92a3qFL++RK6+0nb/4lnAUQ4wKypW0VY/6ok+WWrtpce3NIrM2UE ZI8vak59QM2Il7eSH4cPdxHw8q75nZcCt2UwyQFufE0SLCuvGlHc/PvaqRYwJ2fp URlYjaqzQt+7AGN5N9aS5XQepU6ULuU1lIuH+mYpzb7uOFLKlL2uhgDnrE6Tzo3H yl5UpEH3sj+qHlu3mK7J031BC4nuSElGv/YIZ6Uxh1viWufgMET6mPCydDmDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD92pKHMHeGC80XWHH3si+b+L8PAwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA7IY1YLTSRbB3O9cNyT5+mxm18NbAbhLmY iNRFlJW5B4+3/ur7b7R7sJEpzH9MM13h/FyaZGbPRhh5IkYKUmRThPg4WkYpaBiY zSVe3FK4W06TabUhhBzhI4lOO04j2MPUkkD3J3kqGrRq4+B/Y4aJnPT++YsXXgKI VEo9f/6J9dRWyjsW0bxPg6w+pQzPfJ5jgE+IXqX31w6mUYA8tA9ULK93KSJtlUAs 08OXOLECvKvOlfQrgcJyOd1uncBq+Tu6bowD9G7Gx5hKUv9GZ8R2u3AGE2QKCCmC l44RvRgygMmbMbX8JvC4NgnnafYzXegGWNlv8+rjjFMWvGNDUhQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:02 2025 by rpki-client