This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: dpLzocPDB3fH0I1ObOdlG8FIVBNGDt6EmJA5KM3R9eU= Subject key identifier: 1D:04:5E:E8:E6:A3:AE:CA:DE:FB:5A:75:FE:EB:F7:62:5A:9D:16:27 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 051E2937C6CE7FA477ED5E74A3A2E4400ED47263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0138 Signing time: Sat 13 Dec 2025 07:51:30 +0000 Manifest this update: Sat 13 Dec 2025 07:46:30 +0000 Manifest next update: Tue 16 Dec 2025 14:06:30 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: U9TcWldSRiWyjcC8NReKk7nEOA8ZNkRwZfAVL0Sp69w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 14:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1e:29:37:c6:ce:7f:a4:77:ed:5e:74:a3:a2:e4:40:0e:d4:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Dec 13 07:46:30 2025 GMT Not After : Dec 16 14:06:30 2025 GMT Subject: CN=1D045EE8E6A3AECADEFB5A75FEEBF7625A9D1627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:43:ba:56:63:04:35:94:b0:4c:68:85:6f: 62:aa:79:94:56:2d:e3:a0:18:f0:85:8f:44:78:61: b7:88:24:4b:67:9b:53:a1:71:c1:d9:62:12:95:b8: f7:92:1b:1b:cc:28:68:d7:ca:2a:e1:d7:7f:8c:da: 56:1b:c7:b7:88:c3:90:b3:a8:4d:40:88:af:b8:fc: 66:d1:6b:99:80:51:93:59:de:78:07:c3:11:cf:82: 85:b4:89:9d:19:6c:67:a1:af:5c:f9:bd:95:99:f0: a9:8f:c1:b4:00:1a:d0:59:7f:67:2e:f3:57:ef:2a: 08:63:90:eb:eb:71:76:58:2b:ce:10:20:0c:c3:21: 50:f4:35:2f:f4:f0:5d:1f:47:97:af:b5:d4:a0:53: 67:17:78:45:8e:fd:81:12:1e:db:d6:ad:23:36:b4: 84:14:1f:71:30:f1:8d:4e:05:74:f7:a7:11:70:10: 53:db:91:72:fc:eb:9e:e9:47:81:65:e9:74:0c:0a: 46:52:f2:76:ee:d7:b7:e5:10:47:e7:1e:86:1e:a4: 54:96:2b:dd:7d:4c:dc:3f:11:09:fe:66:e1:05:a9: 3d:03:a1:18:01:23:85:eb:00:b4:0e:81:b3:d7:24: 6c:c3:86:f7:c2:0f:84:98:ee:66:59:88:43:55:68: a5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:04:5E:E8:E6:A3:AE:CA:DE:FB:5A:75:FE:EB:F7:62:5A:9D:16:27 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f3:f4:25:f7:2b:9a:73:b4:a2:62:93:5e:bc:a9:e9:98:15: d4:05:f8:25:55:26:bc:4d:1e:bc:66:ec:2f:89:71:82:c9:b8: fd:eb:54:b6:1d:ba:f3:c6:af:cf:ba:ac:30:62:30:16:d1:fb: 4b:8d:9c:4e:2d:94:79:c3:99:55:82:c0:a5:83:0a:63:3f:de: 13:66:d4:b9:2c:9b:f6:ce:bd:66:ee:6b:b5:b5:dc:88:62:07: 20:3c:9d:04:c2:7b:a1:f1:cb:cb:17:3d:13:cf:30:3a:6b:d7: b6:f9:d0:33:d0:38:06:52:f9:b3:95:e8:22:56:66:35:cf:e0: c3:dd:10:c7:ff:7f:00:67:5b:6b:2b:8f:3f:9e:93:93:fc:bd: 2a:94:0f:0a:e2:ff:a4:71:00:6b:5e:a0:23:eb:97:a5:42:22: a3:85:cb:b2:f4:1b:80:d4:5c:46:78:b7:d8:f8:f8:cf:fc:b6: 35:2f:e4:9c:f7:a6:1d:01:9d:72:4a:18:51:a2:35:4a:5f:bd: b0:21:79:2a:c4:23:15:29:34:93:49:c0:1d:91:f2:65:83:97: af:c7:84:23:49:13:8d:51:11:df:bb:4a:22:fa:a0:c6:1f:c7: 4d:e2:3c:80:be:89:f8:a8:a2:f5:be:ab:45:45:46:47:52:e7: fe:6b:dd:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBR4pN8bOf6R37V50o6LkQA7UcmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTEyMTMwNzQ2MzBaFw0yNTEyMTYxNDA2MzBaMDMxMTAvBgNV BAMTKDFEMDQ1RUU4RTZBM0FFQ0FERUZCNUE3NUZFRUJGNzYyNUE5RDE2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClCEO6VmMENZSwTGiFb2KqeZRW LeOgGPCFj0R4YbeIJEtnm1OhccHZYhKVuPeSGxvMKGjXyirh13+M2lYbx7eIw5Cz qE1AiK+4/GbRa5mAUZNZ3ngHwxHPgoW0iZ0ZbGehr1z5vZWZ8KmPwbQAGtBZf2cu 81fvKghjkOvrcXZYK84QIAzDIVD0NS/08F0fR5evtdSgU2cXeEWO/YESHtvWrSM2 tIQUH3Ew8Y1OBXT3pxFwEFPbkXL8657pR4Fl6XQMCkZS8nbu17flEEfnHoYepFSW K919TNw/EQn+ZuEFqT0DoRgBI4XrALQOgbPXJGzDhvfCD4SY7mZZiENVaKUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHQRe6Oajrsre+1p1/uv3YlqdFicwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHz9CX3K5pztKJik168qemYFdQF+CVVJrxN Hrxm7C+JcYLJuP3rVLYduvPGr8+6rDBiMBbR+0uNnE4tlHnDmVWCwKWDCmM/3hNm 1Lksm/bOvWbua7W13IhiByA8nQTCe6Hxy8sXPRPPMDpr17b50DPQOAZS+bOV6CJW ZjXP4MPdEMf/fwBnW2srjz+ek5P8vSqUDwri/6RxAGteoCPrl6VCIqOFy7L0G4DU XEZ4t9j4+M/8tjUv5Jz3ph0BnXJKGFGiNUpfvbAheSrEIxUpNJNJwB2R8mWDl6/H hCNJE41REd+7SiL6oMYfx03iPIC+ifioovW+q0VFRkdS5/5r3RI= -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:07 2025 by rpki-client