This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: 9DHBrbjiB1A+qeAj2JARVmH07oeFfCdPo6begOy5we4= Subject key identifier: 30:2D:E2:39:4B:1C:07:C6:A3:10:45:EC:91:D3:2E:93:3B:39:89:55 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 5F87A46D7D9A40914B4622D137B7567C234AC9A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: DB Signing time: Mon 01 Dec 2025 20:31:53 +0000 Manifest this update: Mon 01 Dec 2025 20:26:53 +0000 Manifest next update: Fri 05 Dec 2025 07:06:53 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: ZICuYLTYDa4cizDbnNU7xr2dG9JxgRDXmUruGMHJ5vs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:87:a4:6d:7d:9a:40:91:4b:46:22:d1:37:b7:56:7c:23:4a:c9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Dec 1 20:26:53 2025 GMT Not After : Dec 5 07:06:53 2025 GMT Subject: CN=302DE2394B1C07C6A31045EC91D32E933B398955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:b3:95:79:fe:f0:dc:c9:60:22:bd:72:4e: 83:42:62:36:22:b1:68:cc:3d:bd:56:72:ec:8a:91: a1:09:18:c7:39:19:e3:f9:ab:85:55:1e:1e:3e:d8: db:c4:d3:30:5f:cc:12:11:d0:81:53:2a:33:f1:fa: f7:e1:37:b1:31:fb:5c:27:6d:79:b5:50:7d:b9:99: 0d:8b:9b:68:b2:df:6a:14:9e:59:f7:63:7b:fa:06: 26:bb:bf:4f:c5:6d:a6:29:9e:82:10:59:3a:44:9a: e3:60:bf:f0:87:df:fd:35:a6:a4:c6:c5:84:a8:40: b7:92:2d:b5:71:a7:ea:cd:63:ef:d5:62:03:c3:20: ce:f0:65:df:2b:99:8f:d8:37:ed:59:d4:d6:6e:5b: 1d:a8:21:81:80:eb:75:33:c0:0b:56:12:ff:25:4e: e8:d6:4a:97:79:a7:9a:28:7f:90:83:30:f6:5c:53: ca:0b:a9:19:48:4e:8f:40:02:8d:fd:11:dd:9d:d5: 78:58:1b:6e:81:22:34:38:54:ab:59:d7:6f:54:c0: 80:a1:49:9b:45:64:38:21:41:a1:91:71:47:e6:85: 05:25:5b:2c:fa:fd:9a:36:5d:d3:da:d8:7a:f7:12: 5e:aa:09:f1:fa:0f:36:95:b4:9d:fa:91:b1:6d:2c: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2D:E2:39:4B:1C:07:C6:A3:10:45:EC:91:D3:2E:93:3B:39:89:55 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8f:2a:1b:89:82:e4:93:ca:19:df:db:63:99:ea:42:d0:2a: 1e:21:07:26:a1:a1:b8:cc:e9:49:e9:34:bf:a1:ba:f6:e5:93: 47:4e:bc:a4:78:0f:51:e1:f8:61:55:f9:96:0f:cf:a1:f6:d4: 18:f2:ab:e6:7b:91:4d:f5:eb:ed:88:96:46:fc:31:16:96:c6: a9:80:fe:d6:fe:7c:39:ef:5d:a9:08:b5:29:c6:ab:aa:86:f8: 56:7a:0f:dc:e5:4a:1f:a4:fb:c4:2e:c7:62:ed:48:db:16:01: e4:55:ce:14:56:bd:57:8b:bd:66:61:87:eb:57:34:1c:7d:4e: d7:06:53:38:e0:0b:85:07:69:51:02:94:ab:36:de:f1:07:f6: 2f:43:33:43:bb:36:55:96:9d:44:98:d5:a9:21:2d:ff:c0:cc: d1:e3:3a:7f:80:35:04:c9:18:77:b8:8e:c6:45:fe:3a:11:c4: a9:9a:67:c4:f9:50:64:1a:47:80:c6:60:c5:b8:5b:d2:35:18: 6d:c1:ff:a6:d3:98:9a:9e:1f:51:e5:32:94:e1:e4:c5:6b:7c: 68:6e:b6:12:fa:40:38:6a:7b:39:61:d3:3f:8e:d7:e0:89:a8: 90:6a:64:23:86:87:f6:03:38:89:e5:2e:2d:e5:55:f2:8d:d9: 3b:df:28:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4ekbX2aQJFLRiLRN7dWfCNKyagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTEyMDEyMDI2NTNaFw0yNTEyMDUwNzA2NTNaMDMxMTAvBgNV BAMTKDMwMkRFMjM5NEIxQzA3QzZBMzEwNDVFQzkxRDMyRTkzM0IzOTg5NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUw7OVef7w3MlgIr1yToNCYjYi sWjMPb1WcuyKkaEJGMc5GeP5q4VVHh4+2NvE0zBfzBIR0IFTKjPx+vfhN7Ex+1wn bXm1UH25mQ2Lm2iy32oUnln3Y3v6Bia7v0/FbaYpnoIQWTpEmuNgv/CH3/01pqTG xYSoQLeSLbVxp+rNY+/VYgPDIM7wZd8rmY/YN+1Z1NZuWx2oIYGA63UzwAtWEv8l TujWSpd5p5oof5CDMPZcU8oLqRlITo9AAo39Ed2d1XhYG26BIjQ4VKtZ129UwICh SZtFZDghQaGRcUfmhQUlWyz6/Zo2XdPa2Hr3El6qCfH6DzaVtJ36kbFtLN/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMC3iOUscB8ajEEXskdMukzs5iVUwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKPKhuJguSTyhnf22OZ6kLQKh4hByahobjM 6UnpNL+huvblk0dOvKR4D1Hh+GFV+ZYPz6H21Bjyq+Z7kU316+2Ilkb8MRaWxqmA /tb+fDnvXakItSnGq6qG+FZ6D9zlSh+k+8Qux2LtSNsWAeRVzhRWvVeLvWZhh+tX NBx9TtcGUzjgC4UHaVEClKs23vEH9i9DM0O7NlWWnUSY1akhLf/AzNHjOn+ANQTJ GHe4jsZF/joRxKmaZ8T5UGQaR4DGYMW4W9I1GG3B/6bTmJqeH1HlMpTh5MVrfGhu thL6QDhqezlh0z+O1+CJqJBqZCOGh/YDOInlLi3lVfKN2TvfKP0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:23 2025 by rpki-client