This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: TT5BlDvHRBYt2lNAV+o8dDbav7RuWgUI9DFKTChXmcE= Subject key identifier: 43:2A:C0:E7:4C:45:9E:73:2E:14:54:D1:A2:F1:21:FE:72:EB:07:8D Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 32D14D1EA3AE63F145B3C59E6A898DFBE46ECA42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: F6 Signing time: Sat 31 Jan 2026 20:21:51 +0000 Manifest this update: Sat 31 Jan 2026 20:16:51 +0000 Manifest next update: Wed 04 Feb 2026 08:08:51 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: X92Tm8hPMRelKa7upvbl5JZHEvgfXdTmOi6gcB61vbg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 08:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d1:4d:1e:a3:ae:63:f1:45:b3:c5:9e:6a:89:8d:fb:e4:6e:ca:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Jan 31 20:16:51 2026 GMT Not After : Feb 4 08:08:51 2026 GMT Subject: CN=432AC0E74C459E732E1454D1A2F121FE72EB078D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:88:64:2b:8e:4b:b8:2e:d0:44:08:4b:d1: 2a:c2:84:0e:8d:59:09:86:71:40:b6:70:9f:38:5f: ac:39:dc:df:8b:40:10:c5:32:7e:a4:ca:e9:29:f5: e6:ab:4c:6e:97:db:6e:84:a8:6b:ed:f7:78:df:c8: 7c:6e:52:50:10:df:f9:34:7d:99:9e:c0:b3:83:f8: 22:27:9e:3b:f7:16:6d:f0:b5:36:54:36:1a:41:fd: 69:f4:6a:46:3c:fe:01:a7:e9:ec:3b:a4:90:8a:29: 0a:ea:96:3d:91:d0:46:eb:53:38:b2:b4:b7:67:b4: d5:00:45:e8:20:d2:c5:06:1b:ca:35:73:34:ba:54: 3d:6a:a8:c3:f2:6f:e3:1c:0b:75:9e:85:19:aa:7c: a5:53:16:d1:50:29:90:bf:d1:08:7c:00:3e:cb:e4: 46:20:eb:3b:04:b3:d7:26:42:0e:c5:fc:1b:ef:70: 18:e3:3e:7b:b2:a1:5c:91:6d:a0:26:9b:1a:0e:ae: 6d:ac:6a:1c:e7:1d:23:97:a9:85:f6:f1:4c:30:bc: a1:c4:1f:e3:28:19:f5:ef:54:61:36:a6:30:05:2f: 84:ca:98:c2:66:eb:6d:17:40:82:f5:b4:d7:e0:b9: e5:3e:28:2b:6a:da:1f:6f:f3:aa:db:a2:b1:8f:b9: 47:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2A:C0:E7:4C:45:9E:73:2E:14:54:D1:A2:F1:21:FE:72:EB:07:8D X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d8:4a:e7:44:20:9b:43:58:ab:92:fc:42:5c:23:4a:a8:76: 6a:92:18:84:13:2a:95:51:f2:c6:d0:57:e8:de:67:d4:19:7a: bf:91:30:f7:b6:a1:55:a8:aa:a1:82:06:19:94:58:68:e3:03: fc:84:af:9e:73:87:b5:f7:bc:7f:e4:a9:18:ee:e3:95:5d:fd: 0b:0f:a7:78:b0:93:3f:f2:46:df:f6:ce:68:f2:ce:83:51:a8: 3b:2c:cb:6f:c4:08:b5:84:34:c4:d6:b3:b1:79:95:58:67:e2: ce:47:75:61:d5:3e:42:dd:fd:1b:1a:e1:14:78:1d:f6:46:b8: 54:5a:68:4b:db:18:d5:de:5d:28:ba:9b:13:48:aa:23:d7:da: 2d:23:91:a9:2a:eb:07:ef:be:f0:90:f9:e3:35:f2:a3:81:b5: 9d:0c:bb:07:ba:a5:f9:ca:84:66:3c:82:95:85:75:fa:ac:7a: 4c:b9:cc:8e:c1:0a:67:87:fd:46:4e:8e:58:9f:2b:c7:4a:6f: af:ef:28:87:01:2d:c8:9c:13:ac:6e:e9:f5:61:b7:0b:dd:8c: d7:9b:fd:ae:2f:a8:28:cb:d4:51:9a:e0:e2:99:54:18:bc:49: 69:81:8c:48:03:17:42:43:21:b4:ea:d9:b2:e5:4b:6f:b2:27: 7f:61:59:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMtFNHqOuY/FFs8WeaomN++RuykIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNjAxMzEyMDE2NTFaFw0yNjAyMDQwODA4NTFaMDMxMTAvBgNV BAMTKDQzMkFDMEU3NEM0NTlFNzMyRTE0NTREMUEyRjEyMUZFNzJFQjA3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXV4hkK45LuC7QRAhL0SrChA6N WQmGcUC2cJ84X6w53N+LQBDFMn6kyukp9earTG6X226EqGvt93jfyHxuUlAQ3/k0 fZmewLOD+CInnjv3Fm3wtTZUNhpB/Wn0akY8/gGn6ew7pJCKKQrqlj2R0EbrUziy tLdntNUARegg0sUGG8o1czS6VD1qqMPyb+McC3WehRmqfKVTFtFQKZC/0Qh8AD7L 5EYg6zsEs9cmQg7F/BvvcBjjPnuyoVyRbaAmmxoOrm2sahznHSOXqYX28UwwvKHE H+MoGfXvVGE2pjAFL4TKmMJm620XQIL1tNfgueU+KCtq2h9v86rborGPuUePAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyrA50xFnnMuFFTRovEh/nLrB40wHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzYSudEIJtDWKuS/EJcI0qodmqSGIQTKpVR 8sbQV+jeZ9QZer+RMPe2oVWoqqGCBhmUWGjjA/yEr55zh7X3vH/kqRju45Vd/QsP p3iwkz/yRt/2zmjyzoNRqDssy2/ECLWENMTWs7F5lVhn4s5HdWHVPkLd/Rsa4RR4 HfZGuFRaaEvbGNXeXSi6mxNIqiPX2i0jkakq6wfvvvCQ+eM18qOBtZ0Muwe6pfnK hGY8gpWFdfqseky5zI7BCmeH/UZOjlifK8dKb6/vKIcBLcicE6xu6fVhtwvdjNeb /a4vqCjL1FGa4OKZVBi8SWmBjEgDF0JDIbTq2bLlS2+yJ39hWYo= -----END CERTIFICATE-----Generated at Mon Feb 2 09:44:03 2026 by rpki-client