This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: bJUt/WGP+hM6z1wfufR2XyBNDCHRNNDCE4LzcqPX2DY= Subject key identifier: A7:55:CE:04:E8:70:E0:0A:E9:6A:44:99:ED:9A:F0:EE:82:21:6E:4C Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 78819ECE055844A38413AF433D7503F48091E943 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: E4 Signing time: Mon 02 Feb 2026 04:50:53 +0000 Manifest this update: Mon 02 Feb 2026 04:45:53 +0000 Manifest next update: Thu 05 Feb 2026 13:53:53 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: +Mb50NYpIWQf/dMPN71b0BXQu0unFW8GmH/yXzhouMY=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:81:9e:ce:05:58:44:a3:84:13:af:43:3d:75:03:f4:80:91:e9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Feb 2 04:45:53 2026 GMT Not After : Feb 5 13:53:53 2026 GMT Subject: CN=A755CE04E870E00AE96A4499ED9AF0EE82216E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:9d:0f:de:62:20:4e:5c:c8:33:7d:8e:ce: b9:a4:a3:77:b4:ce:d6:5c:b8:2d:39:d3:5e:5c:44: 0f:cb:66:f6:29:50:be:3d:8f:7f:cf:20:a4:f4:de: ba:6b:7e:fc:c0:5e:a5:0a:bf:f2:25:1c:97:f6:5f: 22:b4:8a:a2:87:14:73:04:41:a7:7c:b8:71:cf:ff: 18:f2:af:b5:e3:ab:0e:bc:2d:ba:2d:3f:f0:79:69: 38:73:bd:04:7a:e3:2a:7d:a3:88:2c:aa:42:da:09: ee:81:39:11:e0:51:aa:39:b5:a6:44:d2:31:f8:5d: 22:77:77:17:ee:5d:0d:ea:d9:5a:ed:29:e5:10:9d: 82:0c:da:42:65:26:54:fb:76:3b:bd:94:c2:fd:b0: 77:68:65:d1:d6:9b:2a:16:91:c5:58:90:34:e1:5d: 93:12:d0:b7:7f:b7:0f:a0:4f:92:36:b3:db:80:8e: 41:cf:40:27:1e:66:14:a5:ea:6e:89:1b:84:5d:26: 71:41:c3:1c:19:90:8a:73:b3:a6:d3:16:75:9e:80: 79:1a:a3:0b:78:ba:8f:82:a0:4d:39:90:6c:11:b3: c3:9d:13:0d:d4:32:16:32:8b:47:e4:4a:7a:19:d1: f0:d1:b6:86:21:a6:7f:55:d0:35:26:40:be:2d:a9: ab:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:55:CE:04:E8:70:E0:0A:E9:6A:44:99:ED:9A:F0:EE:82:21:6E:4C X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:ca:32:da:a4:eb:a4:32:12:a7:d5:b3:4c:70:ff:4f:c0: da:50:78:ba:13:a9:bb:71:f4:03:97:a9:16:25:91:03:d8:bb: 33:52:bf:62:aa:66:ac:79:23:6e:71:b8:a1:db:75:3f:0a:5f: f1:e9:e7:b5:1a:3b:b0:b3:dc:e6:7f:f7:47:68:2c:f6:cc:28: 7f:53:fd:93:b3:8a:38:b0:f0:1b:db:d6:f3:c7:ff:92:39:bb: c5:a7:e5:be:25:1a:da:d5:f8:11:0f:d3:ff:cf:90:6e:51:8f: de:eb:fd:b0:ba:cd:80:4d:ec:12:8b:05:2e:cb:c4:87:ed:b6: 75:12:80:ba:9c:bb:f8:e2:c9:31:f9:94:84:77:26:50:10:03: 1b:c8:e8:68:6d:f4:cd:ab:76:f6:cf:e0:f1:66:7a:f3:96:13: 86:aa:97:e0:76:e9:12:02:f4:50:f3:dd:d5:ed:bc:90:f2:e9: 26:e1:c0:00:10:f6:d8:a6:99:a8:4a:c3:cb:b6:fa:5c:34:0b: f1:1d:11:8b:98:dd:26:bf:af:52:a1:36:06:b9:88:a8:3b:ec: 10:c2:dd:74:42:8b:b6:e3:a5:29:9a:c0:42:16:fa:f9:62:c5: 51:87:4e:54:05:a9:3c:89:7f:b1:21:3a:a1:68:c8:bf:08:7c: fa:6b:4c:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeIGezgVYRKOEE69DPXUD9ICR6UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjAyMDIwNDQ1NTNaFw0yNjAyMDUxMzUzNTNaMDMxMTAvBgNV BAMTKEE3NTVDRTA0RTg3MEUwMEFFOTZBNDQ5OUVEOUFGMEVFODIyMTZFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCiJ0P3mIgTlzIM32Ozrmko3e0 ztZcuC05015cRA/LZvYpUL49j3/PIKT03rprfvzAXqUKv/IlHJf2XyK0iqKHFHME Qad8uHHP/xjyr7Xjqw68LbotP/B5aThzvQR64yp9o4gsqkLaCe6BORHgUao5taZE 0jH4XSJ3dxfuXQ3q2VrtKeUQnYIM2kJlJlT7dju9lML9sHdoZdHWmyoWkcVYkDTh XZMS0Ld/tw+gT5I2s9uAjkHPQCceZhSl6m6JG4RdJnFBwxwZkIpzs6bTFnWegHka owt4uo+CoE05kGwRs8OdEw3UMhYyi0fkSnoZ0fDRtoYhpn9V0DUmQL4tqau3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp1XOBOhw4ArpakSZ7Zrw7oIhbkwwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqVyjLapOukMhKn1bNMcP9PwNpQeLoTqbtx 9AOXqRYlkQPYuzNSv2KqZqx5I25xuKHbdT8KX/Hp57UaO7Cz3OZ/90doLPbMKH9T /ZOzijiw8Bvb1vPH/5I5u8Wn5b4lGtrV+BEP0//PkG5Rj97r/bC6zYBN7BKLBS7L xIfttnUSgLqcu/jiyTH5lIR3JlAQAxvI6Ght9M2rdvbP4PFmevOWE4aql+B26RIC 9FDz3dXtvJDy6SbhwAAQ9timmahKw8u2+lw0C/EdEYuY3Sa/r1KhNga5iKg77BDC 3XRCi7bjpSmawEIW+vlixVGHTlQFqTyJf7EhOqFoyL8IfPprTLA= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:05 2026 by rpki-client