This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: EYLqkwjM1joHjFLPR2xpkVrupVcJYgJrqzXh/fLlPNE= Subject key identifier: DE:C9:30:83:07:B6:09:C5:9C:E9:FD:64:37:2B:02:AA:E2:99:D3:A9 Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 4D4656750B09DCE39C740E1600D96507588D63BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01C0 Signing time: Wed 03 Dec 2025 03:12:30 +0000 Manifest this update: Wed 03 Dec 2025 03:07:30 +0000 Manifest next update: Sat 06 Dec 2025 14:01:30 +0000 Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: ZhCBetiRM0oV1qkwFwKfVyjWnDYRVpaxO6Ref6QtN4w=) 2: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: a8Ifrn0fk5SYucxvcm+KluXaeNvUl/zt9/KxvmZc6kM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:46:56:75:0b:09:dc:e3:9c:74:0e:16:00:d9:65:07:58:8d:63:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Dec 3 03:07:30 2025 GMT Not After : Dec 6 14:01:30 2025 GMT Subject: CN=DEC9308307B609C59CE9FD64372B02AAE299D3A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:40:88:b3:4b:9b:a0:bf:a9:8e:aa:90:1b: f0:ae:ab:c1:96:b4:20:30:87:fa:5e:0e:34:33:2a: 65:df:6a:67:9b:31:31:72:a7:25:49:0c:53:09:b0: 3f:4a:5e:81:cc:4a:23:15:0c:ee:bb:69:47:91:82: 9c:fa:f7:b8:a3:c0:e9:ba:9b:a4:98:3c:a3:03:d1: c5:10:81:ff:5e:60:f5:74:68:5d:a2:0a:e1:df:32: 8b:36:11:a5:1f:a8:54:67:30:b2:ed:e5:59:14:cc: 7b:1f:25:28:52:69:27:2d:03:0e:d2:47:93:99:2f: 38:e6:02:b2:ed:88:a9:bb:ff:91:f2:77:63:c5:cb: e0:a9:75:78:a2:cd:fd:bd:59:86:0e:77:a0:26:02: f9:df:e6:b2:11:19:56:cc:5a:3c:1a:4b:15:4b:e7: e6:db:47:8a:9f:fa:bb:3f:27:0b:53:11:9a:3c:3a: fb:10:c7:5a:3a:26:07:c2:16:99:0f:27:fd:e4:b1: 30:db:b5:45:31:71:c9:ea:29:5d:df:27:04:8d:51: 33:e1:2f:b0:03:70:0b:70:6d:a6:09:07:b8:f0:04: ff:cd:17:82:c1:7d:07:f1:4d:db:05:c4:b5:b2:e2: 34:cd:2a:6d:d6:ec:10:52:28:0c:74:cb:f3:a8:3c: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C9:30:83:07:B6:09:C5:9C:E9:FD:64:37:2B:02:AA:E2:99:D3:A9 X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:84:e9:e0:f0:9b:a3:9f:68:02:d6:94:de:f5:53:5f:1b:bb: b1:b3:b3:3f:66:cc:1b:6b:2d:bc:e5:dd:69:e4:b7:64:41:d9: 40:88:81:96:aa:ab:8c:3e:7a:36:5d:5b:c4:bf:a5:39:45:a2: 84:e7:7f:7c:18:c9:43:13:fd:8a:d9:2f:6f:65:c2:9f:00:7a: 46:0e:4c:28:2c:bd:1e:d8:df:b2:77:06:b5:6c:a0:f8:07:b2: 56:b0:b5:02:67:d3:49:ae:1f:ee:0a:27:a2:57:cb:da:84:99: f0:2d:ff:1e:41:a1:f7:8a:dd:15:dd:f6:8c:48:c2:cb:98:6f: 32:3d:70:38:a3:df:b4:4e:21:bc:82:55:37:fa:e2:f7:63:e5: a7:d3:da:18:bd:47:b3:d4:07:7f:6e:2d:e0:60:07:5b:ca:9f: 57:0b:09:ca:cb:7e:2f:71:82:ff:b4:26:c9:2b:38:95:fb:74: 7b:3c:d1:5e:f1:fe:b5:01:a5:18:2d:cb:e9:e0:80:5f:b8:39: 73:79:ca:7b:fc:bd:13:64:9f:9a:0e:cc:58:62:00:42:da:ef: 2b:10:c6:e6:d3:2e:35:28:48:98:9a:12:05:e2:11:84:50:a4: 30:f3:ef:4a:bb:b7:3d:28:a1:81:bd:ea:bf:ce:7a:76:1f:68: a4:0d:b1:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUZWdQsJ3OOcdA4WANllB1iNY7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTEyMDMwMzA3MzBaFw0yNTEyMDYxNDAxMzBaMDMxMTAvBgNV BAMTKERFQzkzMDgzMDdCNjA5QzU5Q0U5RkQ2NDM3MkIwMkFBRTI5OUQzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvp0CIs0uboL+pjqqQG/Cuq8GW tCAwh/peDjQzKmXfamebMTFypyVJDFMJsD9KXoHMSiMVDO67aUeRgpz697ijwOm6 m6SYPKMD0cUQgf9eYPV0aF2iCuHfMos2EaUfqFRnMLLt5VkUzHsfJShSaSctAw7S R5OZLzjmArLtiKm7/5Hyd2PFy+CpdXiizf29WYYOd6AmAvnf5rIRGVbMWjwaSxVL 5+bbR4qf+rs/JwtTEZo8OvsQx1o6JgfCFpkPJ/3ksTDbtUUxccnqKV3fJwSNUTPh L7ADcAtwbaYJB7jwBP/NF4LBfQfxTdsFxLWy4jTNKm3W7BBSKAx0y/OoPCrVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3skwgwe2CcWc6f1kNysCquKZ06kwHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqE6eDwm6OfaALWlN71U18bu7Gzsz9mzBtr Lbzl3Wnkt2RB2UCIgZaqq4w+ejZdW8S/pTlFooTnf3wYyUMT/YrZL29lwp8AekYO TCgsvR7Y37J3BrVsoPgHslawtQJn00muH+4KJ6JXy9qEmfAt/x5BofeK3RXd9oxI wsuYbzI9cDij37ROIbyCVTf64vdj5afT2hi9R7PUB39uLeBgB1vKn1cLCcrLfi9x gv+0JskrOJX7dHs80V7x/rUBpRgty+nggF+4OXN5ynv8vRNkn5oOzFhiAELa7ysQ xubTLjUoSJiaEgXiEYRQpDDz70q7tz0ooYG96r/OenYfaKQNsSY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:49 2025 by rpki-client