This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: NuPmNiiQ757Tbhcm+vBBA+scjw+GYJteubgve4zxSOc= Subject key identifier: F0:88:91:31:22:44:30:73:B5:0E:4E:AE:4F:7F:9E:D0:9D:85:0E:F0 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 332278C8B20D11170AE79DB1F7B65BDD8217F3AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: C2 Signing time: Mon 01 Dec 2025 15:12:28 +0000 Manifest this update: Mon 01 Dec 2025 15:07:28 +0000 Manifest next update: Thu 04 Dec 2025 22:28:28 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: I98r/YvoKJnqIbKebXKfBKywu1BzE/FQD60HTUreMMU=) 2: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: B+aPOwyet7XXe5JDbipOFBXxrbQOtk0aUkbyNt5MJz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:22:78:c8:b2:0d:11:17:0a:e7:9d:b1:f7:b6:5b:dd:82:17:f3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Dec 1 15:07:28 2025 GMT Not After : Dec 4 22:28:28 2025 GMT Subject: CN=F088913122443073B50E4EAE4F7F9ED09D850EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:8f:64:d4:7f:40:2b:5d:6c:15:f9:4f:d0: ce:0e:19:c4:44:e3:db:0a:32:ed:b8:75:2e:ad:5e: 2b:a1:0b:ff:f1:e0:df:93:6c:cc:ce:e1:93:48:c4: ea:9b:3b:73:39:ad:a6:44:b0:be:c4:fb:ae:d4:2a: 10:dc:1f:23:80:c2:38:ff:1c:cb:81:ec:ea:96:ab: a8:87:06:d8:ca:23:bd:0b:b9:ea:a8:13:d7:76:dd: 5c:80:e6:23:53:b1:6c:25:1b:8b:da:e8:8a:6f:1a: c0:bd:f3:1e:cc:d6:08:3d:bd:b0:13:e5:8e:9c:3e: 6c:b7:a3:87:8a:1e:44:a6:ba:19:f7:42:0f:09:62: ce:a7:8c:72:9e:22:ce:ed:2a:ce:c1:81:9d:c1:8e: a6:5f:14:b5:da:ba:32:1e:29:ca:c2:1d:53:59:3a: f6:d3:a8:c5:da:86:5e:4c:5f:9e:1a:fa:fc:5c:ec: e0:1e:28:98:fd:9b:e8:1f:d6:cf:8d:02:4d:66:9b: 1b:ab:dc:88:b1:5d:76:a8:5c:fd:77:63:73:dd:d5: 6d:05:6c:1b:a6:fe:1d:cd:9d:d9:c4:c6:76:56:89: 5f:03:ac:08:9c:e1:19:b1:4f:82:b5:b8:c2:51:f6: bb:8d:fc:bd:7d:84:ab:64:bd:4b:d3:83:52:5c:bd: 90:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:88:91:31:22:44:30:73:B5:0E:4E:AE:4F:7F:9E:D0:9D:85:0E:F0 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:33:02:a5:54:63:d8:b3:50:cc:ca:4a:11:38:54:b6:c2:6c: cc:34:ff:c7:69:0d:d3:1b:9c:93:b6:ea:29:99:cf:d6:89:cb: 72:4c:09:17:dd:4e:85:d3:ba:3e:a1:81:6b:2e:03:86:56:66: 8d:ea:c7:e8:34:e5:80:bd:c0:17:b6:e8:14:1d:d6:cb:2f:6f: 28:e7:3e:6d:23:5b:5c:46:d7:ea:c1:ce:25:a6:47:04:b1:67: eb:f2:04:2e:9e:5f:35:0b:4d:81:b0:30:11:76:19:a0:71:94: 06:58:e3:fa:11:02:41:38:94:7f:5a:b2:a2:12:9c:af:87:d2: 59:2f:9c:1c:1f:04:01:07:70:c2:00:d6:53:5d:59:c2:94:c8: f3:24:2e:1c:01:3d:1f:ea:c9:4a:21:f8:e3:b2:4a:3b:d0:50: 0c:9f:47:74:fe:9a:a3:14:58:a1:63:64:af:ee:e2:ea:37:04: b0:ef:d4:ce:66:4d:51:9b:69:a0:8f:05:15:d6:5e:85:bf:9f: eb:db:53:8d:4f:7b:b3:98:2e:85:a2:c1:18:40:9c:ae:6a:5c: 61:b0:3b:c8:59:7d:16:6f:d6:fa:5c:24:f2:48:52:dc:31:d6: 89:04:15:d2:99:bc:43:7d:d5:10:8f:f4:35:95:a6:c6:10:3b: a2:ff:a7:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyJ4yLINERcK552x97Zb3YIX86owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNTEyMDExNTA3MjhaFw0yNTEyMDQyMjI4MjhaMDMxMTAvBgNV BAMTKEYwODg5MTMxMjI0NDMwNzNCNTBFNEVBRTRGN0Y5RUQwOUQ4NTBFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZY9k1H9AK11sFflP0M4OGcRE 49sKMu24dS6tXiuhC//x4N+TbMzO4ZNIxOqbO3M5raZEsL7E+67UKhDcHyOAwjj/ HMuB7OqWq6iHBtjKI70LueqoE9d23VyA5iNTsWwlG4va6IpvGsC98x7M1gg9vbAT 5Y6cPmy3o4eKHkSmuhn3Qg8JYs6njHKeIs7tKs7BgZ3BjqZfFLXaujIeKcrCHVNZ OvbTqMXahl5MX54a+vxc7OAeKJj9m+gf1s+NAk1mmxur3IixXXaoXP13Y3Pd1W0F bBum/h3NndnExnZWiV8DrAic4RmxT4K1uMJR9ruN/L19hKtkvUvTg1JcvZBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8IiRMSJEMHO1Dk6uT3+e0J2FDvAwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQzAqVUY9izUMzKShE4VLbCbMw0/8dpDdMb nJO26imZz9aJy3JMCRfdToXTuj6hgWsuA4ZWZo3qx+g05YC9wBe26BQd1ssvbyjn Pm0jW1xG1+rBziWmRwSxZ+vyBC6eXzULTYGwMBF2GaBxlAZY4/oRAkE4lH9asqIS nK+H0lkvnBwfBAEHcMIA1lNdWcKUyPMkLhwBPR/qyUoh+OOySjvQUAyfR3T+mqMU WKFjZK/u4uo3BLDv1M5mTVGbaaCPBRXWXoW/n+vbU41Pe7OYLoWiwRhAnK5qXGGw O8hZfRZv1vpcJPJIUtwx1okEFdKZvEN91RCP9DWVpsYQO6L/p7Q= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:03 2025 by rpki-client