This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: R/bKQE/xs7qZj4swoaeX3LBlYdMJ28Lhzd2lAsBwuYA= Subject key identifier: 68:2F:E6:50:E9:07:8D:50:5D:E7:BD:E6:B9:43:8E:6A:1B:D7:B3:79 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 4B1A72D49AC01B5CB809530799F4A65AFC98A4A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: D8 Signing time: Tue 20 Jan 2026 01:42:30 +0000 Manifest this update: Tue 20 Jan 2026 01:37:30 +0000 Manifest next update: Fri 23 Jan 2026 04:12:30 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: I98r/YvoKJnqIbKebXKfBKywu1BzE/FQD60HTUreMMU=) 2: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: uhsybOZFmeTdq80liid2bBxhvsJF8Tu1vg8qOm4av6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Jan 2026 04:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1a:72:d4:9a:c0:1b:5c:b8:09:53:07:99:f4:a6:5a:fc:98:a4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Jan 20 01:37:30 2026 GMT Not After : Jan 23 04:12:30 2026 GMT Subject: CN=682FE650E9078D505DE7BDE6B9438E6A1BD7B379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d5:64:4c:3d:b0:58:ee:8b:1f:6e:72:ea:3d: d9:c1:fe:95:65:77:4a:95:f6:57:57:01:4e:9f:a5: 02:c3:64:94:53:98:f7:b2:84:72:c6:e7:7c:da:f0: 80:d6:49:fb:cf:fd:a9:1d:e8:90:bf:67:91:22:26: fd:ff:8b:86:04:d9:6b:80:2a:57:09:98:bd:65:bd: 1d:c7:17:5d:89:bc:41:dc:4e:07:6d:25:d8:3f:a0: ac:be:b5:bd:c7:cb:de:a5:a7:a7:8e:80:5a:f6:27: 40:5b:82:d2:77:e6:65:9f:ff:b1:c7:38:e0:0b:5a: 05:b5:da:e3:d5:8c:cf:4a:c0:0d:36:6c:ec:cd:aa: 2e:cf:67:cb:1d:a4:10:b1:4c:2b:7c:17:f7:06:80: 53:d5:60:7b:ed:e2:77:25:cc:77:54:d6:e9:fa:15: 2d:0b:63:74:f8:b2:ac:b9:f8:19:44:8b:28:bf:58: db:2e:fa:d1:03:b2:40:be:b4:57:3b:fa:f6:6a:27: e7:12:94:77:38:a0:f8:d5:0c:b1:cb:c3:01:3b:fc: 9b:4e:97:f7:f0:27:cb:d0:78:e6:49:14:cc:f8:f1: 2b:b9:3f:26:cb:00:92:81:f4:2e:f1:9a:1b:cc:3e: eb:7a:d0:42:1f:1d:59:35:c5:9e:df:e4:37:ed:42: b2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:E6:50:E9:07:8D:50:5D:E7:BD:E6:B9:43:8E:6A:1B:D7:B3:79 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:31:d5:a0:1a:9e:a4:93:c9:e0:85:aa:0d:7f:7e:ed:4e:52: e7:c9:8b:f4:51:48:60:f4:06:68:ce:f6:09:42:9a:20:ba:c0: 79:f5:35:ba:44:4d:61:ad:f9:ff:ab:80:be:29:c2:4f:df:09: 07:47:24:2d:53:2d:41:fe:75:f8:85:63:3d:4f:50:86:b9:6a: 62:6c:ca:fe:b4:5c:8d:89:b4:04:19:72:ce:79:ab:c5:63:5e: e2:70:98:c5:ed:03:bc:17:cd:da:b5:39:69:b4:dc:4d:0f:d0: 0b:db:d4:87:8c:fa:89:aa:70:19:31:41:5b:fb:30:30:ce:b5: 06:a2:52:80:95:82:9d:e1:f6:82:7a:e4:d5:5d:bc:2e:2c:09: 13:0a:90:2d:ff:f9:17:06:ad:d0:8b:71:e2:c4:11:fd:7a:5c: 8e:8a:cd:f7:de:78:02:48:f3:4c:d5:a2:05:09:f3:78:84:96: d2:29:4c:da:0a:e9:f6:e0:a6:12:64:50:84:a4:ef:46:60:38: 7e:f3:b1:f0:f4:31:af:a4:0a:f0:1f:7e:4d:cb:45:86:dd:7f: de:c3:ac:49:4d:0c:f4:53:49:5c:50:b5:00:71:c1:09:ec:19: 5e:1d:c8:98:e7:a4:91:c0:e6:78:20:e6:e1:40:4c:97:9d:95: b1:6c:52:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxpy1JrAG1y4CVMHmfSmWvyYpKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNjAxMjAwMTM3MzBaFw0yNjAxMjMwNDEyMzBaMDMxMTAvBgNV BAMTKDY4MkZFNjUwRTkwNzhENTA1REU3QkRFNkI5NDM4RTZBMUJEN0IzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1WRMPbBY7osfbnLqPdnB/pVl d0qV9ldXAU6fpQLDZJRTmPeyhHLG53za8IDWSfvP/akd6JC/Z5EiJv3/i4YE2WuA KlcJmL1lvR3HF12JvEHcTgdtJdg/oKy+tb3Hy96lp6eOgFr2J0BbgtJ35mWf/7HH OOALWgW12uPVjM9KwA02bOzNqi7PZ8sdpBCxTCt8F/cGgFPVYHvt4nclzHdU1un6 FS0LY3T4sqy5+BlEiyi/WNsu+tEDskC+tFc7+vZqJ+cSlHc4oPjVDLHLwwE7/JtO l/fwJ8vQeOZJFMz48Su5PybLAJKB9C7xmhvMPut60EIfHVk1xZ7f5DftQrLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaC/mUOkHjVBd573muUOOahvXs3kwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4x1aAanqSTyeCFqg1/fu1OUufJi/RRSGD0 BmjO9glCmiC6wHn1NbpETWGt+f+rgL4pwk/fCQdHJC1TLUH+dfiFYz1PUIa5amJs yv60XI2JtAQZcs55q8VjXuJwmMXtA7wXzdq1OWm03E0P0Avb1IeM+omqcBkxQVv7 MDDOtQaiUoCVgp3h9oJ65NVdvC4sCRMKkC3/+RcGrdCLceLEEf16XI6KzffeeAJI 80zVogUJ83iEltIpTNoK6fbgphJkUISk70ZgOH7zsfD0Ma+kCvAffk3LRYbdf97D rElNDPRTSVxQtQBxwQnsGV4dyJjnpJHA5ngg5uFATJedlbFsUs8= -----END CERTIFICATE-----Generated at Wed Jan 21 12:02:33 2026 by rpki-client