This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: SfK/xQ1HBYOaD/rWVqZ7XXs0uenzstwzzO0ch8CqT4Y= Subject key identifier: D5:4A:18:AB:6F:14:27:93:7B:B7:77:19:45:B8:E1:E3:DD:76:45:B5 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 4A4CE58E23545D3401965F30FCB6900324C77C7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02FD Signing time: Sun 01 Feb 2026 20:11:03 +0000 Manifest this update: Sun 01 Feb 2026 20:06:03 +0000 Manifest next update: Thu 05 Feb 2026 03:30:03 +0000 Files and hashes: 1: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 3: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 4: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 5: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) 6: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: wPNASxDhdJkSdOBQtRjU000QYS3kmAX6flR8gLouulM=) 7: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 8: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 03:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4c:e5:8e:23:54:5d:34:01:96:5f:30:fc:b6:90:03:24:c7:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Feb 1 20:06:03 2026 GMT Not After : Feb 5 03:30:03 2026 GMT Subject: CN=D54A18AB6F1427937BB7771945B8E1E3DD7645B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4d:f5:c5:f7:e7:7c:74:89:45:c3:b6:c6:76: 02:44:cc:2e:a7:01:d0:ac:8d:fb:93:d1:c6:55:ef: 23:f8:46:99:fd:cb:30:63:9d:3a:27:1a:17:5b:a7: 22:fa:ac:ac:f2:e8:50:0d:42:c3:0a:a8:b7:8d:12: fa:cb:87:d6:36:ca:02:42:4c:3f:57:51:41:18:d8: 17:a4:de:ac:c5:18:4e:6e:85:75:be:44:61:6e:17: ce:61:35:84:38:92:be:4c:1e:f9:0c:b4:4a:66:58: 62:9a:7b:88:ec:a1:de:d8:0b:9c:fa:72:67:66:15: 9a:7c:da:06:c1:6e:04:49:8c:49:9b:3e:30:5a:f1: ba:ba:48:a8:de:31:aa:3a:6b:08:c3:7d:21:d9:1b: 8a:af:be:88:da:b6:ae:7d:ab:17:c3:2c:b0:dc:20: ee:7c:72:51:4b:a2:ab:f9:1f:a5:b2:61:f7:33:27: 80:a7:4a:d8:13:03:e5:ba:bc:b9:59:bb:0b:c1:12: a6:87:61:7b:1f:f7:69:08:b1:3a:4b:01:c5:46:15: ed:09:db:18:6f:56:e9:5a:32:94:23:7e:50:84:df: f8:33:6e:18:e6:07:7e:7e:3d:f1:8c:80:de:52:e5: 53:ab:4f:d8:ad:fd:c4:c2:9f:07:48:7c:e8:cd:2d: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4A:18:AB:6F:14:27:93:7B:B7:77:19:45:B8:E1:E3:DD:76:45:B5 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d5:8e:21:fb:06:86:fa:37:11:6c:1b:78:3f:cc:ff:ce:b2: 09:80:c5:2e:89:d2:8a:3a:72:b9:3b:d9:62:72:8c:f3:33:cb: 34:69:22:52:23:2c:45:6d:2f:3e:75:6b:6b:f0:54:01:34:b4: ca:54:22:51:5e:40:dd:0e:b4:d7:d8:7c:fb:43:ed:4a:c7:df: 58:11:14:98:9e:88:60:57:48:5d:30:8e:19:57:e3:ab:4f:6a: 45:44:6c:e5:6c:c5:5f:ac:24:5c:99:2e:ae:55:b6:ed:de:f2: 9f:b7:39:3a:b4:55:ee:e8:bb:2d:91:09:e0:be:a7:24:4e:01: 33:d5:5b:50:4f:0f:6f:8b:d5:f3:af:0a:c7:fc:5d:74:f0:5e: 4a:d8:f0:bc:a6:76:25:3a:eb:d4:3e:53:9f:9f:83:65:d5:8b: ca:72:2f:93:54:9a:b0:37:4d:60:33:cf:ae:6c:9d:41:e4:47: 41:03:4a:2a:46:8e:b3:b9:2c:12:48:11:df:da:d8:4c:71:26: db:50:e9:e1:fd:45:af:c0:ad:1e:31:bc:05:f6:f3:b4:bf:2e: 33:7d:ca:ee:9e:e6:92:b3:f7:47:ff:20:7a:7a:4e:89:1f:6b: a2:dd:3c:50:48:1e:52:6d:ac:60:cc:81:bf:56:b2:d9:5d:06: f8:2b:4e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSkzljiNUXTQBll8w/LaQAyTHfHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNjAyMDEyMDA2MDNaFw0yNjAyMDUwMzMwMDNaMDMxMTAvBgNV BAMTKEQ1NEExOEFCNkYxNDI3OTM3QkI3NzcxOTQ1QjhFMUUzREQ3NjQ1QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoTfXF9+d8dIlFw7bGdgJEzC6n AdCsjfuT0cZV7yP4Rpn9yzBjnTonGhdbpyL6rKzy6FANQsMKqLeNEvrLh9Y2ygJC TD9XUUEY2Bek3qzFGE5uhXW+RGFuF85hNYQ4kr5MHvkMtEpmWGKae4jsod7YC5z6 cmdmFZp82gbBbgRJjEmbPjBa8bq6SKjeMao6awjDfSHZG4qvvojatq59qxfDLLDc IO58clFLoqv5H6WyYfczJ4CnStgTA+W6vLlZuwvBEqaHYXsf92kIsTpLAcVGFe0J 2xhvVulaMpQjflCE3/gzbhjmB35+PfGMgN5S5VOrT9it/cTCnwdIfOjNLXg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UoYq28UJ5N7t3cZRbjh4912RbUwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDVjiH7Bob6NxFsG3g/zP/OsgmAxS6J0oo6 crk72WJyjPMzyzRpIlIjLEVtLz51a2vwVAE0tMpUIlFeQN0OtNfYfPtD7UrH31gR FJieiGBXSF0wjhlX46tPakVEbOVsxV+sJFyZLq5Vtu3e8p+3OTq0Ve7ouy2RCeC+ pyROATPVW1BPD2+L1fOvCsf8XXTwXkrY8LymdiU669Q+U5+fg2XVi8pyL5NUmrA3 TWAzz65snUHkR0EDSipGjrO5LBJIEd/a2ExxJttQ6eH9Ra/ArR4xvAX287S/LjN9 yu6e5pKz90f/IHp6Tokfa6LdPFBIHlJtrGDMgb9WstldBvgrTrk= -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:14 2026 by rpki-client