This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: EYDEcdtIKf7VLp8KYxAaaAcZmykQ2xbtQ3cvusGRJBw= Subject key identifier: 69:BC:CF:1C:AC:89:17:D4:B6:95:E8:06:8B:EF:6D:5E:5A:1C:DD:89 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 20EA5474731E7B5230B300928B449D2B6ADB2E38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02E1 Signing time: Mon 01 Dec 2025 09:51:01 +0000 Manifest this update: Mon 01 Dec 2025 09:46:01 +0000 Manifest next update: Thu 04 Dec 2025 15:48:01 +0000 Files and hashes: 1: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 2: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 3: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) 4: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) 5: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 6: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: au4NrmOwdCteMhpHy6VIPIaEGesfVn4Ccw/mlwytRN4=) 7: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 8: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ea:54:74:73:1e:7b:52:30:b3:00:92:8b:44:9d:2b:6a:db:2e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Dec 1 09:46:01 2025 GMT Not After : Dec 4 15:48:01 2025 GMT Subject: CN=69BCCF1CAC8917D4B695E8068BEF6D5E5A1CDD89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:68:fc:59:8f:6d:df:2c:3e:26:60:c8:37: f1:3b:c5:06:73:7c:ca:2c:f5:50:a2:91:fb:51:2b: 86:5d:7c:be:60:9c:c2:1c:e0:93:ac:af:80:b4:1d: bd:f0:9a:47:0e:66:95:b0:89:b5:3d:a4:43:5b:22: 4c:51:5b:cb:ac:7e:34:e8:93:46:95:b8:fc:e5:aa: a5:26:fa:0a:e2:8b:bf:8e:47:1c:ae:b6:82:b0:d5: e1:d2:92:ab:1c:1f:17:ec:6a:4f:0e:ea:c6:36:bf: 21:ce:14:47:0e:53:a5:c5:f5:d0:8d:8f:81:33:d6: ad:5c:09:04:7d:07:23:02:ab:7d:d5:21:c0:8d:83: 58:d6:44:f5:a8:a2:24:23:a4:54:91:2e:7a:3a:83: 26:15:7a:a3:2d:c8:13:79:e8:f0:7f:78:88:f8:5e: 8b:e9:98:d4:53:7a:c6:de:87:f0:e9:85:5a:2e:81: 87:84:ef:73:33:3b:55:7e:46:c5:ec:34:18:e0:8b: e4:8d:da:14:95:1c:13:b4:cb:72:4a:9b:50:b0:00: a0:c7:af:48:8e:3a:42:ba:99:3d:5c:86:7d:37:ef: 00:99:7f:a9:82:fc:45:da:12:83:a5:36:b2:b2:b2: e4:cb:66:87:67:aa:f7:45:6a:d1:b2:5e:17:fd:fc: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BC:CF:1C:AC:89:17:D4:B6:95:E8:06:8B:EF:6D:5E:5A:1C:DD:89 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:08:e6:8a:d5:c9:0e:ea:f1:0d:aa:e5:8f:c4:8d:bb:4b:6e: 7d:26:7f:ef:47:27:70:bf:c3:76:52:7c:e3:ad:ee:af:c5:da: 07:cb:28:af:6b:7b:f6:4d:70:bd:da:ea:05:e9:4f:b6:08:f9: 60:6a:0c:b1:c8:2e:f5:32:fe:13:f0:c3:4c:24:9d:6b:04:c5: a1:ae:e7:97:bc:9e:99:c2:6c:fd:c5:ff:ec:20:98:1c:ac:dc: f1:91:2a:ee:7d:b3:8d:07:fc:85:f1:fa:18:e4:3c:ea:18:99: 44:7c:0f:67:56:92:55:00:21:34:5b:0c:c0:bb:e5:45:ee:cd: c4:4c:75:2b:44:7d:46:a6:d9:91:e2:f8:82:51:c3:cf:9a:92: da:b8:4f:58:db:49:68:72:c8:73:f3:db:42:a9:2c:9a:b1:f8: b4:6e:3c:1e:65:f2:86:b7:c8:ce:6a:db:31:0a:81:75:d5:91: 53:fc:b0:02:bc:32:d3:1a:a0:57:46:1f:ac:57:61:60:d6:b4: a4:65:76:1e:05:73:04:f1:40:12:bb:9b:68:0a:b2:f0:5c:fe: 32:06:23:a5:84:f9:41:f4:0d:c0:a9:fb:8f:30:ba:ee:4a:2a: 49:c7:e7:52:ff:7c:ad:47:c8:b8:e3:24:68:2e:76:89:4b:fc: e3:1a:5e:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOpUdHMee1IwswCSi0SdK2rbLjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTEyMDEwOTQ2MDFaFw0yNTEyMDQxNTQ4MDFaMDMxMTAvBgNV BAMTKDY5QkNDRjFDQUM4OTE3RDRCNjk1RTgwNjhCRUY2RDVFNUExQ0REODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDezWj8WY9t3yw+JmDIN/E7xQZz fMos9VCikftRK4ZdfL5gnMIc4JOsr4C0Hb3wmkcOZpWwibU9pENbIkxRW8usfjTo k0aVuPzlqqUm+grii7+ORxyutoKw1eHSkqscHxfsak8O6sY2vyHOFEcOU6XF9dCN j4Ez1q1cCQR9ByMCq33VIcCNg1jWRPWooiQjpFSRLno6gyYVeqMtyBN56PB/eIj4 XovpmNRTesbeh/DphVougYeE73MzO1V+RsXsNBjgi+SN2hSVHBO0y3JKm1CwAKDH r0iOOkK6mT1chn037wCZf6mC/EXaEoOlNrKysuTLZodnqvdFatGyXhf9/PPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUabzPHKyJF9S2legGi+9tXloc3YkwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMII5orVyQ7q8Q2q5Y/EjbtLbn0mf+9HJ3C/ w3ZSfOOt7q/F2gfLKK9re/ZNcL3a6gXpT7YI+WBqDLHILvUy/hPww0wknWsExaGu 55e8npnCbP3F/+wgmBys3PGRKu59s40H/IXx+hjkPOoYmUR8D2dWklUAITRbDMC7 5UXuzcRMdStEfUam2ZHi+IJRw8+aktq4T1jbSWhyyHPz20KpLJqx+LRuPB5l8oa3 yM5q2zEKgXXVkVP8sAK8MtMaoFdGH6xXYWDWtKRldh4FcwTxQBK7m2gKsvBc/jIG I6WE+UH0DcCp+48wuu5KKknH51L/fK1HyLjjJGgudolL/OMaXuE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:46 2025 by rpki-client