This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: 4Ji2U2wCj7q/7tfz4InLvb2XfKuRyZ8cA1RIOzrV2n0= Subject key identifier: 7A:E9:E1:94:72:04:21:8C:82:FF:C0:9C:24:B9:2A:D2:DA:3A:3B:C7 Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 060473914B93ED7EC2A2DC4D67ACCA069E8C46DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 0255 Signing time: Sat 31 Jan 2026 19:41:14 +0000 Manifest this update: Sat 31 Jan 2026 19:36:14 +0000 Manifest next update: Tue 03 Feb 2026 20:11:14 +0000 Files and hashes: 1: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) 2: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 4: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: 2wA8Wf44RQ58AUUs3b6z/YMsayoHo/TVuuQ8/ZTAl5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 20:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:04:73:91:4b:93:ed:7e:c2:a2:dc:4d:67:ac:ca:06:9e:8c:46:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Jan 31 19:36:14 2026 GMT Not After : Feb 3 20:11:14 2026 GMT Subject: CN=7AE9E1947204218C82FFC09C24B92AD2DA3A3BC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:c0:bb:b9:06:48:39:05:7c:2d:cc:eb:c8: f7:24:89:4b:d0:4f:a9:1e:35:aa:2e:97:5b:de:5e: 5d:20:2c:ed:08:f4:a2:0a:6c:a5:3e:cb:12:ed:90: 1a:ab:31:a2:fb:44:d5:3a:33:a0:a3:cd:c4:ca:01: b8:a7:a3:25:db:62:60:29:10:89:a5:2c:f9:b6:99: 48:37:ad:7b:02:95:66:3c:7d:34:64:ea:f2:23:75: f2:2e:0f:ae:d5:32:5f:70:ac:aa:56:08:a6:bb:41: 07:30:05:b0:ba:36:3b:5f:d2:a9:50:35:8e:21:c4: 17:33:79:4b:63:49:9d:24:15:7c:7e:bd:56:50:22: 26:7b:bf:33:b1:cb:4a:de:e1:47:82:bb:20:df:a0: f5:41:fb:59:90:d4:44:82:36:4e:bd:fa:d2:52:de: 87:74:bf:fb:0f:c0:86:49:1f:ca:5f:0f:9b:9b:c6: d0:fe:91:dd:f9:ee:cf:5a:c1:b8:ea:cd:7f:9b:2e: 99:84:71:1f:aa:90:82:87:f5:98:5e:86:18:31:b8: a7:a8:33:00:04:5b:af:16:d4:d7:29:1e:62:38:d3: 01:09:ed:c1:46:f6:e3:fc:88:4d:7e:df:98:16:e4: 2d:47:55:80:59:a9:18:76:74:1b:ee:04:84:8b:48: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E9:E1:94:72:04:21:8C:82:FF:C0:9C:24:B9:2A:D2:DA:3A:3B:C7 X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c4:c1:30:29:d8:08:e1:2c:40:08:e5:9c:77:15:5c:83:99: 51:84:d5:14:89:25:7c:2f:84:2c:a6:63:82:f4:f8:cc:11:c6: 1a:aa:d9:95:c2:ca:55:a3:85:5f:ef:64:14:15:ba:22:c9:dc: de:32:ea:16:36:1f:4d:56:f9:06:a9:a3:dd:60:ef:36:a6:d5: 0c:a4:2d:4b:1d:72:53:d3:f0:79:be:eb:02:ae:c9:bb:48:cf: 07:85:c1:e0:9c:96:c5:5c:e4:56:c6:f4:fe:26:73:7b:62:6c: 41:eb:c4:80:a6:56:e7:ce:7f:3e:79:03:14:9c:77:4c:1b:11: a5:3b:50:9d:58:32:bf:80:e8:f4:67:db:37:92:cb:b5:35:76: 20:a4:80:37:00:dd:ac:90:db:84:95:4f:41:37:27:f6:92:63: 1a:9a:77:ea:d2:61:ff:70:0b:5d:1f:7f:36:f0:af:7c:0e:c9: 8d:6b:4f:45:ec:de:cb:60:da:69:73:a2:db:28:6d:ef:c5:4f: 00:69:5d:ef:57:76:62:69:c5:05:aa:7b:1a:09:a3:9b:9a:c7: 63:16:2f:bd:89:4e:c8:67:b5:77:d1:9d:2b:5c:c6:1a:65:62: c1:01:9c:20:81:e7:b1:6f:e1:5e:77:bf:f3:21:e6:3e:86:1b: 80:86:d8:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgRzkUuT7X7CotxNZ6zKBp6MRt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNjAxMzExOTM2MTRaFw0yNjAyMDMyMDExMTRaMDMxMTAvBgNV BAMTKDdBRTlFMTk0NzIwNDIxOEM4MkZGQzA5QzI0QjkyQUQyREEzQTNCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVMC7uQZIOQV8LczryPckiUvQ T6keNaoul1veXl0gLO0I9KIKbKU+yxLtkBqrMaL7RNU6M6CjzcTKAbinoyXbYmAp EImlLPm2mUg3rXsClWY8fTRk6vIjdfIuD67VMl9wrKpWCKa7QQcwBbC6Njtf0qlQ NY4hxBczeUtjSZ0kFXx+vVZQIiZ7vzOxy0re4UeCuyDfoPVB+1mQ1ESCNk69+tJS 3od0v/sPwIZJH8pfD5ubxtD+kd357s9awbjqzX+bLpmEcR+qkIKH9ZhehhgxuKeo MwAEW68W1NcpHmI40wEJ7cFG9uP8iE1+35gW5C1HVYBZqRh2dBvuBISLSNw5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeunhlHIEIYyC/8CcJLkq0to6O8cwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXEwTAp2AjhLEAI5Zx3FVyDmVGE1RSJJXwv hCymY4L0+MwRxhqq2ZXCylWjhV/vZBQVuiLJ3N4y6hY2H01W+Qapo91g7zam1Qyk LUsdclPT8Hm+6wKuybtIzweFweCclsVc5FbG9P4mc3tibEHrxICmVufOfz55AxSc d0wbEaU7UJ1YMr+A6PRn2zeSy7U1diCkgDcA3ayQ24SVT0E3J/aSYxqad+rSYf9w C10ffzbwr3wOyY1rT0Xs3stg2mlzotsobe/FTwBpXe9XdmJpxQWqexoJo5uax2MW L72JTshntXfRnStcxhplYsEBnCCB57Fv4V53v/Mh5j6GG4CG2PE= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:43 2026 by rpki-client