This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: uI3DksJJvy8WFDtsEHpowe1bfjWAlG3j3siyuRxzF0Y= Subject key identifier: 1D:C3:30:83:1D:E2:6F:36:2A:8A:14:C9:CC:D5:43:C0:C1:6E:3D:AE Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 0D1BA9CA9F84B7A285968A5B58362604BB67BF87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 023A Signing time: Tue 02 Dec 2025 23:51:11 +0000 Manifest this update: Tue 02 Dec 2025 23:46:11 +0000 Manifest next update: Sat 06 Dec 2025 04:48:11 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 2: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: xVw3+/JqV7hxoQOm39O9NvGVgfvJ/Cy2jI8kRirtp2g=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:1b:a9:ca:9f:84:b7:a2:85:96:8a:5b:58:36:26:04:bb:67:bf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Dec 2 23:46:11 2025 GMT Not After : Dec 6 04:48:11 2025 GMT Subject: CN=1DC330831DE26F362A8A14C9CCD543C0C16E3DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d8:d8:aa:e7:3e:9a:fa:30:79:f2:85:d8:27: 22:cc:31:bf:bf:ae:5e:52:02:f7:86:8d:2d:fc:79: ba:77:d0:3a:60:0b:89:4b:02:25:20:ae:61:78:9e: d9:7e:51:6c:74:3d:40:96:5b:8e:8c:69:48:d9:18: 15:a3:25:fe:3b:bc:65:ce:92:4c:c6:c2:6c:58:13: 2b:8a:0a:9c:5b:1d:0f:11:6a:24:4a:9c:0a:48:84: e3:27:43:f5:15:f2:b9:da:0a:23:dd:a2:6e:51:17: 1d:70:2c:9a:2e:f1:0f:7c:bf:a6:11:b2:09:3e:a0: eb:8b:f6:21:f9:c8:fb:44:6e:5f:89:43:88:27:c2: 6d:19:55:9b:c1:0f:1f:f1:52:59:29:54:52:3a:67: d4:5f:78:0b:0d:c6:f3:88:d1:cf:68:d8:20:e2:7f: 30:ef:6f:a4:b6:36:b9:d7:25:39:fb:ce:b9:e1:52: 3e:ce:47:a2:5e:b9:bc:83:94:0e:df:18:03:69:39: 73:d9:a4:4a:5b:e5:cc:10:1f:7b:93:75:22:93:ce: 0c:e8:39:55:bd:04:ba:07:cb:b3:cf:ca:b1:37:cb: 33:1e:7d:01:9e:e9:7d:03:fc:db:fd:57:82:23:e2: a4:a5:6d:9c:36:ce:d7:4d:e3:17:05:9d:b5:4b:70: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C3:30:83:1D:E2:6F:36:2A:8A:14:C9:CC:D5:43:C0:C1:6E:3D:AE X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f9:1e:b3:13:80:ab:05:bc:9f:79:f1:bd:91:2d:23:98:fd: 89:0c:25:70:77:4a:bf:30:4c:86:e6:58:67:a2:36:e5:1f:ba: f1:0b:d7:3f:b2:6a:a1:b7:60:0e:0a:2a:c7:b9:1c:93:88:70: c4:05:f4:02:15:64:29:2b:d5:7d:cf:1f:64:18:98:5d:60:d2: 75:6c:43:7d:da:00:5d:a5:4a:cc:fb:dd:be:a7:76:02:70:3b: f7:8e:5e:f4:78:ac:a6:fc:e7:41:4d:3f:40:f6:b3:40:1b:eb: ca:ef:99:52:b7:cc:e7:c0:5e:c3:49:69:90:73:99:ce:94:9b: 9c:e5:cd:12:eb:92:9c:1e:33:9d:a4:1f:f2:ef:eb:e8:05:27: f3:e5:0e:af:31:a4:5f:c6:34:e4:9c:c0:99:2c:fd:b7:42:03: 42:08:5b:a8:8b:ed:05:10:80:31:78:8c:8b:e2:f5:54:69:d6: 5e:3f:27:50:59:64:a6:37:02:56:fc:a2:6e:c2:f5:48:83:ae: b0:67:98:16:84:f5:64:ca:a0:99:2e:a4:28:0a:23:cf:e4:dc: 80:e4:5f:57:fd:ab:17:f8:bb:01:11:de:19:46:e1:37:01:44: 9d:be:b6:00:b5:34:02:ea:20:54:8c:e7:1e:63:f7:5c:ff:2b: fa:fb:2d:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRupyp+Et6KFlopbWDYmBLtnv4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTEyMDIyMzQ2MTFaFw0yNTEyMDYwNDQ4MTFaMDMxMTAvBgNV BAMTKDFEQzMzMDgzMURFMjZGMzYyQThBMTRDOUNDRDU0M0MwQzE2RTNEQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC52Niq5z6a+jB58oXYJyLMMb+/ rl5SAveGjS38ebp30DpgC4lLAiUgrmF4ntl+UWx0PUCWW46MaUjZGBWjJf47vGXO kkzGwmxYEyuKCpxbHQ8RaiRKnApIhOMnQ/UV8rnaCiPdom5RFx1wLJou8Q98v6YR sgk+oOuL9iH5yPtEbl+JQ4gnwm0ZVZvBDx/xUlkpVFI6Z9RfeAsNxvOI0c9o2CDi fzDvb6S2NrnXJTn7zrnhUj7OR6JeubyDlA7fGANpOXPZpEpb5cwQH3uTdSKTzgzo OVW9BLoHy7PPyrE3yzMefQGe6X0D/Nv9V4Ij4qSlbZw2ztdN4xcFnbVLcJ6pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHcMwgx3ibzYqihTJzNVDwMFuPa4wHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr5HrMTgKsFvJ958b2RLSOY/YkMJXB3Sr8w TIbmWGeiNuUfuvEL1z+yaqG3YA4KKse5HJOIcMQF9AIVZCkr1X3PH2QYmF1g0nVs Q33aAF2lSsz73b6ndgJwO/eOXvR4rKb850FNP0D2s0Ab68rvmVK3zOfAXsNJaZBz mc6Um5zlzRLrkpweM52kH/Lv6+gFJ/PlDq8xpF/GNOScwJks/bdCA0IIW6iL7QUQ gDF4jIvi9VRp1l4/J1BZZKY3Alb8om7C9UiDrrBnmBaE9WTKoJkupCgKI8/k3IDk X1f9qxf4uwER3hlG4TcBRJ2+tgC1NALqIFSM5x5j91z/K/r7LVU= -----END CERTIFICATE-----Generated at Wed Dec 3 15:27:16 2025 by rpki-client