This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: HpvLJPZY9H9Yr84UPzg26kfuc0pt4jik0kOU0bvawkE= Subject key identifier: 9F:DD:C7:E3:A5:74:E5:4A:DB:C8:80:D6:67:AD:D0:8E:D4:A3:32:AC Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 16EEDA01B3AD6E655373EB31B51D0BF6B40A68BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 0240 Signing time: Sun 01 Feb 2026 02:22:19 +0000 Manifest this update: Sun 01 Feb 2026 02:17:19 +0000 Manifest next update: Wed 04 Feb 2026 04:23:19 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: /BSPaowqo5Ci4MlA8TIefxhb+QH3TfijuaILXQg2Z9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ee:da:01:b3:ad:6e:65:53:73:eb:31:b5:1d:0b:f6:b4:0a:68:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Feb 1 02:17:19 2026 GMT Not After : Feb 4 04:23:19 2026 GMT Subject: CN=9FDDC7E3A574E54ADBC880D667ADD08ED4A332AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:bd:37:cb:e2:23:60:17:4f:42:05:6e:63: a7:f5:cf:80:c7:f4:ff:e9:61:d0:b8:5e:d1:31:00: b4:d4:66:bd:e2:6a:15:14:44:8e:9e:63:de:90:4c: 3c:6f:b0:33:58:3c:86:dd:39:60:1a:3b:53:d6:e6: c4:ee:ed:59:80:1e:84:0a:72:3f:57:8e:f5:96:82: 3b:c4:cf:4f:18:b7:ae:e9:26:85:1c:4d:11:73:ff: d0:64:3d:e4:92:e1:09:67:73:02:98:98:b5:4b:73: 76:f5:52:22:b4:09:92:b4:83:4b:d5:5e:49:23:ea: eb:c4:ff:91:f3:d9:07:31:41:bd:1b:00:5a:82:38: 48:a9:62:02:9a:26:fd:0b:b4:a1:8e:9d:12:9e:c1: 05:72:90:bd:f5:d5:14:79:32:b1:ea:39:ee:d3:02: d8:97:45:01:c0:b4:35:31:58:e0:3f:d3:1d:07:02: 31:ad:14:f5:b0:f1:c1:2b:7a:f1:fb:16:7a:3b:d9: f6:1f:c7:f1:73:54:ab:8c:95:c1:b2:6d:0d:98:35: ba:f6:78:d0:c8:df:a3:7e:f8:33:dd:c7:06:dc:92: b8:2a:81:d5:83:0e:d6:b8:d9:bd:db:25:a7:5a:4b: aa:2a:58:a6:6c:73:c8:9b:4c:54:24:82:98:74:8d: 5a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DD:C7:E3:A5:74:E5:4A:DB:C8:80:D6:67:AD:D0:8E:D4:A3:32:AC X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:39:53:31:4f:4d:79:7b:75:aa:b9:88:35:e0:a8:22:73: f8:5a:27:40:20:42:15:44:bc:d2:64:10:7f:ba:e0:a0:ba:9e: 2a:1a:1d:81:5b:0d:af:23:7e:c0:f3:20:9a:5d:b4:36:2f:5d: 6d:38:23:fd:d9:a4:25:aa:fa:b6:cd:4c:f1:9a:12:8d:7a:d6: 6b:e5:e4:7e:cf:1d:89:05:85:2a:7e:8d:87:0a:38:ed:c4:d4: 4d:f5:3d:3b:56:58:89:0d:96:40:21:43:ed:78:00:3a:b0:70: 1b:9e:80:1b:98:50:8d:5d:8f:29:fb:da:fe:1b:b3:11:f6:3c: 67:04:ac:c4:c8:05:b7:4c:d5:14:f5:b3:19:a7:3a:61:ae:5c: 0c:0c:03:94:d8:06:e0:3f:e5:1e:86:8d:3d:12:01:b0:20:3c: b3:8c:70:d5:5b:ee:1c:2c:05:43:72:3c:fe:cf:f9:b6:f9:64: d4:d2:8f:f5:56:66:47:68:99:63:ff:8b:65:ba:d2:be:bb:3f: 0b:ae:f7:51:13:21:e4:14:ca:71:f8:40:1a:f1:8e:e6:3b:5d: 3c:05:9b:e3:c7:ea:9d:8d:a4:ec:b5:58:01:14:d7:e0:35:65: b7:7e:10:c9:dc:9a:85:31:fc:ee:9b:1f:9e:11:bc:45:ae:61: ff:66:6e:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFu7aAbOtbmVTc+sxtR0L9rQKaLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNjAyMDEwMjE3MTlaFw0yNjAyMDQwNDIzMTlaMDMxMTAvBgNV BAMTKDlGRERDN0UzQTU3NEU1NEFEQkM4ODBENjY3QUREMDhFRDRBMzMyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVL03y+IjYBdPQgVuY6f1z4DH 9P/pYdC4XtExALTUZr3iahUURI6eY96QTDxvsDNYPIbdOWAaO1PW5sTu7VmAHoQK cj9XjvWWgjvEz08Yt67pJoUcTRFz/9BkPeSS4QlncwKYmLVLc3b1UiK0CZK0g0vV Xkkj6uvE/5Hz2QcxQb0bAFqCOEipYgKaJv0LtKGOnRKewQVykL311RR5MrHqOe7T AtiXRQHAtDUxWOA/0x0HAjGtFPWw8cErevH7Fno72fYfx/FzVKuMlcGybQ2YNbr2 eNDI36N++DPdxwbckrgqgdWDDta42b3bJadaS6oqWKZsc8ibTFQkgph0jVoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn93H46V05UrbyIDWZ63QjtSjMqwwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgGOVMxT015e3WquYg14Kgic/haJ0AgQhVE vNJkEH+64KC6nioaHYFbDa8jfsDzIJpdtDYvXW04I/3ZpCWq+rbNTPGaEo161mvl 5H7PHYkFhSp+jYcKOO3E1E31PTtWWIkNlkAhQ+14ADqwcBuegBuYUI1djyn72v4b sxH2PGcErMTIBbdM1RT1sxmnOmGuXAwMA5TYBuA/5R6GjT0SAbAgPLOMcNVb7hws BUNyPP7P+bb5ZNTSj/VWZkdomWP/i2W60r67Pwuu91ETIeQUynH4QBrxjuY7XTwF m+PH6p2NpOy1WAEU1+A1Zbd+EMncmoUx/O6bH54RvEWuYf9mblI= -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:37 2026 by rpki-client