This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: jvPLzM0NfdUwvGnS60HLzStlZLWuz3fC051iWaovrmk= Subject key identifier: A1:45:44:A1:69:3C:57:68:48:F8:13:E7:E9:83:E1:C8:EA:AB:40:69 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 21C3A570353E3AF757022D6C94B4C532AF7D69A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 0225 Signing time: Mon 01 Dec 2025 20:02:19 +0000 Manifest this update: Mon 01 Dec 2025 19:57:19 +0000 Manifest next update: Fri 05 Dec 2025 01:38:19 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: RJ/6PM9Z6mIViJljo1IKSANA6UQT858Zrljj8JMxMLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c3:a5:70:35:3e:3a:f7:57:02:2d:6c:94:b4:c5:32:af:7d:69:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Dec 1 19:57:19 2025 GMT Not After : Dec 5 01:38:19 2025 GMT Subject: CN=A14544A1693C576848F813E7E983E1C8EAAB4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:1d:d9:3a:fa:26:a6:da:2f:95:01:e1:3b: 93:5e:49:f0:d9:8e:0b:69:86:7f:ce:cf:77:ab:1b: 12:3e:e6:cf:0e:bc:58:19:5e:9b:dc:6a:5c:de:75: 25:2f:ff:f9:2e:fd:96:d0:e4:0d:c1:a2:ee:1d:0e: a2:06:1b:18:19:0d:c3:2a:e0:13:37:cb:c3:7c:02: f8:a1:02:c4:ec:c0:72:cb:b0:c4:50:27:69:f6:a4: 01:7a:42:b5:18:ad:2e:6c:40:68:06:35:3f:23:42: 49:aa:24:f0:64:0e:00:6a:57:cd:48:3a:a8:a3:05: c4:ce:95:e8:87:b5:c7:d4:17:65:8d:d1:98:da:d5: dd:01:19:ec:d8:64:0f:69:4a:0c:74:7e:19:c0:b8: f8:65:76:03:7e:df:0d:47:c8:50:dd:30:7f:00:1c: 1d:54:3b:1c:23:c8:1e:7a:2b:90:e6:8a:a4:09:61: 09:55:16:ee:dd:c7:6a:6a:cc:42:47:90:d0:c5:e3: 13:8f:2c:58:f4:18:42:7b:1c:74:b6:5e:d3:5d:8a: e5:15:b2:82:38:34:15:b1:b3:84:30:2a:95:df:30: 28:01:3d:12:0e:11:87:c2:f4:28:b5:6a:76:20:ff: f3:8b:dd:b3:86:58:f5:29:f2:51:2f:0a:28:c4:63: 0b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:44:A1:69:3C:57:68:48:F8:13:E7:E9:83:E1:C8:EA:AB:40:69 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:c8:e1:d2:18:95:b3:77:40:d6:7a:0b:d6:65:c1:d4:94: f6:3d:47:96:22:cb:57:7b:1b:4f:15:86:5f:69:b3:c8:df:81: 41:04:bd:b6:8c:87:d9:dc:c2:50:4e:a4:93:67:56:81:14:3d: b5:81:39:7f:00:b8:e1:e0:a1:f5:17:a3:a9:c7:bc:65:41:fd: bf:c5:68:85:00:73:92:c0:67:dd:b6:d0:fe:ca:b4:62:e3:43: 00:fd:1c:e5:59:9c:ca:f5:13:18:87:08:37:79:d7:2a:1e:7a: e8:d6:79:71:2e:bc:b8:04:8c:c8:0d:92:ec:e5:8b:0e:96:d2: 1a:f8:f1:88:6f:7f:56:fd:9d:ad:1a:1f:0c:b8:7b:05:4a:2e: 14:e1:a6:d8:4d:40:d7:76:f8:41:0e:8f:1c:83:ad:74:bc:a9: af:b8:b7:e3:d8:11:d4:e1:eb:b4:d4:a4:06:10:da:68:8a:e2: 60:61:de:0c:54:f8:92:a9:db:e7:c6:e2:55:3b:f4:5d:8c:08: 69:8a:f3:02:11:36:fd:ca:ee:fb:73:2a:83:ed:9a:aa:99:3b: 68:ad:b4:9d:57:c0:45:5c:fd:25:4a:ea:47:a5:a6:62:75:2e: 8c:d1:46:80:f7:2f:15:d9:e5:aa:23:d6:91:57:6e:b6:de:c7: 42:50:6d:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcOlcDU+OvdXAi1slLTFMq99aaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNTEyMDExOTU3MTlaFw0yNTEyMDUwMTM4MTlaMDMxMTAvBgNV BAMTKEExNDU0NEExNjkzQzU3Njg0OEY4MTNFN0U5ODNFMUM4RUFBQjQwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aR3ZOvomptovlQHhO5NeSfDZ jgtphn/Oz3erGxI+5s8OvFgZXpvcalzedSUv//ku/ZbQ5A3Bou4dDqIGGxgZDcMq 4BM3y8N8AvihAsTswHLLsMRQJ2n2pAF6QrUYrS5sQGgGNT8jQkmqJPBkDgBqV81I OqijBcTOleiHtcfUF2WN0Zja1d0BGezYZA9pSgx0fhnAuPhldgN+3w1HyFDdMH8A HB1UOxwjyB56K5DmiqQJYQlVFu7dx2pqzEJHkNDF4xOPLFj0GEJ7HHS2XtNdiuUV soI4NBWxs4QwKpXfMCgBPRIOEYfC9Ci1anYg//OL3bOGWPUp8lEvCijEYwvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoUVEoWk8V2hI+BPn6YPhyOqrQGkwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0cyOHSGJWzd0DWegvWZcHUlPY9R5Yiy1d7 G08Vhl9ps8jfgUEEvbaMh9ncwlBOpJNnVoEUPbWBOX8AuOHgofUXo6nHvGVB/b/F aIUAc5LAZ9220P7KtGLjQwD9HOVZnMr1ExiHCDd51yoeeujWeXEuvLgEjMgNkuzl iw6W0hr48Yhvf1b9na0aHwy4ewVKLhThpthNQNd2+EEOjxyDrXS8qa+4t+PYEdTh 67TUpAYQ2miK4mBh3gxU+JKp2+fG4lU79F2MCGmK8wIRNv3K7vtzKoPtmqqZO2it tJ1XwEVc/SVK6kelpmJ1LozRRoD3LxXZ5aoj1pFXbrbex0JQbcs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:40 2025 by rpki-client