This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: 586yOmkMFY5GmGIGMrRkbF59nSoLX105pjo45vYNwWM= Subject key identifier: 32:5E:0C:F9:F1:B2:10:1C:0C:1D:45:BA:5A:FA:CD:E6:56:0C:35:36 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 098BEBA1C59F01F79B545963AD5F013E840CEEC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0135 Signing time: Sat 06 Dec 2025 17:31:30 +0000 Manifest this update: Sat 06 Dec 2025 17:26:30 +0000 Manifest next update: Tue 09 Dec 2025 23:49:30 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: APjrC6Q2lRI7zh/Cmkt/Bxo4yBreRENDCkBDZrpmb84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:8b:eb:a1:c5:9f:01:f7:9b:54:59:63:ad:5f:01:3e:84:0c:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Dec 6 17:26:30 2025 GMT Not After : Dec 9 23:49:30 2025 GMT Subject: CN=325E0CF9F1B2101C0C1D45BA5AFACDE6560C3536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:de:29:03:b9:bc:25:6e:85:59:8f:bf:01: 16:db:5d:fa:21:df:e6:51:82:03:36:2c:9a:c7:e8: d1:99:23:ff:f4:b6:7a:4a:8c:00:ab:21:4a:1f:b4: 14:ef:3b:86:5e:f1:66:06:8c:16:08:49:0f:0b:4b: 83:3b:3f:5a:e1:5a:9a:83:90:ef:d7:4d:71:42:06: 60:90:94:9f:8e:3b:38:73:8d:e4:17:61:fb:b9:c5: 36:76:3e:ca:e7:89:72:4e:25:76:98:ac:a4:ef:fb: 6a:ab:26:4c:6b:ac:34:ef:17:42:46:bc:9a:37:8f: 21:a0:1b:b5:71:36:b1:62:35:0e:70:b9:e6:cd:1f: 6c:0e:2c:b7:26:29:2c:55:44:a1:7d:5f:b9:24:ac: 25:5a:27:b6:d2:c7:6c:80:30:03:2a:7c:71:b8:0b: 8e:b7:e0:74:39:ff:42:52:37:ba:8c:30:57:64:2b: 3b:44:5e:68:8e:a8:5d:9b:d8:d6:60:ca:fe:16:00: ba:70:3e:35:1e:d0:97:5d:8c:dd:c4:ad:b3:2e:fa: eb:9b:8c:e7:42:72:50:f9:97:c1:e5:54:64:a0:0a: 97:c4:1d:d5:b4:82:36:24:0c:1f:b0:17:ca:1f:f4: 79:80:eb:fa:6b:94:98:ee:0a:f3:4e:9b:5a:aa:06: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:5E:0C:F9:F1:B2:10:1C:0C:1D:45:BA:5A:FA:CD:E6:56:0C:35:36 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:19:dd:bf:be:c6:37:f8:f0:c8:c9:75:5a:fa:14:cb:73:28: 4e:ee:53:76:5a:74:e4:10:b1:77:be:e9:5d:89:d5:1f:5a:0f: 01:0e:fd:7e:61:ff:ea:7f:5c:de:c3:8b:be:38:d3:b0:f8:58: d6:7d:05:9d:b5:05:db:65:d7:89:c5:f8:26:6c:f4:be:34:05: 71:8d:a8:89:89:aa:19:96:16:e1:c1:df:bb:47:58:c3:13:6d: 7a:85:91:73:e1:96:92:89:b5:95:6e:1d:62:97:16:50:98:f1: 2c:7d:a9:7c:f9:3c:c2:e2:4d:70:2b:df:41:8a:d5:aa:56:55: 4b:ea:05:f1:f0:29:d0:60:e4:c0:05:ae:bf:81:0e:27:69:e5: 32:70:20:ef:13:c5:77:e9:1e:18:2e:dd:93:d6:01:03:24:9d: 25:55:2e:af:03:41:55:85:13:ef:15:68:c5:eb:6a:26:03:71: 4c:9e:51:ba:4a:7d:f9:b3:f8:f5:81:dc:05:cb:67:13:ad:61: 4d:ba:eb:0d:f0:29:ec:71:b9:c9:e2:be:49:64:0a:29:65:ba: e2:b3:98:7d:24:5f:45:04:e3:49:ef:2b:86:d3:d1:b0:ca:ec: f4:b5:67:f2:35:96:af:c1:45:af:2e:6b:e7:9d:cf:29:a3:cb: f2:cc:b0:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYvrocWfAfebVFljrV8BPoQM7sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTEyMDYxNzI2MzBaFw0yNTEyMDkyMzQ5MzBaMDMxMTAvBgNV BAMTKDMyNUUwQ0Y5RjFCMjEwMUMwQzFENDVCQTVBRkFDREU2NTYwQzM1MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJt4pA7m8JW6FWY+/ARbbXfoh 3+ZRggM2LJrH6NGZI//0tnpKjACrIUoftBTvO4Ze8WYGjBYISQ8LS4M7P1rhWpqD kO/XTXFCBmCQlJ+OOzhzjeQXYfu5xTZ2PsrniXJOJXaYrKTv+2qrJkxrrDTvF0JG vJo3jyGgG7VxNrFiNQ5wuebNH2wOLLcmKSxVRKF9X7kkrCVaJ7bSx2yAMAMqfHG4 C4634HQ5/0JSN7qMMFdkKztEXmiOqF2b2NZgyv4WALpwPjUe0JddjN3ErbMu+uub jOdCclD5l8HlVGSgCpfEHdW0gjYkDB+wF8of9HmA6/prlJjuCvNOm1qqBj/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMl4M+fGyEBwMHUW6WvrN5lYMNTYwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgZ3b++xjf48MjJdVr6FMtzKE7uU3ZadOQQ sXe+6V2J1R9aDwEO/X5h/+p/XN7Di74407D4WNZ9BZ21Bdtl14nF+CZs9L40BXGN qImJqhmWFuHB37tHWMMTbXqFkXPhlpKJtZVuHWKXFlCY8Sx9qXz5PMLiTXAr30GK 1apWVUvqBfHwKdBg5MAFrr+BDidp5TJwIO8TxXfpHhgu3ZPWAQMknSVVLq8DQVWF E+8VaMXraiYDcUyeUbpKffmz+PWB3AXLZxOtYU266w3wKexxucnivklkCilluuKz mH0kX0UE40nvK4bT0bDK7PS1Z/I1lq/BRa8ua+edzymjy/LMsDU= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:00 2025 by rpki-client