This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: PqEj1m1fCJ5Z00rT1qWefWf4iotV9K6CabNFg7iEDzU= Subject key identifier: 06:56:3B:86:F6:50:13:96:78:DA:17:06:E0:37:E0:DA:A4:E8:B5:0F Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 22C444356B296B75A8CAE5FD907538F0CF88D8AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 014B Signing time: Sun 25 Jan 2026 08:31:29 +0000 Manifest this update: Sun 25 Jan 2026 08:26:29 +0000 Manifest next update: Wed 28 Jan 2026 12:40:29 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: iWPEwtQFVC4uLpvPlaNx8gwUDHPEfJ2Z5SyexvU9Vc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 12:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c4:44:35:6b:29:6b:75:a8:ca:e5:fd:90:75:38:f0:cf:88:d8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Jan 25 08:26:29 2026 GMT Not After : Jan 28 12:40:29 2026 GMT Subject: CN=06563B86F650139678DA1706E037E0DAA4E8B50F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e1:51:7b:5f:8e:1e:2e:02:a2:c8:d2:d6:6a: 21:45:55:19:8b:c0:6c:47:db:38:a7:a6:a7:73:30: 3c:00:0a:a4:79:ba:25:8f:e4:d5:13:2c:26:27:2c: 16:37:05:0e:fc:e6:c7:08:8e:3f:88:33:52:72:84: 20:ff:88:a0:ec:33:ef:95:46:94:ad:8d:e3:7f:cf: 36:58:e9:01:64:08:bc:ce:14:cf:97:93:a1:ab:29: b8:ac:ff:60:f1:bb:38:ad:ba:1a:5c:3d:7c:f1:8b: c1:69:38:8c:30:f7:0d:dc:7b:da:e6:0b:7f:25:1c: ed:c0:98:4f:e9:a5:6b:46:d5:29:7b:37:e4:da:ea: fc:bd:33:f9:fd:a8:32:9f:01:4d:76:a4:40:1c:fc: 18:de:1f:0e:3c:1c:59:bb:3b:35:45:74:ca:db:89: d1:8e:8e:a3:b2:a7:f9:d6:6c:95:df:25:59:db:f6: 92:de:e8:6f:6a:ea:b9:b0:46:57:d2:c2:2a:ac:42: 95:42:9b:b7:11:6b:d4:96:55:a7:f4:90:66:25:ea: 08:b6:0c:76:3b:94:03:1e:b2:a6:19:81:16:44:83: bb:01:bb:d4:26:6a:af:d3:fc:d9:17:5b:a6:ee:f8: 9c:46:bb:21:ce:d2:1d:77:54:b5:f0:fd:d1:95:2a: 92:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:56:3B:86:F6:50:13:96:78:DA:17:06:E0:37:E0:DA:A4:E8:B5:0F X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a1:86:f4:ba:eb:c7:0b:f3:95:74:e4:c2:15:4b:7e:f6:43: f8:99:5e:2e:15:05:08:7d:fc:71:0a:df:f9:23:92:d9:6d:5d: ac:4c:25:de:a0:c1:5a:6d:08:51:7f:77:86:67:5c:5c:0f:15: 73:1e:bd:f0:36:a1:0e:8b:35:9a:d6:c6:04:15:73:cd:1b:f8: 6e:3c:ae:33:0f:75:de:f0:b5:5a:88:34:8c:60:ce:fa:db:79: 87:58:31:7b:dc:ff:de:e2:7d:26:91:47:2a:2e:8a:4b:6b:c6: e4:36:86:49:eb:64:6c:cf:be:f7:a0:6d:1a:fe:cb:84:3d:03: 80:55:eb:f6:6f:36:9b:ca:79:7b:56:77:c7:1a:c2:9c:64:56: 52:ea:7b:40:6c:82:02:1b:64:d5:79:f2:01:5f:53:d8:bd:cd: a7:37:35:37:9e:12:f8:1f:66:1d:6f:6e:a6:59:15:58:ad:87: e8:1e:51:ad:0f:1d:bb:be:80:2d:73:5c:19:19:a1:8f:68:73: e5:6d:d2:6e:93:43:1c:63:30:05:0e:59:8e:08:9a:ef:4d:cc: 20:90:a8:f5:b9:03:0c:81:d6:4c:25:ae:8a:d4:7d:1e:b5:7e: f8:0c:73:56:bf:f3:55:4c:2f:24:fa:6c:29:c4:7c:20:4e:f4: 93:75:96:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIsRENWspa3WoyuX9kHU48M+I2K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNjAxMjUwODI2MjlaFw0yNjAxMjgxMjQwMjlaMDMxMTAvBgNV BAMTKDA2NTYzQjg2RjY1MDEzOTY3OERBMTcwNkUwMzdFMERBQTRFOEI1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34VF7X44eLgKiyNLWaiFFVRmL wGxH2zinpqdzMDwACqR5uiWP5NUTLCYnLBY3BQ785scIjj+IM1JyhCD/iKDsM++V RpStjeN/zzZY6QFkCLzOFM+Xk6GrKbis/2DxuzituhpcPXzxi8FpOIww9w3ce9rm C38lHO3AmE/ppWtG1Sl7N+Ta6vy9M/n9qDKfAU12pEAc/BjeHw48HFm7OzVFdMrb idGOjqOyp/nWbJXfJVnb9pLe6G9q6rmwRlfSwiqsQpVCm7cRa9SWVaf0kGYl6gi2 DHY7lAMesqYZgRZEg7sBu9Qmaq/T/NkXW6bu+JxGuyHO0h13VLXw/dGVKpJ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlY7hvZQE5Z42hcG4Dfg2qTotQ8wHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmhhvS668cL85V05MIVS372Q/iZXi4VBQh9 /HEK3/kjktltXaxMJd6gwVptCFF/d4ZnXFwPFXMevfA2oQ6LNZrWxgQVc80b+G48 rjMPdd7wtVqINIxgzvrbeYdYMXvc/97ifSaRRyouiktrxuQ2hknrZGzPvvegbRr+ y4Q9A4BV6/ZvNpvKeXtWd8cawpxkVlLqe0BsggIbZNV58gFfU9i9zac3NTeeEvgf Zh1vbqZZFVith+geUa0PHbu+gC1zXBkZoY9oc+Vt0m6TQxxjMAUOWY4Imu9NzCCQ qPW5AwyB1kwlrorUfR61fvgMc1a/81VMLyT6bCnEfCBO9JN1ljg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:41 2026 by rpki-client