This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: G3JaqN1SiRoUnWHmeyGLTbcfZ13QM0ZyUYopNP6DXDM= Subject key identifier: CD:EE:F0:20:AE:A7:5B:DA:1C:44:EE:29:60:53:D8:D5:5F:D9:64:9D Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 0FEF58C5D0BC2A8927799B8EA044D72E6AB2E736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: DD Signing time: Sat 06 Dec 2025 13:31:51 +0000 Manifest this update: Sat 06 Dec 2025 13:26:51 +0000 Manifest next update: Tue 09 Dec 2025 16:42:51 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: bu0x3i90xRFNSxi9CQZ5iH/8ynZOIP+6FLXDBtRCxkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:58:c5:d0:bc:2a:89:27:79:9b:8e:a0:44:d7:2e:6a:b2:e7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Dec 6 13:26:51 2025 GMT Not After : Dec 9 16:42:51 2025 GMT Subject: CN=CDEEF020AEA75BDA1C44EE296053D8D55FD9649D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7c:8e:9e:87:36:c2:bf:56:67:63:2a:1a:44: 7a:0a:b2:f6:0e:c9:e6:85:ca:46:91:a5:e5:8e:e7: 73:6e:44:d8:9c:80:45:0a:74:86:3a:34:09:14:5c: 87:09:db:84:f9:f9:72:ad:a0:84:a4:fc:1f:0e:6e: 4b:4c:3c:86:f9:74:80:17:3f:b6:30:cb:e0:56:ce: b4:99:51:fa:ed:78:c9:3d:4c:1d:53:45:11:c2:b9: 4e:b8:4f:51:93:cd:8f:3e:9f:a1:e2:60:98:fd:83: 87:f2:6c:1e:70:77:3f:09:1f:cd:f4:0f:61:9a:40: 80:24:86:85:9c:cd:a1:2c:bd:83:a0:cd:d8:ce:48: 29:3e:7a:97:b2:35:45:64:9d:00:80:f6:b0:6c:04: 28:98:95:ff:63:5a:9d:de:a8:d8:c7:af:42:f4:78: 12:8d:62:20:45:de:3f:e8:e8:42:b6:d9:9b:35:f7: 25:16:cc:f6:3f:a6:d9:dc:b5:74:2b:53:f0:24:70: ab:77:5f:d4:e6:12:51:b5:0a:b6:f5:96:26:13:fa: 1f:9d:45:1c:db:1e:01:e5:b4:40:44:4a:c8:50:43: 41:da:9f:70:24:71:f6:4b:31:5a:10:03:9b:9d:f7: 50:6d:a8:69:c4:71:65:62:d0:66:2b:88:07:16:d6: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EE:F0:20:AE:A7:5B:DA:1C:44:EE:29:60:53:D8:D5:5F:D9:64:9D X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:99:01:2d:1a:10:dd:da:93:d4:2e:ae:f6:9e:59:b7:ee:48: 5e:ca:90:6b:84:4c:42:fd:96:31:19:2f:8b:3b:22:30:04:ca: 38:c4:96:d3:e3:a8:e4:85:35:ba:b2:25:29:99:82:44:c0:0d: 20:b8:1e:8b:2b:28:dd:bf:a3:43:b0:c3:06:97:55:68:e9:79: 9a:72:8d:67:dd:4b:e5:13:4e:49:42:6d:17:66:12:37:77:bd: 68:29:f8:4d:a5:e1:37:92:59:72:84:fc:c5:70:25:af:10:39: b1:a2:6b:24:f0:2a:79:de:1a:b8:fc:f0:a8:4c:47:94:2f:e7: b3:0b:0c:4e:f1:95:cd:32:5d:67:c2:cf:4b:8a:3d:58:a7:4e: 7c:bf:35:fd:cc:b5:37:66:b3:0d:56:e0:9b:c4:85:89:df:d0: c7:d7:e0:30:b6:18:4c:dc:4f:82:fc:11:b3:fb:64:b9:99:72: e8:0e:5a:82:85:1b:87:56:ba:9a:c4:01:c1:34:26:ff:10:fe: 1c:b1:49:db:02:20:0b:81:0c:59:ec:8c:30:8d:d3:63:23:eb: 7c:2a:22:4b:69:17:63:8c:c4:9e:ad:18:6a:f0:bc:45:02:0a: 47:16:7f:14:9e:91:65:ea:48:38:3d:5d:73:c3:a4:16:e0:b4: 8c:00:1b:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+9YxdC8KokneZuOoETXLmqy5zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNTEyMDYxMzI2NTFaFw0yNTEyMDkxNjQyNTFaMDMxMTAvBgNV BAMTKENERUVGMDIwQUVBNzVCREExQzQ0RUUyOTYwNTNEOEQ1NUZEOTY0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCufI6ehzbCv1ZnYyoaRHoKsvYO yeaFykaRpeWO53NuRNicgEUKdIY6NAkUXIcJ24T5+XKtoISk/B8ObktMPIb5dIAX P7Ywy+BWzrSZUfrteMk9TB1TRRHCuU64T1GTzY8+n6HiYJj9g4fybB5wdz8JH830 D2GaQIAkhoWczaEsvYOgzdjOSCk+epeyNUVknQCA9rBsBCiYlf9jWp3eqNjHr0L0 eBKNYiBF3j/o6EK22Zs19yUWzPY/ptnctXQrU/AkcKt3X9TmElG1Crb1liYT+h+d RRzbHgHltEBESshQQ0Han3AkcfZLMVoQA5ud91BtqGnEcWVi0GYriAcW1mFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUze7wIK6nW9ocRO4pYFPY1V/ZZJ0wHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqZAS0aEN3ak9QurvaeWbfuSF7KkGuETEL9 ljEZL4s7IjAEyjjEltPjqOSFNbqyJSmZgkTADSC4HosrKN2/o0OwwwaXVWjpeZpy jWfdS+UTTklCbRdmEjd3vWgp+E2l4TeSWXKE/MVwJa8QObGiayTwKnneGrj88KhM R5Qv57MLDE7xlc0yXWfCz0uKPVinTny/Nf3MtTdmsw1W4JvEhYnf0MfX4DC2GEzc T4L8EbP7ZLmZcugOWoKFG4dWuprEAcE0Jv8Q/hyxSdsCIAuBDFnsjDCN02Mj63wq IktpF2OMxJ6tGGrwvEUCCkcWfxSekWXqSDg9XXPDpBbgtIwAGzI= -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:06 2025 by rpki-client