This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: 4C/aQNkxnAzjuWy6jJQ+V9VZvUHj4LGUfwaodhOWzAo= Subject key identifier: 30:93:BE:13:26:B9:E9:D3:42:9D:9C:EB:CF:F4:0E:BC:DA:C5:B6:A2 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 42FECBA3ADE8971F7AFC47AF22572CF1F2FE7AD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: E0 Signing time: Fri 23 Jan 2026 21:50:52 +0000 Manifest this update: Fri 23 Jan 2026 21:45:52 +0000 Manifest next update: Tue 27 Jan 2026 09:03:52 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: 1vMgw8ELjVvRfBgc6sEwUVc25ESgwNr2esFNVZy0fZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 09:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:fe:cb:a3:ad:e8:97:1f:7a:fc:47:af:22:57:2c:f1:f2:fe:7a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Jan 23 21:45:52 2026 GMT Not After : Jan 27 09:03:52 2026 GMT Subject: CN=3093BE1326B9E9D3429D9CEBCFF40EBCDAC5B6A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:50:35:b0:29:a9:6b:be:08:b8:25:31:15: 99:1d:35:34:79:08:a3:7b:ac:8c:cb:7d:0f:35:6d: 43:03:9d:92:44:49:cb:a1:b9:60:60:2f:45:07:4c: e1:0a:71:5c:09:b6:38:dc:12:02:bf:d4:18:99:0e: 5e:7e:95:85:17:a3:9c:ea:b5:2e:67:d3:b5:b1:1b: e4:9c:3a:6c:3c:ff:3a:88:9d:cc:63:7c:a3:aa:72: 6d:ab:a4:86:07:c7:84:5d:0e:75:c3:38:d5:bb:21: 27:57:03:d5:2d:5b:06:a8:e2:5a:df:ae:c4:b0:cb: 68:06:1d:a4:f1:fb:6d:f1:38:69:f0:3c:bd:10:4c: d1:90:a1:cc:69:1c:e4:73:c8:a6:f7:fc:46:88:6b: 78:83:3a:27:16:c0:ca:a9:70:3f:0f:52:eb:be:38: 01:49:0d:87:f2:10:35:fe:fb:b2:59:c5:f4:39:fc: 10:5e:f2:49:60:bf:1b:a7:c6:88:ec:0b:79:13:d8: 14:ee:4f:b8:14:d8:28:34:1f:9e:df:d8:c7:77:01: 1b:04:c0:21:ef:64:d5:9c:89:17:15:f7:58:22:d4: 86:6d:0f:56:86:a2:08:22:80:c3:30:5e:1c:96:f9: 4e:7a:67:cc:1e:b9:53:a8:98:36:fb:19:c6:6d:ef: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:93:BE:13:26:B9:E9:D3:42:9D:9C:EB:CF:F4:0E:BC:DA:C5:B6:A2 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a3:02:85:06:e8:86:bf:3e:de:08:17:e6:dd:8e:17:50:e6: 9e:6a:02:00:db:86:0d:6d:09:40:f8:dd:f4:f9:92:c0:cd:23: fd:61:a3:64:57:82:34:45:15:a9:4d:18:e5:16:c6:27:71:79: 17:a5:e2:82:a4:19:77:47:49:b1:c8:c7:7e:f1:f1:05:10:a9: 1f:48:50:b6:36:07:ba:bb:b3:98:63:a8:f5:9a:57:d1:0b:68: 65:07:42:f8:b3:72:84:23:2c:57:fd:f8:90:1b:9b:e5:93:fe: da:e4:8f:de:0e:8b:6f:73:62:b1:cc:7f:e6:a2:51:88:07:9e: 7a:ef:7d:c0:94:69:98:c2:66:bc:21:f2:1f:ca:30:2e:e4:a5: ce:28:a4:61:80:7f:be:4a:83:a3:1e:61:ab:ef:9b:ce:a5:f3: 54:16:13:4f:74:69:06:4a:ab:e0:d6:0f:41:49:fc:7f:bf:12: a1:b4:93:10:55:d4:7e:c0:37:56:2c:d8:ec:59:3e:fc:5b:23: 0e:d6:5a:a7:52:ac:ae:d3:bf:62:43:41:37:48:a1:2a:bf:9b: bb:de:27:7a:d3:ee:a2:25:06:cc:55:8c:3b:28:da:d9:58:7a: aa:a6:14:f9:67:b0:ce:61:b6:d6:3f:78:3c:4c:37:d1:dd:05: f3:61:57:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQv7Lo63olx96/EevIlcs8fL+etAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjAxMjMyMTQ1NTJaFw0yNjAxMjcwOTAzNTJaMDMxMTAvBgNV BAMTKDMwOTNCRTEzMjZCOUU5RDM0MjlEOUNFQkNGRjQwRUJDREFDNUI2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT51A1sCmpa74IuCUxFZkdNTR5 CKN7rIzLfQ81bUMDnZJEScuhuWBgL0UHTOEKcVwJtjjcEgK/1BiZDl5+lYUXo5zq tS5n07WxG+ScOmw8/zqIncxjfKOqcm2rpIYHx4RdDnXDONW7ISdXA9UtWwao4lrf rsSwy2gGHaTx+23xOGnwPL0QTNGQocxpHORzyKb3/EaIa3iDOicWwMqpcD8PUuu+ OAFJDYfyEDX++7JZxfQ5/BBe8klgvxunxojsC3kT2BTuT7gU2Cg0H57f2Md3ARsE wCHvZNWciRcV91gi1IZtD1aGoggigMMwXhyW+U56Z8weuVOomDb7GcZt7xZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMJO+Eya56dNCnZzrz/QOvNrFtqIwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWjAoUG6Ia/Pt4IF+bdjhdQ5p5qAgDbhg1t CUD43fT5ksDNI/1ho2RXgjRFFalNGOUWxidxeRel4oKkGXdHSbHIx37x8QUQqR9I ULY2B7q7s5hjqPWaV9ELaGUHQvizcoQjLFf9+JAbm+WT/trkj94Oi29zYrHMf+ai UYgHnnrvfcCUaZjCZrwh8h/KMC7kpc4opGGAf75Kg6MeYavvm86l81QWE090aQZK q+DWD0FJ/H+/EqG0kxBV1H7AN1Ys2OxZPvxbIw7WWqdSrK7Tv2JDQTdIoSq/m7ve J3rT7qIlBsxVjDso2tlYeqqmFPlnsM5httY/eDxMN9HdBfNhV+U= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:53 2026 by rpki-client