This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: 2C2AxK8pyNGzj7WQv6r0em07eY4BCNUvcOxUJiS1t8I= Subject key identifier: 8E:84:50:A3:E6:B8:00:86:72:0E:7D:D4:B0:E4:A8:F0:44:22:E5:89 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 062BEC04F4B8A2A7EE559577D5FB98EB959944C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: CA Signing time: Sat 06 Dec 2025 14:30:52 +0000 Manifest this update: Sat 06 Dec 2025 14:25:52 +0000 Manifest next update: Tue 09 Dec 2025 17:46:52 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: Qk41k/hkRFTJkCWZ4HWPBsNqA/44J0suCP2NO27DZdk=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:ec:04:f4:b8:a2:a7:ee:55:95:77:d5:fb:98:eb:95:99:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Dec 6 14:25:52 2025 GMT Not After : Dec 9 17:46:52 2025 GMT Subject: CN=8E8450A3E6B80086720E7DD4B0E4A8F04422E589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:93:6c:b8:55:ba:89:66:37:50:49:82:76:62: fb:9b:5b:d3:4a:6c:82:d6:e1:e9:55:59:86:a0:ce: b8:0b:72:d7:d1:af:a9:01:15:03:47:32:45:a0:58: cc:4c:65:f7:e1:93:01:76:44:54:5e:4e:d4:f6:01: 22:4f:a9:eb:26:36:ee:71:e3:6a:8e:64:2b:bc:0c: de:bc:bf:d1:f9:a5:ae:15:84:29:a3:8c:21:67:ef: 64:ac:d6:69:75:54:ce:b8:a9:9b:4a:bd:4e:6e:38: b4:f0:7e:de:1f:c2:e3:39:36:c4:d0:15:c7:13:b0: e1:47:5d:03:4c:6c:b9:30:6c:1b:85:91:55:72:1e: 2f:f8:0c:b7:59:ee:49:cc:92:78:84:f4:88:ba:c9: ee:87:48:9f:c8:11:ca:72:49:4a:6c:30:5a:2d:4f: 6f:cd:2a:cb:8c:b3:ec:98:15:bc:db:47:2b:ac:6b: 73:72:f2:20:5d:c1:4c:05:76:1e:98:92:40:71:9a: ee:a3:88:04:f7:19:e7:7b:19:3c:91:0e:c9:6a:c1: 9d:5d:b6:1f:bb:ac:86:81:13:ca:31:f0:27:ec:7f: 49:f6:7c:58:1d:2b:14:c6:d3:95:c8:b0:0a:ce:ec: c7:30:e1:60:3a:de:7a:4b:96:05:72:4e:1b:22:6d: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:50:A3:E6:B8:00:86:72:0E:7D:D4:B0:E4:A8:F0:44:22:E5:89 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:92:b6:4c:d6:d3:ec:f6:90:62:8e:df:3c:71:20:3d:8c: f5:fa:e5:b8:f5:ca:5b:5a:23:8e:bb:64:a5:b3:6b:a2:1f:56: e6:89:0a:48:12:b7:7f:10:fd:3a:8d:08:75:e1:7f:ff:da:34: 70:5e:29:b4:2a:e0:cf:f6:ff:d9:76:09:92:7d:dd:df:3c:7c: 97:3b:0b:47:4d:df:ce:8f:d3:c6:4f:cc:da:7b:c6:e5:ee:cc: bf:25:ae:68:70:42:5a:4b:4d:58:5c:01:13:b8:70:9d:13:5b: 9d:83:19:bc:2e:21:85:a8:a1:1a:0b:bc:dd:82:a6:e1:7a:a2: 7a:32:16:5a:aa:31:31:17:2f:12:a1:9c:76:6e:58:28:30:76: 47:fa:cb:3d:28:1e:42:dd:9e:25:0b:78:e2:a1:43:3e:dc:38: fb:ca:5c:d3:84:8b:49:82:3a:1a:76:79:07:06:6f:6e:f2:53: 18:b8:44:61:55:8c:2e:84:8a:e3:4c:07:75:c6:e7:3c:16:e7: 0a:86:04:8f:80:2b:51:5a:4c:26:c9:c6:e6:f7:99:50:5c:87: 3c:09:46:8a:a4:27:c8:bc:b4:e0:9e:b5:d5:0e:60:d2:9b:94: 24:93:fe:88:a4:ca:98:03:b9:50:47:f8:0b:44:f2:29:c7:7f: 0d:4c:36:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBivsBPS4oqfuVZV31fuY65WZRMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTEyMDYxNDI1NTJaFw0yNTEyMDkxNzQ2NTJaMDMxMTAvBgNV BAMTKDhFODQ1MEEzRTZCODAwODY3MjBFN0RENEIwRTRBOEYwNDQyMkU1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8k2y4VbqJZjdQSYJ2YvubW9NK bILW4elVWYagzrgLctfRr6kBFQNHMkWgWMxMZffhkwF2RFReTtT2ASJPqesmNu5x 42qOZCu8DN68v9H5pa4VhCmjjCFn72Ss1ml1VM64qZtKvU5uOLTwft4fwuM5NsTQ FccTsOFHXQNMbLkwbBuFkVVyHi/4DLdZ7knMkniE9Ii6ye6HSJ/IEcpySUpsMFot T2/NKsuMs+yYFbzbRyusa3Ny8iBdwUwFdh6YkkBxmu6jiAT3Ged7GTyRDslqwZ1d th+7rIaBE8ox8Cfsf0n2fFgdKxTG05XIsArO7Mcw4WA63npLlgVyThsibRx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjoRQo+a4AIZyDn3UsOSo8EQi5YkwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF99krZM1tPs9pBijt88cSA9jPX65bj1ylta I467ZKWza6IfVuaJCkgSt38Q/TqNCHXhf//aNHBeKbQq4M/2/9l2CZJ93d88fJc7 C0dN386P08ZPzNp7xuXuzL8lrmhwQlpLTVhcARO4cJ0TW52DGbwuIYWooRoLvN2C puF6onoyFlqqMTEXLxKhnHZuWCgwdkf6yz0oHkLdniULeOKhQz7cOPvKXNOEi0mC Ohp2eQcGb27yUxi4RGFVjC6EiuNMB3XG5zwW5wqGBI+AK1FaTCbJxub3mVBchzwJ RoqkJ8i8tOCetdUOYNKblCST/oikypgDuVBH+AtE8inHfw1MNtQ= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:28 2025 by rpki-client