This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: /CApJRbtcKKO5YbPQ5O9Vw9f1J+B3jZwKvC+jUeRQog= Subject key identifier: 78:5E:37:FB:0F:6D:96:69:6B:BB:FC:C5:F3:F4:2C:4A:5A:1E:AE:18 Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 662DFE0E827EAF952F664EB8A127A240739194DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01C1 Signing time: Fri 05 Dec 2025 14:02:29 +0000 Manifest this update: Fri 05 Dec 2025 13:57:29 +0000 Manifest next update: Mon 08 Dec 2025 16:47:29 +0000 Files and hashes: 1: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: ZhCBetiRM0oV1qkwFwKfVyjWnDYRVpaxO6Ref6QtN4w=) 2: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: G3BL4oABi1hQsHdodo5k9hWmg2aS/7I/jS6au/zWKbs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2d:fe:0e:82:7e:af:95:2f:66:4e:b8:a1:27:a2:40:73:91:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Dec 5 13:57:29 2025 GMT Not After : Dec 8 16:47:29 2025 GMT Subject: CN=785E37FB0F6D96696BBBFCC5F3F42C4A5A1EAE18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:48:8c:97:41:05:93:de:9b:17:b7:28:1e:c2: 04:4d:b7:ac:5a:bd:ed:85:51:6b:1d:7a:c3:43:86: c8:43:6b:db:84:98:52:9e:39:6d:92:a2:f1:75:09: e8:ad:fe:9d:41:08:04:b2:10:3b:e2:0a:37:61:fc: f7:cb:0a:16:e4:42:1d:de:c1:f8:b5:ab:73:cd:df: 85:c8:af:e4:24:ae:e7:b0:9e:e1:ef:f6:7b:b2:b7: ad:6a:82:62:ae:6e:86:e5:90:19:ff:8b:6f:f8:14: 07:11:33:f6:02:98:10:44:40:c5:89:9c:6a:83:be: 8a:15:48:12:2f:91:d4:c6:11:51:87:c0:c7:6e:dc: 62:1a:19:90:b3:09:09:4b:37:ad:ce:29:25:1d:57: a8:8d:ce:d3:b6:8d:35:23:ae:68:a3:40:61:5c:4b: f6:42:56:88:dd:b4:2b:97:e6:ac:a1:c9:8b:db:5b: 30:91:28:ac:7c:74:ad:14:a6:27:45:3a:11:d2:97: 90:81:30:0b:14:ee:86:39:b9:cb:b9:75:64:92:60: f5:0e:e1:7a:9d:7e:b0:c8:dd:be:7f:17:a0:94:f9: 81:46:0d:f3:6e:cf:ba:13:58:d2:db:72:b5:65:d7: 14:07:b6:3c:cc:1e:9c:4d:fe:70:75:4e:a2:ff:a6: 92:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5E:37:FB:0F:6D:96:69:6B:BB:FC:C5:F3:F4:2C:4A:5A:1E:AE:18 X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:18:ec:77:58:b7:91:9e:2f:ae:3b:c7:43:34:ef:c2:cc:f9: cf:fd:8c:b0:d0:fa:04:c5:a8:30:57:cf:8e:ef:86:97:8c:46: 99:13:a2:ad:ec:32:06:46:0a:ec:f9:b4:fe:66:5b:35:78:0c: c7:ec:cc:d3:d7:aa:e2:3e:e6:5a:a7:5d:d0:b5:46:ba:39:62: 76:78:ae:46:76:30:3e:90:a7:4f:19:05:06:d7:c6:de:f2:0f: 85:e8:50:4d:88:85:88:ce:54:95:1b:34:71:5f:20:60:fc:0f: 48:3d:1f:d8:f2:86:f7:b8:dd:d7:f7:12:d2:15:d5:2b:30:c0: 77:68:39:75:8c:dd:a0:a9:52:e8:82:4b:05:72:e3:ce:3a:0f: 1c:c6:17:3f:a5:16:9a:9d:dd:84:10:a7:30:c9:98:f5:e5:ae: d3:49:0b:e9:43:dd:ef:a4:35:38:27:ea:5c:73:25:dd:70:24: c1:04:66:60:c7:00:27:99:4f:24:02:06:cf:32:db:6a:1c:d5: 63:a1:b3:b5:0c:a8:21:59:de:ed:26:ae:29:44:f5:de:8e:82: 08:68:4d:d0:8c:86:62:16:ee:04:9c:fe:92:1d:91:dc:ce:be: 10:16:ca:33:87:d8:19:fc:0f:e9:1f:70:98:08:6b:ab:8c:f7: ce:2d:b5:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZi3+DoJ+r5UvZk64oSeiQHORlN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTEyMDUxMzU3MjlaFw0yNTEyMDgxNjQ3MjlaMDMxMTAvBgNV BAMTKDc4NUUzN0ZCMEY2RDk2Njk2QkJCRkNDNUYzRjQyQzRBNUExRUFFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoSIyXQQWT3psXtygewgRNt6xa ve2FUWsdesNDhshDa9uEmFKeOW2SovF1Ceit/p1BCASyEDviCjdh/PfLChbkQh3e wfi1q3PN34XIr+QkruewnuHv9nuyt61qgmKuboblkBn/i2/4FAcRM/YCmBBEQMWJ nGqDvooVSBIvkdTGEVGHwMdu3GIaGZCzCQlLN63OKSUdV6iNztO2jTUjrmijQGFc S/ZCVojdtCuX5qyhyYvbWzCRKKx8dK0UpidFOhHSl5CBMAsU7oY5ucu5dWSSYPUO 4XqdfrDI3b5/F6CU+YFGDfNuz7oTWNLbcrVl1xQHtjzMHpxN/nB1TqL/ppKvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeF43+w9tlmlru/zF8/QsSloerhgwHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUY7HdYt5GeL647x0M078LM+c/9jLDQ+gTF qDBXz47vhpeMRpkToq3sMgZGCuz5tP5mWzV4DMfszNPXquI+5lqnXdC1Rro5YnZ4 rkZ2MD6Qp08ZBQbXxt7yD4XoUE2IhYjOVJUbNHFfIGD8D0g9H9jyhve43df3EtIV 1SswwHdoOXWM3aCpUuiCSwVy4846DxzGFz+lFpqd3YQQpzDJmPXlrtNJC+lD3e+k NTgn6lxzJd1wJMEEZmDHACeZTyQCBs8y22oc1WOhs7UMqCFZ3u0mrilE9d6Oggho TdCMhmIW7gSc/pIdkdzOvhAWyjOH2Bn8D+kfcJgIa6uM984ttcw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:09 2025 by rpki-client