This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: lZ0BKNIiRG1CtdXDa8ivMQ/8KyScLLQo6o6Fy1Tn5sg= Subject key identifier: EA:FC:C8:24:C8:7C:17:2B:55:AC:82:2F:B1:AC:CF:E7:E7:03:3E:30 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 3D10E0E7755EADBEEE7E68F453787E370CE6E497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02F9 Signing time: Fri 23 Jan 2026 17:21:01 +0000 Manifest this update: Fri 23 Jan 2026 17:16:01 +0000 Manifest next update: Tue 27 Jan 2026 00:03:01 +0000 Files and hashes: 1: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) 2: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 3: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 4: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: ux8ejUTEry2erMIeuH6kWDb45a7/mXYqiCba1SbE2HM=) 5: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) 6: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 7: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 8: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:10:e0:e7:75:5e:ad:be:ee:7e:68:f4:53:78:7e:37:0c:e6:e4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Jan 23 17:16:01 2026 GMT Not After : Jan 27 00:03:01 2026 GMT Subject: CN=EAFCC824C87C172B55AC822FB1ACCFE7E7033E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:ea:3e:e3:b7:32:8c:d3:b0:51:8a:d4:c7: 93:70:cf:1f:2f:84:4d:76:14:88:56:1c:e5:a1:57: 8a:96:a4:ed:e4:8e:a7:e3:4c:46:20:5c:60:0b:34: dc:b2:11:2a:1f:b3:1a:2d:f2:34:c5:ff:59:32:6c: 6f:74:7f:04:b9:fb:18:75:c2:da:31:e0:89:61:0e: e9:45:23:8b:ed:ec:8a:35:38:b8:1a:88:93:cd:7f: 4c:99:73:d4:e9:fd:c8:b4:10:91:48:7b:99:a7:d2: 29:0f:55:1d:26:cc:72:5b:d4:9d:8f:32:cb:93:ac: 46:1e:f6:62:93:4e:fa:d7:5d:c3:89:20:f6:d3:7a: 41:7d:1c:c6:6c:ec:1b:d6:70:e5:20:b3:57:bd:f1: 92:71:fc:1d:28:95:fb:aa:41:68:fa:b0:1c:af:77: cb:7f:b9:1b:b8:e3:2e:24:0f:6a:30:a7:d5:45:84: f2:cf:43:63:09:66:89:50:16:e9:9f:f0:b6:d9:3e: bb:08:06:85:49:1e:e6:5e:fa:4f:68:a0:d1:2d:de: 92:c1:fe:1b:25:5d:96:57:06:15:e4:09:dd:b5:86: 61:94:37:60:c6:f5:4f:e9:ba:71:e5:cd:0f:f3:55: fe:34:30:ab:39:53:6e:15:fc:74:80:2e:8e:fb:09: cf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:C8:24:C8:7C:17:2B:55:AC:82:2F:B1:AC:CF:E7:E7:03:3E:30 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:eb:1f:75:47:6f:e2:50:e7:14:a4:b1:6e:c7:fd:2f:64: b2:6f:ad:c5:0e:f9:50:4e:11:3f:e7:9b:d9:f8:ae:e8:37:49: e6:a9:04:87:d1:3a:e2:3b:18:5b:ff:d8:41:d9:6e:f6:d8:1d: 3e:61:e3:10:89:8a:73:41:da:39:15:3c:09:0c:21:75:95:92: 0c:a1:33:3a:2b:29:d0:9a:ae:36:ed:e9:29:e1:d1:85:fa:5d: 78:b0:db:1b:40:e6:5d:11:8a:d1:dd:3f:51:8d:bb:58:6a:38: df:a1:ae:be:c5:a2:55:1e:3b:64:38:04:bc:d4:82:2b:23:5e: db:3a:b9:2f:19:8f:16:a9:12:c1:45:bc:ef:45:d0:e2:01:fd: be:0d:48:a8:90:53:55:a7:4e:70:39:e3:48:d3:cc:91:d3:b7: af:d7:72:cd:d6:88:a6:59:21:78:4e:e5:47:7e:82:c1:b2:0b: 32:68:6e:e3:6e:4a:bd:2e:f9:e9:4f:4d:36:11:06:d5:52:28: 63:50:0e:d0:07:62:a4:7b:60:b3:55:9a:41:24:ad:ee:23:69: 67:23:ed:56:80:ae:1a:1a:df:c7:c0:0b:84:05:c2:4b:cf:ec: d0:7a:a3:71:34:a5:de:50:3a:8e:f3:89:7b:8e:d7:46:f7:c9: 84:b2:0f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRDg53Verb7ufmj0U3h+Nwzm5JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNjAxMjMxNzE2MDFaFw0yNjAxMjcwMDAzMDFaMDMxMTAvBgNV BAMTKEVBRkNDODI0Qzg3QzE3MkI1NUFDODIyRkIxQUNDRkU3RTcwMzNFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pOo+47cyjNOwUYrUx5Nwzx8v hE12FIhWHOWhV4qWpO3kjqfjTEYgXGALNNyyESofsxot8jTF/1kybG90fwS5+xh1 wtox4IlhDulFI4vt7Io1OLgaiJPNf0yZc9Tp/ci0EJFIe5mn0ikPVR0mzHJb1J2P MsuTrEYe9mKTTvrXXcOJIPbTekF9HMZs7BvWcOUgs1e98ZJx/B0olfuqQWj6sByv d8t/uRu44y4kD2owp9VFhPLPQ2MJZolQFumf8LbZPrsIBoVJHuZe+k9ooNEt3pLB /hslXZZXBhXkCd21hmGUN2DG9U/punHlzQ/zVf40MKs5U24V/HSALo77Cc+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6vzIJMh8FytVrIIvsazP5+cDPjAwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj/6x91R2/iUOcUpLFux/0vZLJvrcUO+VBO ET/nm9n4rug3SeapBIfROuI7GFv/2EHZbvbYHT5h4xCJinNB2jkVPAkMIXWVkgyh MzorKdCarjbt6Snh0YX6XXiw2xtA5l0RitHdP1GNu1hqON+hrr7FolUeO2Q4BLzU gisjXts6uS8ZjxapEsFFvO9F0OIB/b4NSKiQU1WnTnA540jTzJHTt6/Xcs3WiKZZ IXhO5Ud+gsGyCzJobuNuSr0u+elPTTYRBtVSKGNQDtAHYqR7YLNVmkEkre4jaWcj 7VaArhoa38fAC4QFwkvP7NB6o3E0pd5QOo7ziXuO10b3yYSyDxg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:52:47 2026 by rpki-client