This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: 66YN9Go+hwUZr4U16TCG77VTn3Tm8xjjdKTwTY3oYco= Subject key identifier: 87:A5:0B:F2:68:A3:9A:66:23:BD:F4:E9:15:F8:7A:75:EF:3B:F8:C2 Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 5CF165685ED600F9BB1F2D95A835FB19334B0AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 02E3 Signing time: Sat 06 Dec 2025 00:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:56:01 +0000 Manifest next update: Tue 09 Dec 2025 10:41:01 +0000 Files and hashes: 1: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: ILZUM/tNypaeLRSSyrc2AONATLIb+Dh0X9KNKHpRaTM=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 3: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 4: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) 5: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 6: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) 7: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) 8: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f1:65:68:5e:d6:00:f9:bb:1f:2d:95:a8:35:fb:19:33:4b:0a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Dec 5 23:56:01 2025 GMT Not After : Dec 9 10:41:01 2025 GMT Subject: CN=87A50BF268A39A6623BDF4E915F87A75EF3BF8C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:72:47:d9:94:48:46:96:f9:6c:96:b9:1b:84: 1a:dc:cb:ab:1b:8c:e4:c3:b0:75:1e:23:5d:34:10: a7:36:bb:de:c8:a9:e8:12:ea:e6:0c:f8:6f:93:fb: 95:c6:01:96:0a:b5:0a:a4:e3:e4:2a:7d:09:aa:0d: 08:a1:ab:0c:0c:3d:5c:e6:fd:f1:2b:19:cd:6b:a1: dc:c5:b2:36:00:7d:98:76:e9:a2:ff:cc:14:a9:9c: cf:b7:42:4b:fd:c9:5c:34:e5:cd:8a:53:04:21:b9: 44:da:50:4a:f5:52:b5:bc:cc:59:40:e4:33:bc:e9: 7a:ce:5f:12:30:2f:b6:22:da:e6:2e:f8:6c:7f:f8: 8b:51:91:93:c6:42:0e:d6:d9:71:d4:25:6d:43:47: 54:fa:20:f1:71:ea:5a:32:7d:54:dc:b0:b9:52:6a: 14:17:06:77:4f:d1:25:34:2f:d0:2f:73:1b:d7:a0: 58:c5:99:8f:45:7c:06:3f:12:aa:06:ef:07:77:d2: 2d:f8:e2:0e:8d:18:06:4b:79:6e:ed:18:fb:2b:36: 82:3b:e1:05:5e:cb:b5:90:74:d9:45:db:61:20:53: 75:df:89:d8:88:26:c3:6d:b2:fa:b8:b8:38:24:6e: 00:50:46:12:ef:5a:91:41:b3:de:a9:38:d8:b3:a9: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A5:0B:F2:68:A3:9A:66:23:BD:F4:E9:15:F8:7A:75:EF:3B:F8:C2 X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:16:80:ff:78:0d:2e:c4:b9:ff:54:99:ef:33:52:95:7f:6f: 78:53:9c:e9:44:a6:66:20:db:b7:32:f2:c5:9e:0f:12:d9:99: bb:39:c3:53:d6:17:a7:27:d9:2c:7b:87:5c:80:7e:fb:79:8c: 18:2c:19:50:e3:52:42:98:29:9e:1d:3d:31:8f:4a:d7:b7:43: 8e:cb:1a:01:a4:b9:ef:d1:d5:c3:d2:95:73:59:da:72:17:7c: 5e:17:27:92:56:fd:20:ec:80:21:9b:8d:70:2b:be:13:68:c3: ba:72:e0:f0:ee:92:8f:5c:5e:cd:0d:dd:e1:ce:60:83:fa:ef: 46:a8:d4:2d:cf:f9:1c:1f:57:88:0a:8d:11:85:dd:c2:a1:fb: d8:3f:26:3a:4b:11:b1:85:a5:4d:54:da:9e:5f:05:36:58:8d: a2:3e:35:b2:03:c3:d8:86:1d:95:1a:7c:56:dd:6c:b0:5f:94: a6:d3:91:8c:c2:a3:03:97:f6:06:26:57:a9:05:c9:c1:51:02: 7f:c2:d6:cb:2b:a7:03:09:e7:3d:77:ec:de:62:1b:bb:0c:ff: b0:ac:cd:c7:74:d6:35:5d:d3:6b:db:81:54:7f:63:86:c5:d7: 87:fe:95:cb:2a:b9:f2:d2:30:70:ea:9c:30:ca:04:20:f4:27: 79:88:76:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPFlaF7WAPm7Hy2VqDX7GTNLCqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNTEyMDUyMzU2MDFaFw0yNTEyMDkxMDQxMDFaMDMxMTAvBgNV BAMTKDg3QTUwQkYyNjhBMzlBNjYyM0JERjRFOTE1Rjg3QTc1RUYzQkY4QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXckfZlEhGlvlslrkbhBrcy6sb jOTDsHUeI100EKc2u97IqegS6uYM+G+T+5XGAZYKtQqk4+QqfQmqDQihqwwMPVzm /fErGc1rodzFsjYAfZh26aL/zBSpnM+3Qkv9yVw05c2KUwQhuUTaUEr1UrW8zFlA 5DO86XrOXxIwL7Yi2uYu+Gx/+ItRkZPGQg7W2XHUJW1DR1T6IPFx6loyfVTcsLlS ahQXBndP0SU0L9AvcxvXoFjFmY9FfAY/EqoG7wd30i344g6NGAZLeW7tGPsrNoI7 4QVey7WQdNlF22EgU3XfidiIJsNtsvq4uDgkbgBQRhLvWpFBs96pONizqUMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6UL8mijmmYjvfTpFfh6de87+MIwHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIWgP94DS7Euf9Ume8zUpV/b3hTnOlEpmYg 27cy8sWeDxLZmbs5w1PWF6cn2Sx7h1yAfvt5jBgsGVDjUkKYKZ4dPTGPSte3Q47L GgGkue/R1cPSlXNZ2nIXfF4XJ5JW/SDsgCGbjXArvhNow7py4PDuko9cXs0N3eHO YIP670ao1C3P+RwfV4gKjRGF3cKh+9g/JjpLEbGFpU1U2p5fBTZYjaI+NbIDw9iG HZUafFbdbLBflKbTkYzCowOX9gYmV6kFycFRAn/C1ssrpwMJ5z137N5iG7sM/7Cs zcd01jVd02vbgVR/Y4bF14f+lcsqufLSMHDqnDDKBCD0J3mIdig= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:48 2025 by rpki-client