This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: GcNVSee0okJzYBe92AmFSGljqK+NXke2QVXF74jQENQ= Subject key identifier: 94:FD:76:7E:C1:F6:3E:37:C2:35:92:11:60:06:CE:D1:90:87:41:5C Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 6AB604DB75271D95AA25DF708CA309754B6FB793 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 023F Signing time: Sun 14 Dec 2025 10:01:10 +0000 Manifest this update: Sun 14 Dec 2025 09:56:10 +0000 Manifest next update: Wed 17 Dec 2025 13:59:10 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: xhHGbTeP6u0WbPe8ByZkxSsIh3tMuqCvY/m/R9Bd6uM=) 2: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: yQEXqm6BsJvWm5iy26FdhXtwWAYy2178mB69fj5uXcg=) 3: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: NBMvMFdbSgV8YLztOs5et7qKnLsGThNMzle3TvV2a2Y=) 4: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Tv+weNKfZV3vLvtIURyDMLx5ol7dILJ4RL8AQ9yiukI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 13:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b6:04:db:75:27:1d:95:aa:25:df:70:8c:a3:09:75:4b:6f:b7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Dec 14 09:56:10 2025 GMT Not After : Dec 17 13:59:10 2025 GMT Subject: CN=94FD767EC1F63E37C23592116006CED19087415C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:d6:76:d9:59:3f:a5:0d:3b:65:ba:7f:87: 2e:fd:65:28:6b:65:9f:48:b7:c0:6e:70:65:eb:f6: 36:58:5c:ea:34:48:c2:3e:fd:59:7f:53:bc:3b:3e: 5b:fa:25:6c:d3:6c:2c:c5:d2:e1:ca:ad:e5:39:ed: 24:fc:39:c7:26:38:cb:56:1b:bf:c3:76:ce:ba:4e: b8:02:b3:e9:35:1b:0e:5b:26:22:95:ee:eb:8d:58: 4f:a2:28:49:e5:46:37:21:5f:0a:7c:28:c9:90:d6: a3:11:b0:16:40:be:57:b8:a8:9f:d0:8b:ff:3e:9a: 05:e8:1c:d6:a2:9d:16:c5:db:3e:c1:ba:a8:ae:38: 77:3a:b6:e9:fc:f6:dd:8e:1c:27:4c:17:f9:cb:90: 6f:6d:1b:27:c0:3e:9a:0b:5d:ba:ef:61:df:20:e8: f3:97:c0:65:3d:64:67:93:c3:11:2c:f9:c7:78:83: ae:03:5e:da:36:46:fb:df:d8:32:c7:e3:b3:23:08: 10:8a:10:ce:20:8c:ce:c5:d2:b0:e3:40:19:5f:44: c4:6e:96:96:3b:5a:18:af:46:1d:b7:0a:dd:fd:c0: 95:cc:1e:0f:1d:ed:52:bb:a1:93:46:95:bb:9e:28: 31:5c:7b:b5:6b:0b:e1:8e:46:ff:e7:9a:6a:dd:15: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:76:7E:C1:F6:3E:37:C2:35:92:11:60:06:CE:D1:90:87:41:5C X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:00:05:3e:98:74:88:d4:51:4a:93:6b:00:68:07:3f:c4:b0: ea:99:9d:34:c4:88:d0:b8:f6:11:43:39:44:65:fe:72:f7:7c: 46:c0:a9:b0:e1:6a:02:66:65:f2:b3:01:b7:de:24:30:5c:72: 7b:9c:a7:99:99:11:70:07:ad:b2:26:2e:4f:52:16:98:17:61: ac:59:a3:a0:77:30:86:db:f7:5b:b9:57:c5:db:fd:11:1a:22: f4:72:a6:58:b0:1e:08:6d:66:21:a3:b7:72:73:c7:d1:e7:a3: a3:2b:9e:a0:29:2f:9e:71:0c:f0:94:d7:48:6a:fe:74:b9:aa: da:89:c0:74:f4:39:20:5f:08:ac:59:58:cf:5e:59:00:5b:ad: 6b:63:30:d0:b6:20:31:af:c4:5c:88:59:42:8d:f6:bf:98:34: 5e:78:cd:fa:59:89:8d:22:c9:b8:ee:04:4a:28:ba:ba:2b:a9: 27:e9:62:b3:f5:ef:2e:4e:26:c5:84:be:b0:bb:31:aa:37:c1: ce:51:3e:b9:09:9e:8e:67:25:32:33:ce:a7:b3:e1:1e:ab:c9: 6b:d8:3e:11:d7:8c:94:b9:55:dd:22:d9:8e:86:00:28:df:6c: 10:95:3d:49:c1:a1:dc:3c:60:3c:ae:a3:47:08:55:b3:e3:ec: 32:94:01:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarYE23UnHZWqJd9wjKMJdUtvt5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNTEyMTQwOTU2MTBaFw0yNTEyMTcxMzU5MTBaMDMxMTAvBgNV BAMTKDk0RkQ3NjdFQzFGNjNFMzdDMjM1OTIxMTYwMDZDRUQxOTA4NzQxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RNZ22Vk/pQ07Zbp/hy79ZShr ZZ9It8BucGXr9jZYXOo0SMI+/Vl/U7w7Plv6JWzTbCzF0uHKreU57ST8OccmOMtW G7/Dds66TrgCs+k1Gw5bJiKV7uuNWE+iKEnlRjchXwp8KMmQ1qMRsBZAvle4qJ/Q i/8+mgXoHNainRbF2z7BuqiuOHc6tun89t2OHCdMF/nLkG9tGyfAPpoLXbrvYd8g 6POXwGU9ZGeTwxEs+cd4g64DXto2Rvvf2DLH47MjCBCKEM4gjM7F0rDjQBlfRMRu lpY7WhivRh23Ct39wJXMHg8d7VK7oZNGlbueKDFce7VrC+GORv/nmmrdFTZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlP12fsH2PjfCNZIRYAbO0ZCHQVwwHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIABT6YdIjUUUqTawBoBz/EsOqZnTTEiNC4 9hFDOURl/nL3fEbAqbDhagJmZfKzAbfeJDBccnucp5mZEXAHrbImLk9SFpgXYaxZ o6B3MIbb91u5V8Xb/REaIvRypliwHghtZiGjt3Jzx9Hno6MrnqApL55xDPCU10hq /nS5qtqJwHT0OSBfCKxZWM9eWQBbrWtjMNC2IDGvxFyIWUKN9r+YNF54zfpZiY0i ybjuBEoourorqSfpYrP17y5OJsWEvrC7Mao3wc5RPrkJno5nJTIzzqez4R6ryWvY PhHXjJS5Vd0i2Y6GACjfbBCVPUnBodw8YDyuo0cIVbPj7DKUAUo= -----END CERTIFICATE-----Generated at Mon Dec 15 20:14:57 2025 by rpki-client