This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: xwSpexgb2IimuLs3b0rhkt8HYNEGc7e5wUwNviUMiQ8= Subject key identifier: 11:73:3F:4B:3D:26:19:C4:72:BD:F6:9B:89:A4:75:05:88:19:10:5E Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 37638B343ACF0D6C234AEF28728A1D325E878ED0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 023D Signing time: Sun 25 Jan 2026 04:22:15 +0000 Manifest this update: Sun 25 Jan 2026 04:17:15 +0000 Manifest next update: Wed 28 Jan 2026 11:48:15 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: vhH3HyJWPRh+Q3yxmbqODy64lfqZMFsVkM8nmC1HPDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 11:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:63:8b:34:3a:cf:0d:6c:23:4a:ef:28:72:8a:1d:32:5e:87:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Jan 25 04:17:15 2026 GMT Not After : Jan 28 11:48:15 2026 GMT Subject: CN=11733F4B3D2619C472BDF69B89A475058819105E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a1:c2:25:36:eb:4a:7c:54:22:b6:e1:a6:d1: f8:52:cb:d7:eb:b0:ac:02:b4:d3:6f:97:fd:1d:77: 1d:e8:cc:7c:93:b0:05:df:03:1f:95:84:3e:2e:ce: f0:e8:0c:e3:f0:36:a6:7b:79:c4:1d:58:09:8a:61: ba:98:65:55:7a:32:06:20:11:ee:93:33:51:a5:85: 83:8d:9b:58:0c:66:b1:74:f3:53:74:23:68:ba:19: 07:a3:c8:76:74:e6:64:37:15:23:81:d4:d1:67:6f: 2f:8b:00:bf:68:90:b3:e5:22:8b:39:79:86:29:bd: e6:18:30:85:fa:83:77:a7:57:75:7a:7b:e0:3b:a0: fc:79:43:c3:43:fc:15:5b:f2:dd:d0:e3:71:ca:30: 39:26:23:c7:fe:73:74:8f:c2:28:71:9b:aa:12:bc: 40:6c:f4:7d:00:0f:7d:22:62:a3:6a:80:8a:d2:8a: 5d:4b:42:c6:42:7f:cb:50:70:4d:25:2e:ef:27:8f: d3:16:01:e9:30:91:af:68:69:4f:43:5f:0d:10:4e: 77:19:d3:52:99:58:80:13:65:d3:b2:8e:45:c2:0e: b0:42:01:14:df:51:7a:4c:55:41:f4:2f:3e:8d:80: 2a:d5:f2:01:e7:a6:20:79:bc:bf:47:8c:7a:c5:0c: 70:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:73:3F:4B:3D:26:19:C4:72:BD:F6:9B:89:A4:75:05:88:19:10:5E X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2c:9c:4d:7a:88:fd:19:2f:4a:d4:be:b9:47:7a:81:b7:87: e1:25:c3:2c:1c:1d:1a:63:21:56:94:97:d4:0e:21:1f:7c:aa: 2d:f3:e1:55:51:4d:47:70:b1:76:10:82:e6:ad:f7:a6:05:04: 52:b7:2d:13:72:f4:28:57:52:a9:d2:05:76:c4:53:0a:4d:2b: 60:84:cd:7d:7c:d2:e5:e4:4c:d9:e5:11:2a:cb:0d:22:bd:14: b5:6e:d1:b1:32:6f:fc:9d:31:da:af:dd:29:0f:89:03:f7:b7: 91:fd:4f:c0:ba:99:3a:d9:33:90:d2:ed:07:03:cc:61:c9:f5: b5:8d:4c:48:7e:ae:e4:64:9e:68:f4:0c:e9:9c:71:f5:c2:0d: c4:11:93:e2:5b:77:aa:48:78:ed:e0:78:66:80:88:b2:93:ff: ed:70:a4:34:92:0c:3b:ae:af:5d:bf:49:d5:ee:c7:ce:26:01: ef:11:b7:54:5f:00:2c:94:34:2d:0f:04:85:7b:4b:aa:ae:e1: 07:a7:b8:07:68:11:08:fe:8c:9b:7a:8e:a4:2e:a1:4c:ce:cf: cf:f7:af:4d:b6:9c:53:89:f0:fe:59:1d:a1:6c:d6:97:5c:cf: ac:08:ee:db:a1:ff:c0:92:aa:e0:3a:e8:e8:04:44:60:68:66: 7c:75:a2:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2OLNDrPDWwjSu8ocoodMl6HjtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNjAxMjUwNDE3MTVaFw0yNjAxMjgxMTQ4MTVaMDMxMTAvBgNV BAMTKDExNzMzRjRCM0QyNjE5QzQ3MkJERjY5Qjg5QTQ3NTA1ODgxOTEwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtocIlNutKfFQituGm0fhSy9fr sKwCtNNvl/0ddx3ozHyTsAXfAx+VhD4uzvDoDOPwNqZ7ecQdWAmKYbqYZVV6MgYg Ee6TM1GlhYONm1gMZrF081N0I2i6GQejyHZ05mQ3FSOB1NFnby+LAL9okLPlIos5 eYYpveYYMIX6g3enV3V6e+A7oPx5Q8ND/BVb8t3Q43HKMDkmI8f+c3SPwihxm6oS vEBs9H0AD30iYqNqgIrSil1LQsZCf8tQcE0lLu8nj9MWAekwka9oaU9DXw0QTncZ 01KZWIATZdOyjkXCDrBCARTfUXpMVUH0Lz6NgCrV8gHnpiB5vL9HjHrFDHCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEXM/Sz0mGcRyvfabiaR1BYgZEF4wHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUsnE16iP0ZL0rUvrlHeoG3h+ElwywcHRpj IVaUl9QOIR98qi3z4VVRTUdwsXYQguat96YFBFK3LRNy9ChXUqnSBXbEUwpNK2CE zX180uXkTNnlESrLDSK9FLVu0bEyb/ydMdqv3SkPiQP3t5H9T8C6mTrZM5DS7QcD zGHJ9bWNTEh+ruRknmj0DOmccfXCDcQRk+Jbd6pIeO3geGaAiLKT/+1wpDSSDDuu r12/SdXux84mAe8Rt1RfACyUNC0PBIV7S6qu4QenuAdoEQj+jJt6jqQuoUzOz8/3 r022nFOJ8P5ZHaFs1pdcz6wI7tuh/8CSquA66OgERGBoZnx1okc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:12:46 2026 by rpki-client