This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: qQ10Nvp4+nam8lAQO8Jdqtmz/DPDzhhv9Dq19Ra5y8Q= Subject key identifier: 53:C1:A9:0B:C0:2A:98:3E:71:13:D5:42:3E:08:C9:39:7C:1E:5D:65 Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 35A4DCC386484B087D719D8AB0A854A25DD2DB6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 013A Signing time: Wed 17 Dec 2025 16:11:30 +0000 Manifest this update: Wed 17 Dec 2025 16:06:30 +0000 Manifest next update: Sun 21 Dec 2025 00:43:30 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: CxO7nMbJJjbxMfgXNQ5P0RjU5vOOF5KLxQY7fp21I84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:43:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a4:dc:c3:86:48:4b:08:7d:71:9d:8a:b0:a8:54:a2:5d:d2:db:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Dec 17 16:06:30 2025 GMT Not After : Dec 21 00:43:30 2025 GMT Subject: CN=53C1A90BC02A983E7113D5423E08C9397C1E5D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c9:9c:51:af:18:b6:cb:56:d6:5b:0b:07:f0: 0f:79:09:ef:ea:be:1d:a5:11:86:49:78:a5:6d:28: 6f:d2:ca:7e:1e:c8:61:52:14:a6:81:39:65:dc:99: 4b:1e:ef:47:af:95:0e:6c:6c:a0:c4:fd:94:39:e5: 2b:8e:ca:bd:c7:0e:bd:4c:71:69:b8:a4:44:d1:a7: 2c:64:b1:82:0a:16:ad:61:cb:2e:f6:20:93:e2:2c: 3b:78:47:7e:80:5d:f7:a8:b6:1e:ad:7f:c4:fd:b5: 46:da:d5:1c:22:82:e5:46:a8:06:22:30:92:36:24: 73:72:86:96:da:31:58:fd:34:8d:11:03:87:c5:4a: 0d:f6:f6:aa:d7:78:c5:4a:c6:65:a5:ee:00:7f:05: aa:b2:fc:52:c5:ed:3e:d7:2e:46:99:6a:63:70:96: 2c:be:e3:a8:24:ca:3c:64:0f:3c:ff:24:a1:21:dc: 46:71:96:eb:f6:d9:49:17:b0:c6:8a:3f:f4:cd:86: 44:7b:27:df:10:a2:51:03:1f:9e:cc:33:0e:26:99: 41:f7:b0:03:e5:25:db:d9:c2:d0:08:fc:8a:58:b6: 0a:ba:bb:65:fb:19:18:b7:22:72:bb:30:1a:28:01: a9:2f:5a:0a:e8:ba:9c:13:96:2b:c2:62:7c:67:77: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C1:A9:0B:C0:2A:98:3E:71:13:D5:42:3E:08:C9:39:7C:1E:5D:65 X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:64:e3:b5:ba:92:ac:6f:74:37:08:3f:ac:13:13:fc:9d:cf: 45:6a:73:2e:e8:9a:39:eb:eb:b1:d9:b8:f0:f8:84:a1:cb:77: 6f:89:da:3c:fb:58:61:df:1f:ec:36:84:fe:67:eb:56:04:8d: 81:4f:43:08:1d:9e:11:43:ff:55:55:2b:f6:b8:b9:69:21:25: 1f:a9:d4:17:57:30:21:02:9e:1a:0e:ce:2d:30:ba:98:c4:8f: 71:b4:1b:6c:d8:d9:88:ca:02:5b:9b:2e:ac:22:36:46:c1:b4: 73:84:cd:e7:ea:ab:a5:53:29:1a:1f:b3:6d:0d:ab:0c:43:7c: 89:c7:48:0c:a6:b8:64:8f:ef:5f:3c:bc:b5:d5:1e:f8:1c:ec: 57:51:aa:25:7a:db:4e:61:ae:36:61:47:1f:fe:c1:d3:0a:7d: 53:da:1f:bb:a4:94:cc:78:68:1b:f9:65:36:e9:98:14:1c:c0: df:62:15:f2:82:83:7e:7c:ed:12:a4:5c:66:ef:93:fa:56:73: be:e3:d6:33:5c:a7:c6:86:13:46:02:aa:1b:69:45:5d:9e:a6: a9:2c:7c:94:8f:85:bb:8a:e7:1f:03:55:94:13:7f:bc:f0:81: b1:b3:0e:ad:2b:92:fb:14:73:a8:c6:34:fc:f9:ac:c4:ce:06: 35:41:fa:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaTcw4ZISwh9cZ2KsKhUol3S22swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNTEyMTcxNjA2MzBaFw0yNTEyMjEwMDQzMzBaMDMxMTAvBgNV BAMTKDUzQzFBOTBCQzAyQTk4M0U3MTEzRDU0MjNFMDhDOTM5N0MxRTVENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQyZxRrxi2y1bWWwsH8A95Ce/q vh2lEYZJeKVtKG/Syn4eyGFSFKaBOWXcmUse70evlQ5sbKDE/ZQ55SuOyr3HDr1M cWm4pETRpyxksYIKFq1hyy72IJPiLDt4R36AXfeoth6tf8T9tUba1RwiguVGqAYi MJI2JHNyhpbaMVj9NI0RA4fFSg329qrXeMVKxmWl7gB/Baqy/FLF7T7XLkaZamNw liy+46gkyjxkDzz/JKEh3EZxluv22UkXsMaKP/TNhkR7J98QolEDH57MMw4mmUH3 sAPlJdvZwtAI/IpYtgq6u2X7GRi3InK7MBooAakvWgroupwTlivCYnxnd7M9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU8GpC8AqmD5xE9VCPgjJOXweXWUwHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVk47W6kqxvdDcIP6wTE/ydz0Vqcy7omjnr 67HZuPD4hKHLd2+J2jz7WGHfH+w2hP5n61YEjYFPQwgdnhFD/1VVK/a4uWkhJR+p 1BdXMCECnhoOzi0wupjEj3G0G2zY2YjKAlubLqwiNkbBtHOEzefqq6VTKRofs20N qwxDfInHSAymuGSP7188vLXVHvgc7FdRqiV6205hrjZhRx/+wdMKfVPaH7uklMx4 aBv5ZTbpmBQcwN9iFfKCg3587RKkXGbvk/pWc77j1jNcp8aGE0YCqhtpRV2epqks fJSPhbuK5x8DVZQTf7zwgbGzDq0rkvsUc6jGNPz5rMTOBjVB+lM= -----END CERTIFICATE-----Generated at Thu Dec 18 15:23:39 2025 by rpki-client