This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: aZJ4Fq4D4nlo9f84S6iGuENdvzi3Cc0/FRf28RTZxYc= Subject key identifier: 9F:2A:E9:21:A7:25:DA:DC:8E:77:F9:DD:52:40:61:40:DC:FA:F8:A6 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 4C57A2D5AD5D1F0E3DF45CD05C852AEE2D5A1BF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: D0 Signing time: Fri 19 Dec 2025 18:10:53 +0000 Manifest this update: Fri 19 Dec 2025 18:05:53 +0000 Manifest next update: Mon 22 Dec 2025 22:11:53 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: M1T5hkfk0Bo8q4+8iZbSF7CfxSVsfUKLi8KMCWtiCRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:57:a2:d5:ad:5d:1f:0e:3d:f4:5c:d0:5c:85:2a:ee:2d:5a:1b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Dec 19 18:05:53 2025 GMT Not After : Dec 22 22:11:53 2025 GMT Subject: CN=9F2AE921A725DADC8E77F9DD52406140DCFAF8A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:37:da:07:4c:92:0d:55:0b:36:7a:d6:83:83: 83:f4:ca:03:75:3c:44:67:fd:74:0c:b7:a2:40:b6: 97:c8:dc:c3:fc:4f:14:11:35:32:bd:7a:1b:64:ff: bd:f5:03:26:19:ae:c4:98:c3:4a:c7:67:a0:3c:d2: 21:e6:38:b7:bf:71:fe:3b:44:8e:d6:89:e6:37:8e: 12:d1:9d:67:e8:76:ff:03:99:d3:b2:43:29:0b:2b: ac:5f:c1:c6:56:3b:7b:d6:ee:f4:42:f1:76:f5:a7: cf:e7:92:6e:c8:8e:ae:bb:de:6d:f2:f9:69:21:d2: 62:9d:1c:7f:b8:4b:83:e8:0c:32:04:e8:42:6c:bb: 13:4a:83:47:55:66:0e:11:af:5b:a7:c7:03:5a:9c: c0:3f:9b:15:b2:06:0f:35:22:6f:50:a1:42:ea:5d: 77:5e:99:b6:76:c0:ca:c6:66:96:b2:20:19:5d:0e: 7d:57:ed:ca:c9:7d:38:a3:bd:1b:eb:51:8f:5b:ac: 80:73:26:93:b9:1b:ae:82:d4:d8:22:39:3b:91:8c: db:e6:a6:f3:82:8e:f2:47:1a:85:be:8d:fa:27:2e: c6:08:ac:ae:39:98:f9:7f:64:38:a0:fd:8d:a2:5d: 40:5d:16:1a:a4:ca:91:c3:af:67:be:a0:30:ef:c5: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:E9:21:A7:25:DA:DC:8E:77:F9:DD:52:40:61:40:DC:FA:F8:A6 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:32:f2:47:89:88:9d:2a:12:85:79:d1:d3:9b:54:a4:2b: b1:aa:2f:d5:6b:5d:42:13:86:6e:ab:4d:05:34:05:3c:08:d7: 83:06:1b:5a:22:b0:fc:3c:af:a6:ec:85:14:c5:78:f5:90:8f: cb:9d:b6:d8:37:d5:0b:db:00:fb:4d:bf:77:6e:14:cc:07:32: 21:3c:9b:55:11:0d:33:aa:07:c2:d1:2a:08:88:3f:9c:a3:5b: 72:5b:29:34:eb:29:96:e4:22:ca:48:69:44:e2:02:0f:35:5a: 3a:f0:a0:2e:38:5a:6d:0e:f2:ca:e2:0c:16:57:35:b5:23:28: 9a:7f:b7:e4:19:e5:5e:8f:cd:7b:5e:8c:15:c3:fc:f8:b1:56: 06:d5:4a:00:d5:1b:d1:84:18:c0:07:5f:87:1a:05:eb:da:22: 35:56:6d:8b:19:ff:91:83:31:03:e2:bb:7b:8b:4d:a0:79:e7: 9c:ef:4e:38:09:03:45:61:12:8d:b4:ff:0b:93:47:60:3a:a9: c4:4a:35:20:d7:f0:85:2d:3e:57:a4:19:c7:ea:ed:e3:4d:27: 49:e1:c2:3f:dc:a3:ca:4c:08:4a:8b:61:35:11:cb:70:92:f4: 6b:6a:f3:2a:03:99:da:03:f5:0a:e0:89:66:4b:13:e7:b6:4c: 78:bb:bd:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFei1a1dHw499FzQXIUq7i1aG/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNTEyMTkxODA1NTNaFw0yNTEyMjIyMjExNTNaMDMxMTAvBgNV BAMTKDlGMkFFOTIxQTcyNURBREM4RTc3RjlERDUyNDA2MTQwRENGQUY4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqN9oHTJINVQs2etaDg4P0ygN1 PERn/XQMt6JAtpfI3MP8TxQRNTK9ehtk/731AyYZrsSYw0rHZ6A80iHmOLe/cf47 RI7WieY3jhLRnWfodv8DmdOyQykLK6xfwcZWO3vW7vRC8Xb1p8/nkm7Ijq673m3y +Wkh0mKdHH+4S4PoDDIE6EJsuxNKg0dVZg4Rr1unxwNanMA/mxWyBg81Im9QoULq XXdembZ2wMrGZpayIBldDn1X7crJfTijvRvrUY9brIBzJpO5G66C1NgiOTuRjNvm pvOCjvJHGoW+jfonLsYIrK45mPl/ZDig/Y2iXUBdFhqkypHDr2e+oDDvxc6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyrpIacl2tyOd/ndUkBhQNz6+KYwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBBMvJHiYidKhKFedHTm1SkK7GqL9VrXUIT hm6rTQU0BTwI14MGG1oisPw8r6bshRTFePWQj8udttg31QvbAPtNv3duFMwHMiE8 m1URDTOqB8LRKgiIP5yjW3JbKTTrKZbkIspIaUTiAg81WjrwoC44Wm0O8sriDBZX NbUjKJp/t+QZ5V6PzXtejBXD/PixVgbVSgDVG9GEGMAHX4caBevaIjVWbYsZ/5GD MQPiu3uLTaB555zvTjgJA0VhEo20/wuTR2A6qcRKNSDX8IUtPlekGcfq7eNNJ0nh wj/co8pMCEqLYTURy3CS9Gtq8yoDmdoD9QrgiWZLE+e2THi7vTA= -----END CERTIFICATE-----Generated at Sun Dec 21 13:58:09 2025 by rpki-client