This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: v/LIoklm5iyUudM82AZPN1uL5GyeOwVSi6D0liGJHVw= Subject key identifier: 02:8B:33:FF:05:A1:45:53:96:46:5F:92:A3:5E:2F:9A:34:37:2E:2B Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 34C1AF7213B9767D04581D359174E462A9623925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01CC Signing time: Mon 29 Dec 2025 23:52:33 +0000 Manifest this update: Mon 29 Dec 2025 23:47:33 +0000 Manifest next update: Fri 02 Jan 2026 04:32:33 +0000 Files and hashes: 1: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: NWylWUAwtMaSNRIvefa1/LVY8jYO95Lmv8Fw+iLsOWA=) 2: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: m1QpsKWNC41Yh1C09h9LTHnCTbrVYQeuxu9fgYg+m8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 04:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c1:af:72:13:b9:76:7d:04:58:1d:35:91:74:e4:62:a9:62:39:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Dec 29 23:47:33 2025 GMT Not After : Jan 2 04:32:33 2026 GMT Subject: CN=028B33FF05A1455396465F92A35E2F9A34372E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:a5:1c:50:d2:3b:41:c9:e0:41:cf:66:b5: d2:f2:15:cf:51:a0:53:82:36:29:a5:e0:93:16:0f: 51:2e:55:14:bc:1d:71:2e:06:41:eb:da:e5:47:a6: cf:5d:45:8d:f3:68:a5:a0:6f:76:33:ae:75:c1:81: 45:1f:26:45:16:02:19:69:3c:03:d5:82:50:fd:f3: 1f:e6:7b:12:35:16:ab:e8:c6:6d:8a:63:f0:5e:c3: ed:ea:40:71:76:d2:8a:0a:76:ba:58:ab:6b:82:b8: 91:de:8d:26:83:c7:97:8d:d0:73:d9:63:c9:6a:b3: dc:24:a1:7b:6e:2b:2a:5e:2a:76:0e:f0:07:a3:db: d7:0e:e2:f7:2e:0f:ba:c6:67:ff:94:52:ad:ff:ee: 23:26:29:2e:e9:e0:94:d5:f7:60:96:f7:ed:47:25: 35:1f:c7:2a:70:3a:b5:65:c3:5c:3a:75:81:6e:07: 73:5e:78:e0:4b:3d:66:71:8b:99:55:83:1c:19:db: ec:e1:64:77:c2:a8:1e:18:d6:3e:81:e2:ad:74:65: 63:5c:08:29:6f:51:47:75:2e:fb:2c:5a:4a:92:6a: 01:5d:71:b8:44:70:0e:55:28:16:61:b4:23:da:06: 63:ee:b5:ad:98:61:28:44:66:ad:c4:e3:56:de:f7: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8B:33:FF:05:A1:45:53:96:46:5F:92:A3:5E:2F:9A:34:37:2E:2B X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:47:cf:88:66:9e:a2:9c:6e:c7:64:74:e5:42:77:e2:c7:7b: cf:bd:2f:b8:c2:a9:ba:7e:11:2d:fe:47:80:8a:4c:bc:c0:ef: 9c:42:91:c5:04:42:66:16:74:bd:a5:ed:29:01:bb:25:af:7a: b6:d3:97:0c:e2:17:36:cb:40:f8:7c:eb:a1:50:ba:12:e1:db: ee:65:1b:fd:ea:7d:63:59:34:8e:73:4b:23:8f:d2:e2:19:47: cb:9e:c7:98:2a:da:44:e4:af:a2:48:c5:86:d9:25:86:56:1b: 6f:13:e5:e3:9a:5a:46:2b:a8:b7:0c:de:4c:7d:f3:39:57:0f: 6f:f6:56:a8:46:57:8e:db:f8:7e:d1:c4:0e:72:c4:09:ee:10: da:dc:9b:04:62:22:8d:c2:5d:db:ae:73:54:14:55:be:3a:d3: 0e:4d:ec:23:75:89:ec:15:96:08:33:e4:f1:ac:69:c5:df:e9: f2:ae:17:7b:3d:82:0d:1e:a6:70:0d:61:3c:9a:28:8f:cd:a7: 3e:6f:00:af:62:67:b7:87:ce:1f:fd:2c:c2:aa:02:4a:51:52: 01:5d:ed:e2:de:d5:10:17:11:53:1a:ce:84:61:f4:cb:53:bc: 05:ab:5a:32:4f:cd:aa:d6:7f:28:3f:19:d7:62:e9:ce:c5:6b: 18:41:2f:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMGvchO5dn0EWB01kXTkYqliOSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNTEyMjkyMzQ3MzNaFw0yNjAxMDIwNDMyMzNaMDMxMTAvBgNV BAMTKDAyOEIzM0ZGMDVBMTQ1NTM5NjQ2NUY5MkEzNUUyRjlBMzQzNzJFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qqUcUNI7QcngQc9mtdLyFc9R oFOCNiml4JMWD1EuVRS8HXEuBkHr2uVHps9dRY3zaKWgb3YzrnXBgUUfJkUWAhlp PAPVglD98x/mexI1Fqvoxm2KY/Bew+3qQHF20ooKdrpYq2uCuJHejSaDx5eN0HPZ Y8lqs9wkoXtuKypeKnYO8Aej29cO4vcuD7rGZ/+UUq3/7iMmKS7p4JTV92CW9+1H JTUfxypwOrVlw1w6dYFuB3NeeOBLPWZxi5lVgxwZ2+zhZHfCqB4Y1j6B4q10ZWNc CClvUUd1LvssWkqSagFdcbhEcA5VKBZhtCPaBmPuta2YYShEZq3E41be92ZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAosz/wWhRVOWRl+So14vmjQ3LiswHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdHz4hmnqKcbsdkdOVCd+LHe8+9L7jCqbp+ ES3+R4CKTLzA75xCkcUEQmYWdL2l7SkBuyWverbTlwziFzbLQPh866FQuhLh2+5l G/3qfWNZNI5zSyOP0uIZR8uex5gq2kTkr6JIxYbZJYZWG28T5eOaWkYrqLcM3kx9 8zlXD2/2VqhGV47b+H7RxA5yxAnuENrcmwRiIo3CXduuc1QUVb460w5N7CN1iewV lggz5PGsacXf6fKuF3s9gg0epnANYTyaKI/Npz5vAK9iZ7eHzh/9LMKqAkpRUgFd 7eLe1RAXEVMazoRh9MtTvAWrWjJPzarWfyg/Gddi6c7FaxhBL0w= -----END CERTIFICATE-----Generated at Wed Dec 31 02:03:42 2025 by rpki-client