This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: ft2YdV9DaHSTqAqUrxsQvhmGZMXYvksFqj264Nnk4aQ= Subject key identifier: F4:C9:4E:DE:17:09:6F:A4:74:81:78:71:00:16:FD:38:87:ED:E6:7E Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 097F16261B885444AF2AFA01462229E522F00BF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01C6 Signing time: Wed 24 Dec 2025 17:00:04 +0000 Manifest this update: Wed 24 Dec 2025 16:55:04 +0000 Manifest next update: Sat 27 Dec 2025 21:35:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) 2: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: nfgaytLpZhB+A+X/LEd3bPW7XYE8eKsnAr8ceSmzx9o=) 3: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: gLiHyGd6WfmJC01zh8qXOegj/FVbvbjfIzy7JVajz2s=) 4: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7f:16:26:1b:88:54:44:af:2a:fa:01:46:22:29:e5:22:f0:0b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Dec 24 16:55:04 2025 GMT Not After : Dec 27 21:35:04 2025 GMT Subject: CN=F4C94EDE17096FA4748178710016FD3887EDE67E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:96:71:09:e0:ae:00:a3:54:bf:11:0c:30:4e: c6:bd:2a:89:2a:37:47:a3:c5:57:19:cd:fd:46:be: 04:25:2c:2d:3c:e5:1c:b1:9b:81:f6:4c:65:7d:61: 3e:73:9b:4f:83:2e:f6:3d:4f:98:14:75:43:ff:50: 5b:c4:ab:f5:92:b2:a2:5d:2d:c2:e5:36:b3:cb:18: e8:39:ee:a9:a9:c5:14:cf:59:6a:61:82:73:05:e6: 85:3f:fd:4f:3c:56:48:fd:55:21:23:4d:8b:aa:d0: 6e:ba:ba:44:9c:f5:ad:ac:6a:01:31:7b:87:48:53: f1:0f:e4:5e:ae:bd:26:75:0e:9c:03:8c:96:24:0a: 89:17:53:59:65:5a:1c:d6:d0:1e:b7:3b:b7:53:ef: cd:64:75:07:e7:14:c5:9a:f1:88:1d:1a:03:29:3c: 5b:dd:cd:4c:2b:28:40:19:5f:23:d0:b2:54:4b:97: 2a:b6:9c:f8:6f:13:f2:5f:cb:8c:76:36:17:28:04: 06:09:a1:d7:a8:5d:71:a8:51:88:1b:91:b9:c2:ce: d3:48:1d:ac:e6:da:ef:c7:d8:61:62:b5:25:4d:4f: 42:a9:08:1b:c6:1c:b8:f8:bd:ff:6b:e4:76:5c:0f: 48:9f:07:a8:45:f0:fb:3b:95:22:0a:a8:80:39:97: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C9:4E:DE:17:09:6F:A4:74:81:78:71:00:16:FD:38:87:ED:E6:7E X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:37:77:6c:0a:f0:74:18:20:97:87:d3:00:7a:84:bb:0a:c7: c9:a0:5c:c1:9b:7a:2d:3e:01:ba:9e:d3:69:5a:bd:d5:37:b6: 0f:fa:85:86:58:0b:8f:9c:a1:92:5f:91:51:89:68:e9:13:7f: a1:90:87:29:22:8b:77:2c:a5:b3:56:7c:25:11:f1:bf:88:e1: f7:35:93:42:9c:60:3b:b3:52:f8:36:90:18:f3:e5:c0:6f:6c: 3f:27:f7:bb:80:02:49:39:0b:a5:0b:29:35:85:62:3e:ac:bd: 59:78:23:9b:81:2e:4b:29:29:74:8b:79:96:c1:8c:da:63:7a: 11:cb:6c:b4:f1:4c:fe:67:82:87:5f:24:eb:1b:35:7c:5a:a6: 22:72:16:6e:88:7d:42:c9:f1:e3:8b:8f:58:9d:35:1e:79:9b: 4a:0e:5e:33:94:6c:9c:22:21:e5:d4:59:64:2b:53:a2:bc:fa: 19:f5:fb:fc:d2:85:37:e8:c8:c6:09:30:92:4c:00:2f:22:02: 7b:05:73:1c:53:31:ec:0c:a1:8d:15:cf:57:fa:75:36:98:aa: 6c:06:7e:b6:98:36:11:f3:61:7b:6b:de:1b:9d:18:85:17:dc: eb:25:c5:27:79:31:f6:2f:3e:e7:ec:34:25:bb:a2:3c:b2:d3: 37:a7:9f:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCX8WJhuIVESvKvoBRiIp5SLwC/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTEyMjQxNjU1MDRaFw0yNTEyMjcyMTM1MDRaMDMxMTAvBgNV BAMTKEY0Qzk0RURFMTcwOTZGQTQ3NDgxNzg3MTAwMTZGRDM4ODdFREU2N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflnEJ4K4Ao1S/EQwwTsa9Kokq N0ejxVcZzf1GvgQlLC085Ryxm4H2TGV9YT5zm0+DLvY9T5gUdUP/UFvEq/WSsqJd LcLlNrPLGOg57qmpxRTPWWphgnMF5oU//U88Vkj9VSEjTYuq0G66ukSc9a2sagEx e4dIU/EP5F6uvSZ1DpwDjJYkCokXU1llWhzW0B63O7dT781kdQfnFMWa8YgdGgMp PFvdzUwrKEAZXyPQslRLlyq2nPhvE/Jfy4x2NhcoBAYJodeoXXGoUYgbkbnCztNI Hazm2u/H2GFitSVNT0KpCBvGHLj4vf9r5HZcD0ifB6hF8Ps7lSIKqIA5lyvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9MlO3hcJb6R0gXhxABb9OIft5n4wHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMo3d2wK8HQYIJeH0wB6hLsKx8mgXMGbei0+ Abqe02lavdU3tg/6hYZYC4+coZJfkVGJaOkTf6GQhykii3cspbNWfCUR8b+I4fc1 k0KcYDuzUvg2kBjz5cBvbD8n97uAAkk5C6ULKTWFYj6svVl4I5uBLkspKXSLeZbB jNpjehHLbLTxTP5ngodfJOsbNXxapiJyFm6IfULJ8eOLj1idNR55m0oOXjOUbJwi IeXUWWQrU6K8+hn1+/zShTfoyMYJMJJMAC8iAnsFcxxTMewMoY0Vz1f6dTaYqmwG fraYNhHzYXtr3hudGIUX3OslxSd5MfYvPufsNCW7ojyy0zennys= -----END CERTIFICATE-----Generated at Wed Dec 24 23:29:33 2025 by rpki-client