This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: pp3c5Kx5EJi2k0Jw4c974Vh06yfgyZpVHXJOrvWL6ZU= Subject key identifier: E5:8F:7E:52:3B:E2:23:BE:4E:DC:0F:5E:1F:1C:4A:EC:76:33:0A:62 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 025616AA390832E10D8ABE599EF91F27F81A787F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 0136 Signing time: Thu 18 Dec 2025 05:30:02 +0000 Manifest this update: Thu 18 Dec 2025 05:25:02 +0000 Manifest next update: Sun 21 Dec 2025 06:40:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: hfo2SPGJgLQcMTNhXjRZ69yalJdvqN4/5MTpnZFkiIw=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:56:16:aa:39:08:32:e1:0d:8a:be:59:9e:f9:1f:27:f8:1a:78:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Dec 18 05:25:02 2025 GMT Not After : Dec 21 06:40:02 2025 GMT Subject: CN=E58F7E523BE223BE4EDC0F5E1F1C4AEC76330A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:e1:69:ab:0e:12:58:56:dd:27:16:13:3e: 72:85:0c:ca:a7:c1:5c:39:2b:81:91:05:07:16:e2: 20:7a:de:48:ea:c8:c0:ed:6e:3a:c2:da:af:3a:04: 5e:a6:62:21:7c:ce:0f:e2:d5:de:87:c6:f5:f8:32: a7:45:04:06:bf:ff:5b:19:b2:8a:f1:43:89:56:8e: 3a:5c:9c:85:90:bd:67:12:f3:65:49:51:ff:64:f6: b5:4e:9b:57:27:2c:cd:40:97:94:13:3f:81:a6:cb: 3a:9b:0f:1d:a8:62:72:85:b5:c7:88:85:ac:c3:2a: 2e:76:4c:ab:9a:a7:31:ff:b7:94:fc:34:96:83:3f: e9:64:25:5d:8b:3a:99:99:fd:61:60:34:23:0a:72: 78:31:1a:78:66:34:02:84:c3:00:c2:16:e4:b1:da: 93:67:18:77:34:39:29:6d:43:bf:94:08:b8:20:38: eb:2d:6d:6d:3e:b6:05:42:c1:63:f3:c1:d4:0d:69: b7:ca:be:24:1a:30:2d:f7:b6:8c:9b:8a:84:4c:63: bc:76:6e:b8:46:9d:ce:c8:76:f1:85:67:13:61:fd: 57:81:78:cb:b5:94:2e:b0:ac:f9:93:67:d2:f3:0e: 3d:9c:55:f3:a2:88:63:81:0d:80:39:62:98:04:91: 44:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:7E:52:3B:E2:23:BE:4E:DC:0F:5E:1F:1C:4A:EC:76:33:0A:62 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e1:1f:6d:1c:50:e3:73:eb:76:e0:51:5d:4d:ed:6d:40:6d: 3e:b4:2f:e5:94:a7:04:8f:bd:8a:c3:1c:1c:70:dc:b9:b3:04: 01:20:2c:50:d6:d0:4e:1e:4f:ac:85:02:5a:63:a6:35:fa:03: 0e:70:85:5b:4d:a6:3d:55:c1:cd:0b:77:6c:40:05:45:65:20: c5:5a:49:4f:61:01:b9:b5:4f:f3:5c:58:08:ba:1c:08:9d:84: 33:82:7e:4f:a9:4b:b1:b7:7c:37:0a:47:e8:9b:35:d8:ee:72: 3e:d0:e1:a9:6f:cc:94:47:6e:c7:1f:cd:7a:b9:6e:a4:c7:07: cc:66:c9:e0:14:28:96:4d:62:5a:5e:83:fd:a3:b6:1d:df:0c: d5:f1:40:53:3e:41:ca:16:da:84:5b:3f:63:4f:dd:c0:1b:92: cd:53:72:c5:b3:4a:6f:ce:a4:5e:5a:7d:e2:06:c5:f9:01:d1: c4:3c:11:1e:2f:e9:10:15:7a:1e:bb:cd:20:4c:2d:d9:22:0e: 36:94:87:11:fe:b6:e6:cc:32:39:c8:31:56:e8:25:8b:a3:b3: de:ea:2d:de:bd:61:42:7b:83:4c:c3:71:5d:4d:5c:48:bf:e5: 7e:a7:3d:26:b7:c8:f3:f0:5c:8a:dc:a5:54:9e:4f:29:31:b4: 98:5c:cf:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAlYWqjkIMuENir5ZnvkfJ/gaeH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTEyMTgwNTI1MDJaFw0yNTEyMjEwNjQwMDJaMDMxMTAvBgNV BAMTKEU1OEY3RTUyM0JFMjIzQkU0RURDMEY1RTFGMUM0QUVDNzYzMzBBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTw+Fpqw4SWFbdJxYTPnKFDMqn wVw5K4GRBQcW4iB63kjqyMDtbjrC2q86BF6mYiF8zg/i1d6HxvX4MqdFBAa//1sZ sorxQ4lWjjpcnIWQvWcS82VJUf9k9rVOm1cnLM1Al5QTP4GmyzqbDx2oYnKFtceI hazDKi52TKuapzH/t5T8NJaDP+lkJV2LOpmZ/WFgNCMKcngxGnhmNAKEwwDCFuSx 2pNnGHc0OSltQ7+UCLggOOstbW0+tgVCwWPzwdQNabfKviQaMC33toybioRMY7x2 brhGnc7IdvGFZxNh/VeBeMu1lC6wrPmTZ9LzDj2cVfOiiGOBDYA5YpgEkUSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Y9+UjviI75O3A9eHxxK7HYzCmIwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvhH20cUONz63bgUV1N7W1AbT60L+WUpwSP vYrDHBxw3LmzBAEgLFDW0E4eT6yFAlpjpjX6Aw5whVtNpj1Vwc0Ld2xABUVlIMVa SU9hAbm1T/NcWAi6HAidhDOCfk+pS7G3fDcKR+ibNdjucj7Q4alvzJRHbscfzXq5 bqTHB8xmyeAUKJZNYlpeg/2jth3fDNXxQFM+QcoW2oRbP2NP3cAbks1TcsWzSm/O pF5afeIGxfkB0cQ8ER4v6RAVeh67zSBMLdkiDjaUhxH+tubMMjnIMVboJYujs97q Ld69YUJ7g0zDcV1NXEi/5X6nPSa3yPPwXIrcpVSeTykxtJhczxQ= -----END CERTIFICATE-----Generated at Fri Dec 19 16:50:28 2025 by rpki-client