This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: r9Lt/RU06F1dI5xEVVHIu5qcRA0yCtjbwnnLccFV298= Subject key identifier: 67:A6:AC:F3:C7:D5:67:7E:EE:93:39:44:64:7E:2E:63:37:6D:66:A1 Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 01AF04FCB529AE465347BC863D00C228B14C389F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 23:31:11 +0000 Manifest this update: Thu 18 Dec 2025 23:26:11 +0000 Manifest next update: Mon 22 Dec 2025 02:54:11 +0000 Files and hashes: 1: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: iyUPZNkIeT0X3ASrIl57UeZsGv3tSYU2TLeLaaAVKkE=) 2: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 02:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:af:04:fc:b5:29:ae:46:53:47:bc:86:3d:00:c2:28:b1:4c:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Dec 18 23:26:11 2025 GMT Not After : Dec 22 02:54:11 2025 GMT Subject: CN=67A6ACF3C7D5677EEE933944647E2E63376D66A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:6b:e3:07:e4:a0:ec:47:a2:8f:e1:16:d2: 47:cc:d5:d1:ef:8f:4b:52:c9:7e:d1:4f:58:c3:a2: 17:84:88:ef:c5:5f:e0:b9:3d:f6:d8:91:37:c7:e3: 0b:5d:f3:6d:39:08:29:18:7a:22:e4:aa:c3:94:5b: 8c:18:97:24:aa:2d:89:77:d4:b7:b1:73:37:cc:d5: 83:4d:04:1d:57:bd:9b:d6:f4:c4:8e:3e:eb:65:4d: 4f:03:f9:69:c7:a2:16:67:67:d0:73:10:81:6f:51: b1:1c:9f:d8:1e:21:83:48:76:26:65:c5:2f:86:37: b1:c5:05:13:e8:37:13:b3:7e:12:e1:d4:6b:f7:e7: 77:7d:bf:cf:a1:ca:b8:d6:d3:d9:bf:63:28:df:d8: 81:73:fb:6a:ac:b4:96:9a:68:2a:53:1a:b3:3f:84: e0:e6:ee:bc:28:cb:58:ea:ac:45:1e:82:04:ca:f0: 9d:90:f3:a6:f4:1b:e8:24:15:de:fc:8c:33:d8:25: 4b:0d:e3:ef:48:65:9f:d0:e4:7e:f6:2d:46:bf:bb: ac:86:05:ff:8f:36:c4:f2:04:d5:2d:9f:45:85:f4: 02:71:0d:7c:f4:b9:d2:f3:e1:94:c0:35:b8:ae:26: 17:87:39:99:bf:5a:0a:62:6d:df:7b:78:89:31:0e: df:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A6:AC:F3:C7:D5:67:7E:EE:93:39:44:64:7E:2E:63:37:6D:66:A1 X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:5a:3f:43:5b:fc:7a:52:3c:ae:81:2d:9e:0a:b3:15:b0:2c: 69:33:e4:c5:58:a6:37:b9:ed:8e:0f:03:a3:27:ce:7d:8b:79: cd:c9:b5:53:cb:6d:6e:03:7a:43:62:68:8d:7a:78:45:7e:dc: f3:86:1a:23:ca:1b:66:1c:43:fe:06:f6:d6:b2:52:24:2b:86: 7e:11:31:ef:62:8c:93:62:75:46:c2:f8:fb:72:d2:78:36:62: 4f:7b:03:31:46:31:40:55:fc:7d:ff:9a:8f:81:1e:f9:df:0a: 75:68:5d:65:5f:42:75:0d:f3:ea:b6:0f:59:30:06:f5:8e:9a: c7:81:fc:9e:21:2c:52:66:c7:5d:b2:a4:99:36:cf:00:99:ee: 87:bc:d4:0a:49:87:7c:c4:d7:f9:88:59:c2:68:b1:c9:76:5b: eb:2f:d2:1c:ba:6f:dc:d0:98:eb:af:b5:61:4b:d0:5c:a1:53: fc:40:11:71:70:c4:ef:78:69:41:9e:0b:02:09:e7:dc:33:11: 9e:80:31:a0:d8:47:1a:28:29:d1:0e:bf:4f:36:36:f9:d9:15: 1b:58:7b:55:7a:22:e2:26:d3:68:d3:49:cf:d9:8a:90:fc:7e: f2:9c:0a:9d:f9:69:11:81:26:b0:5a:0b:d3:8c:70:56:28:cf: c3:53:c9:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAa8E/LUprkZTR7yGPQDCKLFMOJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTEyMTgyMzI2MTFaFw0yNTEyMjIwMjU0MTFaMDMxMTAvBgNV BAMTKDY3QTZBQ0YzQzdENTY3N0VFRTkzMzk0NDY0N0UyRTYzMzc2RDY2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggGvjB+Sg7Eeij+EW0kfM1dHv j0tSyX7RT1jDoheEiO/FX+C5PfbYkTfH4wtd8205CCkYeiLkqsOUW4wYlySqLYl3 1LexczfM1YNNBB1XvZvW9MSOPutlTU8D+WnHohZnZ9BzEIFvUbEcn9geIYNIdiZl xS+GN7HFBRPoNxOzfhLh1Gv353d9v8+hyrjW09m/Yyjf2IFz+2qstJaaaCpTGrM/ hODm7rwoy1jqrEUeggTK8J2Q86b0G+gkFd78jDPYJUsN4+9IZZ/Q5H72LUa/u6yG Bf+PNsTyBNUtn0WF9AJxDXz0udLz4ZTANbiuJheHOZm/Wgpibd97eIkxDt9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ6as88fVZ37ukzlEZH4uYzdtZqEwHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9aP0Nb/HpSPK6BLZ4KsxWwLGkz5MVYpje5 7Y4PA6Mnzn2Lec3JtVPLbW4DekNiaI16eEV+3POGGiPKG2YcQ/4G9tayUiQrhn4R Me9ijJNidUbC+Pty0ng2Yk97AzFGMUBV/H3/mo+BHvnfCnVoXWVfQnUN8+q2D1kw BvWOmseB/J4hLFJmx12ypJk2zwCZ7oe81ApJh3zE1/mIWcJoscl2W+sv0hy6b9zQ mOuvtWFL0FyhU/xAEXFwxO94aUGeCwIJ59wzEZ6AMaDYRxooKdEOv082NvnZFRtY e1V6IuIm02jTSc/ZipD8fvKcCp35aRGBJrBaC9OMcFYoz8NTyX0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:34 2025 by rpki-client