This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: pe50TIJDOhuaCREbzLHQrrS5VFCqbIMgBhS1igMT4SM= Subject key identifier: D1:FC:06:F7:C9:2B:97:CF:A9:56:E2:15:DC:BA:02:46:1D:63:BC:F7 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 3BDCAD56E352717D2C255EDAB09E955DA1350DC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0148 Signing time: Wed 17 Dec 2025 23:11:26 +0000 Manifest this update: Wed 17 Dec 2025 23:06:26 +0000 Manifest next update: Sun 21 Dec 2025 02:09:26 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: Ldxfsy/msTjOSypXwQ33Fr9iE+LB4YGndiwWKQ3OCpA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:dc:ad:56:e3:52:71:7d:2c:25:5e:da:b0:9e:95:5d:a1:35:0d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Dec 17 23:06:26 2025 GMT Not After : Dec 21 02:09:26 2025 GMT Subject: CN=D1FC06F7C92B97CFA956E215DCBA02461D63BCF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4a:4b:58:4b:08:db:14:78:d1:8d:33:c1:8c: 54:49:62:b2:db:2b:07:26:f6:2d:33:34:12:a7:54: 6c:4c:3c:af:46:0e:bf:a0:c1:ab:cc:91:07:5c:52: 6f:ed:a5:b6:3b:53:d4:97:bc:db:30:6f:4c:a2:a5: 48:14:76:36:53:fa:63:26:c0:78:3a:ae:5c:29:6d: 52:20:40:88:fc:0f:71:fc:de:c1:4e:61:a7:e5:d7: f5:99:97:52:26:2a:87:d0:45:d5:77:7c:82:27:0d: 40:f0:5b:f8:c0:53:84:14:d1:7f:ae:3b:c2:64:54: fc:7e:db:9b:53:d1:b5:93:3f:e7:65:cd:05:8e:67: 43:53:78:49:f6:7b:73:33:ce:72:49:55:77:58:f2: 92:ae:8f:15:cc:5b:3f:0e:23:f4:f1:9e:eb:e4:8c: f1:ce:39:98:d9:62:ce:0f:ef:0a:43:a8:65:c0:f2: 2e:70:80:df:ed:67:cc:1a:19:29:f2:20:aa:65:ce: 0b:f7:39:69:02:94:1d:12:9a:77:e6:aa:d7:2b:3f: de:88:dd:56:54:43:1e:e2:93:5c:d0:f8:c7:bc:5b: 99:a2:19:0d:c4:85:99:7d:1a:62:2a:09:c5:ad:38: 42:d0:51:47:1e:df:c8:19:cb:22:f7:b5:ef:db:94: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FC:06:F7:C9:2B:97:CF:A9:56:E2:15:DC:BA:02:46:1D:63:BC:F7 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:96:b6:fa:12:2d:5e:68:3f:09:3b:c3:ed:7f:c8:54:96:98: 13:56:45:b2:9f:c5:ca:38:6a:22:be:f7:d1:f1:1b:6f:4f:0c: 79:a5:8a:94:c9:b6:e0:81:da:85:62:e5:99:72:0d:2c:35:c0: 50:da:d9:dc:dc:96:30:8d:78:da:30:bf:7d:a4:45:93:38:b8: e8:43:c9:d8:8a:13:e1:0b:4a:bc:2e:73:c3:21:34:b1:53:db: 4b:20:97:f4:9a:d8:28:45:b5:a3:a5:49:99:30:a1:dd:4f:a7: 05:45:54:84:47:f3:44:c2:9d:8a:6e:93:3f:61:92:2d:b0:69: 6e:8c:13:1e:15:6a:ac:6a:2d:e4:54:c9:45:b9:b1:48:53:90: 54:cc:1b:a8:10:ef:9a:bb:b9:04:f9:11:6b:ce:27:45:f9:d2: 81:4e:40:96:d7:25:fc:e0:1a:0d:ef:d1:52:2a:ec:70:fc:05: 52:bf:c6:e7:b1:7d:fd:16:1c:95:30:2a:06:0b:f3:57:bf:27: 5c:53:38:5f:4c:a4:79:44:27:fe:51:cd:1c:29:02:07:c6:15: 3b:8d:33:cb:fd:2a:1d:5e:de:9e:c7:5c:c3:12:35:1f:c5:88: e1:8c:88:ea:01:28:2b:26:f8:ab:11:3b:fb:95:4b:05:94:b6: c6:f9:c8:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO9ytVuNScX0sJV7asJ6VXaE1DcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTEyMTcyMzA2MjZaFw0yNTEyMjEwMjA5MjZaMDMxMTAvBgNV BAMTKEQxRkMwNkY3QzkyQjk3Q0ZBOTU2RTIxNURDQkEwMjQ2MUQ2M0JDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1SktYSwjbFHjRjTPBjFRJYrLb Kwcm9i0zNBKnVGxMPK9GDr+gwavMkQdcUm/tpbY7U9SXvNswb0yipUgUdjZT+mMm wHg6rlwpbVIgQIj8D3H83sFOYafl1/WZl1ImKofQRdV3fIInDUDwW/jAU4QU0X+u O8JkVPx+25tT0bWTP+dlzQWOZ0NTeEn2e3MzznJJVXdY8pKujxXMWz8OI/Txnuvk jPHOOZjZYs4P7wpDqGXA8i5wgN/tZ8waGSnyIKplzgv3OWkClB0SmnfmqtcrP96I 3VZUQx7ik1zQ+Me8W5miGQ3EhZl9GmIqCcWtOELQUUce38gZyyL3te/blKjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0fwG98krl8+pVuIV3LoCRh1jvPcwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmWtvoSLV5oPwk7w+1/yFSWmBNWRbKfxco4 aiK+99HxG29PDHmlipTJtuCB2oVi5ZlyDSw1wFDa2dzcljCNeNowv32kRZM4uOhD ydiKE+ELSrwuc8MhNLFT20sgl/Sa2ChFtaOlSZkwod1PpwVFVIRH80TCnYpukz9h ki2waW6MEx4VaqxqLeRUyUW5sUhTkFTMG6gQ75q7uQT5EWvOJ0X50oFOQJbXJfzg Gg3v0VIq7HD8BVK/xuexff0WHJUwKgYL81e/J1xTOF9MpHlEJ/5RzRwpAgfGFTuN M8v9Kh1e3p7HXMMSNR/FiOGMiOoBKCsm+KsRO/uVSwWUtsb5yGo= -----END CERTIFICATE-----Generated at Fri Dec 19 11:35:14 2025 by rpki-client