This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: hCUQ2y1NHR6xk3JIKKnpkCc4xJHHoOSNj6O+SC8Na6o= Subject key identifier: A6:0D:EE:44:A1:19:BD:45:6A:85:28:BC:9F:D9:11:64:C6:B6:E2:B6 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 7759565FC6C17B4F96E8B0BB40D4CE611C3B4746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 015B Signing time: Wed 24 Dec 2025 16:50:04 +0000 Manifest this update: Wed 24 Dec 2025 16:45:04 +0000 Manifest next update: Sun 28 Dec 2025 01:29:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: fUaAv+eHboftmQ54F+Pw71O8WyyLvUQgQb075apHYl0=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:29:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:59:56:5f:c6:c1:7b:4f:96:e8:b0:bb:40:d4:ce:61:1c:3b:47:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Dec 24 16:45:04 2025 GMT Not After : Dec 28 01:29:04 2025 GMT Subject: CN=A60DEE44A119BD456A8528BC9FD91164C6B6E2B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:bc:85:fc:61:49:b7:37:11:5b:a8:0d:62: ab:c4:30:8f:32:b7:c4:ef:63:b5:73:f5:6f:de:52: 58:35:c4:d8:b3:52:13:86:bf:a2:19:4c:7a:1b:95: 6a:83:33:ae:8b:9a:32:85:c7:a9:a3:11:e2:88:d5: ac:df:af:cb:96:25:ff:9a:8a:ad:f2:13:5c:ba:f8: 42:22:0d:7f:37:ab:7a:44:4b:dc:6d:0f:23:8e:53: b1:7f:21:32:88:76:fa:0f:74:01:11:05:23:2a:7c: 78:d6:6e:f8:64:65:50:4c:1b:ce:01:bb:53:23:14: d5:14:62:87:c8:de:37:7f:42:e8:3e:a6:9d:9e:46: dc:fd:c3:58:b9:8b:79:65:4a:b3:b8:8c:ff:8f:66: 3c:29:28:0c:5c:f2:92:15:ce:d1:bb:45:13:a3:fa: 41:c8:5e:f2:11:fb:c7:46:fb:31:14:9c:32:33:e6: d4:56:de:50:eb:b0:43:c0:cd:95:18:ce:15:35:6a: aa:a5:3b:c5:4f:81:a6:ec:e6:85:3a:5e:82:f4:18: 47:81:63:e4:61:b2:0e:bc:f2:cd:1d:4a:bc:3d:37: 50:24:f4:5b:c4:54:6b:29:5a:7c:b3:1f:55:00:89: 35:17:a3:33:26:14:16:c8:a5:54:a3:bf:4c:35:a2: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0D:EE:44:A1:19:BD:45:6A:85:28:BC:9F:D9:11:64:C6:B6:E2:B6 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a4:b9:17:c5:b4:91:f2:81:d3:aa:22:49:df:97:ef:53:0a: bd:7b:91:cc:20:f4:af:88:97:9a:d5:e3:9f:16:48:33:4a:e9: 43:fa:a4:d5:8e:9a:70:94:75:e3:d2:8b:f9:61:7d:a0:58:9e: 1f:1d:fc:04:42:7f:c8:c0:41:60:ad:bb:f0:1e:35:fe:00:22: 60:67:01:f6:33:88:43:40:4b:b6:5f:54:af:6d:58:0f:a3:c4: 04:19:fa:8e:be:d7:aa:b5:fe:68:06:e6:86:b7:f6:3b:53:2c: c7:03:c2:2a:03:58:17:45:9e:cb:ac:af:00:35:03:df:29:47: a0:38:6f:71:88:c9:fb:fc:0e:dd:31:92:89:3d:74:b8:02:e4: 33:55:c8:a8:cd:93:90:97:3b:1b:ad:7d:57:7e:20:75:b9:86: 00:de:7c:0b:3d:5f:73:c7:84:ea:a8:64:51:20:63:54:46:f8: 1a:65:50:12:e5:3e:3d:46:9f:15:d1:50:46:46:4b:00:3e:f9: d6:c7:9e:f0:91:cd:94:62:c5:1e:ab:d6:94:09:f8:d7:48:66: b9:2b:b0:64:3b:4e:12:7a:5a:2f:2c:25:20:d9:c5:df:4a:cd: 51:30:ff:b0:30:2a:1b:2f:90:61:94:da:b5:9b:8c:78:41:ca: fe:1b:f2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1lWX8bBe0+W6LC7QNTOYRw7R0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTEyMjQxNjQ1MDRaFw0yNTEyMjgwMTI5MDRaMDMxMTAvBgNV BAMTKEE2MERFRTQ0QTExOUJENDU2QTg1MjhCQzlGRDkxMTY0QzZCNkUyQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq27yF/GFJtzcRW6gNYqvEMI8y t8TvY7Vz9W/eUlg1xNizUhOGv6IZTHoblWqDM66LmjKFx6mjEeKI1azfr8uWJf+a iq3yE1y6+EIiDX83q3pES9xtDyOOU7F/ITKIdvoPdAERBSMqfHjWbvhkZVBMG84B u1MjFNUUYofI3jd/Qug+pp2eRtz9w1i5i3llSrO4jP+PZjwpKAxc8pIVztG7RROj +kHIXvIR+8dG+zEUnDIz5tRW3lDrsEPAzZUYzhU1aqqlO8VPgabs5oU6XoL0GEeB Y+Rhsg688s0dSrw9N1Ak9FvEVGspWnyzH1UAiTUXozMmFBbIpVSjv0w1om6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpg3uRKEZvUVqhSi8n9kRZMa24rYwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKkuRfFtJHygdOqIknfl+9TCr17kcwg9K+I l5rV458WSDNK6UP6pNWOmnCUdePSi/lhfaBYnh8d/ARCf8jAQWCtu/AeNf4AImBn AfYziENAS7ZfVK9tWA+jxAQZ+o6+16q1/mgG5oa39jtTLMcDwioDWBdFnsusrwA1 A98pR6A4b3GIyfv8Dt0xkok9dLgC5DNVyKjNk5CXOxutfVd+IHW5hgDefAs9X3PH hOqoZFEgY1RG+BplUBLlPj1GnxXRUEZGSwA++dbHnvCRzZRixR6r1pQJ+NdIZrkr sGQ7ThJ6Wi8sJSDZxd9KzVEw/7AwKhsvkGGU2rWbjHhByv4b8oQ= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:17 2025 by rpki-client