This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: Q0HPysJNt83AenIu7mddO6aTRLg+0lejcvT/lj0wtf0= Subject key identifier: 60:43:0C:57:56:C6:AC:39:65:4F:E7:82:BF:CC:DF:B9:5D:A2:C5:5F Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 5E95415CAC092BD551A830775A4E5F563AB3CC59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0224 Signing time: Fri 19 Dec 2025 12:40:01 +0000 Manifest this update: Fri 19 Dec 2025 12:35:01 +0000 Manifest next update: Tue 23 Dec 2025 00:22:01 +0000 Files and hashes: 1: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 2: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 3: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 4: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: If0FIVWf2VKXzHn/w3r2p3IiRXU1tR4mEovGcJ4WSTo=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:95:41:5c:ac:09:2b:d5:51:a8:30:77:5a:4e:5f:56:3a:b3:cc:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Dec 19 12:35:01 2025 GMT Not After : Dec 23 00:22:01 2025 GMT Subject: CN=60430C5756C6AC39654FE782BFCCDFB95DA2C55F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:41:83:80:ce:79:73:fc:c8:14:96:3a:88:e7: e5:63:ad:c0:60:c9:f6:1b:18:d0:45:f6:f4:b3:1a: c6:e7:06:2e:53:a5:55:bb:60:46:09:61:ad:55:a9: e4:6a:18:b0:04:90:e0:35:14:7b:14:da:a5:58:cd: e0:98:ac:43:40:cf:f2:d6:4c:3a:0f:b5:7e:ab:ea: c5:16:68:bd:4c:ea:7b:1f:a6:83:fc:23:cb:e7:dc: e2:12:6d:49:7d:84:a1:94:ba:71:82:ea:bb:5a:3b: a6:2c:c4:3c:17:2d:7d:5d:e6:25:7b:13:17:1e:46: f1:d0:50:4a:7d:47:14:8e:d4:2c:c7:06:ce:89:0a: db:b8:0c:bd:d7:43:13:dd:36:db:db:ba:b5:66:d1: 4f:06:8a:dc:f0:4f:bc:e8:9f:67:02:b6:e8:8b:8d: 4c:20:59:93:f8:3c:27:75:26:be:16:3f:03:d6:2a: 15:a7:2e:c9:b5:79:a2:20:4a:39:25:fa:7d:a3:da: 60:e6:14:55:e0:14:65:d6:c7:06:af:06:a5:8f:3c: 81:01:e9:9a:51:fa:be:28:90:37:39:a7:a9:5e:83: 7b:d3:65:06:c6:c9:32:6d:64:ac:45:90:bc:70:59: d9:30:8a:96:75:d0:f2:5e:d5:1c:71:88:82:25:d1: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:43:0C:57:56:C6:AC:39:65:4F:E7:82:BF:CC:DF:B9:5D:A2:C5:5F X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:f1:9c:2a:be:4e:10:42:a0:bd:dc:85:c2:67:cb:54:51: f0:b9:c6:49:b6:0f:7a:9b:cd:f4:16:f2:85:7b:3e:13:5c:98: 9b:5f:c3:dc:49:21:cb:9a:a7:e6:5a:1d:a5:a6:38:df:5d:7e: fc:13:03:34:8f:6b:48:eb:3e:bf:73:8e:3e:79:66:b2:99:05: 68:29:7a:fe:40:75:4d:c7:41:8d:8f:9e:e1:6c:09:c2:d4:0e: b7:d9:dd:48:93:bf:0b:b2:e4:f8:bd:f5:a8:7f:47:a8:dd:5a: b0:e7:70:d4:ba:e3:20:da:10:8a:02:92:1b:1a:8b:d2:61:2d: 30:c2:e6:33:c0:c3:28:bb:d7:25:60:5c:d4:f5:36:0c:90:47: f3:ba:f3:8e:23:19:1e:dd:49:bf:29:18:77:4b:5f:c5:59:6a: e8:cd:3d:90:7b:ce:b8:85:6a:76:e5:41:f4:e1:d3:d1:3f:85: 40:24:86:3b:41:9b:86:ca:95:e7:55:8d:97:9b:c2:2c:b8:49: b3:2b:7d:b8:bd:68:b7:80:5f:16:59:62:c5:74:db:42:d3:04: 3a:8d:42:38:07:6d:b6:57:54:1a:c1:d2:03:97:99:2b:34:ae: af:d0:33:a5:3e:04:ad:d4:95:f1:de:5a:50:72:e6:55:bf:af: 14:14:b5:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpVBXKwJK9VRqDB3Wk5fVjqzzFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTEyMTkxMjM1MDFaFw0yNTEyMjMwMDIyMDFaMDMxMTAvBgNV BAMTKDYwNDMwQzU3NTZDNkFDMzk2NTRGRTc4MkJGQ0NERkI5NURBMkM1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGQYOAznlz/MgUljqI5+VjrcBg yfYbGNBF9vSzGsbnBi5TpVW7YEYJYa1VqeRqGLAEkOA1FHsU2qVYzeCYrENAz/LW TDoPtX6r6sUWaL1M6nsfpoP8I8vn3OISbUl9hKGUunGC6rtaO6YsxDwXLX1d5iV7 ExceRvHQUEp9RxSO1CzHBs6JCtu4DL3XQxPdNtvburVm0U8GitzwT7zon2cCtuiL jUwgWZP4PCd1Jr4WPwPWKhWnLsm1eaIgSjkl+n2j2mDmFFXgFGXWxwavBqWPPIEB 6ZpR+r4okDc5p6leg3vTZQbGyTJtZKxFkLxwWdkwipZ10PJe1RxxiIIl0V97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYEMMV1bGrDllT+eCv8zfuV2ixV8wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfa8Zwqvk4QQqC93IXCZ8tUUfC5xkm2D3qb zfQW8oV7PhNcmJtfw9xJIcuap+ZaHaWmON9dfvwTAzSPa0jrPr9zjj55ZrKZBWgp ev5AdU3HQY2PnuFsCcLUDrfZ3UiTvwuy5Pi99ah/R6jdWrDncNS64yDaEIoCkhsa i9JhLTDC5jPAwyi71yVgXNT1NgyQR/O6844jGR7dSb8pGHdLX8VZaujNPZB7zriF anblQfTh09E/hUAkhjtBm4bKledVjZebwiy4SbMrfbi9aLeAXxZZYsV020LTBDqN QjgHbbZXVBrB0gOXmSs0rq/QM6U+BK3UlfHeWlBy5lW/rxQUtbk= -----END CERTIFICATE-----Generated at Mon Dec 22 00:13:17 2025 by rpki-client