This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: QrWI/dMXsVZGOa5YnaE6UR0X8J3S4X1+P1Ac/2wZXcU= Subject key identifier: B7:78:4F:C4:7D:69:C7:BA:F4:F6:33:A4:05:10:69:EB:C8:C7:7A:28 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 367922CAB8470EB9108E5F5993D9C25099046E3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0377 Signing time: Wed 17 Dec 2025 05:52:27 +0000 Manifest this update: Wed 17 Dec 2025 05:47:27 +0000 Manifest next update: Sat 20 Dec 2025 16:38:27 +0000 Files and hashes: 1: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: 7eBUs1sV9e7ONXTCLI+H4+iMeuqcTqSlC+A56IaDcpo=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 4: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:79:22:ca:b8:47:0e:b9:10:8e:5f:59:93:d9:c2:50:99:04:6e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Dec 17 05:47:27 2025 GMT Not After : Dec 20 16:38:27 2025 GMT Subject: CN=B7784FC47D69C7BAF4F633A4051069EBC8C77A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:0f:bb:27:d3:b4:1e:d6:6a:cc:b7:61:1f: 94:3c:b2:e3:95:c2:23:a8:4e:02:e0:73:e9:d5:1d: df:1e:47:11:a5:f6:76:05:84:95:88:e0:dc:5e:23: 2a:57:9c:a8:41:fb:32:69:0e:5e:f2:92:92:e7:f3: 02:8d:6a:6d:72:d0:b0:d7:d6:59:c8:00:55:53:9d: a2:29:20:13:ac:ec:04:69:d0:88:85:3b:86:ce:23: 90:1a:80:f9:f3:87:8e:f7:c4:40:fa:ad:5b:bc:69: 78:87:2c:1b:da:38:6c:24:be:4c:1a:0b:ce:00:22: d0:00:0d:98:03:36:08:86:4e:91:2b:88:45:da:7a: b0:dc:f3:b0:40:60:99:09:b3:43:4d:42:da:0f:15: d9:bd:cb:a0:95:43:3f:77:37:ef:26:1a:14:b1:c7: 07:07:a4:dc:69:d8:87:9f:3b:08:8a:2e:e2:66:84: cf:0f:91:94:3b:d4:6c:5d:af:16:9a:9b:da:37:22: ed:ad:4c:d8:25:09:60:c3:be:d1:cf:3f:82:bf:f0: bc:9b:6d:f4:40:c9:49:ea:57:0c:5b:4d:3b:44:5d: 13:13:82:4c:9a:b9:41:c3:81:1a:04:b5:97:43:ca: e7:46:9c:d3:af:8b:72:36:a6:f6:24:f9:c1:43:19: fd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:78:4F:C4:7D:69:C7:BA:F4:F6:33:A4:05:10:69:EB:C8:C7:7A:28 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:08:72:d9:61:ab:3d:cb:6c:4f:36:14:42:e2:a1:66:08:4b: 05:86:5f:53:80:8c:1c:86:c2:63:8d:a9:82:49:a8:9e:90:fd: 0f:21:42:75:95:b7:80:36:c4:8b:c6:29:8e:c3:22:a5:55:9d: e3:73:b9:1a:54:ee:91:32:a5:f6:05:73:e7:1a:da:44:38:37: 65:26:03:90:81:1b:21:84:a3:7b:c5:e8:ed:b5:dd:74:49:91: d5:be:da:ed:61:da:44:78:ad:9d:24:68:b9:e8:e8:bb:6c:5b: dc:4b:04:44:99:26:24:4e:53:d8:67:ed:4a:e6:dc:98:b3:b6: 50:16:6f:34:16:bc:8b:18:88:2d:dd:6f:0f:56:d5:3f:c2:20: f7:34:88:ca:1e:c0:96:28:ee:a6:de:43:fd:fa:f1:36:ff:9b: cd:84:50:53:80:45:78:65:1c:b0:69:7c:e8:1f:a8:30:15:56: f5:f4:4d:21:0c:f2:ba:ca:25:1b:ff:6e:30:ea:a3:0c:17:64: 01:24:2d:63:25:9c:c2:39:ff:ce:0e:32:b6:1b:50:c5:b7:5e: d5:bd:23:8b:e3:42:e1:36:a5:51:3f:31:7b:94:3a:94:29:8a: f5:7e:1c:13:3d:4a:a1:98:cf:0d:2c:99:13:89:4c:47:bb:6f: 4c:27:57:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNnkiyrhHDrkQjl9Zk9nCUJkEbj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTEyMTcwNTQ3MjdaFw0yNTEyMjAxNjM4MjdaMDMxMTAvBgNV BAMTKEI3Nzg0RkM0N0Q2OUM3QkFGNEY2MzNBNDA1MTA2OUVCQzhDNzdBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGsA+7J9O0HtZqzLdhH5Q8suOV wiOoTgLgc+nVHd8eRxGl9nYFhJWI4NxeIypXnKhB+zJpDl7ykpLn8wKNam1y0LDX 1lnIAFVTnaIpIBOs7ARp0IiFO4bOI5AagPnzh473xED6rVu8aXiHLBvaOGwkvkwa C84AItAADZgDNgiGTpEriEXaerDc87BAYJkJs0NNQtoPFdm9y6CVQz93N+8mGhSx xwcHpNxp2IefOwiKLuJmhM8PkZQ71Gxdrxaam9o3Iu2tTNglCWDDvtHPP4K/8Lyb bfRAyUnqVwxbTTtEXRMTgkyauUHDgRoEtZdDyudGnNOvi3I2pvYk+cFDGf0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt3hPxH1px7r09jOkBRBp68jHeigwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwIctlhqz3LbE82FELioWYISwWGX1OAjByG wmONqYJJqJ6Q/Q8hQnWVt4A2xIvGKY7DIqVVneNzuRpU7pEypfYFc+ca2kQ4N2Um A5CBGyGEo3vF6O213XRJkdW+2u1h2kR4rZ0kaLno6LtsW9xLBESZJiROU9hn7Urm 3JiztlAWbzQWvIsYiC3dbw9W1T/CIPc0iMoewJYo7qbeQ/368Tb/m82EUFOARXhl HLBpfOgfqDAVVvX0TSEM8rrKJRv/bjDqowwXZAEkLWMlnMI5/84OMrYbUMW3XtW9 I4vjQuE2pVE/MXuUOpQpivV+HBM9SqGYzw0smROJTEe7b0wnV3w= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:36 2025 by rpki-client