This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: CQ2uLgAztsB0VMJTems7mKx/EGFGSHzp616kwJn66/c= Subject key identifier: 1E:A6:60:55:58:57:41:DB:05:BB:BF:91:18:8C:6D:14:DB:F8:D3:DB Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 3593B435A2D5AFF1E7A23AAA63C70C3F396B39A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01B0 Signing time: Wed 24 Dec 2025 22:10:42 +0000 Manifest this update: Wed 24 Dec 2025 22:05:42 +0000 Manifest next update: Sun 28 Dec 2025 01:18:42 +0000 Files and hashes: 1: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) 2: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: 5pqQEyLKlBlT/BFzweFaPw/CLjOxDtssfp8pHS5fJCI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:93:b4:35:a2:d5:af:f1:e7:a2:3a:aa:63:c7:0c:3f:39:6b:39:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Dec 24 22:05:42 2025 GMT Not After : Dec 28 01:18:42 2025 GMT Subject: CN=1EA66055585741DB05BBBF91188C6D14DBF8D3DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ee:78:5f:fc:12:d6:dd:d0:f3:03:47:a1:2e: 9a:ba:b2:76:78:20:b8:1b:3d:9f:26:35:25:82:36: da:86:34:8a:d5:12:9b:70:67:14:0c:7f:ec:d3:f6: c6:82:c9:fd:79:e8:c3:65:20:cb:af:5d:56:1b:90: 4a:51:a1:34:2a:fc:ed:6f:9d:67:d6:3f:e5:f8:35: 7c:c7:2d:03:32:a4:24:29:1c:d0:9a:55:7b:1f:02: 13:4d:e9:fa:12:bd:9e:f0:a2:99:6f:0e:8e:bc:99: ac:17:09:3b:33:3e:22:7b:02:b3:b3:5f:91:0b:5c: f4:fa:79:d5:86:32:52:25:cc:be:1a:62:bb:ca:e3: b9:a1:41:06:69:ab:ab:82:c3:70:ac:36:36:0d:44: 89:76:24:d1:bf:af:5d:26:43:0f:57:22:84:2f:a4: 43:b8:4e:b0:87:95:2f:7c:1f:78:ee:7a:b1:b4:d0: 94:90:97:33:2c:c1:34:99:b9:88:71:37:02:f0:d0: 4c:12:d6:40:31:12:0a:af:63:a7:34:31:e7:92:5e: 21:19:11:4b:27:b8:50:02:ea:50:5c:5a:b6:86:9f: 5e:65:97:64:c4:e7:43:b4:e2:8c:d7:b2:e6:97:b6: 54:ef:12:af:07:76:7a:c6:d5:cc:81:38:66:fc:4d: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A6:60:55:58:57:41:DB:05:BB:BF:91:18:8C:6D:14:DB:F8:D3:DB X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:34:18:25:87:ca:7f:c0:73:9c:2d:bd:2b:06:c9:fa:cc:80: c9:4e:28:aa:18:ea:d3:e2:e5:e0:9d:5e:4f:bb:a1:03:65:8f: bb:cb:f9:02:c1:4f:f5:29:fd:f4:10:75:55:9f:57:6f:07:c8: 35:a2:0f:85:00:81:43:75:17:de:12:43:4f:11:d1:87:72:13: 06:5e:cd:da:5a:41:8e:c0:cc:54:3a:7b:4a:83:ff:38:0a:b2: c7:16:84:84:40:4d:6a:d4:12:c6:46:7b:fd:8f:d0:35:7a:fd: e0:f4:1b:6c:dc:7f:98:dc:f8:0b:ec:e1:08:43:ef:22:6d:0d: d2:5d:99:aa:fd:86:9f:59:76:a6:e5:86:0c:a0:2b:8d:53:95: b3:42:db:c5:25:41:4e:60:49:ec:2f:5e:4f:fc:f2:ef:16:3c: 91:a4:70:06:05:83:bd:fb:30:8a:89:8e:08:d8:b4:4f:dd:f8: 42:d8:1c:8b:72:ed:fe:f9:9b:f0:aa:3e:14:5a:c2:22:f7:03: 5c:28:cb:66:21:3c:2e:f2:c3:51:33:85:7b:f3:44:d7:54:cb: fa:cd:f8:5e:17:73:7c:d5:17:07:0f:ce:b7:5d:51:b8:ca:0d: 7b:a7:44:08:9e:6c:56:d8:40:f2:75:e5:31:46:9b:22:83:44: cf:27:6a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNZO0NaLVr/HnojqqY8cMPzlrOaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTEyMjQyMjA1NDJaFw0yNTEyMjgwMTE4NDJaMDMxMTAvBgNV BAMTKDFFQTY2MDU1NTg1NzQxREIwNUJCQkY5MTE4OEM2RDE0REJGOEQzREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7nhf/BLW3dDzA0ehLpq6snZ4 ILgbPZ8mNSWCNtqGNIrVEptwZxQMf+zT9saCyf156MNlIMuvXVYbkEpRoTQq/O1v nWfWP+X4NXzHLQMypCQpHNCaVXsfAhNN6foSvZ7woplvDo68mawXCTszPiJ7ArOz X5ELXPT6edWGMlIlzL4aYrvK47mhQQZpq6uCw3CsNjYNRIl2JNG/r10mQw9XIoQv pEO4TrCHlS98H3juerG00JSQlzMswTSZuYhxNwLw0EwS1kAxEgqvY6c0MeeSXiEZ EUsnuFAC6lBcWraGn15ll2TE50O04ozXsuaXtlTvEq8HdnrG1cyBOGb8TVBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHqZgVVhXQdsFu7+RGIxtFNv409swHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJI0GCWHyn/Ac5wtvSsGyfrMgMlOKKoY6tPi 5eCdXk+7oQNlj7vL+QLBT/Up/fQQdVWfV28HyDWiD4UAgUN1F94SQ08R0YdyEwZe zdpaQY7AzFQ6e0qD/zgKsscWhIRATWrUEsZGe/2P0DV6/eD0G2zcf5jc+Avs4QhD 7yJtDdJdmar9hp9ZdqblhgygK41TlbNC28UlQU5gSewvXk/88u8WPJGkcAYFg737 MIqJjgjYtE/d+ELYHIty7f75m/CqPhRawiL3A1woy2YhPC7yw1EzhXvzRNdUy/rN +F4Xc3zVFwcPzrddUbjKDXunRAiebFbYQPJ15TFGmyKDRM8narw= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:52 2025 by rpki-client