This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft File: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft (raw, json) Hash identifier: kCUnbbf78fusEo2NSlSnJkXigw9AygpTIfh1J6ri3kI= Subject key identifier: 73:A4:BD:7D:09:E3:64:82:E5:C7:B2:C2:E8:81:D8:7E:2F:96:49:FA Authority key identifier: CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 Certificate issuer: /CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Certificate serial: 1F00EB99DB742C8ABCEB2DCB32BB7881BD8A0D89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft Manifest number: 01C3 Signing time: Thu 18 Dec 2025 07:30:04 +0000 Manifest this update: Thu 18 Dec 2025 07:25:04 +0000 Manifest next update: Sun 21 Dec 2025 11:34:04 +0000 Files and hashes: 1: 3130332e3130372e3133362e302f32332d3233203d3e20313530393332.roa (hash: FR9a77B8Ew796zqJNC2IqXfP+FCpHKrjMFz5+10CJeY=) 2: 3130332e3130372e3133372e302f32342d3234203d3e20313530393332.roa (hash: zcf0fxuemOf4RxDYg/wXb/E8ywGLbCGXefaol950bi0=) 3: CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl (hash: qxsRfMoxREBmjYGGwf7UG74mt2vSJLGFjzKYunFH2AI=) 4: 3130332e3130372e3133362e302f32342d3234203d3e20313530393332.roa (hash: pb2wVsCWTV18ZKzXGju0S2bueyNWmTFuncm9VY9yQr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:00:eb:99:db:74:2c:8a:bc:eb:2d:cb:32:bb:78:81:bd:8a:0d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8 Validity Not Before: Dec 18 07:25:04 2025 GMT Not After : Dec 21 11:34:04 2025 GMT Subject: CN=73A4BD7D09E36482E5C7B2C2E881D87E2F9649FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:61:0e:6b:89:f7:7f:64:5c:f8:76:b6:61: 30:52:9c:43:1b:ea:1f:ba:9d:29:71:ba:96:bc:ec: 6e:e7:e2:ba:1f:a9:a3:ba:2e:7b:0b:e7:39:24:f4: 4d:15:fc:75:cd:70:d3:3c:29:fb:62:44:4d:25:d1: 39:83:e1:d5:b8:b8:43:f6:94:ba:4f:59:c9:fb:cc: 1c:9d:cf:46:33:ff:9a:4a:13:50:5f:4a:18:1d:43: fa:ff:08:17:1a:38:85:d6:22:ab:34:cd:9f:82:04: 6f:6a:92:75:de:06:85:0e:75:37:08:dd:f1:09:b1: a4:7e:3c:be:8b:e1:8e:b8:f4:ca:ec:63:c0:52:4f: e3:93:e2:06:c1:50:21:8d:7a:88:a8:d0:54:f6:96: 2b:2b:9a:d6:db:75:bd:29:24:4c:21:a4:69:62:01: 15:2a:03:34:5a:d4:3d:62:35:3a:8a:93:35:27:f3: 35:af:a1:96:d9:3b:5f:06:3d:74:8c:7e:a5:62:12: 09:f2:a8:21:29:23:a5:33:ff:f8:24:f3:60:0f:58: 4a:3c:75:3b:c8:2d:6f:ac:55:bf:3c:b0:37:e6:7c: 6b:de:ef:a1:8c:f0:3a:c9:a8:65:78:c4:27:7b:e1: b9:02:63:ee:59:45:bd:98:66:da:fb:8e:e3:b3:19: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A4:BD:7D:09:E3:64:82:E5:C7:B2:C2:E8:81:D8:7E:2F:96:49:FA X509v3 Authority Key Identifier: keyid:CC:2F:A8:A6:92:DD:D4:4F:4E:A7:0E:AE:AC:32:04:D5:3E:64:55:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0af31599-8b08-4ffd-a056-795e8aa0a586/0/CC2FA8A692DDD44F4EA70EAEAC3204D53E6455C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0b:c3:89:5b:28:59:29:1f:fb:90:c4:fd:90:ba:f1:56:48: 01:33:44:63:98:34:a5:38:2f:d6:22:0e:99:d7:92:ce:21:bf: d5:a3:0e:0b:d1:56:02:95:d7:64:59:37:d8:47:f5:d6:0d:01: 17:ef:79:df:56:59:3e:f4:b0:61:50:84:3b:7b:79:ca:20:d8: f2:9b:64:42:4b:fa:7c:48:99:2e:5c:b8:54:10:80:2f:01:3f: c9:e1:d6:74:7d:9d:97:9f:aa:95:d6:9d:49:89:84:89:89:d5: d3:3a:1d:e8:27:91:34:4c:23:e0:13:0a:a1:a2:6d:b8:d4:96: 8d:6b:d8:26:29:f7:2a:d2:49:80:dd:de:cc:e5:0f:05:26:70: 82:d6:fa:b2:e5:30:10:85:d2:25:19:52:86:ff:89:1e:63:60: 2a:0f:04:f7:35:e7:e7:e0:58:d7:9c:da:33:a9:bf:c2:fc:64: 4b:5b:7e:bc:ec:ad:75:cc:b9:04:64:63:57:40:f3:7a:79:a4: 3b:9f:15:99:8a:63:1c:13:98:5a:b9:11:fa:02:e6:35:f2:f7: 0f:40:72:a7:28:30:1c:39:1c:e1:f9:31:2a:19:52:09:6b:9e: df:f2:2a:c6:4d:19:d0:a9:76:8a:d8:75:99:89:60:d9:05:3e: c5:12:af:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwDrmdt0LIq86y3LMrt4gb2KDYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUz RTY0NTVDODAeFw0yNTEyMTgwNzI1MDRaFw0yNTEyMjExMTM0MDRaMDMxMTAvBgNV BAMTKDczQTRCRDdEMDlFMzY0ODJFNUM3QjJDMkU4ODFEODdFMkY5NjQ5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogGEOa4n3f2Rc+Ha2YTBSnEMb 6h+6nSlxupa87G7n4rofqaO6LnsL5zkk9E0V/HXNcNM8KftiRE0l0TmD4dW4uEP2 lLpPWcn7zBydz0Yz/5pKE1BfShgdQ/r/CBcaOIXWIqs0zZ+CBG9qknXeBoUOdTcI 3fEJsaR+PL6L4Y649MrsY8BST+OT4gbBUCGNeoio0FT2lisrmtbbdb0pJEwhpGli ARUqAzRa1D1iNTqKkzUn8zWvoZbZO18GPXSMfqViEgnyqCEpI6Uz//gk82APWEo8 dTvILW+sVb88sDfmfGve76GM8DrJqGV4xCd74bkCY+5ZRb2YZtr7juOzGYiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6S9fQnjZILlx7LC6IHYfi+WSfowHwYDVR0j BBgwFoAUzC+oppLd1E9Opw6urDIE1T5kVcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWYzMTU5OS04YjA4LTRmZmQtYTA1Ni03OTVlOGFhMGE1ODYvMC9DQzJGQThBNjky RERENDRGNEVBNzBFQUVBQzMyMDRENTNFNjQ1NUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0RDUzRTY0 NTVDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFmMzE1OTktOGIwOC00ZmZkLWEw NTYtNzk1ZThhYTBhNTg2LzAvQ0MyRkE4QTY5MkRERDQ0RjRFQTcwRUFFQUMzMjA0 RDUzRTY0NTVDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIILw4lbKFkpH/uQxP2QuvFWSAEzRGOYNKU4 L9YiDpnXks4hv9WjDgvRVgKV12RZN9hH9dYNARfved9WWT70sGFQhDt7ecog2PKb ZEJL+nxImS5cuFQQgC8BP8nh1nR9nZefqpXWnUmJhImJ1dM6HegnkTRMI+ATCqGi bbjUlo1r2CYp9yrSSYDd3szlDwUmcILW+rLlMBCF0iUZUob/iR5jYCoPBPc15+fg WNec2jOpv8L8ZEtbfrzsrXXMuQRkY1dA83p5pDufFZmKYxwTmFq5EfoC5jXy9w9A cqcoMBw5HOH5MSoZUglrnt/yKsZNGdCpdorYdZmJYNkFPsUSr0g= -----END CERTIFICATE-----Generated at Thu Dec 18 23:45:19 2025 by rpki-client