This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: DBcIaRw6vi/hY54AldGKje7lYk+MFJpAETxJ6lcznC8= Subject key identifier: A6:DE:04:FD:0E:14:20:D8:62:29:69:EF:7F:18:90:1D:2C:A9:BA:65 Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 02F7D9D96B8F461DFCEFE282BA7C184830112814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0143 Signing time: Sat 06 Dec 2025 18:41:24 +0000 Manifest this update: Sat 06 Dec 2025 18:36:24 +0000 Manifest next update: Tue 09 Dec 2025 23:21:24 +0000 Files and hashes: 1: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) 2: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: OGfNtZLCV2hdatEao5VhXm4mYMGfJfjvyCzA1do6dZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f7:d9:d9:6b:8f:46:1d:fc:ef:e2:82:ba:7c:18:48:30:11:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Dec 6 18:36:24 2025 GMT Not After : Dec 9 23:21:24 2025 GMT Subject: CN=A6DE04FD0E1420D8622969EF7F18901D2CA9BA65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:dd:47:5e:3b:6f:e5:58:60:0a:9c:09:e3: bd:cd:ec:c9:2e:75:91:76:89:9c:1e:a2:5a:bc:5c: 3e:50:68:b1:f9:f6:13:f5:24:92:42:ab:b4:fa:da: e6:06:2b:c1:d9:f7:c2:a7:1e:f8:0a:00:5e:2b:f8: 2f:31:9e:11:65:b1:12:f3:62:e2:15:51:89:ba:66: 47:b4:b8:47:9d:6a:e6:bd:03:1b:96:21:c6:bd:96: 78:93:b0:bf:19:8f:80:90:2f:ac:41:aa:73:9d:52: 7e:f3:ef:fc:00:8c:65:dc:38:03:dc:fe:1d:88:5e: b8:cd:4a:7a:a4:fb:50:43:99:07:e0:a1:12:31:00: 26:07:19:57:c9:7f:2f:a2:b0:79:75:a9:5c:71:4d: b6:c1:08:22:c3:67:63:73:35:07:00:d9:fc:e5:6b: 3e:d9:f2:e0:0b:bc:c4:75:08:84:db:19:24:43:c2: 24:bb:54:69:a2:7a:0b:bd:7b:ca:7a:0a:ad:55:42: c7:0d:07:a0:6f:11:75:90:be:71:e1:30:c7:66:08: 5b:88:33:43:7a:6d:2f:7b:b7:ec:f2:04:c7:c2:09: 48:40:5a:58:2f:08:46:ef:c1:35:8e:53:fa:5f:ff: ab:38:ed:fd:ef:b1:98:af:a8:4e:60:93:5e:d3:7d: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:04:FD:0E:14:20:D8:62:29:69:EF:7F:18:90:1D:2C:A9:BA:65 X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:4f:d9:9e:06:29:bc:a3:72:ff:12:45:26:78:3f:9c:fe:6f: 49:3f:ed:42:d9:e4:4b:1d:15:9c:6d:5e:e2:78:cd:e8:1e:99: 04:ec:8f:c7:f4:26:54:77:d5:2d:a1:b4:6a:cb:d8:a2:1b:6e: 93:c1:fb:61:85:dc:e9:3a:58:c8:f3:49:2e:0c:df:86:85:51: a3:58:50:2a:77:09:11:e9:f4:58:df:e8:09:84:ed:ef:e9:73: f3:92:6e:0e:43:b1:e8:c9:0d:4c:31:d5:e7:bd:92:0b:4a:0d: 93:1e:58:18:85:69:04:eb:4b:01:84:ab:fb:ed:df:71:b5:4c: be:e3:17:b5:d1:3a:8d:e0:37:3b:45:f8:7d:5a:ee:b0:86:94: 7b:2f:33:e2:1d:f1:41:c8:72:7c:6e:91:22:f4:63:aa:10:92: 1d:03:5f:2f:df:3b:d6:18:97:60:bb:cb:8a:02:dc:ea:0a:6f: 85:af:e4:7b:87:1a:08:5d:f1:bb:5b:0a:d5:f9:95:47:9e:6f: 82:db:e9:94:61:a9:db:43:d1:35:82:bc:15:e1:77:90:a7:09: 37:c1:a3:00:52:81:cd:1d:35:f9:ab:0b:f3:e3:24:ec:ab:31: 72:09:25:8a:cc:3f:1f:cf:36:43:aa:f2:4c:19:dd:d1:a3:3e: b9:4e:69:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvfZ2WuPRh387+KCunwYSDARKBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTEyMDYxODM2MjRaFw0yNTEyMDkyMzIxMjRaMDMxMTAvBgNV BAMTKEE2REUwNEZEMEUxNDIwRDg2MjI5NjlFRjdGMTg5MDFEMkNBOUJBNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJR91HXjtv5VhgCpwJ473N7Mku dZF2iZweolq8XD5QaLH59hP1JJJCq7T62uYGK8HZ98KnHvgKAF4r+C8xnhFlsRLz YuIVUYm6Zke0uEedaua9AxuWIca9lniTsL8Zj4CQL6xBqnOdUn7z7/wAjGXcOAPc /h2IXrjNSnqk+1BDmQfgoRIxACYHGVfJfy+isHl1qVxxTbbBCCLDZ2NzNQcA2fzl az7Z8uALvMR1CITbGSRDwiS7VGmiegu9e8p6Cq1VQscNB6BvEXWQvnHhMMdmCFuI M0N6bS97t+zyBMfCCUhAWlgvCEbvwTWOU/pf/6s47f3vsZivqE5gk17TfXfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpt4E/Q4UINhiKWnvfxiQHSypumUwHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1P2Z4GKbyjcv8SRSZ4P5z+b0k/7ULZ5Esd FZxtXuJ4zegemQTsj8f0JlR31S2htGrL2KIbbpPB+2GF3Ok6WMjzSS4M34aFUaNY UCp3CRHp9Fjf6AmE7e/pc/OSbg5DsejJDUwx1ee9kgtKDZMeWBiFaQTrSwGEq/vt 33G1TL7jF7XROo3gNztF+H1a7rCGlHsvM+Id8UHIcnxukSL0Y6oQkh0DXy/fO9YY l2C7y4oC3OoKb4Wv5HuHGghd8btbCtX5lUeeb4Lb6ZRhqdtD0TWCvBXhd5CnCTfB owBSgc0dNfmrC/PjJOyrMXIJJYrMPx/PNkOq8kwZ3dGjPrlOaVY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:13 2025 by rpki-client