This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: rEmzJcxbidubYMewA8dEBlQ9EXx8jYn6Ogxiy2LVYrM= Subject key identifier: 43:59:63:24:67:D2:61:4A:F1:2B:EE:10:97:7C:25:A7:1C:2D:05:8B Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 659AEA467D1D388B25814EDDBA63A16F9133FC44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 0223 Signing time: Wed 17 Dec 2025 10:30:01 +0000 Manifest this update: Wed 17 Dec 2025 10:25:01 +0000 Manifest next update: Sat 20 Dec 2025 12:37:01 +0000 Files and hashes: 1: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) 2: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 3: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: RYQoRbpsYVeNQue1dskA3fw+lpsFwX4/29401B+eIHU=) 4: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 5: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:9a:ea:46:7d:1d:38:8b:25:81:4e:dd:ba:63:a1:6f:91:33:fc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Dec 17 10:25:01 2025 GMT Not After : Dec 20 12:37:01 2025 GMT Subject: CN=4359632467D2614AF12BEE10977C25A71C2D058B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:e3:dd:e4:0e:0b:3b:ae:d5:c4:81:73:86: dd:02:88:9f:e8:f8:95:43:1b:54:80:04:be:de:5e: 9d:4a:34:0d:01:b9:6a:1c:d0:5d:32:8a:e8:27:98: 0d:8e:df:8c:80:e2:4f:e9:1b:b3:41:b5:13:fe:9e: 26:2a:74:ae:3c:2d:41:94:4e:b4:0f:3c:cf:53:6f: 87:73:83:a1:c7:2a:10:88:37:cd:d8:44:4e:dc:95: 66:00:6e:b6:6c:bf:04:ca:81:e5:c7:ae:a1:44:89: 1d:73:28:ab:a7:e5:3b:2b:5b:1e:77:09:b2:4f:22: b4:a4:9e:2c:f1:7c:86:57:a1:98:af:fb:0d:77:17: 10:c8:75:56:9a:c8:c7:f0:c3:9c:f9:7e:44:0e:9d: 8a:0e:c6:99:52:cb:df:c7:c2:bb:87:7e:76:34:3f: 62:9d:c2:1b:c0:51:2c:3f:6f:9f:f2:b6:c1:41:6d: 63:d9:37:f2:96:14:c5:68:b8:b8:9c:c4:44:32:41: e1:eb:a2:92:48:45:81:71:1c:2e:92:54:98:50:49: 97:f7:8d:4b:33:38:d8:7b:63:86:0a:17:9e:78:da: bb:88:6c:8a:05:67:71:86:4d:ab:78:16:3d:30:4c: 18:02:87:c7:fc:6d:29:0e:af:52:9d:bf:8f:4f:8d: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:63:24:67:D2:61:4A:F1:2B:EE:10:97:7C:25:A7:1C:2D:05:8B X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:95:24:b4:6f:21:af:11:14:c4:dd:02:9f:f4:30:c0:b2:82: a8:81:55:b4:6c:55:cc:50:8d:db:31:dd:53:44:11:f9:47:87: 3b:5e:df:55:13:13:17:13:51:39:0a:d1:1e:9d:f6:71:4d:a8: 69:8a:b2:b0:ba:46:7c:58:33:48:a0:48:9a:53:a6:63:f7:53: aa:63:cb:28:c9:ba:08:85:17:a8:d4:e8:9a:c6:48:c5:6f:ac: 9d:ad:02:1c:3d:7c:ba:a2:72:37:b1:25:a8:a6:7e:80:fb:4b: 1f:11:0c:77:28:08:03:83:d2:91:2a:3d:aa:08:9d:08:e3:e4: 85:e8:66:27:d4:e1:cc:bd:22:9f:7f:21:07:53:bd:0d:8d:39: 37:5b:71:90:e9:bc:5c:42:cc:63:c1:18:4b:43:9f:46:24:5d: 1e:16:88:1e:fe:e0:36:57:6b:cf:1a:38:b2:d5:a8:85:81:52: bf:d3:4e:9c:75:5f:dc:05:0d:13:f1:73:36:47:ab:62:12:db: 03:cc:a8:84:42:37:05:33:9c:bf:6c:9f:8e:37:ee:d6:1d:df: c2:65:69:8b:be:18:b1:1c:49:3c:c8:00:11:2d:6f:5b:18:c7: da:5d:92:d3:5b:04:59:e8:1d:b5:ca:df:cd:f9:d3:a5:41:31: 95:f3:a0:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZZrqRn0dOIslgU7dumOhb5Ez/EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTEyMTcxMDI1MDFaFw0yNTEyMjAxMjM3MDFaMDMxMTAvBgNV BAMTKDQzNTk2MzI0NjdEMjYxNEFGMTJCRUUxMDk3N0MyNUE3MUMyRDA1OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWw+Pd5A4LO67VxIFzht0CiJ/o +JVDG1SABL7eXp1KNA0BuWoc0F0yiugnmA2O34yA4k/pG7NBtRP+niYqdK48LUGU TrQPPM9Tb4dzg6HHKhCIN83YRE7clWYAbrZsvwTKgeXHrqFEiR1zKKun5TsrWx53 CbJPIrSknizxfIZXoZiv+w13FxDIdVaayMfww5z5fkQOnYoOxplSy9/HwruHfnY0 P2KdwhvAUSw/b5/ytsFBbWPZN/KWFMVouLicxEQyQeHropJIRYFxHC6SVJhQSZf3 jUszONh7Y4YKF5542ruIbIoFZ3GGTat4Fj0wTBgCh8f8bSkOr1Kdv49PjWUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ1ljJGfSYUrxK+4Ql3wlpxwtBYswHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeVJLRvIa8RFMTdAp/0MMCygqiBVbRsVcxQ jdsx3VNEEflHhzte31UTExcTUTkK0R6d9nFNqGmKsrC6RnxYM0igSJpTpmP3U6pj yyjJugiFF6jU6JrGSMVvrJ2tAhw9fLqicjexJaimfoD7Sx8RDHcoCAOD0pEqPaoI nQjj5IXoZifU4cy9Ip9/IQdTvQ2NOTdbcZDpvFxCzGPBGEtDn0YkXR4WiB7+4DZX a88aOLLVqIWBUr/TTpx1X9wFDRPxczZHq2IS2wPMqIRCNwUznL9sn4437tYd38Jl aYu+GLEcSTzIABEtb1sYx9pdktNbBFnoHbXK383506VBMZXzoDs= -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:01 2025 by rpki-client