This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: Fuwk7lsUIC1s3MZ+5n+ERdq7mI+DUrajrT5KeNEHwf4= Subject key identifier: 23:D0:08:C8:6B:47:CD:91:17:74:78:0C:CA:29:55:96:8E:41:74:86 Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 46D3826D5B5DEE1D5BDB951B96A5D95228F8EF22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0372 Signing time: Fri 05 Dec 2025 19:12:24 +0000 Manifest this update: Fri 05 Dec 2025 19:07:24 +0000 Manifest next update: Tue 09 Dec 2025 02:34:24 +0000 Files and hashes: 1: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 2: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 3: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: ScIlX6Hq6Znf5OePtMXsRp5tyrfYB+blIFHCzHTY7Zc=) 4: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d3:82:6d:5b:5d:ee:1d:5b:db:95:1b:96:a5:d9:52:28:f8:ef:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Dec 5 19:07:24 2025 GMT Not After : Dec 9 02:34:24 2025 GMT Subject: CN=23D008C86B47CD911774780CCA2955968E417486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:91:7e:d6:8f:e5:b7:c9:7d:5b:eb:f1:3f: bd:ff:13:e6:0b:b7:15:ea:7b:22:9a:f8:3c:f0:a1: b7:e0:80:1e:46:21:8e:f9:df:e6:d2:db:f2:fd:61: c5:d3:08:23:b2:a8:6f:75:c1:88:77:62:ae:69:fc: b6:14:a7:52:f6:8f:ec:f1:07:dc:9d:d8:0b:52:3c: 5e:7a:98:23:41:63:88:b2:32:f8:59:13:99:8f:6e: ec:a0:36:ce:e1:ac:03:34:92:4c:33:9c:98:8d:8a: e2:ff:4a:9f:9e:d5:9a:33:3a:1e:fd:59:f0:e7:0f: c2:28:f1:b9:12:dd:5e:76:27:1c:1f:2b:ec:99:e2: 07:04:21:6a:b2:a9:e8:c1:ee:9e:85:44:92:b2:5d: 05:aa:b4:c6:0d:6c:0a:77:15:d6:1d:67:ce:14:59: 79:d8:0e:a2:c0:27:32:1b:5e:58:b0:32:a0:f6:71: 7a:b8:e1:b4:e7:50:ce:8b:88:7a:18:99:a0:af:82: 89:10:cc:96:50:0c:e5:b3:af:4e:ed:6c:9c:b4:1d: 56:d2:bc:6f:d9:d4:94:02:93:89:d9:da:44:01:10: 72:5f:1d:9a:3f:3b:68:52:3e:ee:db:a5:51:51:67: d1:a4:fb:7b:3c:00:29:84:5b:87:bb:d5:f5:44:ef: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:08:C8:6B:47:CD:91:17:74:78:0C:CA:29:55:96:8E:41:74:86 X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ad:67:d3:a1:ed:51:27:88:cb:f1:1a:f4:9a:aa:eb:b7:50: b8:86:67:44:0d:ce:d6:68:e4:24:96:c9:fd:c5:78:cd:52:c8: d6:01:34:4e:3b:55:23:ca:aa:1a:29:79:a8:e6:04:2e:9c:e4: d1:dc:c7:ae:e1:5d:d8:a4:df:16:d2:bd:34:05:6c:28:ed:ab: 00:f4:69:7c:c2:b6:a6:b4:2f:e2:4b:84:26:89:58:45:6f:9f: bb:0c:fa:64:81:e6:37:c4:0b:70:d8:67:2e:43:3e:4d:17:a4: 19:27:be:ca:ab:e5:5d:33:bd:93:62:fb:eb:61:ba:e4:ce:d1: ea:3f:10:86:a3:4a:23:6c:9a:81:fb:af:70:27:cf:fc:60:14: d9:cb:6a:50:5e:1a:13:35:a7:ee:3f:5e:c2:78:8b:db:99:65: 84:07:50:f7:30:c1:10:48:63:46:5b:14:68:1b:aa:0e:4c:99: aa:34:29:0a:e1:97:79:18:d5:33:26:45:96:17:5a:39:6a:b0: 7c:b3:14:ad:d4:3f:bf:97:41:1a:8a:c4:3d:b1:fd:ee:38:20: 8d:90:45:af:d2:1a:3b:20:43:1a:d2:92:b2:33:96:4e:d3:66: 65:63:97:55:59:31:20:7e:f2:24:d0:49:dc:d2:a2:50:cd:ad: 59:2c:dd:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtOCbVtd7h1b25UblqXZUij47yIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTEyMDUxOTA3MjRaFw0yNTEyMDkwMjM0MjRaMDMxMTAvBgNV BAMTKDIzRDAwOEM4NkI0N0NEOTExNzc0NzgwQ0NBMjk1NTk2OEU0MTc0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QJF+1o/lt8l9W+vxP73/E+YL txXqeyKa+DzwobfggB5GIY753+bS2/L9YcXTCCOyqG91wYh3Yq5p/LYUp1L2j+zx B9yd2AtSPF56mCNBY4iyMvhZE5mPbuygNs7hrAM0kkwznJiNiuL/Sp+e1ZozOh79 WfDnD8Io8bkS3V52JxwfK+yZ4gcEIWqyqejB7p6FRJKyXQWqtMYNbAp3FdYdZ84U WXnYDqLAJzIbXliwMqD2cXq44bTnUM6LiHoYmaCvgokQzJZQDOWzr07tbJy0HVbS vG/Z1JQCk4nZ2kQBEHJfHZo/O2hSPu7bpVFRZ9Gk+3s8ACmEW4e71fVE70yfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9AIyGtHzZEXdHgMyilVlo5BdIYwHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKtZ9Oh7VEniMvxGvSaquu3ULiGZ0QNztZo 5CSWyf3FeM1SyNYBNE47VSPKqhopeajmBC6c5NHcx67hXdik3xbSvTQFbCjtqwD0 aXzCtqa0L+JLhCaJWEVvn7sM+mSB5jfEC3DYZy5DPk0XpBknvsqr5V0zvZNi++th uuTO0eo/EIajSiNsmoH7r3Anz/xgFNnLalBeGhM1p+4/XsJ4i9uZZYQHUPcwwRBI Y0ZbFGgbqg5Mmao0KQrhl3kY1TMmRZYXWjlqsHyzFK3UP7+XQRqKxD2x/e44II2Q Ra/SGjsgQxrSkrIzlk7TZmVjl1VZMSB+8iTQSdzSolDNrVks3b0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:39 2025 by rpki-client