This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft (raw, json) Hash identifier: CP4YEZCV4gvajKC/uyDWZ8dhExJg2aRZFoIOkf7iXGs= Subject key identifier: 6D:40:83:24:BD:37:3E:DF:1C:74:14:F6:9E:3E:89:A8:48:28:DB:3D Authority key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Certificate issuer: /CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Certificate serial: 3266A51987656EA087E21CFB7ABD1110EF69D05D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft Manifest number: 01EE Signing time: Fri 05 Dec 2025 06:22:18 +0000 Manifest this update: Fri 05 Dec 2025 06:17:18 +0000 Manifest next update: Mon 08 Dec 2025 10:56:18 +0000 Files and hashes: 1: 323430343a663963303a3a2f33322d3332203d3e20313338383931.roa (hash: LqgjBMUWbAVBd0ps0pwYfCeM86EBdhdZx8KSYG3ioXI=) 2: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl (hash: lONkzTGw3ASX5OGNbzMzzd/++QEfy9kRUTvmkX2vm5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 10:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:66:a5:19:87:65:6e:a0:87:e2:1c:fb:7a:bd:11:10:ef:69:d0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Validity Not Before: Dec 5 06:17:18 2025 GMT Not After : Dec 8 10:56:18 2025 GMT Subject: CN=6D408324BD373EDF1C7414F69E3E89A84828DB3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:cc:13:f1:66:04:94:48:da:ef:aa:c3:36:bb: 7f:75:ab:3b:e4:42:34:5b:0a:60:9a:5f:40:17:38: dd:a6:22:47:d8:9b:a9:74:5d:9d:33:94:81:bd:a1: 85:b8:fa:ad:72:dc:71:9b:ce:34:00:9a:dc:e8:e5: 87:82:79:6b:97:b7:f8:45:74:94:88:22:2a:d2:1f: 8c:e2:2c:d3:97:08:96:ed:e0:cc:ae:28:d4:0f:e5: 39:af:f8:90:28:29:58:5a:58:47:4e:df:16:6f:c7: ad:e9:01:58:a5:06:93:34:b4:7e:99:6f:4c:45:9e: 29:6a:1b:ac:2b:6e:92:f1:b2:c2:b1:35:31:6c:62: 3d:fe:aa:9b:a7:04:72:10:a5:15:97:14:df:19:14: f1:8d:25:ec:52:40:ce:fe:c5:b4:76:6e:e2:7a:49: e3:af:20:ed:76:0d:b2:2b:2d:ea:19:85:8b:f4:bb: 95:8f:2a:eb:82:0a:f8:20:1b:22:a1:de:2f:95:90: 79:88:a1:fa:b3:96:19:25:37:ad:ef:e3:c5:b6:d2: e9:be:32:86:22:19:f7:a8:13:e1:0c:6b:1e:af:85: 5a:c9:d4:bb:76:2f:96:18:d4:ff:20:fe:a3:e0:cc: 66:83:2c:4a:55:44:b8:8c:b6:34:06:96:e7:f9:e7: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:40:83:24:BD:37:3E:DF:1C:74:14:F6:9E:3E:89:A8:48:28:DB:3D X509v3 Authority Key Identifier: keyid:CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:69:9c:68:7b:8c:de:5e:fd:b2:ff:c6:70:e5:dd:11:dd: a5:3f:e5:af:7d:c6:f0:c0:46:08:07:7d:37:16:08:fe:5d:ae: f4:08:0b:47:f7:65:90:b8:69:e8:22:fe:33:67:d3:15:6d:f8: 9d:05:12:66:6d:92:db:05:f1:44:4f:43:95:82:2a:e8:c7:99: 58:2d:80:b6:d0:31:dd:61:ca:e0:41:6c:02:5c:2e:59:10:80: e6:65:24:b8:66:47:a9:b7:6d:c3:8f:0f:0f:e6:94:e5:1b:93: 14:77:ad:45:66:e3:f6:38:bd:71:63:34:78:d4:22:b6:41:4e: 34:14:1e:74:45:1d:15:83:ff:db:6e:31:8a:2a:1f:b5:73:ff: 68:29:22:fe:02:50:9a:15:9b:a2:d7:06:77:3e:2d:9a:43:57: 30:71:a9:8a:4d:20:0f:9d:6a:ce:24:71:ba:93:80:bb:8d:68: 93:3b:0c:35:8b:b8:ab:db:9e:37:0e:bc:5f:93:eb:97:69:66: 3c:24:86:1c:60:e5:65:b8:7d:1b:e5:70:43:25:64:71:4d:2c: 4c:a1:c0:82:1f:05:e5:62:83:52:84:3a:d4:6a:b0:c2:84:38: 6c:7e:cb:76:e3:4c:3b:0c:d5:fc:61:d0:91:fc:98:4d:fd:34: 3a:01:34:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMmalGYdlbqCH4hz7er0REO9p0F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMz MEIzNDVGNDAeFw0yNTEyMDUwNjE3MThaFw0yNTEyMDgxMDU2MThaMDMxMTAvBgNV BAMTKDZENDA4MzI0QkQzNzNFREYxQzc0MTRGNjlFM0U4OUE4NDgyOERCM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCazBPxZgSUSNrvqsM2u391qzvk QjRbCmCaX0AXON2mIkfYm6l0XZ0zlIG9oYW4+q1y3HGbzjQAmtzo5YeCeWuXt/hF dJSIIirSH4ziLNOXCJbt4MyuKNQP5Tmv+JAoKVhaWEdO3xZvx63pAVilBpM0tH6Z b0xFnilqG6wrbpLxssKxNTFsYj3+qpunBHIQpRWXFN8ZFPGNJexSQM7+xbR2buJ6 SeOvIO12DbIrLeoZhYv0u5WPKuuCCvggGyKh3i+VkHmIofqzlhklN63v48W20um+ MoYiGfeoE+EMax6vhVrJ1Lt2L5YY1P8g/qPgzGaDLEpVRLiMtjQGluf550XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbUCDJL03Pt8cdBT2nj6JqEgo2z0wHwYDVR0j BBgwFoAUzPxJbHsXXxnJ8xGju2JKXDCzRfQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMC9DQ0ZDNDk2QzdC MTc1RjE5QzlGMzExQTNCQjYyNEE1QzMwQjM0NUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRBNUMzMEIz NDVGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM4N2U4NWQtYjE4NS00MzM0LTgw MWItNDljOGM4YjkxODQ0LzAvQ0NGQzQ5NkM3QjE3NUYxOUM5RjMxMUEzQkI2MjRB NUMzMEIzNDVGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjIaZxoe4zeXv2y/8Zw5d0R3aU/5a99xvDA RggHfTcWCP5drvQIC0f3ZZC4aegi/jNn0xVt+J0FEmZtktsF8URPQ5WCKujHmVgt gLbQMd1hyuBBbAJcLlkQgOZlJLhmR6m3bcOPDw/mlOUbkxR3rUVm4/Y4vXFjNHjU IrZBTjQUHnRFHRWD/9tuMYoqH7Vz/2gpIv4CUJoVm6LXBnc+LZpDVzBxqYpNIA+d as4kcbqTgLuNaJM7DDWLuKvbnjcOvF+T65dpZjwkhhxg5WW4fRvlcEMlZHFNLEyh wIIfBeVig1KEOtRqsMKEOGx+y3bjTDsM1fxh0JH8mE39NDoBNF0= -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:51 2025 by rpki-client