This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: 40e6dW53F8TO248hfYknJjJ6WDt1RFc7muzH4LYZ46I= Subject key identifier: 82:1B:B7:56:17:E6:E0:AE:DF:98:AD:A2:F3:D1:D5:22:31:4B:5B:99 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 0C5EBB74BAC4EAE7B9EE4223FCEE27016F68ECA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01A8 Signing time: Sat 06 Dec 2025 20:50:42 +0000 Manifest this update: Sat 06 Dec 2025 20:45:42 +0000 Manifest next update: Tue 09 Dec 2025 22:30:42 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: AIuu3qlFNzKWEAMu6Xy259baA7ZL8oF4K2c6znEF7Gg=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5e:bb:74:ba:c4:ea:e7:b9:ee:42:23:fc:ee:27:01:6f:68:ec:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Dec 6 20:45:42 2025 GMT Not After : Dec 9 22:30:42 2025 GMT Subject: CN=821BB75617E6E0AEDF98ADA2F3D1D522314B5B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:c6:a7:1e:0c:e4:26:e2:7e:9a:5a:16:ec: 8a:23:93:99:0f:00:06:5a:04:47:bc:46:4e:ab:af: f0:25:e6:43:26:87:40:f9:21:a7:b7:91:93:c2:07: 08:9a:a2:cf:77:ee:74:81:eb:f5:51:5c:1a:a6:00: 3e:12:d5:1e:b1:c7:c3:a5:fd:d1:95:ee:b5:34:1f: 36:46:c8:c7:cf:dd:1c:51:2c:a4:98:1f:a0:2d:90: 79:6c:b7:b5:b1:44:08:75:7a:e4:a3:3e:ac:08:d9: d6:8a:09:fc:dd:c4:95:ed:c3:fc:c7:db:11:21:e7: c2:b6:f7:92:e0:1a:55:17:f7:0f:7c:02:93:ca:8f: e3:1d:d3:d7:da:1a:1d:82:04:b3:85:9a:c6:04:3b: 85:a5:ef:63:e0:b2:b0:e1:4a:0f:8f:d9:e0:a6:95: a7:43:0a:ba:aa:96:5d:d8:87:41:62:cb:ff:ef:61: 3b:77:7f:4c:6e:51:c5:c6:2b:de:36:d2:50:42:fa: 4c:49:16:61:fc:d8:00:51:1e:31:45:16:97:cf:33: ae:ae:d2:f3:ac:da:f6:9f:db:cf:77:3c:53:c4:72: 87:74:87:31:87:9e:a0:91:49:d7:e5:f7:bf:2f:a4: d2:ff:e1:2e:87:da:c3:cc:80:af:7f:30:6e:aa:62: 2f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1B:B7:56:17:E6:E0:AE:DF:98:AD:A2:F3:D1:D5:22:31:4B:5B:99 X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:33:88:fe:d3:05:a9:00:90:39:e7:ce:f3:53:51:b0:f5:20: 80:8f:2c:e1:7e:95:15:c4:70:06:4c:1f:fb:1c:c4:5c:f3:95: bc:1f:09:e9:62:ef:12:fc:06:1c:f9:4e:e6:19:e9:d7:3e:3b: d9:90:ac:d0:db:cc:43:92:0c:d6:0f:cb:17:65:f6:a8:9c:c5: 38:c9:4a:ed:0b:d1:8c:72:0f:0b:a0:60:98:e4:d5:03:d0:fa: 37:8a:6a:10:26:d9:b2:e4:c6:86:4e:33:89:56:f9:74:8b:a9: 26:f2:cb:04:a2:23:5c:cc:b2:1d:82:c1:14:05:b7:e4:be:98: 8c:93:c0:eb:2f:ed:2b:63:b4:34:43:fa:cd:bd:7f:65:fc:f8: 8f:95:40:a6:7b:2e:51:f3:90:63:bb:e5:f6:00:bf:1f:f8:12: 8c:d5:67:36:ca:fb:0b:ca:66:f8:36:df:79:43:b9:7b:e4:29: 0f:1b:bb:8f:9b:38:e3:ea:53:22:de:3c:26:11:55:0a:e0:fc: 7c:7f:6b:28:97:ac:eb:dc:99:0f:1d:7b:f9:d5:68:65:74:a3: ef:c4:a3:95:5b:9e:21:41:d9:17:e5:c5:3a:6d:c2:72:d4:0e: 18:52:ae:f4:97:97:f2:14:66:37:ab:9e:fc:72:0f:42:db:80: e6:53:40:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDF67dLrE6ue57kIj/O4nAW9o7KgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTEyMDYyMDQ1NDJaFw0yNTEyMDkyMjMwNDJaMDMxMTAvBgNV BAMTKDgyMUJCNzU2MTdFNkUwQUVERjk4QURBMkYzRDFENTIyMzE0QjVCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ9ManHgzkJuJ+mloW7Iojk5kP AAZaBEe8Rk6rr/Al5kMmh0D5Iae3kZPCBwiaos937nSB6/VRXBqmAD4S1R6xx8Ol /dGV7rU0HzZGyMfP3RxRLKSYH6AtkHlst7WxRAh1euSjPqwI2daKCfzdxJXtw/zH 2xEh58K295LgGlUX9w98ApPKj+Md09faGh2CBLOFmsYEO4Wl72PgsrDhSg+P2eCm ladDCrqqll3Yh0Fiy//vYTt3f0xuUcXGK9420lBC+kxJFmH82ABRHjFFFpfPM66u 0vOs2vaf2893PFPEcod0hzGHnqCRSdfl978vpNL/4S6H2sPMgK9/MG6qYi+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUghu3Vhfm4K7fmK2i89HVIjFLW5kwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAziP7TBakAkDnnzvNTUbD1IICPLOF+lRXE cAZMH/scxFzzlbwfCeli7xL8Bhz5TuYZ6dc+O9mQrNDbzEOSDNYPyxdl9qicxTjJ Su0L0YxyDwugYJjk1QPQ+jeKahAm2bLkxoZOM4lW+XSLqSbyywSiI1zMsh2CwRQF t+S+mIyTwOsv7StjtDRD+s29f2X8+I+VQKZ7LlHzkGO75fYAvx/4EozVZzbK+wvK Zvg233lDuXvkKQ8bu4+bOOPqUyLePCYRVQrg/Hx/ayiXrOvcmQ8de/nVaGV0o+/E o5VbniFB2RflxTptwnLUDhhSrvSXl/IUZjernvxyD0LbgOZTQKI= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:18 2025 by rpki-client