This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft File: 0CC3B451FD4CA85AECD3DEBA039782844757C400.mft (raw, json) Hash identifier: 2o7x8gOSeWQCt1uc4JIX1Eq6mWPNwiBRlBXhMTLcY3c= Subject key identifier: 58:5F:2F:27:FB:B4:E5:55:40:A9:3D:FB:01:FE:75:EB:4B:7F:51:34 Authority key identifier: 0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 Certificate issuer: /CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Certificate serial: 113B95506AE16E447869CD5C929C93B913EE015B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft Manifest number: 012F Signing time: Tue 02 Dec 2025 10:40:02 +0000 Manifest this update: Tue 02 Dec 2025 10:35:02 +0000 Manifest next update: Fri 05 Dec 2025 21:15:02 +0000 Files and hashes: 1: 0CC3B451FD4CA85AECD3DEBA039782844757C400.crl (hash: BW4IIz3ns0/eNAgz5DV08C+MGirhpjSXdh7QwmcVNAo=) 2: 3130332e34322e3234332e302f32342d3234203d3e20313531353935.roa (hash: 9thm8tqpKnT0hDlZkI8uSNs6DDGCpKXy22/dK1Jcd3M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:3b:95:50:6a:e1:6e:44:78:69:cd:5c:92:9c:93:b9:13:ee:01:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CC3B451FD4CA85AECD3DEBA039782844757C400 Validity Not Before: Dec 2 10:35:02 2025 GMT Not After : Dec 5 21:15:02 2025 GMT Subject: CN=585F2F27FBB4E55540A93DFB01FE75EB4B7F5134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:27:a3:82:b5:66:c8:49:2b:2e:88:9e:e3:f8: dc:7e:7d:ef:7d:e6:bf:12:a1:d3:b3:4f:a2:8f:a6: fb:d6:46:a7:6f:ac:fe:49:c1:f0:db:30:99:30:5e: cb:e8:c9:6e:85:62:cd:3d:a8:3c:e4:85:30:bc:79: 0b:56:37:c7:15:e8:25:ba:12:99:33:0b:e7:75:b4: 18:98:41:de:38:30:10:2c:26:69:01:00:f9:f3:90: 24:41:f9:fd:42:d2:27:42:4b:82:ef:ff:0d:04:ff: 8a:57:1a:b7:77:0a:ce:0c:12:93:45:a7:d4:24:57: a6:50:62:51:bf:f9:fa:c4:0b:9f:60:05:ed:be:26: 32:1d:14:c8:e2:85:34:f1:a6:e5:d3:f2:9f:58:e0: 8f:ba:07:07:50:f3:e1:4f:cc:57:37:03:25:8e:ea: 45:a0:da:88:de:c7:64:52:cb:80:ad:b0:39:43:3c: 5e:d6:f4:13:94:f9:d7:4c:52:2c:d4:96:17:57:d7: 26:de:9e:79:ca:b0:4f:61:57:d6:b1:55:8e:7d:f0: f1:67:06:49:47:d0:de:be:fe:40:93:a7:99:5a:80: 67:ed:6d:da:37:cf:de:77:79:46:00:cb:51:66:e8: a1:28:90:69:9b:fc:ad:e8:75:06:60:3e:ab:59:75: d7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5F:2F:27:FB:B4:E5:55:40:A9:3D:FB:01:FE:75:EB:4B:7F:51:34 X509v3 Authority Key Identifier: keyid:0C:C3:B4:51:FD:4C:A8:5A:EC:D3:DE:BA:03:97:82:84:47:57:C4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CC3B451FD4CA85AECD3DEBA039782844757C400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f93b816-e7be-464c-8785-498bf84d3735/0/0CC3B451FD4CA85AECD3DEBA039782844757C400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fc:9d:de:41:ed:cd:34:0e:29:63:d3:d2:22:d7:d9:25:7a: d9:3d:d3:63:81:48:be:b0:d5:50:22:28:61:a1:4a:4a:d0:a8: 02:0d:b3:45:c5:e9:27:86:d5:ae:ed:64:40:a1:8f:a3:8c:37: ad:c6:79:a2:d2:1b:9e:a7:8a:67:ba:c0:21:97:a0:8d:9a:a7: d3:74:0f:74:7a:3e:db:bb:78:49:b0:7e:80:ed:d9:be:50:75: 61:91:79:14:a0:15:f5:0d:77:01:4b:df:08:2d:5b:86:7b:1c: 85:1c:43:36:4a:63:14:f0:43:81:77:51:90:66:ec:d3:cb:48: 7d:be:ea:6f:57:c6:05:f4:ed:9c:78:79:14:8f:ae:71:20:a0: 2b:fd:9e:17:61:9f:bc:8a:36:dd:c9:6b:35:cd:c9:5a:96:17: 91:ca:69:55:67:26:ae:68:ca:27:da:6f:e6:a0:81:f6:b6:b3: 4b:20:c7:b1:2e:2d:c4:f9:25:ad:a8:38:65:c5:a6:11:bc:79: 64:b8:07:24:eb:00:a6:ba:51:3a:79:8b:fe:e1:05:e3:4e:e5: dd:40:d0:bf:1c:a5:39:e7:81:25:dc:d8:69:b5:5c:51:8a:59: f6:3b:36:dc:38:17:07:66:6d:69:a8:d9:f3:21:6c:b9:f9:58: 87:37:8f:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUETuVUGrhbkR4ac1ckpyTuRPuAVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0 NzU3QzQwMDAeFw0yNTEyMDIxMDM1MDJaFw0yNTEyMDUyMTE1MDJaMDMxMTAvBgNV BAMTKDU4NUYyRjI3RkJCNEU1NTU0MEE5M0RGQjAxRkU3NUVCNEI3RjUxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfJ6OCtWbISSsuiJ7j+Nx+fe99 5r8SodOzT6KPpvvWRqdvrP5JwfDbMJkwXsvoyW6FYs09qDzkhTC8eQtWN8cV6CW6 EpkzC+d1tBiYQd44MBAsJmkBAPnzkCRB+f1C0idCS4Lv/w0E/4pXGrd3Cs4MEpNF p9QkV6ZQYlG/+frEC59gBe2+JjIdFMjihTTxpuXT8p9Y4I+6BwdQ8+FPzFc3AyWO 6kWg2ojex2RSy4CtsDlDPF7W9BOU+ddMUizUlhdX1ybennnKsE9hV9axVY598PFn BklH0N6+/kCTp5lagGftbdo3z953eUYAy1Fm6KEokGmb/K3odQZgPqtZddfdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWF8vJ/u05VVAqT37Af5160t/UTQwHwYDVR0j BBgwFoAUDMO0Uf1MqFrs0966A5eChEdXxAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjkzYjgxNi1lN2JlLTQ2NGMtODc4NS00OThiZjg0ZDM3MzUvMC8wQ0MzQjQ1MUZE NENBODVBRUNEM0RFQkEwMzk3ODI4NDQ3NTdDNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5NzgyODQ0NzU3 QzQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY5M2I4MTYtZTdiZS00NjRjLTg3 ODUtNDk4YmY4NGQzNzM1LzAvMENDM0I0NTFGRDRDQTg1QUVDRDNERUJBMDM5Nzgy ODQ0NzU3QzQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADv8nd5B7c00Dilj09Ii19kletk902OBSL6w 1VAiKGGhSkrQqAINs0XF6SeG1a7tZEChj6OMN63GeaLSG56nime6wCGXoI2ap9N0 D3R6Ptu7eEmwfoDt2b5QdWGReRSgFfUNdwFL3wgtW4Z7HIUcQzZKYxTwQ4F3UZBm 7NPLSH2+6m9XxgX07Zx4eRSPrnEgoCv9nhdhn7yKNt3JazXNyVqWF5HKaVVnJq5o yifab+aggfa2s0sgx7EuLcT5Ja2oOGXFphG8eWS4ByTrAKa6UTp5i/7hBeNO5d1A 0L8cpTnngSXc2Gm1XFGKWfY7Ntw4FwdmbWmo2fMhbLn5WIc3j/M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:30 2025 by rpki-client