This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft File: 2CCC85BF6CCD365701EFA75EE416D234F861385B.mft (raw, json) Hash identifier: nIAd0MJPAkd7tI8zanxsrI0H/fdDgSf5c2x0s89owXU= Subject key identifier: 7E:40:BD:12:A5:F4:92:6D:5F:76:B4:AC:84:A2:50:64:D3:8C:C0:39 Authority key identifier: 2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B Certificate issuer: /CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Certificate serial: 4827C23A34354289660938E1AB6BEC5409EED539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft Manifest number: E0 Signing time: Sat 06 Dec 2025 00:22:25 +0000 Manifest this update: Sat 06 Dec 2025 00:17:25 +0000 Manifest next update: Tue 09 Dec 2025 01:37:25 +0000 Files and hashes: 1: 3136302e32352e3231382e302f32342d3234203d3e20313533303836.roa (hash: 8n7ggoSZj8jJnFz6/yug05Kf9QPxel8FaCv3JxdKJhk=) 2: 2CCC85BF6CCD365701EFA75EE416D234F861385B.crl (hash: 1wWKX5MixtCP2VuWZ3XYTM0rdRMH8WY+Ql40W1hK3Bs=) 3: 3136302e32352e3231392e302f32342d3234203d3e20313533303836.roa (hash: uxK7UAyx9SPI/sYZC+vqWCKSgnZeXgqAqFmQ+2Jnazc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:27:c2:3a:34:35:42:89:66:09:38:e1:ab:6b:ec:54:09:ee:d5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CCC85BF6CCD365701EFA75EE416D234F861385B Validity Not Before: Dec 6 00:17:25 2025 GMT Not After : Dec 9 01:37:25 2025 GMT Subject: CN=7E40BD12A5F4926D5F76B4AC84A25064D38CC039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a9:98:3b:fc:b9:40:a3:70:a5:e8:30:68:9b: b2:99:fd:1a:4a:6c:44:9e:8e:6d:23:6a:d0:fb:a0: 32:d8:03:11:db:f3:13:ca:82:8e:35:6a:7f:7c:cc: c3:74:84:b2:33:59:b4:35:78:d8:d7:65:5f:af:52: f1:be:47:dc:bb:6a:40:4c:24:aa:aa:16:82:e5:7c: d0:5d:9b:c2:df:e6:e6:f5:41:72:81:6e:29:45:a2: b7:04:6c:a0:a1:1e:e6:06:92:b0:c7:0b:d5:f0:66: 14:af:e4:a1:a0:52:26:8c:38:5f:f7:ee:94:63:0d: 6d:c0:dc:8f:cc:26:db:dd:f6:6e:45:71:e0:67:82: 33:6c:0d:24:d9:6a:47:7e:2a:e8:a6:58:66:74:f2: af:55:23:87:27:ad:dc:e5:8e:29:86:7b:e4:e9:1d: 71:b0:e5:83:69:dd:4d:e2:8e:74:c4:88:d6:ca:90: f4:3d:08:29:90:ff:73:39:b2:5e:01:ad:fd:c1:0b: f8:6b:cf:8b:f2:bb:a7:98:f9:30:b9:13:64:c1:c7: 21:92:9e:ab:12:59:06:65:23:e4:e0:62:0d:2c:5d: df:54:82:01:b3:de:8e:1f:30:6f:c9:f7:01:7d:57: 3b:37:de:e8:57:a2:06:cb:cf:f0:8c:42:29:e0:f5: f1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:40:BD:12:A5:F4:92:6D:5F:76:B4:AC:84:A2:50:64:D3:8C:C0:39 X509v3 Authority Key Identifier: keyid:2C:CC:85:BF:6C:CD:36:57:01:EF:A7:5E:E4:16:D2:34:F8:61:38:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2CCC85BF6CCD365701EFA75EE416D234F861385B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3af07f18-5c49-4129-aa53-7085ccd57b63/0/2CCC85BF6CCD365701EFA75EE416D234F861385B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:be:71:e5:2b:db:4a:98:bf:18:0e:fe:38:91:58:11:6c:ed: 69:1d:9a:13:5a:df:72:61:62:34:f6:9a:79:35:3d:47:54:00: b5:7c:38:b6:36:f2:ae:82:a8:7c:a6:0c:15:d0:61:09:18:13: 22:4f:d7:27:d3:93:bb:90:97:2c:bd:71:21:16:1c:52:14:8b: e4:da:4f:c5:42:36:14:0a:79:ce:a6:19:93:d5:22:c9:51:38: 54:be:06:1b:78:e8:81:80:9e:e8:ac:6c:82:81:13:d5:19:6c: 90:65:75:fe:64:39:42:37:62:d1:c0:db:cf:97:5a:08:9e:c2: 92:d7:69:ac:b2:bc:85:3c:48:87:d4:d1:cd:79:f2:ba:a5:1a: ba:fc:46:dc:c4:43:0e:4d:6f:c5:be:06:ac:f2:9a:2c:33:10: d7:ba:2d:e1:ae:5d:a5:76:79:55:9b:2a:00:3a:0a:af:18:61: 40:85:52:ad:c6:66:df:e0:01:5d:42:75:13:e2:13:99:8a:0e: b5:7e:40:d3:06:98:1a:cd:64:a7:36:b4:7a:c8:0a:5d:4c:34: fd:35:e6:4e:42:f1:f6:06:74:bb:94:d5:2a:23:e6:0e:40:0b: 4e:1e:2d:94:af:d9:b6:2e:f2:00:c4:cb:dd:c6:b9:ea:09:b0: c0:14:6d:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCfCOjQ1QolmCTjhq2vsVAnu1TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRG ODYxMzg1QjAeFw0yNTEyMDYwMDE3MjVaFw0yNTEyMDkwMTM3MjVaMDMxMTAvBgNV BAMTKDdFNDBCRDEyQTVGNDkyNkQ1Rjc2QjRBQzg0QTI1MDY0RDM4Q0MwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqZg7/LlAo3Cl6DBom7KZ/RpK bESejm0jatD7oDLYAxHb8xPKgo41an98zMN0hLIzWbQ1eNjXZV+vUvG+R9y7akBM JKqqFoLlfNBdm8Lf5ub1QXKBbilForcEbKChHuYGkrDHC9XwZhSv5KGgUiaMOF/3 7pRjDW3A3I/MJtvd9m5FceBngjNsDSTZakd+KuimWGZ08q9VI4cnrdzljimGe+Tp HXGw5YNp3U3ijnTEiNbKkPQ9CCmQ/3M5sl4Brf3BC/hrz4vyu6eY+TC5E2TBxyGS nqsSWQZlI+TgYg0sXd9UggGz3o4fMG/J9wF9Vzs33uhXogbLz/CMQing9fGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfkC9EqX0km1fdrSshKJQZNOMwDkwHwYDVR0j BBgwFoAULMyFv2zNNlcB76de5BbSNPhhOFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWYwN2YxOC01YzQ5LTQxMjktYWE1My03MDg1Y2NkNTdiNjMvMC8yQ0NDODVCRjZD Q0QzNjU3MDFFRkE3NUVFNDE2RDIzNEY4NjEzODVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQyMzRGODYx Mzg1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FmMDdmMTgtNWM0OS00MTI5LWFh NTMtNzA4NWNjZDU3YjYzLzAvMkNDQzg1QkY2Q0NEMzY1NzAxRUZBNzVFRTQxNkQy MzRGODYxMzg1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm+ceUr20qYvxgO/jiRWBFs7WkdmhNa33Jh YjT2mnk1PUdUALV8OLY28q6CqHymDBXQYQkYEyJP1yfTk7uQlyy9cSEWHFIUi+Ta T8VCNhQKec6mGZPVIslROFS+Bht46IGAnuisbIKBE9UZbJBldf5kOUI3YtHA28+X WgiewpLXaayyvIU8SIfU0c158rqlGrr8RtzEQw5Nb8W+BqzymiwzENe6LeGuXaV2 eVWbKgA6Cq8YYUCFUq3GZt/gAV1CdRPiE5mKDrV+QNMGmBrNZKc2tHrICl1MNP01 5k5C8fYGdLuU1Soj5g5AC04eLZSv2bYu8gDEy93GueoJsMAUbSc= -----END CERTIFICATE-----Generated at Sun Dec 7 18:49:54 2025 by rpki-client