This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft File: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft (raw, json) Hash identifier: ds65NVtpeBMJfuuEqqikPHP4jdfP54rYGEU9qVVYSZk= Subject key identifier: B2:E4:EA:09:E0:93:1E:98:63:3F:04:E3:67:C5:8C:2E:C3:15:79:0D Authority key identifier: CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB Certificate issuer: /CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Certificate serial: 39FFAE5C9A92000A687286459DCDF6D466D27F32 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft Manifest number: 0530 Signing time: Sun 14 Dec 2025 08:21:07 +0000 Manifest this update: Sun 14 Dec 2025 08:16:07 +0000 Manifest next update: Wed 17 Dec 2025 19:55:07 +0000 Files and hashes: 1: 3130332e3234322e3130342e302f32322d3234203d3e203538383231.roa (hash: mBRrtROIE48QsfIN72FcaFORTS/I0EXZvv4EQqPOI/g=) 2: CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl (hash: /UQsveEfNzkuMyo6mnyLZAVSoBXlO6reow5lDMa4P1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 19:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:ae:5c:9a:92:00:0a:68:72:86:45:9d:cd:f6:d4:66:d2:7f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB Validity Not Before: Dec 14 08:16:07 2025 GMT Not After : Dec 17 19:55:07 2025 GMT Subject: CN=B2E4EA09E0931E98633F04E367C58C2EC315790D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:e6:0d:09:fa:25:6b:3d:3d:e4:49:05:6f: 1a:c9:19:f6:4d:74:2e:cf:32:81:d7:44:86:ee:07: cd:9f:6e:f5:40:fe:0f:fa:8c:1d:b5:60:25:e0:fa: c6:66:fa:4e:18:c8:62:e8:72:f6:14:d9:bf:39:c0: 98:a0:0d:72:1d:87:79:63:e3:b5:b6:15:58:e9:21: 88:1e:20:43:0f:ea:77:06:de:5a:2b:cd:64:2b:ed: 04:3b:6e:1d:52:bb:69:6f:fb:a5:c5:92:3b:f9:5c: 80:8f:e6:18:fb:70:5a:3f:5f:35:2b:91:bf:c2:eb: 0a:cf:8e:1f:62:03:10:2b:1c:91:55:73:f4:a5:25: 8c:2f:8d:44:bd:e3:45:8d:db:c6:f3:9b:c9:13:3a: 24:e8:5a:91:a8:b6:a3:ca:75:12:5b:78:d6:28:2b: e2:76:3d:67:f1:c4:36:93:df:7f:a5:10:fb:bc:67: 45:fd:ab:d8:69:f8:fc:b5:50:69:d7:e8:a8:df:ed: 03:c3:c3:3c:8c:ca:11:bc:16:07:a7:48:a0:c4:40: 7f:60:8d:de:7d:ca:49:38:c0:2c:cd:35:db:b2:45: c7:f8:19:2d:9a:31:45:ad:31:4d:ea:b4:63:80:29: 31:e5:1d:8b:61:47:f1:d2:2e:31:64:e1:25:f7:04: 80:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:EA:09:E0:93:1E:98:63:3F:04:E3:67:C5:8C:2E:C3:15:79:0D X509v3 Authority Key Identifier: keyid:CC:43:05:AA:0B:68:48:DF:D0:76:6C:FE:7B:42:D2:B4:48:E1:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e45c9eb-3bb6-4203-8c86-f08b64da3ea9/0/CC4305AA0B6848DFD0766CFE7B42D2B448E16EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:6c:cb:61:1d:46:ab:39:0a:d7:59:f8:d8:be:da:45:f3:f5: 84:ad:f8:8e:15:a6:38:6d:13:ac:63:32:b2:cc:cb:d1:fb:33: 2a:a5:e9:b3:50:03:34:cd:cd:80:b4:eb:21:83:48:09:cf:ae: b6:44:ef:5f:00:16:70:fb:38:13:e1:cb:7a:98:03:4f:a9:ee: 48:53:c5:6c:f3:23:e6:ea:8b:f1:63:a1:5f:b0:48:93:00:f4: e5:9e:60:91:49:c8:9c:6d:9a:23:da:f4:c5:0d:a5:f3:99:8e: 86:be:bb:5d:9e:5b:cf:2a:94:c9:44:6f:4a:27:50:3f:ec:7c: 26:06:b8:e9:41:3c:f9:5c:a4:2c:3d:6f:06:ea:8b:28:3c:0c: 0d:47:48:25:e7:69:e0:e5:ba:aa:b8:13:95:df:fc:14:3f:93: 83:e7:3f:76:59:7a:41:6a:b7:1c:0c:aa:35:16:43:bc:81:81: 3a:7d:1a:44:98:38:9a:44:1c:f5:57:92:a2:5c:63:af:df:66: a8:99:14:d5:68:19:ad:24:15:b5:38:1d:4e:1f:e2:76:d8:69: 96:5c:4c:0a:04:67:74:0a:e3:88:69:9f:a5:59:f8:e2:f5:33: 7f:2a:49:7a:dd:ca:0e:90:aa:2e:f4:d3:e2:41:c7:78:92:fd: 14:f5:d9:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOf+uXJqSAApocoZFnc321GbSfzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0 OEUxNkVEQjAeFw0yNTEyMTQwODE2MDdaFw0yNTEyMTcxOTU1MDdaMDMxMTAvBgNV BAMTKEIyRTRFQTA5RTA5MzFFOTg2MzNGMDRFMzY3QzU4QzJFQzMxNTc5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkxeYNCfolaz095EkFbxrJGfZN dC7PMoHXRIbuB82fbvVA/g/6jB21YCXg+sZm+k4YyGLocvYU2b85wJigDXIdh3lj 47W2FVjpIYgeIEMP6ncG3lorzWQr7QQ7bh1Su2lv+6XFkjv5XICP5hj7cFo/XzUr kb/C6wrPjh9iAxArHJFVc/SlJYwvjUS940WN28bzm8kTOiToWpGotqPKdRJbeNYo K+J2PWfxxDaT33+lEPu8Z0X9q9hp+Py1UGnX6Kjf7QPDwzyMyhG8FgenSKDEQH9g jd59ykk4wCzNNduyRcf4GS2aMUWtMU3qtGOAKTHlHYthR/HSLjFk4SX3BICtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsuTqCeCTHphjPwTjZ8WMLsMVeQ0wHwYDVR0j BBgwFoAUzEMFqgtoSN/Qdmz+e0LStEjhbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTQ1YzllYi0zYmI2LTQyMDMtOGM4Ni1mMDhiNjRkYTNlYTkvMC9DQzQzMDVBQTBC Njg0OERGRDA3NjZDRkU3QjQyRDJCNDQ4RTE2RURCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQyQjQ0OEUx NkVEQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGU0NWM5ZWItM2JiNi00MjAzLThj ODYtZjA4YjY0ZGEzZWE5LzAvQ0M0MzA1QUEwQjY4NDhERkQwNzY2Q0ZFN0I0MkQy QjQ0OEUxNkVEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxsy2EdRqs5CtdZ+Ni+2kXz9YSt+I4Vpjht E6xjMrLMy9H7Myql6bNQAzTNzYC06yGDSAnPrrZE718AFnD7OBPhy3qYA0+p7khT xWzzI+bqi/FjoV+wSJMA9OWeYJFJyJxtmiPa9MUNpfOZjoa+u12eW88qlMlEb0on UD/sfCYGuOlBPPlcpCw9bwbqiyg8DA1HSCXnaeDluqq4E5Xf/BQ/k4PnP3ZZekFq txwMqjUWQ7yBgTp9GkSYOJpEHPVXkqJcY6/fZqiZFNVoGa0kFbU4HU4f4nbYaZZc TAoEZ3QK44hpn6VZ+OL1M38qSXrdyg6Qqi700+JBx3iS/RT12Ro= -----END CERTIFICATE-----Generated at Tue Dec 16 03:47:37 2025 by rpki-client