This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft File: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft (raw, json) Hash identifier: sifAc94Rt+XVL17RxS2OcXsqSWlSzrwXxszLMlrgSMg= Subject key identifier: 62:3E:7C:E1:06:4F:69:92:EC:8C:7A:C6:D7:D8:68:B3:DA:AF:D9:4B Authority key identifier: CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C Certificate issuer: /CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Certificate serial: 60720CBFD0F05DC9B2EFBCE8D7E8956E6877DA6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft Manifest number: 0141 Signing time: Tue 02 Dec 2025 04:41:31 +0000 Manifest this update: Tue 02 Dec 2025 04:36:31 +0000 Manifest next update: Fri 05 Dec 2025 11:50:31 +0000 Files and hashes: 1: CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl (hash: Hlhtl7NsoGZPpRF9HyQWDx3k77nhJQL6evbSi684VFo=) 2: 3231302e37392e3133382e302f32332d3234203d3e20313532303535.roa (hash: q9g/7jnDYJJqOWmO7+ef/NTG70K2Els8BXgKpA4FB/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:72:0c:bf:d0:f0:5d:c9:b2:ef:bc:e8:d7:e8:95:6e:68:77:da:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C Validity Not Before: Dec 2 04:36:31 2025 GMT Not After : Dec 5 11:50:31 2025 GMT Subject: CN=623E7CE1064F6992EC8C7AC6D7D868B3DAAFD94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:65:8c:09:2e:7e:cf:2e:39:8b:42:be:2b:2b: ad:6c:51:d1:cb:80:a9:d5:2e:d3:12:86:b1:c3:82: 8d:cf:02:84:70:5c:4f:0e:cf:53:d9:71:3f:01:45: 53:99:45:b3:66:37:e9:49:52:f9:36:9b:86:a3:39: 3a:19:a6:c2:59:20:28:ec:49:14:f6:3e:ba:47:5b: 53:79:07:9c:70:3c:28:af:d9:74:0f:b0:a5:ae:db: 57:45:7e:ea:77:c7:bc:9e:ea:a0:43:21:7d:18:f9: 3b:d1:97:66:70:22:dd:29:26:f2:d6:81:a9:42:23: 28:b0:89:7b:46:a1:96:7c:9b:c0:ba:24:c4:24:ad: 5a:93:49:d1:c9:3f:9b:83:01:36:37:c4:4e:70:d6: f6:0d:bd:90:76:a5:a4:9f:6a:45:fb:b2:b4:a1:16: 3c:9b:28:55:44:23:ac:7d:6a:78:f7:1d:1d:83:0a: fb:f2:f3:72:ed:c1:10:51:f8:28:95:29:06:6f:48: 90:63:cd:1f:74:91:8d:ba:98:c8:6c:e8:85:ef:79: 0b:2c:a4:1a:a2:3e:68:fa:06:a0:50:3c:fe:46:d3: a4:f0:3c:48:41:12:ae:f0:d1:21:3f:45:b2:8c:81: 85:1c:02:8b:18:e2:b6:93:a9:73:43:c6:7c:b6:c3: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3E:7C:E1:06:4F:69:92:EC:8C:7A:C6:D7:D8:68:B3:DA:AF:D9:4B X509v3 Authority Key Identifier: keyid:CC:0A:27:1E:0A:AF:32:4F:93:71:7C:5B:CF:43:C7:AE:42:B3:0B:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e5328d8-867e-4232-b5e1-65ab0bc04896/0/CC0A271E0AAF324F93717C5BCF43C7AE42B30B5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:c3:4c:8d:fd:91:cb:e8:bb:eb:03:55:5a:78:09:07:a5: 21:71:43:fb:75:9f:97:07:13:8f:07:d8:94:2c:3d:f5:2f:06: 8f:30:12:c3:6e:4c:4e:c8:b4:9d:b2:d1:dc:e9:7d:b6:33:b9: 64:8e:00:9e:0a:16:da:87:2a:3e:6a:e0:ea:93:59:90:30:d6: 2e:02:68:44:05:1d:d1:c7:c2:d3:c9:f3:21:dc:a4:e7:de:ac: f8:f9:fa:eb:54:a1:9e:44:56:e1:07:4c:20:b8:e3:6f:21:88: fd:00:3b:f9:3e:26:0d:74:42:49:66:81:a6:f8:68:0c:f9:e5: 70:55:31:84:ae:f9:b2:cd:4d:f0:f1:51:70:58:48:05:ec:8d: 0e:f0:55:04:d4:83:47:15:62:c9:9b:06:2a:5b:cd:ce:99:4c: dc:0f:0e:db:bf:42:1d:bb:38:1a:35:9d:82:bf:26:01:c3:ea: 83:e0:9d:41:f2:d6:e5:c8:20:c9:b1:1b:90:a7:25:86:1c:66: 07:6a:f1:37:ff:1a:e6:98:97:49:48:0b:83:43:71:a1:ae:42: 22:01:21:2d:64:34:e9:b0:2a:8c:07:0a:e1:d2:e3:23:cc:98: 7f:db:ba:70:b6:c0:e0:e6:b8:d4:6f:b2:39:b7:c3:27:f2:c2: 93:11:1e:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHIMv9DwXcmy77zo1+iVbmh32mowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0 MkIzMEI1QzAeFw0yNTEyMDIwNDM2MzFaFw0yNTEyMDUxMTUwMzFaMDMxMTAvBgNV BAMTKDYyM0U3Q0UxMDY0RjY5OTJFQzhDN0FDNkQ3RDg2OEIzREFBRkQ5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsZYwJLn7PLjmLQr4rK61sUdHL gKnVLtMShrHDgo3PAoRwXE8Oz1PZcT8BRVOZRbNmN+lJUvk2m4ajOToZpsJZICjs SRT2PrpHW1N5B5xwPCiv2XQPsKWu21dFfup3x7ye6qBDIX0Y+TvRl2ZwIt0pJvLW galCIyiwiXtGoZZ8m8C6JMQkrVqTSdHJP5uDATY3xE5w1vYNvZB2paSfakX7srSh FjybKFVEI6x9anj3HR2DCvvy83LtwRBR+CiVKQZvSJBjzR90kY26mMhs6IXveQss pBqiPmj6BqBQPP5G06TwPEhBEq7w0SE/RbKMgYUcAosY4raTqXNDxny2wxSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYj584QZPaZLsjHrG19hos9qv2UswHwYDVR0j BBgwFoAUzAonHgqvMk+TcXxbz0PHrkKzC1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTUzMjhkOC04NjdlLTQyMzItYjVlMS02NWFiMGJjMDQ4OTYvMC9DQzBBMjcxRTBB QUYzMjRGOTM3MTdDNUJDRjQzQzdBRTQyQjMwQjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3QUU0MkIz MEI1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U1MzI4ZDgtODY3ZS00MjMyLWI1 ZTEtNjVhYjBiYzA0ODk2LzAvQ0MwQTI3MUUwQUFGMzI0RjkzNzE3QzVCQ0Y0M0M3 QUU0MkIzMEI1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB82w0yN/ZHL6LvrA1VaeAkHpSFxQ/t1n5cH E48H2JQsPfUvBo8wEsNuTE7ItJ2y0dzpfbYzuWSOAJ4KFtqHKj5q4OqTWZAw1i4C aEQFHdHHwtPJ8yHcpOferPj5+utUoZ5EVuEHTCC4428hiP0AO/k+Jg10Qklmgab4 aAz55XBVMYSu+bLNTfDxUXBYSAXsjQ7wVQTUg0cVYsmbBipbzc6ZTNwPDtu/Qh27 OBo1nYK/JgHD6oPgnUHy1uXIIMmxG5CnJYYcZgdq8Tf/GuaYl0lIC4NDcaGuQiIB IS1kNOmwKowHCuHS4yPMmH/bunC2wODmuNRvsjm3wyfywpMRHqw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:55 2025 by rpki-client