This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft (raw, json) Hash identifier: ZGBHVT18lWy6oYgFmCr8Qoan4Fnh3gmqYrqzbIJDpHQ= Subject key identifier: 2C:45:55:85:00:2C:E3:79:1E:69:74:2B:DB:96:08:6E:FF:5C:36:2E Authority key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Certificate issuer: /CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Certificate serial: 34EC82AEC36E067DDD53F874CFA302B8EEE0F01F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft Manifest number: 021E Signing time: Sat 06 Dec 2025 10:50:01 +0000 Manifest this update: Sat 06 Dec 2025 10:45:01 +0000 Manifest next update: Tue 09 Dec 2025 16:22:01 +0000 Files and hashes: 1: 3130332e32332e3233342e302f32342d3234203d3e203536323531.roa (hash: 2T0SqX+s7+c6M/8xQC6zq9AtjHjTpT+WBPP4R1GUC0k=) 2: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl (hash: 7pbnOkNJA1HpPKBu31ochnLX0JFI+XPoO5cjUwQMeSM=) 3: 3130332e32332e3233352e302f32342d3234203d3e203536323531.roa (hash: WRW7aqL/oRtWQLJOAPjrIedaeTCb5kYhsipj40FqYcI=) 4: 3130332e342e3137342e302f32342d3234203d3e203536323531.roa (hash: JUH9MRKyIXx13Qw/Z4UVrMoxqh45FAGMglaus+yHwQ4=) 5: 3130332e342e3137352e302f32342d3234203d3e203536323531.roa (hash: 1nQxCfyQcjWyDv9m96kG3DaeechgAQtr12vQv8C6QHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 16:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ec:82:ae:c3:6e:06:7d:dd:53:f8:74:cf:a3:02:b8:ee:e0:f0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Validity Not Before: Dec 6 10:45:01 2025 GMT Not After : Dec 9 16:22:01 2025 GMT Subject: CN=2C455585002CE3791E69742BDB96086EFF5C362E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:bb:d9:6e:6b:f8:a7:f8:54:30:9d:7f:c8: 44:6e:84:a4:7d:9f:fa:e4:36:55:04:fd:38:c1:d1: e7:3f:e8:0f:cd:6b:9b:17:de:b8:77:4b:2d:4f:9a: b1:83:08:58:8b:bc:0f:d6:7e:60:6f:51:9a:82:2e: 58:4c:56:22:ab:59:69:9b:5b:52:4c:c5:66:67:2f: 33:c6:77:4c:9c:77:09:bd:a1:42:b0:29:27:14:9d: 51:cf:da:f1:28:43:cf:79:32:f3:d6:03:d4:c3:88: 3c:76:b2:a6:78:e1:38:f2:0b:d3:bd:e4:63:1f:2c: 91:8a:ba:a5:1e:ce:b4:48:63:d4:89:22:c0:ac:87: 56:6b:d5:fd:01:3e:8b:f2:63:c4:0d:8f:94:22:7b: b8:4b:24:80:d3:16:ef:37:47:a9:73:8c:e7:e6:b7: 25:7f:65:ff:25:08:98:6e:d0:36:9b:5b:96:6b:8e: 80:fa:d6:1e:c8:dd:6f:55:4b:9e:3c:a8:9f:92:98: 16:7a:c5:c1:26:71:0b:15:30:08:53:88:ef:de:7b: d9:a1:b6:94:90:98:c8:89:c4:36:1a:33:52:8b:4f: 8f:1a:59:12:ef:ce:b6:80:0f:6c:3a:7a:89:c0:f8: 45:be:df:ee:dd:73:5e:a8:2a:66:81:9f:6e:9e:47: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:45:55:85:00:2C:E3:79:1E:69:74:2B:DB:96:08:6E:FF:5C:36:2E X509v3 Authority Key Identifier: keyid:CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:24:b1:4e:fb:0e:ec:7f:32:41:b2:75:e0:e2:c0:3c:00:49: fc:ab:03:69:33:04:85:08:b4:46:7d:4e:ef:95:07:5e:2b:fb: 1e:52:bc:3b:4b:05:cb:bf:29:d6:e8:aa:42:9b:10:7b:45:f8: ed:bd:b2:1c:5e:2d:90:3e:9c:12:20:0d:d9:0b:95:f5:2a:89: d2:ff:d8:56:f7:38:08:d8:32:11:b1:82:c1:29:ff:64:d8:3b: 5a:bb:6e:13:3b:e5:31:74:b8:e6:d8:4f:59:a0:54:5f:f2:f9: d9:dc:94:70:4f:0c:ab:02:e0:2a:b2:5f:cb:ce:2d:58:4d:13: d3:f2:39:5b:e5:62:80:d4:5c:28:9e:16:5d:3f:5b:9d:4e:ad: df:eb:48:cd:8d:df:e8:03:17:0b:38:c4:03:d4:e1:d3:e2:7b: e9:a1:00:d6:9a:b9:f0:72:fe:bb:46:00:6a:5c:51:72:21:8b: e0:d1:e8:33:fb:7a:1e:dc:f7:9a:fb:a9:8c:49:a4:65:80:c6: 4f:74:b9:ae:34:d9:94:6c:c0:28:5f:6e:df:66:95:f1:14:46: d3:02:f8:4a:ea:2f:02:f9:1f:65:d5:eb:04:47:b4:a9:86:ae: 04:40:04:f1:5f:cf:87:02:98:1d:32:b8:33:cf:82:b8:c8:93: 4e:61:35:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOyCrsNuBn3dU/h0z6MCuO7g8B8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4 NDk1MDNCNTAeFw0yNTEyMDYxMDQ1MDFaFw0yNTEyMDkxNjIyMDFaMDMxMTAvBgNV BAMTKDJDNDU1NTg1MDAyQ0UzNzkxRTY5NzQyQkRCOTYwODZFRkY1QzM2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+trvZbmv4p/hUMJ1/yERuhKR9 n/rkNlUE/TjB0ec/6A/Na5sX3rh3Sy1PmrGDCFiLvA/WfmBvUZqCLlhMViKrWWmb W1JMxWZnLzPGd0ycdwm9oUKwKScUnVHP2vEoQ895MvPWA9TDiDx2sqZ44TjyC9O9 5GMfLJGKuqUezrRIY9SJIsCsh1Zr1f0BPovyY8QNj5Qie7hLJIDTFu83R6lzjOfm tyV/Zf8lCJhu0DabW5ZrjoD61h7I3W9VS548qJ+SmBZ6xcEmcQsVMAhTiO/ee9mh tpSQmMiJxDYaM1KLT48aWRLvzraAD2w6eonA+EW+3+7dc16oKmaBn26eR0q9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEVVhQAs43keaXQr25YIbv9cNi4wHwYDVR0j BBgwFoAUzA4MQcypVmiU0dNf3i1kJYSVA7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMC9DQzBFMEM0MUND QTk1NjY4OTREMUQzNUZERTJENjQyNTg0OTUwM0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0MjU4NDk1 MDNCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA1Zjc2OGItNDIxOC00YzVkLTg5 M2EtMGZmNjk2NTI2NjM5LzAvQ0MwRTBDNDFDQ0E5NTY2ODk0RDFEMzVGREUyRDY0 MjU4NDk1MDNCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcksU77Dux/MkGydeDiwDwASfyrA2kzBIUI tEZ9Tu+VB14r+x5SvDtLBcu/KdboqkKbEHtF+O29shxeLZA+nBIgDdkLlfUqidL/ 2Fb3OAjYMhGxgsEp/2TYO1q7bhM75TF0uObYT1mgVF/y+dnclHBPDKsC4CqyX8vO LVhNE9PyOVvlYoDUXCieFl0/W51Ord/rSM2N3+gDFws4xAPU4dPie+mhANaaufBy /rtGAGpcUXIhi+DR6DP7eh7c95r7qYxJpGWAxk90ua402ZRswChfbt9mlfEURtMC +ErqLwL5H2XV6wRHtKmGrgRABPFfz4cCmB0yuDPPgrjIk05hNfo= -----END CERTIFICATE-----Generated at Mon Dec 8 05:58:07 2025 by rpki-client