This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft File: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft (raw, json) Hash identifier: IVzLWfvSfn0+yWCxPx1ywm9FSfDjDMfTnvLYTg8hmhE= Subject key identifier: 9C:CB:04:A7:B6:10:1C:D7:C6:45:54:84:6E:6E:F3:AE:BF:95:5B:8A Authority key identifier: CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE Certificate issuer: /CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Certificate serial: 30A060069722210009F7AEA9EFAD215D5BC64C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft Manifest number: 0371 Signing time: Wed 03 Dec 2025 07:12:24 +0000 Manifest this update: Wed 03 Dec 2025 07:07:24 +0000 Manifest next update: Sat 06 Dec 2025 19:09:24 +0000 Files and hashes: 1: 3130332e3137322e312e302f32342d3234203d3e20313431313236.roa (hash: PYDr+jqmbYFowgu8iPDfPTaOY9K1BX5iJc2AVi/rh14=) 2: 3130332e3137322e302e302f32332d3233203d3e20313431313236.roa (hash: siN0Q4wsKUqrroHoFKYl0K1DI2jO9UMym3yNI85lRv4=) 3: 3130332e3137322e302e302f32342d3234203d3e20313431313236.roa (hash: kCsXisZdmuqIH+cFbb+8UqLy9gHWCVyQnQhfHtpdqhw=) 4: CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl (hash: qEjUsYm0J+XxgcKoSupxKBDJFtSaTumy7sOEMSpVK3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 19:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a0:60:06:97:22:21:00:09:f7:ae:a9:ef:ad:21:5d:5b:c6:4c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC17637DFC67C2C6373B352EF14C46124FCF9FCE Validity Not Before: Dec 3 07:07:24 2025 GMT Not After : Dec 6 19:09:24 2025 GMT Subject: CN=9CCB04A7B6101CD7C64554846E6EF3AEBF955B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:4b:87:37:9f:93:1b:25:5d:ae:d2:5d:eb: 81:bd:35:79:57:62:39:13:19:09:42:a5:e5:48:a8: da:ef:5c:12:a9:08:07:30:b5:f6:7c:bf:bf:64:56: 09:b6:1f:a7:83:c0:ee:c7:40:a7:8e:25:47:99:f6: 14:bc:0f:bd:af:ed:45:9c:02:c9:0b:9e:2b:85:22: cb:40:40:35:69:65:44:40:54:9b:6a:8a:da:64:6d: 3c:5b:39:ef:b5:bb:75:ee:79:b4:e2:b0:92:a1:0b: 35:20:48:68:a7:0c:71:83:33:0f:f4:4b:93:6f:de: a0:fc:2d:87:48:74:b1:d1:91:b7:13:44:a0:00:28: ab:ed:c0:4d:49:1a:59:48:43:64:51:95:77:f6:7c: 67:e2:49:da:3d:22:b1:48:d9:fd:da:2c:74:d4:92: b5:9a:a2:90:1b:6f:82:2f:31:92:10:bb:ef:9d:e3: 33:5b:a6:d1:eb:94:83:da:b7:a0:8a:7a:11:cd:e8: 3d:df:39:49:83:bc:94:7d:a7:d4:7f:75:70:06:5d: da:12:72:66:09:29:b1:26:6d:14:83:f7:ad:1c:30: 49:ab:de:a9:69:2b:b1:c1:ac:89:ed:c9:aa:a4:a7: 43:4b:59:1f:3a:05:41:d3:f2:c4:af:48:c2:b0:ca: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CB:04:A7:B6:10:1C:D7:C6:45:54:84:6E:6E:F3:AE:BF:95:5B:8A X509v3 Authority Key Identifier: keyid:CC:17:63:7D:FC:67:C2:C6:37:3B:35:2E:F1:4C:46:12:4F:CF:9F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a35224c6-334d-4f3d-9837-1bacca5a022b/0/CC17637DFC67C2C6373B352EF14C46124FCF9FCE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:74:3e:66:3b:77:ff:f3:d4:20:6c:a9:6e:a1:6f:7e:60:27: 0f:88:86:9d:31:51:76:e4:80:9b:1e:bb:99:e5:72:b4:ae:58: 53:0c:72:8e:6c:17:55:d3:ba:27:e0:97:33:47:3a:1d:80:41: 23:c8:68:9c:8b:4a:c6:c1:d3:61:1f:0e:06:a9:99:87:95:9b: 13:38:8d:43:7a:e2:c0:c4:06:86:73:dc:83:70:a4:45:e7:59: a4:1f:10:c8:eb:fc:e2:38:7c:88:96:c5:09:6d:38:cb:65:f4: 8a:e6:15:bd:88:9d:ab:13:dc:16:86:cc:e3:16:19:c7:8f:4d: eb:f8:99:7f:58:79:55:6c:13:c1:04:ef:33:a9:d3:bc:82:7e: b7:07:a2:67:3e:1f:a4:aa:68:72:5b:25:2e:94:5b:00:82:32: 8e:5d:c5:b4:49:c0:13:ad:ea:c4:e2:f3:04:bf:02:89:d7:d3: 12:56:7f:76:f0:ca:eb:bf:ac:2d:5e:31:8a:45:d8:4f:4f:01: ba:c1:8f:51:a8:86:32:9d:9b:b8:7a:6b:1c:ff:87:f6:9f:7d: ba:f8:9b:03:9d:56:8d:fe:d1:f1:e6:6b:0e:ad:fc:0f:46:e4: 4b:45:54:b7:4b:2d:7e:7b:fa:ea:7d:be:3c:53:05:5b:c4:85: ad:34:f3:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKBgBpciIQAJ966p760hXVvGTD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0 RkNGOUZDRTAeFw0yNTEyMDMwNzA3MjRaFw0yNTEyMDYxOTA5MjRaMDMxMTAvBgNV BAMTKDlDQ0IwNEE3QjYxMDFDRDdDNjQ1NTQ4NDZFNkVGM0FFQkY5NTVCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjokuHN5+TGyVdrtJd64G9NXlX YjkTGQlCpeVIqNrvXBKpCAcwtfZ8v79kVgm2H6eDwO7HQKeOJUeZ9hS8D72v7UWc AskLniuFIstAQDVpZURAVJtqitpkbTxbOe+1u3XuebTisJKhCzUgSGinDHGDMw/0 S5Nv3qD8LYdIdLHRkbcTRKAAKKvtwE1JGllIQ2RRlXf2fGfiSdo9IrFI2f3aLHTU krWaopAbb4IvMZIQu++d4zNbptHrlIPat6CKehHN6D3fOUmDvJR9p9R/dXAGXdoS cmYJKbEmbRSD960cMEmr3qlpK7HBrIntyaqkp0NLWR86BUHT8sSvSMKwykUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnMsEp7YQHNfGRVSEbm7zrr+VW4owHwYDVR0j BBgwFoAUzBdjffxnwsY3OzUu8UxGEk/Pn84wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MzUyMjRjNi0zMzRkLTRmM2QtOTgzNy0xYmFjY2E1YTAyMmIvMC9DQzE3NjM3REZD NjdDMkM2MzczQjM1MkVGMTRDNDYxMjRGQ0Y5RkNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2MTI0RkNG OUZDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTM1MjI0YzYtMzM0ZC00ZjNkLTk4 MzctMWJhY2NhNWEwMjJiLzAvQ0MxNzYzN0RGQzY3QzJDNjM3M0IzNTJFRjE0QzQ2 MTI0RkNGOUZDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANR0PmY7d//z1CBsqW6hb35gJw+Ihp0xUXbk gJseu5nlcrSuWFMMco5sF1XTuifglzNHOh2AQSPIaJyLSsbB02EfDgapmYeVmxM4 jUN64sDEBoZz3INwpEXnWaQfEMjr/OI4fIiWxQltOMtl9IrmFb2InasT3BaGzOMW GcePTev4mX9YeVVsE8EE7zOp07yCfrcHomc+H6SqaHJbJS6UWwCCMo5dxbRJwBOt 6sTi8wS/AonX0xJWf3bwyuu/rC1eMYpF2E9PAbrBj1GohjKdm7h6axz/h/affbr4 mwOdVo3+0fHmaw6t/A9G5EtFVLdLLX57+up9vjxTBVvEha0086Q= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:27 2025 by rpki-client