This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft File: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft (raw, json) Hash identifier: bHsA3DF8FYIOHR66Z33WmasCw2GhRs1mkRpNyGemQvE= Subject key identifier: E5:CD:20:28:EB:5F:72:65:3C:55:45:B8:93:0D:91:71:63:1F:4B:A3 Authority key identifier: CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 Certificate issuer: /CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Certificate serial: 063D989CFC81BB0431943F7B0A21331448DADE68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft Manifest number: 01A6 Signing time: Tue 02 Dec 2025 11:30:55 +0000 Manifest this update: Tue 02 Dec 2025 11:25:55 +0000 Manifest next update: Fri 05 Dec 2025 17:09:55 +0000 Files and hashes: 1: CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl (hash: +2DIWqNPhIm6FqRyvpln/aY0c638UZACQmWHcuVtXIw=) 2: 3130332e3136302e31382e302f32332d3234203d3e20313431363234.roa (hash: zDZwxuMGR35WnwSzgL1ngFAfXt4osMkxDGuH+wx6iCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:09:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3d:98:9c:fc:81:bb:04:31:94:3f:7b:0a:21:33:14:48:da:de:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC8AB1F3D177B771E1F70EDDE67F26E5854C0708 Validity Not Before: Dec 2 11:25:55 2025 GMT Not After : Dec 5 17:09:55 2025 GMT Subject: CN=E5CD2028EB5F72653C5545B8930D9171631F4BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bf:63:3a:7f:30:ed:7c:c2:78:29:e1:81:20: 28:46:ad:c6:3e:89:00:b3:b5:6a:33:f0:54:9f:ac: 87:fe:41:09:46:0c:f5:f5:65:69:79:ce:ff:c9:b5: 2b:4b:ef:82:94:40:8e:19:53:bc:cc:56:0e:98:62: ef:cb:05:a1:97:1c:6e:e2:f1:35:4d:8c:07:84:1f: 9a:84:18:2a:68:b4:fe:11:91:25:28:53:8e:d3:4e: 9e:29:c6:aa:39:b5:9d:91:36:18:7c:6c:c9:f2:b7: 12:ed:42:96:e5:a1:f9:3f:6c:2d:51:c0:42:85:f5: 27:47:ae:65:98:4f:00:2e:e3:31:1f:57:25:4b:2d: 7e:f6:b4:38:5c:47:1d:63:d7:76:78:01:6d:79:a8: 54:0f:c4:33:35:74:d0:21:cd:c9:37:ac:b8:8e:85: 0e:3d:55:8d:5b:20:59:29:80:cf:d3:bd:7e:2b:87: ac:c1:be:ac:68:f4:5a:53:45:fe:68:91:e7:20:63: 3f:3f:07:b7:e7:4a:cb:79:61:1b:de:d2:5b:c6:23: 7f:3d:e4:fd:d5:fa:24:2a:cd:ff:db:48:65:fa:38: f7:ba:46:48:10:26:62:89:6e:cc:73:5c:c3:ac:ae: 49:c2:2e:56:27:df:73:73:20:2d:e6:85:d0:09:14: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CD:20:28:EB:5F:72:65:3C:55:45:B8:93:0D:91:71:63:1F:4B:A3 X509v3 Authority Key Identifier: keyid:CC:8A:B1:F3:D1:77:B7:71:E1:F7:0E:DD:E6:7F:26:E5:85:4C:07:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd743c7c-07e6-4611-b403-d8c5f0124a78/0/CC8AB1F3D177B771E1F70EDDE67F26E5854C0708.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:19:1a:7f:fc:6c:ee:1c:e9:bc:ae:11:c0:ec:8e:56:fc:e1: f4:de:08:b5:3f:87:1a:07:23:16:06:26:42:c3:48:ed:f8:64: 1f:bd:a6:6c:23:b2:3f:96:b1:36:b0:b0:95:15:04:ba:71:9b: 60:98:73:4f:a9:37:99:82:21:82:f6:ff:f8:ef:38:d8:c5:67: fc:df:e1:d6:09:4a:35:3a:af:90:f7:a7:6d:f2:1f:bb:2d:dd: 31:9e:e7:02:e0:3f:e8:08:89:9b:7a:e7:0c:92:30:99:3c:35: 80:3f:0c:69:33:d0:3d:c5:cb:2a:6e:9f:69:26:fe:75:cb:16: 80:23:f6:3f:71:cb:f2:66:fb:72:ed:02:31:3a:df:b6:f9:8c: 17:68:80:37:6a:01:d5:4f:5e:69:a6:27:88:2c:2a:00:48:bf: d7:bd:1e:27:ab:f9:ae:86:41:58:c3:2d:ad:3f:81:9d:48:b9: 15:81:4e:9f:57:3a:4d:1f:32:01:7d:90:dc:c8:1d:39:47:42: 27:bf:b3:97:80:19:e4:3a:5f:67:0c:72:5b:43:2c:48:45:07: 56:63:48:b7:c1:b8:3f:ad:0a:91:01:6e:31:6a:71:0e:d9:07: 18:a0:b3:54:3e:f9:f0:22:3a:34:17:dd:6b:44:15:1e:74:c1: b0:a1:84:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBj2YnPyBuwQxlD97CiEzFEja3mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4 NTRDMDcwODAeFw0yNTEyMDIxMTI1NTVaFw0yNTEyMDUxNzA5NTVaMDMxMTAvBgNV BAMTKEU1Q0QyMDI4RUI1RjcyNjUzQzU1NDVCODkzMEQ5MTcxNjMxRjRCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPv2M6fzDtfMJ4KeGBIChGrcY+ iQCztWoz8FSfrIf+QQlGDPX1ZWl5zv/JtStL74KUQI4ZU7zMVg6YYu/LBaGXHG7i 8TVNjAeEH5qEGCpotP4RkSUoU47TTp4pxqo5tZ2RNhh8bMnytxLtQpblofk/bC1R wEKF9SdHrmWYTwAu4zEfVyVLLX72tDhcRx1j13Z4AW15qFQPxDM1dNAhzck3rLiO hQ49VY1bIFkpgM/TvX4rh6zBvqxo9FpTRf5okecgYz8/B7fnSst5YRve0lvGI389 5P3V+iQqzf/bSGX6OPe6RkgQJmKJbsxzXMOsrknCLlYn33NzIC3mhdAJFBdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5c0gKOtfcmU8VUW4kw2RcWMfS6MwHwYDVR0j BBgwFoAUzIqx89F3t3Hh9w7d5n8m5YVMBwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDc0M2M3Yy0wN2U2LTQ2MTEtYjQwMy1kOGM1ZjAxMjRhNzgvMC9DQzhBQjFGM0Qx NzdCNzcxRTFGNzBFRERFNjdGMjZFNTg1NEMwNzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2RTU4NTRD MDcwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ3NDNjN2MtMDdlNi00NjExLWI0 MDMtZDhjNWYwMTI0YTc4LzAvQ0M4QUIxRjNEMTc3Qjc3MUUxRjcwRURERTY3RjI2 RTU4NTRDMDcwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoZGn/8bO4c6byuEcDsjlb84fTeCLU/hxoH IxYGJkLDSO34ZB+9pmwjsj+WsTawsJUVBLpxm2CYc0+pN5mCIYL2//jvONjFZ/zf 4dYJSjU6r5D3p23yH7st3TGe5wLgP+gIiZt65wySMJk8NYA/DGkz0D3Fyypun2km /nXLFoAj9j9xy/Jm+3LtAjE637b5jBdogDdqAdVPXmmmJ4gsKgBIv9e9Hier+a6G QVjDLa0/gZ1IuRWBTp9XOk0fMgF9kNzIHTlHQie/s5eAGeQ6X2cMcltDLEhFB1Zj SLfBuD+tCpEBbjFqcQ7ZBxigs1Q++fAiOjQX3WtEFR50wbChhGY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:39 2025 by rpki-client