This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft File: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft (raw, json) Hash identifier: NH292FJ4wHQRLdqw/5Oi5GQa6ciCjEim9Xca085BQOw= Subject key identifier: 2C:03:8E:93:B2:E9:F2:00:E0:24:26:0A:D8:77:F8:07:DF:62:D9:96 Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 Certificate issuer: /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Certificate serial: 7C0130AE0679B14EF5F1D8B13E5B98451D3E2335 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft Manifest number: 0536 Signing time: Thu 18 Dec 2025 22:10:49 +0000 Manifest this update: Thu 18 Dec 2025 22:05:49 +0000 Manifest next update: Mon 22 Dec 2025 01:42:49 +0000 Files and hashes: 1: 3130332e3134302e3138392e302f32342d3234203d3e20313338383831.roa (hash: o2Fqju9m16OPUHuFcH3wb0i9qMLN8qQR+7Sxr2BaVt4=) 2: 3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (hash: d7I2swOfny5ecV9M83MtKittywnggYfHKo91PVbmn6Q=) 3: 323430353a63303a3a2f33322d3438203d3e20313338383831.roa (hash: pTOPZ6sG4IHWMXNqdVtb8BodM+aimyGzFSlPn64NksY=) 4: 02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl (hash: L1IFj6nGGtorDGAhakmwlNc0hEmIttv+PlyxNLmlskI=) 5: 3130332e3134302e3138382e302f32332d3234203d3e20313338383831.roa (hash: 1AWd4OZCytjnMLGGQ3mn/VpwNeJ1KA7954S/Uarlfug=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:30:ae:06:79:b1:4e:f5:f1:d8:b1:3e:5b:98:45:1d:3e:23:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18 Validity Not Before: Dec 18 22:05:49 2025 GMT Not After : Dec 22 01:42:49 2025 GMT Subject: CN=2C038E93B2E9F200E024260AD877F807DF62D996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:a4:5a:f0:b0:1a:7f:01:0a:6d:7e:2b:8d: 43:0c:13:ab:a9:47:4a:5a:94:b2:ea:ea:2f:a6:47: f7:5a:98:e4:96:47:6f:d8:86:8a:a1:89:cb:f7:ed: f9:b3:3c:4a:5f:24:76:da:46:f1:3e:74:13:e2:c2: 67:66:ed:a4:fc:67:30:4b:f9:85:dd:11:bc:c5:bc: 17:a4:19:fe:c4:96:5f:9e:9f:1c:08:e6:42:a5:41: a6:a6:55:04:6f:2f:53:b5:07:2d:02:99:08:44:db: 13:a5:f4:f3:b3:9a:88:68:34:7d:60:4c:a6:36:9e: fb:3b:3f:3b:2c:17:36:d0:73:65:d6:a5:9a:f2:32: 7d:dc:03:2c:7c:c3:54:16:4d:f2:31:01:2a:c2:59: 81:b9:24:22:ba:ad:17:9d:d3:63:a5:b4:17:14:cc: 03:1c:dc:80:d0:48:c6:e7:9a:77:0f:7f:a2:69:63: 84:1d:69:4a:0d:b8:fd:a6:30:3e:50:cd:08:eb:9c: 79:f6:fa:56:22:93:a8:2e:0a:ef:43:ad:fc:49:f2: 84:ee:61:0f:38:8c:bb:75:ab:0b:a8:14:1e:37:40: 66:39:91:3c:48:df:5f:79:d6:c3:7d:ab:b1:94:a4: 32:c2:9d:10:f7:d4:eb:ac:c9:c4:6e:ca:b1:d8:7f: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:03:8E:93:B2:E9:F2:00:E0:24:26:0A:D8:77:F8:07:DF:62:D9:96 X509v3 Authority Key Identifier: keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:38:13:b4:7d:92:b8:84:72:77:e3:d3:49:26:a2:cf:d4: 79:4c:75:59:96:1e:8f:27:ce:3f:de:21:eb:52:7b:ee:97:38: 35:9d:9a:b6:eb:44:80:6c:c5:ed:05:c9:89:d6:7e:cc:90:91: 93:7f:36:b3:f7:7b:95:a1:b1:41:f6:f7:08:11:f3:60:40:49: 58:a7:71:8b:ac:13:bd:06:0f:42:f3:a1:cb:5a:69:6b:e4:06: 4c:50:27:2e:94:a4:01:b5:70:12:78:3c:3a:20:03:bc:dd:95: 61:43:f7:45:93:12:b7:ba:98:8b:4f:80:e8:c6:a9:23:77:bd: 30:be:23:45:0a:9b:f0:81:9f:84:64:25:a4:84:a0:e9:43:b1: 77:8b:76:2d:23:8f:94:5f:21:ee:f2:01:ad:81:a6:0a:99:5b: c0:03:4d:55:f9:c9:25:8f:7c:f8:12:e8:d0:99:d0:bd:10:01: eb:3a:f9:70:dc:64:0c:62:30:02:47:b8:c3:94:5e:d5:5c:11: 5c:de:76:7a:9c:01:e0:7d:f7:cd:23:9b:8e:49:27:71:2b:a8: 83:41:e6:72:07:f2:2a:00:6e:b6:c4:74:f8:5b:e8:00:8c:93: 81:96:75:68:1a:75:8b:9d:92:86:d3:16:ba:2f:18:a5:8a:ec: 03:17:69:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAEwrgZ5sU718dixPluYRR0+IzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz QjA2NEMxODAeFw0yNTEyMTgyMjA1NDlaFw0yNTEyMjIwMTQyNDlaMDMxMTAvBgNV BAMTKDJDMDM4RTkzQjJFOUYyMDBFMDI0MjYwQUQ4NzdGODA3REY2MkQ5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+qRa8LAafwEKbX4rjUMME6up R0palLLq6i+mR/damOSWR2/Yhoqhicv37fmzPEpfJHbaRvE+dBPiwmdm7aT8ZzBL +YXdEbzFvBekGf7Ell+enxwI5kKlQaamVQRvL1O1By0CmQhE2xOl9POzmohoNH1g TKY2nvs7PzssFzbQc2XWpZryMn3cAyx8w1QWTfIxASrCWYG5JCK6rRed02OltBcU zAMc3IDQSMbnmncPf6JpY4QdaUoNuP2mMD5QzQjrnHn2+lYik6guCu9DrfxJ8oTu YQ84jLt1qwuoFB43QGY5kTxI31951sN9q7GUpDLCnRD31OusycRuyrHYf13/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULAOOk7Lp8gDgJCYK2Hf4B99i2ZYwHwYDVR0j BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2 NEMxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDJjYjBiM2EtNjkyZC00NDJlLTkz MDgtOTAzYzAyZDU3MThmLzAvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5 QzkzQjA2NEMxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGROBO0fZK4hHJ349NJJqLP1HlMdVmWHo8n zj/eIetSe+6XODWdmrbrRIBsxe0FyYnWfsyQkZN/NrP3e5WhsUH29wgR82BASVin cYusE70GD0LzoctaaWvkBkxQJy6UpAG1cBJ4PDogA7zdlWFD90WTEre6mItPgOjG qSN3vTC+I0UKm/CBn4RkJaSEoOlDsXeLdi0jj5RfIe7yAa2BpgqZW8ADTVX5ySWP fPgS6NCZ0L0QAes6+XDcZAxiMAJHuMOUXtVcEVzednqcAeB9980jm45JJ3ErqINB 5nIH8ioAbrbEdPhb6ACMk4GWdWgadYudkobTFrovGKWK7AMXado= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:16 2025 by rpki-client