This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: exoKz4jlT41TYFFr9vrkavo2DcDuSex+HzGz0Vh9lu4= Subject key identifier: B5:B1:8F:54:6D:1E:C9:50:16:19:E3:69:41:1A:F3:81:7D:81:25:CF Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 33A2F744FB3128952C98F18DD3D690D213A81D96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 19:51:53 +0000 Manifest this update: Thu 18 Dec 2025 19:46:53 +0000 Manifest next update: Sun 21 Dec 2025 23:51:53 +0000 Files and hashes: 1: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=) 2: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 3: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 4: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: +1vV3G3HIGDMepwA1A9DrLdvjVdTHzhmYK95df9kuZc=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) 7: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 23:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a2:f7:44:fb:31:28:95:2c:98:f1:8d:d3:d6:90:d2:13:a8:1d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Dec 18 19:46:53 2025 GMT Not After : Dec 21 23:51:53 2025 GMT Subject: CN=B5B18F546D1EC9501619E369411AF3817D8125CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9a:63:d7:b5:c4:b9:aa:fe:ac:2a:6d:61:e3: ba:96:c6:c9:86:63:91:8b:6e:88:74:0b:e6:05:57: a9:4b:0f:32:f1:d1:ab:46:12:95:14:50:53:4f:f7: 30:16:11:ff:49:13:63:cc:e1:71:f1:23:9e:fc:1e: da:a8:84:df:5e:a2:6f:9c:37:6c:a3:e6:bf:ec:98: 7e:39:0c:84:97:db:3b:19:3a:ea:c0:45:81:7d:75: 0b:3b:9b:8b:d0:43:02:43:44:9a:5d:e9:4d:d7:f1: 24:12:3d:5f:54:5d:54:17:25:c6:b6:2f:e2:d2:03: 68:1a:b7:5d:46:19:f8:ee:4a:74:91:f5:bd:c9:93: 9c:47:69:e9:c2:05:0f:b5:3e:61:75:1d:2a:58:22: 91:50:97:a2:25:96:27:d1:67:a2:39:82:c1:7e:1a: 81:d7:86:be:5d:9f:cf:e9:8f:05:dc:b2:2a:4d:9f: 1f:d1:98:fc:4a:ca:c8:5a:37:ac:10:c8:2b:9e:c3: 4b:f3:18:36:33:32:4b:5f:98:5e:8e:b6:5b:2d:a4: 87:eb:6c:0a:c3:ee:54:83:5d:f1:79:87:bc:35:b5: ab:98:c2:c0:36:f0:4e:97:0d:f0:9b:05:4d:62:5b: 88:d8:bc:c2:b8:4f:40:21:65:ff:c1:ab:67:97:8c: da:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:8F:54:6D:1E:C9:50:16:19:E3:69:41:1A:F3:81:7D:81:25:CF X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:5e:8e:84:5b:b0:6f:c1:85:35:56:70:42:1a:f4:b1:1a:0d: 2d:ca:b7:cb:c3:48:31:61:47:46:38:6f:77:6d:46:79:08:9c: ff:76:8a:f8:9b:0f:d3:a4:95:b7:3d:f0:2b:07:f2:7f:81:37: 37:b4:17:c8:f3:2f:cb:52:5b:30:86:a6:97:de:2c:ce:07:19: 6a:c2:5c:d6:71:ae:0c:a9:a5:81:d4:ff:27:3d:c8:09:3d:56: e8:50:0c:c3:e9:a3:0b:76:65:a9:dd:d1:2a:38:c0:e3:27:18: c8:60:1e:25:28:bf:d6:30:8a:01:25:54:e5:5e:6b:cc:e4:19: 76:ec:35:38:5a:b4:11:a4:d8:af:7b:dc:7e:e1:12:ee:43:ee: 7d:81:ea:21:fe:02:b2:f8:48:fb:ff:e4:61:1c:01:0a:9c:4b: 3e:b2:cc:21:c7:44:b3:c4:21:a3:89:c6:7d:66:e7:c5:9f:2b: 69:18:ed:a0:c8:06:3a:92:7a:2e:e2:7b:23:03:8f:1e:36:0b: d4:bf:64:e0:77:01:00:dc:a3:27:0f:09:7e:ae:3c:47:d0:60: ec:e0:ca:44:6c:37:8c:60:bc:0b:6a:2d:4c:7f:aa:2c:56:ea: cd:e9:f9:e8:6f:1e:c2:2b:e9:af:c4:81:67:23:d2:86:66:c7: 84:4e:75:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6L3RPsxKJUsmPGN09aQ0hOoHZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTEyMTgxOTQ2NTNaFw0yNTEyMjEyMzUxNTNaMDMxMTAvBgNV BAMTKEI1QjE4RjU0NkQxRUM5NTAxNjE5RTM2OTQxMUFGMzgxN0Q4MTI1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymmPXtcS5qv6sKm1h47qWxsmG Y5GLboh0C+YFV6lLDzLx0atGEpUUUFNP9zAWEf9JE2PM4XHxI578HtqohN9eom+c N2yj5r/smH45DISX2zsZOurARYF9dQs7m4vQQwJDRJpd6U3X8SQSPV9UXVQXJca2 L+LSA2gat11GGfjuSnSR9b3Jk5xHaenCBQ+1PmF1HSpYIpFQl6IllifRZ6I5gsF+ GoHXhr5dn8/pjwXcsipNnx/RmPxKyshaN6wQyCuew0vzGDYzMktfmF6OtlstpIfr bArD7lSDXfF5h7w1tauYwsA28E6XDfCbBU1iW4jYvMK4T0AhZf/Bq2eXjNrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtbGPVG0eyVAWGeNpQRrzgX2BJc8wHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlejoRbsG/BhTVWcEIa9LEaDS3Kt8vDSDFh R0Y4b3dtRnkInP92ivibD9Oklbc98CsH8n+BNze0F8jzL8tSWzCGppfeLM4HGWrC XNZxrgyppYHU/yc9yAk9VuhQDMPpowt2Zand0So4wOMnGMhgHiUov9YwigElVOVe a8zkGXbsNThatBGk2K973H7hEu5D7n2B6iH+ArL4SPv/5GEcAQqcSz6yzCHHRLPE IaOJxn1m58WfK2kY7aDIBjqSei7ieyMDjx42C9S/ZOB3AQDcoycPCX6uPEfQYOzg ykRsN4xgvAtqLUx/qixW6s3p+ehvHsIr6a/EgWcj0oZmx4ROdQc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:57 2025 by rpki-client