This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: fQr12yHiGrEcjycec6Wspcfpwjack2zCEfhgUpSHrjI= Subject key identifier: CF:43:6A:00:69:AB:65:5E:62:A3:8B:43:06:5A:0A:D1:DD:07:FB:9D Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 50353B67A1B8DA5FDD6A45EBE2D831E3E885C2E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 0671 Signing time: Sat 20 Dec 2025 20:43:01 +0000 Manifest this update: Sat 20 Dec 2025 20:38:01 +0000 Manifest next update: Wed 24 Dec 2025 03:44:01 +0000 Files and hashes: 1: AS38482.roa (hash: +V5srNll5JWuujL5oOZQFFebjWMEWEKgHQkXLB0MaPU=) 2: AS38060.roa (hash: eOcmz88SeKGkb0DMwImS4Yyf8BOpXzai0Cr7w/OsMC8=) 3: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: Zsjh1LrJWJLFjlWhamygMbVCU5ijE+o7sx60C4bjBZI=) 4: AS17451.roa (hash: eTISNOGWkLh6jsaCIOFgGp+dDYjzw6/ISiCvl61KBhc=) 5: AS45493.roa (hash: rZ+bNzJQC/viqI5H1YlJtVUU+yt/vWuH3IoVopKxF0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:35:3b:67:a1:b8:da:5f:dd:6a:45:eb:e2:d8:31:e3:e8:85:c2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Dec 20 20:38:01 2025 GMT Not After : Dec 24 03:44:01 2025 GMT Subject: CN=CF436A0069AB655E62A38B43065A0AD1DD07FB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:1a:e4:83:53:d3:5f:fe:2d:c5:07:64:93: 69:a6:39:25:43:dd:ab:1b:d6:32:09:62:d8:3f:97: 3c:16:3e:8d:72:9f:53:8b:4d:b1:ee:e9:12:7c:3b: 6f:1d:c1:da:8b:62:d3:ee:f3:6b:d4:e7:ed:e5:d4: e2:9b:61:54:ef:95:34:f3:0a:e5:07:7e:27:08:c4: f9:cc:45:14:23:c0:7c:a4:2f:04:4c:16:45:ee:af: 7d:e8:6a:ff:0d:85:c5:bf:fd:fb:cb:70:56:7d:43: ab:54:48:87:6a:7c:67:52:26:25:77:cb:cd:b6:bb: 6a:7a:ed:05:fd:8e:e5:40:33:d3:c5:0c:fe:0b:ff: 45:dd:b5:40:6c:38:af:a2:bd:d4:bf:00:57:f9:44: b8:ae:b1:f6:32:f3:be:01:7b:58:77:e2:cd:d8:37: 1e:16:87:49:6d:7b:d1:fa:82:d6:a6:55:04:aa:6c: 61:36:3b:cf:3f:58:e5:fb:0d:16:68:da:8d:42:f0: 58:ff:62:80:d3:aa:16:83:31:5f:b9:94:b8:ad:11: e0:48:cd:70:b9:10:ee:97:b1:03:77:04:96:fd:03: 3f:d7:29:4f:1c:54:6d:bb:7f:a9:e5:4a:5a:59:5d: b3:bc:74:2c:54:94:cf:d7:ba:41:8a:ec:8b:62:04: 2d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:43:6A:00:69:AB:65:5E:62:A3:8B:43:06:5A:0A:D1:DD:07:FB:9D X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:58:82:58:83:7c:62:bd:7f:e0:35:5e:37:6c:d6:0f:a1:b4: 60:b4:e8:41:87:28:9e:ce:d1:7e:51:d1:ed:c4:62:13:ef:5a: db:76:e7:01:c6:bd:01:dd:a1:31:ab:da:2f:03:f2:3e:75:54: cf:16:5e:5e:63:fb:b7:5c:4e:5c:02:88:f2:98:7c:8f:c1:05: 50:8f:2a:71:2b:6e:c9:30:24:a7:4b:87:e4:0e:ef:ee:7c:7d: 59:74:77:0c:53:a0:32:10:02:79:f9:55:7a:1b:bd:fd:44:7b: b3:5c:d7:ad:7d:ff:de:ae:86:07:c9:79:84:6d:ad:d3:61:49: 74:b7:6f:d9:b5:f0:d6:44:41:d1:eb:a2:b8:c1:c4:63:b8:f3: 22:8c:d0:5e:64:a3:a1:a2:be:22:05:6b:de:fb:0f:8b:58:ab: 71:ad:ef:e6:eb:26:55:05:13:e0:99:51:fd:e4:ee:c5:e6:ff: c8:71:94:61:8b:bd:67:a2:75:c7:9c:0d:eb:55:ba:b6:d7:4c: c1:5e:ab:74:7f:f8:99:a6:3b:8e:85:39:dd:71:4b:9e:c3:f0: 54:bc:b8:e1:59:b7:dd:d3:73:62:8f:a6:53:bb:62:08:9f:a1: 3c:84:bf:d8:f6:ef:25:d5:4f:a7:99:d9:52:4f:02:43:4b:0c: 65:e6:a8:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDU7Z6G42l/dakXr4tgx4+iFwukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTEyMjAyMDM4MDFaFw0yNTEyMjQwMzQ0MDFaMDMxMTAvBgNV BAMTKENGNDM2QTAwNjlBQjY1NUU2MkEzOEI0MzA2NUEwQUQxREQwN0ZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYehrkg1PTX/4txQdkk2mmOSVD 3asb1jIJYtg/lzwWPo1yn1OLTbHu6RJ8O28dwdqLYtPu82vU5+3l1OKbYVTvlTTz CuUHficIxPnMRRQjwHykLwRMFkXur33oav8NhcW//fvLcFZ9Q6tUSIdqfGdSJiV3 y822u2p67QX9juVAM9PFDP4L/0XdtUBsOK+ivdS/AFf5RLiusfYy874Be1h34s3Y Nx4Wh0lte9H6gtamVQSqbGE2O88/WOX7DRZo2o1C8Fj/YoDTqhaDMV+5lLitEeBI zXC5EO6XsQN3BJb9Az/XKU8cVG27f6nlSlpZXbO8dCxUlM/XukGK7ItiBC3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz0NqAGmrZV5io4tDBloK0d0H+50wHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJYgliDfGK9f+A1Xjds1g+htGC06EGHKJ7O 0X5R0e3EYhPvWtt25wHGvQHdoTGr2i8D8j51VM8WXl5j+7dcTlwCiPKYfI/BBVCP KnErbskwJKdLh+QO7+58fVl0dwxToDIQAnn5VXobvf1Ee7Nc1619/96uhgfJeYRt rdNhSXS3b9m18NZEQdHrorjBxGO48yKM0F5ko6GiviIFa977D4tYq3Gt7+brJlUF E+CZUf3k7sXm/8hxlGGLvWeidcecDetVurbXTMFeq3R/+JmmO46FOd1xS57D8FS8 uOFZt93Tc2KPplO7YgifoTyEv9j27yXVT6eZ2VJPAkNLDGXmqBU= -----END CERTIFICATE-----Generated at Tue Dec 23 04:34:24 2025 by rpki-client