This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: BqjoAKht1LBs5i+0+v2nDfqlRI2p1diECC2nJtUesqo= Subject key identifier: C1:00:B5:4B:19:2A:B1:D8:11:AB:C5:28:6D:1C:BC:F1:2F:30:C9:30 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 2A48B36EE9617EDD88F46A1D46EC283C75FE6437 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 0534 Signing time: Fri 26 Dec 2025 17:30:47 +0000 Manifest this update: Fri 26 Dec 2025 17:25:47 +0000 Manifest next update: Mon 29 Dec 2025 20:31:47 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 2: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 3: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: c1IQigoxWoSqnr+jNkxaljzIXC1tlDsTjO+GWOQubJo=) 4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 5: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:48:b3:6e:e9:61:7e:dd:88:f4:6a:1d:46:ec:28:3c:75:fe:64:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Dec 26 17:25:47 2025 GMT Not After : Dec 29 20:31:47 2025 GMT Subject: CN=C100B54B192AB1D811ABC5286D1CBCF12F30C930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:9d:c7:22:12:d1:2f:d0:fa:7c:92:aa:b4: b6:dc:83:36:41:4e:3d:ec:00:bd:33:15:ce:4c:cb: de:13:f2:69:b3:31:c6:14:67:d4:e5:54:dc:8c:98: 10:ef:0b:69:1b:e9:be:2b:55:29:da:1b:aa:f4:4f: 1c:85:39:ac:59:c5:c9:c2:09:95:f6:54:cf:2e:54: 7f:9f:4f:d1:2b:f1:43:79:0e:3e:56:27:d1:2a:b6: e4:1d:c4:38:fa:c8:39:5c:11:8a:0e:c9:09:ba:4e: 52:88:ea:6d:bd:43:26:fa:04:5b:d2:fb:95:e0:5a: de:dd:27:f6:72:5b:07:94:22:4c:cd:d5:30:05:e5: eb:ca:f5:5e:a7:51:29:d2:0d:6d:33:9e:10:0a:59: b1:a4:3e:0f:1f:89:c1:ba:8d:7d:be:a8:34:9f:9b: 65:db:d9:b4:14:a4:6a:83:86:70:e0:0c:93:a4:ea: d0:42:ab:ed:40:ac:1d:bf:60:78:d5:38:eb:b2:fc: d0:50:d5:bc:c1:f8:fd:34:f1:72:29:85:7f:b7:ef: fe:9c:67:56:3a:e9:36:c1:cb:bd:3a:8e:3a:13:7a: 8d:e0:3f:fd:6f:81:de:35:5b:51:33:84:34:b1:52: 9c:e4:03:8e:29:bb:62:31:f4:4e:6c:ab:8a:32:1e: 6b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:00:B5:4B:19:2A:B1:D8:11:AB:C5:28:6D:1C:BC:F1:2F:30:C9:30 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:f2:7d:98:a8:7b:50:15:4f:d5:58:e7:42:06:c2:be:29:91: 69:98:47:e0:1c:98:84:cb:06:73:28:7e:c4:85:e2:ff:bd:34: 8f:a9:2a:bd:00:f3:5a:0b:92:0a:8d:78:4e:05:6c:ac:47:a9: af:54:1b:0f:fe:6f:14:03:ff:68:59:b6:41:82:cf:52:5c:63: bc:d7:29:cd:ac:b0:d0:b9:b9:a2:d0:9e:81:34:b0:87:30:98: 3a:6a:60:53:8e:06:55:ae:04:41:72:3d:ed:b3:80:1a:7c:da: 3b:1d:4a:01:df:00:1a:38:44:6e:32:d3:17:7c:0d:80:56:d0: 24:64:1e:59:c2:92:c6:db:ef:cb:15:36:8c:f5:18:6f:38:b8: c3:50:21:57:fc:69:2b:0d:21:23:db:22:cd:df:d5:55:93:97: 3d:b5:0d:e6:81:85:29:ef:9c:6c:f5:de:f7:0f:7c:25:2b:74: 55:d7:13:e6:e1:d8:55:fa:fa:87:d7:d8:f2:5c:e6:6d:f7:b8: b9:10:49:f1:84:1c:18:48:af:06:75:e2:62:c3:87:06:02:21: 27:f3:ee:d5:4c:59:ff:ae:45:c3:b1:94:61:f7:10:e9:56:40: 9c:58:64:d6:6f:e1:53:83:c8:bc:74:72:91:25:f9:88:47:ff: aa:b4:fe:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKkizbulhft2I9GodRuwoPHX+ZDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTEyMjYxNzI1NDdaFw0yNTEyMjkyMDMxNDdaMDMxMTAvBgNV BAMTKEMxMDBCNTRCMTkyQUIxRDgxMUFCQzUyODZEMUNCQ0YxMkYzMEM5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tZ3HIhLRL9D6fJKqtLbcgzZB Tj3sAL0zFc5My94T8mmzMcYUZ9TlVNyMmBDvC2kb6b4rVSnaG6r0TxyFOaxZxcnC CZX2VM8uVH+fT9Er8UN5Dj5WJ9EqtuQdxDj6yDlcEYoOyQm6TlKI6m29Qyb6BFvS +5XgWt7dJ/ZyWweUIkzN1TAF5evK9V6nUSnSDW0znhAKWbGkPg8ficG6jX2+qDSf m2Xb2bQUpGqDhnDgDJOk6tBCq+1ArB2/YHjVOOuy/NBQ1bzB+P008XIphX+37/6c Z1Y66TbBy706jjoTeo3gP/1vgd41W1EzhDSxUpzkA44pu2Ix9E5sq4oyHmuxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQC1SxkqsdgRq8UobRy88S8wyTAwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvyfZioe1AVT9VY50IGwr4pkWmYR+AcmITL BnMofsSF4v+9NI+pKr0A81oLkgqNeE4FbKxHqa9UGw/+bxQD/2hZtkGCz1JcY7zX Kc2ssNC5uaLQnoE0sIcwmDpqYFOOBlWuBEFyPe2zgBp82jsdSgHfABo4RG4y0xd8 DYBW0CRkHlnCksbb78sVNoz1GG84uMNQIVf8aSsNISPbIs3f1VWTlz21DeaBhSnv nGz13vcPfCUrdFXXE+bh2FX6+ofX2PJc5m33uLkQSfGEHBhIrwZ14mLDhwYCISfz 7tVMWf+uRcOxlGH3EOlWQJxYZNZv4VODyLx0cpEl+YhH/6q0/pM= -----END CERTIFICATE-----Generated at Sun Dec 28 08:02:28 2025 by rpki-client