This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
File:                     ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json)
Hash identifier:          mnfh/+E46zlAWZ8xaDZHnZsi4++A0a17BXU5kerd6rI=
Subject key identifier:   33:7B:03:2F:8C:F4:5C:DD:2E:22:84:A7:7E:CE:47:09:BB:AA:EC:31
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Certificate issuer:       /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial:       2250EEE9F1F7E45DA78A408E01C72D9C59CD0575
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
Manifest number:          0526
Signing time:             Thu 18 Dec 2025 16:51:02 +0000
Manifest this update:     Thu 18 Dec 2025 16:46:02 +0000
Manifest next update:     Sun 21 Dec 2025 18:49:02 +0000
Files and hashes:         1: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=)
                          2: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: yY4uZZ0noJUjOb48aKTKccZ+20tzHVJsMwJBVi3Sn4A=)
                          3: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=)
                          4: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
                          rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 18:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:50:ee:e9:f1:f7:e4:5d:a7:8a:40:8e:01:c7:2d:9c:59:cd:05:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
        Validity
            Not Before: Dec 18 16:46:02 2025 GMT
            Not After : Dec 21 18:49:02 2025 GMT
        Subject: CN=337B032F8CF45CDD2E2284A77ECE4709BBAAEC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:47:0a:66:b0:df:b2:61:ea:ca:62:05:36:05:
                    5d:1f:0c:a9:0c:66:1d:e1:8d:11:72:95:0b:58:26:
                    c4:b9:f3:59:0c:9b:b8:f1:be:e6:b1:77:2f:38:4e:
                    0a:e3:44:77:78:8c:b8:81:4c:8b:9a:15:04:b9:cf:
                    82:ea:29:1e:b9:47:8f:82:1d:f2:c9:55:f9:d2:cc:
                    91:08:84:65:74:70:a4:93:18:45:53:af:ee:df:cf:
                    86:cb:27:91:1c:8e:fc:0d:ae:07:fb:cd:a7:c9:a1:
                    07:0b:b4:89:0b:9a:c3:91:3b:57:ad:4d:90:42:0d:
                    f8:b1:a6:53:6e:a1:39:b7:92:74:d0:c8:05:a9:e9:
                    bd:96:2e:b2:34:d5:d7:bb:d0:34:a5:22:41:44:2b:
                    c1:7f:56:33:2a:84:f1:42:4b:52:ee:5c:7a:c2:68:
                    78:a4:d9:f5:c8:1b:fd:e4:32:62:83:f8:ca:9e:a1:
                    b7:ec:11:1d:1d:d0:f4:c2:3f:f1:20:78:37:28:5a:
                    e4:e5:9d:3b:32:ed:8b:05:e0:c5:d7:b7:b6:aa:67:
                    c7:db:43:e8:d0:8b:90:5a:99:ff:da:e7:ae:ba:45:
                    6d:38:5e:b0:c2:08:fb:48:4b:c3:8e:98:08:9c:28:
                    f5:09:b4:3a:d3:4a:28:ab:ce:72:db:a4:65:13:e5:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:03:2F:8C:F4:5C:DD:2E:22:84:A7:7E:CE:47:09:BB:AA:EC:31
            X509v3 Authority Key Identifier:
                keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:79:d8:ec:91:1a:37:0d:d5:57:7d:98:5c:76:35:80:cf:8d:
         20:e1:d2:c3:ee:71:39:66:c5:90:cc:41:bb:15:03:8c:67:72:
         5b:6b:6d:87:ee:65:42:7c:24:69:5f:32:b1:3b:3c:ef:03:2c:
         3d:44:60:ff:54:c3:ef:24:bb:52:40:dd:18:62:35:a9:de:67:
         e1:27:b0:3b:f6:bc:99:eb:e8:0e:32:30:41:c5:4b:3d:39:20:
         c7:ec:87:01:1e:db:dc:d4:41:94:32:9c:f7:ad:68:0e:35:10:
         e2:58:6b:d6:b9:bd:80:82:14:5b:e3:3a:73:5d:e6:77:df:67:
         8a:e9:7d:5c:e2:ba:cf:9d:e3:e2:cf:90:a6:0f:9f:84:08:23:
         cb:2c:55:ea:52:a5:bb:d6:ac:4b:c6:d4:a5:91:77:3b:46:15:
         39:3e:d6:49:36:ec:7c:79:03:19:84:d4:5b:82:87:0f:db:ad:
         a8:a8:de:9e:be:fc:70:3e:fe:f6:81:01:87:b1:58:22:13:7d:
         9a:33:4a:54:2a:ef:ca:18:52:44:58:2f:7a:2c:d2:f1:44:cc:
         26:9e:ab:85:9f:85:c7:4c:5f:d0:b5:51:97:65:c0:99:f0:f5:
         fa:5f:58:b5:fb:c5:4f:b6:d3:40:6f:f0:ee:aa:9e:29:aa:07:
         50:ab:51:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 01:18:43 2025 by rpki-client