This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json)
Hash identifier: IZkoXrhHltFYdWsNV8F92gcxmXm1oHvvyPTVV8nnBq4=
Subject key identifier: 9B:70:97:C7:80:41:15:AB:93:59:A0:09:28:B6:1B:1F:02:E8:9A:10
Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Certificate serial: 2156AA2B6266639BD10B5632A68EC059C81CBEAB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
Manifest number: 03FD
Signing time: Thu 18 Dec 2025 13:40:03 +0000
Manifest this update: Thu 18 Dec 2025 13:35:03 +0000
Manifest next update: Sun 21 Dec 2025 19:30:03 +0000
Files and hashes: 1: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=)
2: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: ajgxAvb1JNnizLhBIf9HQlfma9YYK49Z/5PF2FcrIsY=)
3: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 19:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:56:aa:2b:62:66:63:9b:d1:0b:56:32:a6:8e:c0:59:c8:1c:be:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73
Validity
Not Before: Dec 18 13:35:03 2025 GMT
Not After : Dec 21 19:30:03 2025 GMT
Subject: CN=9B7097C7804115AB9359A00928B61B1F02E89A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:8a:db:02:6f:65:a1:1c:de:8f:75:0e:42:
98:fc:ef:a5:74:57:22:5d:de:c4:87:07:91:5d:b5:
f2:f5:33:1b:b4:73:5f:e6:d8:43:db:39:62:b4:a6:
df:37:a8:ad:97:c4:bb:46:c3:e4:48:b3:e8:4d:a0:
02:51:bd:fa:76:79:cc:cf:e5:05:22:16:3c:52:c4:
5e:5b:68:7d:98:41:40:03:5b:29:e8:fc:13:0b:28:
b3:f1:8a:13:ad:da:17:86:d2:09:6e:e0:e5:8a:71:
f2:87:2a:8d:08:e8:0d:33:32:47:38:21:d4:ff:d6:
e8:9e:d4:1f:f7:eb:33:9f:03:d4:8e:4b:ed:2a:db:
6e:57:12:73:7a:3e:36:0b:53:d9:37:c6:91:3c:8e:
ce:bc:b1:b7:1b:b2:3b:1c:d3:c0:9c:f1:e9:b0:9e:
92:d7:94:a0:0d:a0:c0:59:67:8b:df:d3:6e:16:22:
35:a8:be:26:c4:8f:da:92:40:28:73:74:64:f3:0d:
4d:bb:ab:c1:fe:61:42:15:5c:9f:28:06:dd:42:e6:
50:a5:68:89:38:90:72:cb:83:c8:c1:02:58:8c:fa:
89:43:3c:90:c4:54:1c:f3:93:ce:de:45:72:f8:4e:
5c:83:58:4e:cf:0c:1c:35:22:bf:ea:27:3c:2f:b9:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:70:97:C7:80:41:15:AB:93:59:A0:09:28:B6:1B:1F:02:E8:9A:10
X509v3 Authority Key Identifier:
keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a9:b1:cf:74:da:47:65:50:82:97:cd:61:83:7d:17:8b:7c:
03:e7:21:90:1e:d2:f5:30:09:51:b1:88:64:bf:c0:f6:ad:22:
69:45:9a:48:9e:9f:cc:e2:8a:14:3d:83:6d:0b:2d:dc:da:ac:
0d:b4:e8:ae:d8:fd:c0:1b:9c:af:f6:68:ab:e5:ea:26:fc:e3:
c3:53:a5:0d:06:b9:66:ce:af:90:80:70:e6:03:30:53:5b:6d:
00:ca:72:4f:0a:1f:cf:5b:6c:f4:cf:0f:42:62:58:60:37:97:
1e:e1:8e:71:8f:d2:a8:07:1f:38:f2:1a:5f:cd:0e:39:0d:60:
aa:37:3c:2d:f7:df:ea:fc:c1:23:73:62:8f:ca:d3:55:40:e1:
04:f6:97:de:0d:61:0f:6c:8b:2e:b6:46:5f:82:eb:b1:f4:80:
35:24:7a:96:c6:bb:fe:e2:64:de:79:50:5c:04:2c:b5:e3:22:
c7:6f:98:53:b5:0d:1f:4a:47:63:ca:55:b7:e5:4a:32:2d:9f:
2f:5b:86:b4:72:1d:7e:25:7a:6e:c7:83:de:79:00:c2:a7:82:
ed:c7:78:1f:9e:94:f3:1f:04:2d:dc:9b:a5:7d:e3:71:83:18:
5c:07:87:f6:72:6c:92:db:c3:43:7a:ba:c7:6a:87:5e:83:fd:
14:ad:ac:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:35:00 2025 by rpki-client