This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: a0vfx529lFuboRY8kUIjMJfXfXwbxtARPQS6cCR/NK0= Subject key identifier: 5C:82:1F:B9:EA:A6:D1:EA:5F:6A:58:66:1D:15:32:AE:18:EF:19:E2 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 6B34524B2B2E534992E439C7F2E33EEC81DC699B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01C0 Signing time: Mon 22 Dec 2025 11:01:16 +0000 Manifest this update: Mon 22 Dec 2025 10:56:16 +0000 Manifest next update: Thu 25 Dec 2025 17:03:16 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: vaUmdRHVnNHhPgLzUOvrz6sWPzOFdgU7lX8lbaC9p6M=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: MoFvv+++vTB85GXC2Kbs1Zs2yMHHdxOOMsOAsgFAkGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:34:52:4b:2b:2e:53:49:92:e4:39:c7:f2:e3:3e:ec:81:dc:69:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Dec 22 10:56:16 2025 GMT Not After : Dec 25 17:03:16 2025 GMT Subject: CN=5C821FB9EAA6D1EA5F6A58661D1532AE18EF19E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cd:d6:09:42:13:6f:5a:9b:db:20:57:fa:b0: cf:70:63:8d:08:30:0a:32:1b:6d:13:18:80:0a:4a: 4c:cd:21:af:a3:da:b4:67:0b:70:07:99:94:52:55: d6:26:c6:f3:07:f6:ab:e9:f8:70:c5:3b:39:03:38: 44:d3:5b:ed:6e:7d:6c:1f:c7:9c:90:16:b5:ba:ef: ba:d1:eb:e9:e6:f2:f2:9e:a9:7f:36:74:03:c6:96: 88:da:e0:20:79:79:9e:bf:d5:57:3e:ef:be:dc:e6: a8:23:79:09:94:33:e3:d2:e2:27:63:e5:6e:69:fb: 60:c4:3e:a7:7d:6a:fc:50:dd:36:35:60:c2:32:1f: 32:a6:37:b8:7a:e7:68:7b:ac:9a:7f:f3:8c:d5:d6: 62:83:5b:c3:d6:3d:65:60:23:e0:20:94:f8:22:68: d9:2e:09:3c:94:ee:c6:c8:26:f6:e3:6e:47:3f:46: 77:9f:d9:b5:1c:b1:91:c7:05:92:1a:22:d3:07:d7: 1a:c5:2e:8c:99:86:4b:9e:ef:ad:81:41:7f:d8:f5: 48:98:ca:80:e9:1d:95:08:0c:0a:1d:20:94:4c:4e: 60:46:7f:5d:03:e9:36:33:86:f1:0a:a5:ad:17:32: 7a:01:d3:97:5d:c0:f8:79:ff:17:b9:3a:fd:56:10: 5c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:1F:B9:EA:A6:D1:EA:5F:6A:58:66:1D:15:32:AE:18:EF:19:E2 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:cf:de:0c:e6:de:ed:b2:44:f2:9c:55:50:13:11:bc:ff:23: af:e7:10:01:fb:93:f7:e6:29:97:ae:fe:9d:f5:bb:83:17:05: af:7e:3a:ff:d9:18:95:62:3b:20:16:b0:ce:82:8a:5d:02:85: 36:ad:99:62:11:2c:99:d6:d7:2b:c7:61:24:d8:24:31:38:a5: e0:67:36:53:ac:4c:ae:d2:1c:e1:af:91:5b:40:ae:eb:73:15: 17:98:26:98:3b:11:a1:1f:3b:8b:94:22:55:7c:0a:91:80:c1: 10:99:1c:00:74:8f:06:89:de:ef:f2:77:74:fd:8f:2f:30:de: 16:89:95:48:eb:47:b1:c9:ea:7d:b7:e2:b4:dd:86:55:3e:c6: eb:d3:d2:cf:8b:e6:4a:e3:a1:06:6c:34:51:6f:ab:93:cc:a9: 16:b4:b6:36:85:f5:99:6a:2f:a6:6d:28:00:d5:ec:a0:15:fe: 62:3a:ee:6b:89:ee:07:5b:fa:44:9a:79:a2:0b:e3:74:b0:98: d4:a9:fa:02:18:31:91:27:83:82:bc:ef:af:15:c3:5f:7d:f0: 53:37:9f:e6:ac:a6:cc:67:76:2d:31:24:cb:c0:e0:3a:41:b1: 2e:26:ac:d5:96:2b:a4:9e:38:d4:29:19:c6:51:b3:6a:3a:ac: f1:c0:21:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUazRSSysuU0mS5DnH8uM+7IHcaZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTEyMjIxMDU2MTZaFw0yNTEyMjUxNzAzMTZaMDMxMTAvBgNV BAMTKDVDODIxRkI5RUFBNkQxRUE1RjZBNTg2NjFEMTUzMkFFMThFRjE5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtzdYJQhNvWpvbIFf6sM9wY40I MAoyG20TGIAKSkzNIa+j2rRnC3AHmZRSVdYmxvMH9qvp+HDFOzkDOETTW+1ufWwf x5yQFrW677rR6+nm8vKeqX82dAPGloja4CB5eZ6/1Vc+777c5qgjeQmUM+PS4idj 5W5p+2DEPqd9avxQ3TY1YMIyHzKmN7h652h7rJp/84zV1mKDW8PWPWVgI+AglPgi aNkuCTyU7sbIJvbjbkc/Rnef2bUcsZHHBZIaItMH1xrFLoyZhkue762BQX/Y9UiY yoDpHZUIDAodIJRMTmBGf10D6TYzhvEKpa0XMnoB05ddwPh5/xe5Ov1WEFypAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXIIfueqm0epfalhmHRUyrhjvGeIwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjP3gzm3u2yRPKcVVATEbz/I6/nEAH7k/fm KZeu/p31u4MXBa9+Ov/ZGJViOyAWsM6Cil0ChTatmWIRLJnW1yvHYSTYJDE4peBn NlOsTK7SHOGvkVtArutzFReYJpg7EaEfO4uUIlV8CpGAwRCZHAB0jwaJ3u/yd3T9 jy8w3haJlUjrR7HJ6n234rTdhlU+xuvT0s+L5krjoQZsNFFvq5PMqRa0tjaF9Zlq L6ZtKADV7KAV/mI67muJ7gdb+kSaeaIL43SwmNSp+gIYMZEng4K8768Vw1998FM3 n+aspsxndi0xJMvA4DpBsS4mrNWWK6SeONQpGcZRs2o6rPHAIdY= -----END CERTIFICATE-----Generated at Wed Dec 24 10:37:50 2025 by rpki-client