This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json)
Hash identifier: twGLnG8ztybYflYheAEUmrEBK/WzPkeDRE/M8OhYnBY=
Subject key identifier: 03:B6:3F:9F:7C:2C:9D:7F:1B:44:86:7F:81:9E:7C:91:35:39:27:39
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial: 77462F53990AB8504C30B8E894CA9D6757AB9A35
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
Manifest number: 0531
Signing time: Mon 15 Dec 2025 21:01:01 +0000
Manifest this update: Mon 15 Dec 2025 20:56:01 +0000
Manifest next update: Fri 19 Dec 2025 08:34:01 +0000
Files and hashes: 1: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: BPYyLIOy9hI5eRtrZbjknAc8z8k9sRjiu5SbZFodgss=)
2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=)
3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=)
4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=)
5: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 08:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:46:2f:53:99:0a:b8:50:4c:30:b8:e8:94:ca:9d:67:57:ab:9a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Validity
Not Before: Dec 15 20:56:01 2025 GMT
Not After : Dec 19 08:34:01 2025 GMT
Subject: CN=03B63F9F7C2C9D7F1B44867F819E7C9135392739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:e3:1d:e0:e9:36:85:34:2a:60:20:7f:69:
e5:7a:67:33:89:9c:9a:8e:6c:c9:6c:58:83:d5:89:
5a:86:c2:77:3b:20:05:3f:95:dd:f5:38:ee:70:5a:
d8:9a:85:97:a5:15:d1:e5:33:9a:56:bb:e0:74:3f:
df:a8:7b:79:42:e2:16:63:a4:89:40:43:ac:c1:45:
54:ec:5f:5f:f4:a2:90:34:35:c8:09:6f:42:0c:7a:
85:ed:87:19:bb:4b:c9:7a:76:40:e2:25:e7:85:39:
41:96:b9:44:90:2a:8f:b7:a8:30:65:d8:8a:45:78:
7e:43:e2:fd:20:0f:d8:eb:37:e2:43:83:03:77:1d:
d3:a4:be:e2:49:e8:85:b1:d0:0e:90:66:a2:85:1b:
e7:b6:95:7d:0c:a7:d4:d8:0c:59:78:03:a6:8a:e0:
d1:a7:86:8d:19:27:af:34:82:14:35:f7:bd:87:55:
6e:2d:1a:68:33:22:60:9d:f8:12:d0:78:ba:98:3b:
71:1b:9a:6e:5f:66:11:d2:39:62:95:b8:11:2a:83:
de:80:07:ed:8b:f0:cb:12:30:01:d3:16:66:9c:7a:
f4:b7:db:54:4d:96:55:85:92:6c:0b:e2:d0:5e:5e:
03:84:68:b3:d5:81:4b:ed:48:5d:06:c3:f2:4b:31:
c7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B6:3F:9F:7C:2C:9D:7F:1B:44:86:7F:81:9E:7C:91:35:39:27:39
X509v3 Authority Key Identifier:
keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:09:d4:9f:b1:c4:40:3e:8a:9f:d3:9f:4c:6a:c1:4e:28:0c:
d6:73:07:4b:5b:89:a3:66:87:d2:ea:11:6e:3f:35:13:f3:32:
95:b3:06:c6:e2:94:b1:6c:df:e7:3e:53:09:89:67:88:12:ea:
88:82:28:7e:5d:a1:3c:9d:cd:8e:40:a7:b1:cf:ed:20:d7:d5:
4b:d7:c7:f6:c2:c2:13:d8:51:92:a9:02:2e:81:30:88:06:b6:
a5:cd:0f:1e:c4:a8:69:4a:11:b9:7e:98:05:89:75:47:87:dc:
a9:d8:40:2d:e3:22:2d:47:90:f1:c2:39:c9:1f:dd:0c:8d:c0:
b7:72:a9:29:ed:06:83:69:6c:7e:d8:ae:90:b0:39:25:18:dd:
50:79:fd:ee:93:44:8d:b7:00:9b:8b:2e:54:94:cb:a0:3d:1c:
69:47:fb:e5:6d:4a:94:b2:0c:f6:3d:dc:0d:94:26:91:b1:88:
3b:6e:7c:7f:38:7e:b4:4b:70:cb:f1:eb:86:66:69:c3:a3:d2:
15:0f:15:ca:47:48:10:a3:57:9e:41:26:5d:b2:ac:7a:0b:c3:
aa:01:e8:9f:fd:3d:de:c4:7d:57:52:27:29:a3:a1:56:b4:1a:
70:35:13:7a:a6:ec:6d:38:71:8b:dc:a8:06:69:2b:3d:47:11:
b2:4d:0d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:38:03 2025 by rpki-client