This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft File: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft (raw, json) Hash identifier: ecDt3oky5+8ryTebrJDzXht93e6PTiOIJMi8VFyNohg= Subject key identifier: CC:36:F3:D8:62:5E:3E:5B:2F:1C:00:35:AC:BE:74:80:96:9F:D8:A8 Authority key identifier: 4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 Certificate issuer: /CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Certificate serial: 271C3BC0376E3B01C5D950DB0C71E6F1816DD00A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft Manifest number: BF Signing time: Thu 18 Dec 2025 17:50:49 +0000 Manifest this update: Thu 18 Dec 2025 17:45:49 +0000 Manifest next update: Mon 22 Dec 2025 03:06:49 +0000 Files and hashes: 1: 3136302e32352e3139372e302f32342d3234203d3e20313533313037.roa (hash: xdI7HWpC7S6F3YsdhXQZOI+Bb5mAqBVyTqf6Y1GJCkg=) 2: 3136302e32352e3139362e302f32342d3234203d3e20313533313037.roa (hash: WXQWW4Wi6xrEbWBjUR+QMjICoHgwf/HhAfAnKsJzlws=) 3: 4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl (hash: 1jyEq9Fp6FccSdT8q6z0p10c+XxVma88l9PV4QXdiZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1c:3b:c0:37:6e:3b:01:c5:d9:50:db:0c:71:e6:f1:81:6d:d0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659 Validity Not Before: Dec 18 17:45:49 2025 GMT Not After : Dec 22 03:06:49 2025 GMT Subject: CN=CC36F3D8625E3E5B2F1C0035ACBE7480969FD8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:1b:22:f3:0e:52:18:d9:c5:5b:23:00:bc: 8d:e3:a8:c3:16:26:3d:18:ce:94:c0:54:78:5e:ad: e3:dd:f7:f2:18:4a:8e:40:ea:50:be:5a:71:9f:34: 52:51:aa:77:2e:e2:bc:37:52:fb:fc:a3:1e:15:c2: c5:15:51:44:d6:cf:32:7f:de:a5:72:25:fd:ce:11: 00:00:a6:ae:db:de:73:d3:cc:c7:cd:62:12:6c:dc: 65:4a:23:a4:d0:11:29:8d:88:52:01:57:06:78:be: f9:78:eb:46:8e:c2:90:46:b3:6e:55:9e:78:b8:2e: 20:cc:ba:cb:7a:d7:48:db:a7:83:60:bc:eb:91:4d: 44:58:4d:cb:39:5e:54:da:7e:eb:b6:71:83:fb:1a: 8f:b8:8b:05:3f:60:b1:56:6f:e0:32:25:fa:c8:95: 8a:1c:04:97:20:e9:54:4a:da:c3:d1:0e:bb:a7:a4: 75:b5:0e:f9:d6:1f:9d:2f:7c:8a:50:57:40:2e:20: a4:20:93:f1:dc:bc:5c:95:df:99:2e:26:2a:34:a1: b9:99:4b:b2:22:44:16:4b:dc:fc:bd:21:55:82:52: 4d:aa:d9:40:90:28:a5:f4:a8:29:c9:21:23:ee:82: 3d:8a:b1:75:0c:7c:ff:eb:ac:06:95:d9:5e:da:2d: d1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:36:F3:D8:62:5E:3E:5B:2F:1C:00:35:AC:BE:74:80:96:9F:D8:A8 X509v3 Authority Key Identifier: keyid:4A:CE:0A:DD:BB:5B:F3:B4:9B:1C:DA:5A:23:10:CF:06:B3:34:A6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb69d667-17a4-4fdd-9c57-1122033ef999/0/4ACE0ADDBB5BF3B49B1CDA5A2310CF06B334A659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b1:3f:87:fd:4a:cd:f0:74:e5:c7:4e:99:3b:35:80:32:35: b7:19:26:e7:f1:50:6d:69:75:af:11:52:78:7d:f7:66:34:16: 07:fd:d4:58:66:b3:3a:8e:43:c1:a7:10:27:19:bb:8b:1f:7c: 2d:18:11:08:40:bf:a3:35:ad:90:86:54:03:3b:e1:04:47:71: b4:e0:fe:ac:c7:36:23:b4:5e:c3:47:dc:d5:c7:11:c0:6c:45: cd:cd:4e:f2:c4:e5:5a:ca:46:2e:56:d9:1a:bf:3b:a6:49:6e: 34:c7:1e:fd:29:d4:63:18:41:9a:63:f5:58:8e:1c:29:53:d8: ca:cc:93:9b:0a:94:06:cb:62:c6:69:18:e8:d4:20:31:ec:b7: b2:7b:30:81:7e:ab:f6:5f:5b:92:88:6f:c2:80:ba:02:fa:b6: 36:b4:34:7a:08:93:38:e6:70:82:9d:53:98:c1:79:de:f6:ef: 23:ef:a1:5f:6e:1a:52:4b:82:6c:33:38:27:dc:63:91:cf:a2: 73:12:54:84:af:aa:f1:f3:ca:12:6e:24:e4:cf:47:69:25:6e: 95:b4:2e:96:36:1a:53:8b:1c:6a:15:13:5e:c0:39:8d:6c:ef: 51:3c:f6:96:54:2a:42:df:75:37:1f:d2:4a:76:51:d8:0f:af: f1:b8:e6:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxw7wDduOwHF2VDbDHHm8YFt0AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZC MzM0QTY1OTAeFw0yNTEyMTgxNzQ1NDlaFw0yNTEyMjIwMzA2NDlaMDMxMTAvBgNV BAMTKENDMzZGM0Q4NjI1RTNFNUIyRjFDMDAzNUFDQkU3NDgwOTY5RkQ4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMxsi8w5SGNnFWyMAvI3jqMMW Jj0YzpTAVHherePd9/IYSo5A6lC+WnGfNFJRqncu4rw3Uvv8ox4VwsUVUUTWzzJ/ 3qVyJf3OEQAApq7b3nPTzMfNYhJs3GVKI6TQESmNiFIBVwZ4vvl460aOwpBGs25V nni4LiDMust610jbp4NgvOuRTURYTcs5XlTafuu2cYP7Go+4iwU/YLFWb+AyJfrI lYocBJcg6VRK2sPRDrunpHW1DvnWH50vfIpQV0AuIKQgk/HcvFyV35kuJio0obmZ S7IiRBZL3Py9IVWCUk2q2UCQKKX0qCnJISPugj2KsXUMfP/rrAaV2V7aLdHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzDbz2GJePlsvHAA1rL50gJaf2KgwHwYDVR0j BBgwFoAUSs4K3btb87SbHNpaIxDPBrM0plkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjY5ZDY2Ny0xN2E0LTRmZGQtOWM1Ny0xMTIyMDMzZWY5OTkvMC80QUNFMEFEREJC NUJGM0I0OUIxQ0RBNUEyMzEwQ0YwNkIzMzRBNjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENGMDZCMzM0 QTY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI2OWQ2NjctMTdhNC00ZmRkLTlj NTctMTEyMjAzM2VmOTk5LzAvNEFDRTBBRERCQjVCRjNCNDlCMUNEQTVBMjMxMENG MDZCMzM0QTY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaxP4f9Ss3wdOXHTpk7NYAyNbcZJufxUG1p da8RUnh992Y0Fgf91FhmszqOQ8GnECcZu4sffC0YEQhAv6M1rZCGVAM74QRHcbTg /qzHNiO0XsNH3NXHEcBsRc3NTvLE5VrKRi5W2Rq/O6ZJbjTHHv0p1GMYQZpj9ViO HClT2MrMk5sKlAbLYsZpGOjUIDHst7J7MIF+q/ZfW5KIb8KAugL6tja0NHoIkzjm cIKdU5jBed727yPvoV9uGlJLgmwzOCfcY5HPonMSVISvqvHzyhJuJOTPR2klbpW0 LpY2GlOLHGoVE17AOY1s71E89pZUKkLfdTcf0kp2UdgPr/G45oM= -----END CERTIFICATE-----Generated at Sun Dec 21 06:16:23 2025 by rpki-client