This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: j23vDmcS/BaY+2eDo/eOFWmTa7zTbxVqWjV1qLcAUKw= Subject key identifier: E6:B1:CE:76:23:4C:86:DD:64:42:D8:C7:6D:DA:9B:0F:BA:C1:18:AB Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 2B4138A527DD893A495489547047F7D7076C7ED9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0160 Signing time: Wed 17 Dec 2025 05:21:08 +0000 Manifest this update: Wed 17 Dec 2025 05:16:08 +0000 Manifest next update: Sat 20 Dec 2025 08:03:08 +0000 Files and hashes: 1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: TFf/lML9bnzpaM8VLltJDlvsneT+S89CCjiq2yHa96A=) 2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 08:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:41:38:a5:27:dd:89:3a:49:54:89:54:70:47:f7:d7:07:6c:7e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Dec 17 05:16:08 2025 GMT Not After : Dec 20 08:03:08 2025 GMT Subject: CN=E6B1CE76234C86DD6442D8C76DDA9B0FBAC118AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:a2:ec:e4:22:d7:8d:59:49:b1:1e:5d:c1: f9:d2:78:08:3b:46:ca:de:a0:8e:9f:84:79:d6:88: 3b:79:aa:de:af:1e:8a:e5:c1:44:1a:1f:55:54:a5: 1c:c2:c8:1c:05:8e:a5:ed:7b:0e:f6:76:f0:78:ca: 54:1e:9e:72:29:f5:9f:54:20:ee:d0:02:3b:11:ea: 3f:bb:a2:e3:bf:c1:f5:5f:bf:9b:b2:07:2c:36:1f: 51:26:07:17:9c:a9:28:10:a0:45:aa:63:d8:23:98: c4:53:79:95:05:5f:76:14:20:41:2e:c4:3d:6a:32: ce:35:40:c6:95:ff:7a:41:40:c6:9c:f4:b4:88:99: b9:16:e9:92:d7:d7:74:54:1c:fe:f0:b4:6d:df:a1: 33:44:cc:53:25:b3:36:2d:1d:b4:b8:40:f2:7c:db: 0d:0f:8a:31:61:42:c9:9a:08:82:8a:70:5c:5a:b3: e4:2d:f2:7b:73:fd:b0:2a:23:f2:94:68:4a:78:f3: f9:8f:57:ca:73:5d:33:6c:b5:46:5a:aa:07:1e:6d: aa:d5:c2:01:bf:eb:64:16:e2:dd:b2:de:31:2f:eb: b1:46:32:30:8b:b3:0d:f0:4f:ec:42:c9:15:88:c7: 11:51:ee:e2:c6:cb:e4:ff:a2:9d:30:35:9f:f8:12: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B1:CE:76:23:4C:86:DD:64:42:D8:C7:6D:DA:9B:0F:BA:C1:18:AB X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:07:34:b0:16:bd:08:e6:3c:50:47:84:a0:c9:2b:1a:f0:64: 10:6f:8a:fb:fc:73:d4:fb:18:15:08:ed:b3:2b:fb:6b:87:42: 8a:e6:f7:c5:fe:0a:88:17:92:9f:c6:e1:9d:ea:ee:e6:a9:56: 9e:4f:ec:d9:ae:73:af:e8:30:92:d7:2d:d9:c1:bb:9d:cc:91: a9:4c:8f:33:06:42:a6:cb:81:91:30:9a:39:9d:43:1d:d5:c5: f8:22:88:e4:34:fa:39:17:f7:5d:05:9e:a2:ef:72:db:f7:72: cd:ac:c2:22:1c:89:a2:d6:7b:c8:90:98:16:dd:79:14:49:75: a9:9a:12:bd:75:7b:c3:7f:bf:0c:df:40:62:a0:fd:75:1c:f4: b8:69:4c:30:6e:33:60:e6:4a:59:f3:fe:3e:f1:7e:70:3f:5f: 26:76:25:ac:99:70:8c:1a:2c:7d:68:da:82:7e:6d:6c:e2:8e: ac:c7:0c:82:e8:49:86:cf:6c:70:03:31:18:a5:b1:52:59:52: 50:19:a3:d8:b6:79:2a:ee:93:37:60:9e:3a:bc:f0:3b:06:34: b7:a7:01:54:bb:2d:b6:69:77:37:03:2b:66:59:cf:c2:79:0d: bf:44:c8:2f:8e:dd:ef:9f:9e:d5:4d:9b:38:dc:56:92:ed:3e: 7c:a2:eb:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0E4pSfdiTpJVIlUcEf31wdsftkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTEyMTcwNTE2MDhaFw0yNTEyMjAwODAzMDhaMDMxMTAvBgNV BAMTKEU2QjFDRTc2MjM0Qzg2REQ2NDQyRDhDNzZEREE5QjBGQkFDMTE4QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfx6Ls5CLXjVlJsR5dwfnSeAg7 RsreoI6fhHnWiDt5qt6vHorlwUQaH1VUpRzCyBwFjqXtew72dvB4ylQennIp9Z9U IO7QAjsR6j+7ouO/wfVfv5uyByw2H1EmBxecqSgQoEWqY9gjmMRTeZUFX3YUIEEu xD1qMs41QMaV/3pBQMac9LSImbkW6ZLX13RUHP7wtG3foTNEzFMlszYtHbS4QPJ8 2w0PijFhQsmaCIKKcFxas+Qt8ntz/bAqI/KUaEp48/mPV8pzXTNstUZaqgcebarV wgG/62QW4t2y3jEv67FGMjCLsw3wT+xCyRWIxxFR7uLGy+T/op0wNZ/4EoxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5rHOdiNMht1kQtjHbdqbD7rBGKswHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAHNLAWvQjmPFBHhKDJKxrwZBBvivv8c9T7 GBUI7bMr+2uHQorm98X+CogXkp/G4Z3q7uapVp5P7Nmuc6/oMJLXLdnBu53MkalM jzMGQqbLgZEwmjmdQx3VxfgiiOQ0+jkX910FnqLvctv3cs2swiIciaLWe8iQmBbd eRRJdamaEr11e8N/vwzfQGKg/XUc9LhpTDBuM2DmSlnz/j7xfnA/XyZ2JayZcIwa LH1o2oJ+bWzijqzHDILoSYbPbHADMRilsVJZUlAZo9i2eSrukzdgnjq88DsGNLen AVS7LbZpdzcDK2ZZz8J5Db9EyC+O3e+fntVNmzjcVpLtPnyi628= -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:14 2025 by rpki-client