This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: GbHUjm4nDjUeIRa35Ghu6hwDsj13MNMSY1yd785mJvo= Subject key identifier: 6F:09:F5:4D:91:80:C2:6B:FF:4E:84:61:D2:D8:BD:74:55:E5:55:73 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 77CAF093B47742DF8C2AEDBB3840CA5AE89031D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: DF Signing time: Sun 21 Dec 2025 09:20:01 +0000 Manifest this update: Sun 21 Dec 2025 09:15:01 +0000 Manifest next update: Wed 24 Dec 2025 18:10:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: xXpDvTpTYnrWhwG6yw6oVWXLRkeFyEeRb/dcVtfGmTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ca:f0:93:b4:77:42:df:8c:2a:ed:bb:38:40:ca:5a:e8:90:31:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Dec 21 09:15:01 2025 GMT Not After : Dec 24 18:10:01 2025 GMT Subject: CN=6F09F54D9180C26BFF4E8461D2D8BD7455E55573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:70:83:84:20:9c:58:b5:ea:21:10:ee:ae:27: 93:78:93:36:ea:58:1d:7c:80:b0:b5:82:25:77:1d: 1e:01:32:89:e9:8d:1d:e7:85:67:ab:7c:52:75:6b: b6:bf:95:a4:71:41:7c:e6:5f:13:b0:25:ea:81:8b: 58:f1:b2:1c:dc:e6:ec:87:f9:af:78:e6:e1:e0:1e: 4b:a8:7d:52:f6:55:6c:08:be:f4:90:73:dc:e0:84: 67:cf:02:e9:d8:38:1b:8c:00:cc:36:8a:7f:90:1d: 07:0d:d2:b5:68:2a:0f:55:54:1c:d4:9c:39:50:a6: 18:37:96:7e:96:4f:21:15:ef:bf:c5:0b:f9:c4:60: 8f:23:43:84:20:10:86:f7:6b:20:54:4e:ac:fb:fd: 9e:ae:ed:12:69:af:3e:0d:64:f7:7d:9e:86:e1:4a: 82:8a:0a:7c:ea:72:c9:a7:27:f4:57:ed:9b:be:24: ad:de:cf:df:d9:06:5f:ea:16:fd:fc:9f:7a:f8:fe: 74:59:9b:5e:e4:b3:48:f4:ff:ba:d2:cc:91:1b:22: 5f:d3:ed:a6:9b:67:a0:69:80:37:79:8c:66:ce:a1: 12:5c:85:79:e7:13:e3:10:6c:cb:6b:74:24:cc:52: 60:29:0b:55:1f:b1:a3:9f:51:63:14:1e:23:25:95: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:09:F5:4D:91:80:C2:6B:FF:4E:84:61:D2:D8:BD:74:55:E5:55:73 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:94:7e:71:1a:e7:f9:bf:a8:e9:24:bf:11:48:c2:87:f1:e3: d4:17:c8:b1:3e:c0:a9:2b:bf:e5:d7:4d:8f:2b:62:5b:8e:2c: d1:4a:5c:96:cf:1b:dd:2e:ad:3f:3a:f9:bb:4d:33:7f:76:3f: 86:d0:0b:44:43:6e:d9:47:fd:24:73:0a:2a:88:c3:36:dc:4e: 4f:52:d4:6a:6c:36:e9:04:1f:c0:44:69:40:d8:4e:f7:b9:52: ee:34:12:3b:21:b9:29:09:be:44:2e:d7:6f:4c:88:20:16:0d: 51:7a:b7:5d:fa:b6:5d:5f:b8:7f:c5:b3:1c:cc:70:6b:ec:0e: ee:78:28:34:0f:04:10:60:c0:d8:97:1d:66:70:08:ad:9e:c4: 8c:7f:34:4f:17:3e:a9:d9:fc:18:ce:75:c7:3a:c8:57:2e:4c: a3:f2:f2:31:65:46:e7:4c:cb:40:f6:e6:69:0c:9c:59:07:21: d5:8c:e3:fc:55:8f:f2:ca:b4:b9:39:d6:b8:43:a3:68:5c:44: f9:83:58:3b:00:39:fd:1e:fb:09:bf:0e:b9:02:8a:c8:57:43: 25:5e:a4:97:2f:0e:e9:77:68:c9:96:b3:ff:7a:d6:66:0e:10: 2e:3d:63:68:f2:7c:69:a1:ef:bf:f7:b2:19:4e:50:91:e9:2c: 72:bc:40:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8rwk7R3Qt+MKu27OEDKWuiQMdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTEyMjEwOTE1MDFaFw0yNTEyMjQxODEwMDFaMDMxMTAvBgNV BAMTKDZGMDlGNTREOTE4MEMyNkJGRjRFODQ2MUQyRDhCRDc0NTVFNTU1NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZcIOEIJxYteohEO6uJ5N4kzbq WB18gLC1giV3HR4BMonpjR3nhWerfFJ1a7a/laRxQXzmXxOwJeqBi1jxshzc5uyH +a945uHgHkuofVL2VWwIvvSQc9zghGfPAunYOBuMAMw2in+QHQcN0rVoKg9VVBzU nDlQphg3ln6WTyEV77/FC/nEYI8jQ4QgEIb3ayBUTqz7/Z6u7RJprz4NZPd9nobh SoKKCnzqcsmnJ/RX7Zu+JK3ez9/ZBl/qFv38n3r4/nRZm17ks0j0/7rSzJEbIl/T 7aabZ6BpgDd5jGbOoRJchXnnE+MQbMtrdCTMUmApC1UfsaOfUWMUHiMlla7dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwn1TZGAwmv/ToRh0ti9dFXlVXMwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKUfnEa5/m/qOkkvxFIwofx49QXyLE+wKkr v+XXTY8rYluOLNFKXJbPG90urT86+btNM392P4bQC0RDbtlH/SRzCiqIwzbcTk9S 1GpsNukEH8BEaUDYTve5Uu40EjshuSkJvkQu129MiCAWDVF6t136tl1fuH/FsxzM cGvsDu54KDQPBBBgwNiXHWZwCK2exIx/NE8XPqnZ/BjOdcc6yFcuTKPy8jFlRudM y0D25mkMnFkHIdWM4/xVj/LKtLk51rhDo2hcRPmDWDsAOf0e+wm/DrkCishXQyVe pJcvDul3aMmWs/961mYOEC49Y2jyfGmh77/3shlOUJHpLHK8QLE= -----END CERTIFICATE-----Generated at Mon Dec 22 05:16:24 2025 by rpki-client