This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft File: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json) Hash identifier: lRwLeqDOKv3tkS03edPbc9XGsjcQLlpOkaTXWOnq1N4= Subject key identifier: 8A:13:89:8E:61:90:07:23:0A:6A:C9:06:3C:F3:8F:98:1D:56:97:94 Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 Certificate issuer: /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Certificate serial: 4C50C0CD9CA76BCCF8BCF9BCB5A7BB3424B0F69F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft Manifest number: 03E7 Signing time: Fri 26 Dec 2025 22:42:19 +0000 Manifest this update: Fri 26 Dec 2025 22:37:19 +0000 Manifest next update: Tue 30 Dec 2025 10:23:19 +0000 Files and hashes: 1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: NaP9vXBpnPiT+nKryI32eBeNIXdLAaz5nye7wgDu1r4=) 2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:50:c0:cd:9c:a7:6b:cc:f8:bc:f9:bc:b5:a7:bb:34:24:b0:f6:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85 Validity Not Before: Dec 26 22:37:19 2025 GMT Not After : Dec 30 10:23:19 2025 GMT Subject: CN=8A13898E619007230A6AC9063CF38F981D569794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:dd:d7:be:42:1d:27:86:94:3c:f7:c2:f1: 09:e4:27:20:d0:07:5a:84:e7:2c:b0:75:6e:ae:aa: 39:e1:41:dc:eb:fe:90:f3:72:44:ab:48:4c:80:5a: 3a:5a:d0:45:2b:ad:19:3c:5f:8d:19:45:14:0a:fd: ef:bb:5c:ec:51:2f:94:58:b6:93:c8:d9:f9:e5:c6: f8:01:fe:60:1b:30:84:91:37:c0:01:28:13:b1:9e: 86:c6:bf:39:da:1c:a1:a9:2a:6d:af:e2:fd:3a:7f: 4e:0f:21:00:80:8c:8d:ac:6d:5f:11:1c:d7:a0:d9: c3:02:3c:47:19:16:c8:6c:62:b5:c5:45:32:75:5c: a5:70:7d:41:bc:62:d2:31:8c:e7:f2:82:72:71:89: 4a:b1:38:da:ee:1c:19:b7:e1:d2:69:f7:11:9a:05: 34:56:bf:6d:d8:f8:9d:77:8c:f6:55:d3:e5:12:54: 9d:b7:12:d5:2f:26:73:a6:da:f9:e9:fb:c8:31:29: 2a:e1:a0:18:02:4e:ab:7d:03:09:1f:6e:8e:31:c9: 7e:99:a3:63:a1:0a:db:e5:bf:2e:ef:64:12:5b:04: cf:6e:c5:91:c2:74:fb:3c:30:c3:43:e3:00:53:01: 95:f6:52:c8:7b:55:15:34:fa:20:33:6e:e1:81:6b: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:13:89:8E:61:90:07:23:0A:6A:C9:06:3C:F3:8F:98:1D:56:97:94 X509v3 Authority Key Identifier: keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:04:d8:ce:14:ea:2a:40:bd:8b:31:15:b2:c1:ea:9e:3f:6c: 20:4c:ad:d6:ec:39:16:f8:5d:c6:9f:27:c8:d5:70:20:fd:bf: fc:af:f0:ad:96:36:41:a9:aa:56:ed:91:61:2e:a7:8b:52:3c: eb:ec:64:d3:7b:b2:d9:6a:56:03:1d:74:95:81:f9:f2:6f:3e: 04:bf:f2:d3:5e:14:ab:24:99:b1:5f:23:3a:a2:c2:bc:51:72: 2c:13:85:44:01:a0:71:3b:11:e1:c2:a2:3c:a8:e8:e1:ab:fe: e8:d1:69:4c:03:b6:c4:0a:99:8a:79:33:7c:d7:99:ba:20:ce: 4d:f6:b7:75:f1:28:8a:bc:70:b5:43:12:e5:54:ac:6a:2d:eb: 9b:d7:ab:bf:57:1f:cc:29:8d:de:d3:1b:7f:bf:a8:ee:b2:b1: 3c:37:8a:37:70:92:48:63:ce:b7:18:89:32:16:34:1b:ff:2a: 6e:58:7e:7c:b9:e0:d3:86:0f:72:da:7e:e7:c1:3d:b4:e5:7d: 77:46:b7:56:42:00:5a:05:e5:3b:c1:f9:00:66:b0:96:39:73: 4e:51:ea:db:81:13:cc:7b:6e:91:39:92:e8:ec:fd:f6:dd:ac: a8:d6:a9:bf:e9:1d:fb:e2:49:58:17:b3:a9:e3:3b:26:13:07: 10:76:24:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFDAzZyna8z4vPm8tae7NCSw9p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC MkE5REY4NTAeFw0yNTEyMjYyMjM3MTlaFw0yNTEyMzAxMDIzMTlaMDMxMTAvBgNV BAMTKDhBMTM4OThFNjE5MDA3MjMwQTZBQzkwNjNDRjM4Rjk4MUQ1Njk3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3N3XvkIdJ4aUPPfC8QnkJyDQ B1qE5yywdW6uqjnhQdzr/pDzckSrSEyAWjpa0EUrrRk8X40ZRRQK/e+7XOxRL5RY tpPI2fnlxvgB/mAbMISRN8ABKBOxnobGvznaHKGpKm2v4v06f04PIQCAjI2sbV8R HNeg2cMCPEcZFshsYrXFRTJ1XKVwfUG8YtIxjOfygnJxiUqxONruHBm34dJp9xGa BTRWv23Y+J13jPZV0+USVJ23EtUvJnOm2vnp+8gxKSrhoBgCTqt9Awkfbo4xyX6Z o2OhCtvlvy7vZBJbBM9uxZHCdPs8MMND4wBTAZX2Ush7VRU0+iAzbuGBaxRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUihOJjmGQByMKaskGPPOPmB1Wl5QwHwYDVR0j BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5 REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEE2M4U6ipAvYsxFbLB6p4/bCBMrdbsORb4 XcafJ8jVcCD9v/yv8K2WNkGpqlbtkWEup4tSPOvsZNN7stlqVgMddJWB+fJvPgS/ 8tNeFKskmbFfIzqiwrxRciwThUQBoHE7EeHCojyo6OGr/ujRaUwDtsQKmYp5M3zX mbogzk32t3XxKIq8cLVDEuVUrGot65vXq79XH8wpjd7TG3+/qO6ysTw3ijdwkkhj zrcYiTIWNBv/Km5Yfny54NOGD3LafufBPbTlfXdGt1ZCAFoF5TvB+QBmsJY5c05R 6tuBE8x7bpE5kujs/fbdrKjWqb/pHfviSVgXs6njOyYTBxB2JN4= -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:14 2025 by rpki-client