This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft File: 4ACFA054E26D225A10C6B0FD316D21263924491E.mft (raw, json) Hash identifier: ANqfHKIGf+Ztyc8PpndZdZPXGull1G89arSHYj793Aw= Subject key identifier: 09:97:F0:EB:02:B9:4F:29:19:4B:C8:AA:9C:8C:70:9F:B1:21:69:89 Authority key identifier: 4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E Certificate issuer: /CN=4ACFA054E26D225A10C6B0FD316D21263924491E Certificate serial: 1C2CD3047E1F86DCABE186B1B76C528A690674C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 01:51:49 +0000 Manifest this update: Fri 05 Dec 2025 01:46:49 +0000 Manifest next update: Mon 08 Dec 2025 04:53:49 +0000 Files and hashes: 1: 3130332e32342e3231342e302f32342d3234203d3e20313332363439.roa (hash: yAXaSsyAZCT1TlzRq2Ly3hqQXPTOIb4fK/X1XVhMrsQ=) 2: 3130332e32342e3231322e302f32342d3234203d3e20313332363439.roa (hash: Occ9qukgsG4ZnF1Qic+Tc5XTBoYcoc2YAGi7zbsnbGs=) 3: 4ACFA054E26D225A10C6B0FD316D21263924491E.crl (hash: ZiQRlbD+ugJCOF8DGMc6FAxnnsdiOcwpjM86yIhR+v8=) 4: 3130332e32342e3231322e302f32322d3232203d3e20313332363439.roa (hash: 45SWUlBMje1Gil0mHOq3QhxOP8W4+J1eu/35dWSuGkk=) 5: 3130332e32342e3231332e302f32342d3234203d3e20313332363439.roa (hash: rU6CTRCIbPGkygtk9vCtJAvLoojM7auukeL4M4/e+W4=) 6: 323430363a653930303a3a2f34382d3438203d3e20313332363439.roa (hash: wG+9X966FrXEy+/eGU93wsgmxZZCxywdW61E71ZhOio=) 7: 3130332e32342e3231352e302f32342d3234203d3e20313332363439.roa (hash: 8s60aKm8BvyPqQYfQkCsPX1L1uTLkhjy/eeXecR9yKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2c:d3:04:7e:1f:86:dc:ab:e1:86:b1:b7:6c:52:8a:69:06:74:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ACFA054E26D225A10C6B0FD316D21263924491E Validity Not Before: Dec 5 01:46:49 2025 GMT Not After : Dec 8 04:53:49 2025 GMT Subject: CN=0997F0EB02B94F29194BC8AA9C8C709FB1216989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:39:27:a6:55:97:87:ff:ca:f7:59:72:7f: e1:42:fe:33:93:c4:53:ff:d8:cf:9f:c5:5e:45:48: b5:70:8b:4c:62:24:88:95:35:38:8a:01:04:e4:9f: 3c:10:16:80:fc:b8:e9:43:19:4f:0e:00:e6:ef:2d: 41:e1:44:26:b9:c7:71:42:8f:96:b4:56:0e:55:e9: 66:2f:82:2c:b6:62:fa:60:c3:18:20:85:01:c2:e5: 7f:6f:09:8f:7c:3c:f0:df:23:0a:55:bd:aa:7c:bf: eb:eb:c6:c3:1e:38:96:50:a0:78:eb:c9:30:93:d9: d5:6a:9f:be:0c:89:fb:66:2f:2b:8d:4c:08:a9:7c: d2:9d:11:54:31:ba:c6:95:cf:6f:8c:0b:4f:76:c1: 7e:9e:a2:53:f6:62:55:aa:7e:46:90:93:a3:b1:f6: 4c:ed:4a:6b:17:4d:cb:cc:f9:79:b1:b8:5b:13:93: 41:cb:30:97:69:ef:9c:e5:fb:a0:09:bd:08:83:58: 9f:66:e4:38:8c:0c:ad:92:0d:d1:21:a3:b8:f8:8e: 71:cf:25:31:c0:0e:a0:71:80:2d:3c:c9:6a:00:8e: 6c:c9:ed:8b:20:09:e0:71:b6:14:d7:ea:7e:62:8d: 03:a2:50:f8:ca:0e:74:30:61:63:e4:f2:bf:4c:52: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:97:F0:EB:02:B9:4F:29:19:4B:C8:AA:9C:8C:70:9F:B1:21:69:89 X509v3 Authority Key Identifier: keyid:4A:CF:A0:54:E2:6D:22:5A:10:C6:B0:FD:31:6D:21:26:39:24:49:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ACFA054E26D225A10C6B0FD316D21263924491E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e46a305-df77-4587-8703-a905c53779ac/0/4ACFA054E26D225A10C6B0FD316D21263924491E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:55:ee:0b:70:90:46:c4:22:f9:f2:4e:df:d1:15:a2:38:54: bb:92:af:39:19:af:12:0a:89:ba:00:02:75:84:1a:b2:35:61: 8c:0f:a6:cc:95:e4:e9:4b:86:bd:9d:fe:68:86:f1:d0:ed:f8: 43:4f:81:7d:43:95:f6:09:11:0b:46:1a:b2:77:6d:e4:1e:86: dc:eb:9e:b9:9e:25:87:9b:f0:9a:97:21:f2:99:f0:a6:5a:90: 48:4b:f2:c5:51:a5:18:0d:40:b0:45:c5:31:2b:ce:f9:57:6d: c8:10:7c:39:ba:97:e8:56:cf:68:a6:23:89:32:f5:e2:9f:e0: 52:68:68:37:37:b5:13:d9:0d:0e:c0:e8:09:d5:ce:c7:76:42: ff:96:7d:2c:a8:ac:b5:57:7d:03:b7:b0:c9:c2:2d:42:fa:83: 96:2b:73:11:8e:b5:9b:08:2b:67:af:6f:97:94:3c:18:4b:f2: b7:5a:fc:f7:22:b6:3d:2d:8d:4a:6b:ac:bf:e7:4f:64:c3:65: ea:42:59:04:47:65:c3:01:ea:6c:84:0f:97:41:16:08:b0:1f: 08:7a:2c:a0:41:1e:95:bd:1e:9f:b0:87:e9:76:7f:02:23:b6: ed:3b:79:9f:61:bd:65:4c:df:80:04:09:cd:7d:a8:1d:e7:79: 1f:2d:d9:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCzTBH4fhtyr4Yaxt2xSimkGdMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYz OTI0NDkxRTAeFw0yNTEyMDUwMTQ2NDlaFw0yNTEyMDgwNDUzNDlaMDMxMTAvBgNV BAMTKDA5OTdGMEVCMDJCOTRGMjkxOTRCQzhBQTlDOEM3MDlGQjEyMTY5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgYDknplWXh//K91lyf+FC/jOT xFP/2M+fxV5FSLVwi0xiJIiVNTiKAQTknzwQFoD8uOlDGU8OAObvLUHhRCa5x3FC j5a0Vg5V6WYvgiy2YvpgwxgghQHC5X9vCY98PPDfIwpVvap8v+vrxsMeOJZQoHjr yTCT2dVqn74MiftmLyuNTAipfNKdEVQxusaVz2+MC092wX6eolP2YlWqfkaQk6Ox 9kztSmsXTcvM+XmxuFsTk0HLMJdp75zl+6AJvQiDWJ9m5DiMDK2SDdEho7j4jnHP JTHADqBxgC08yWoAjmzJ7YsgCeBxthTX6n5ijQOiUPjKDnQwYWPk8r9MUr/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCZfw6wK5TykZS8iqnIxwn7EhaYkwHwYDVR0j BBgwFoAUSs+gVOJtIloQxrD9MW0hJjkkSR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTQ2YTMwNS1kZjc3LTQ1ODctODcwMy1hOTA1YzUzNzc5YWMvMC80QUNGQTA1NEUy NkQyMjVBMTBDNkIwRkQzMTZEMjEyNjM5MjQ0OTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIxMjYzOTI0 NDkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGU0NmEzMDUtZGY3Ny00NTg3LTg3 MDMtYTkwNWM1Mzc3OWFjLzAvNEFDRkEwNTRFMjZEMjI1QTEwQzZCMEZEMzE2RDIx MjYzOTI0NDkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5V7gtwkEbEIvnyTt/RFaI4VLuSrzkZrxIK iboAAnWEGrI1YYwPpsyV5OlLhr2d/miG8dDt+ENPgX1DlfYJEQtGGrJ3beQehtzr nrmeJYeb8JqXIfKZ8KZakEhL8sVRpRgNQLBFxTErzvlXbcgQfDm6l+hWz2imI4ky 9eKf4FJoaDc3tRPZDQ7A6AnVzsd2Qv+WfSyorLVXfQO3sMnCLUL6g5YrcxGOtZsI K2evb5eUPBhL8rda/Pcitj0tjUprrL/nT2TDZepCWQRHZcMB6myED5dBFgiwHwh6 LKBBHpW9Hp+wh+l2fwIjtu07eZ9hvWVM34AECc19qB3neR8t2VE= -----END CERTIFICATE-----Generated at Sun Dec 7 04:50:28 2025 by rpki-client