This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: KqLYog96J6DhMPooBRs531JwOGUWYASRxeGP8jgIV6w= Subject key identifier: 66:CE:E3:51:E2:95:42:2E:77:83:E5:A6:AE:E4:7C:7A:C0:E4:E1:D4 Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 1253C601C1C5977E3818700D373D83E5981DC8B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 16:50:47 +0000 Manifest this update: Fri 05 Dec 2025 16:45:47 +0000 Manifest next update: Tue 09 Dec 2025 04:32:47 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 2: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 3: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) 4: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 5: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: tBQImC5LMrecENIQMvcB3aPTWLLjvQINxQI+1zNxf5Q=) 6: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:53:c6:01:c1:c5:97:7e:38:18:70:0d:37:3d:83:e5:98:1d:c8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Dec 5 16:45:47 2025 GMT Not After : Dec 9 04:32:47 2025 GMT Subject: CN=66CEE351E295422E7783E5A6AEE47C7AC0E4E1D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b8:49:9a:b3:2b:d0:58:ba:3b:e2:f1:a9:9a: a3:89:91:e7:1f:9b:53:a6:de:7b:9e:0e:ce:26:f7: 22:88:8f:22:1e:f9:3c:ff:4e:78:f1:bc:f2:86:ed: e9:ea:5c:9f:42:e7:ab:1b:12:1c:37:2d:ce:fd:65: 44:79:9e:51:b8:8b:d5:66:ef:c7:d4:0a:c1:4c:dc: 23:fb:8e:95:cd:c1:b4:0f:31:01:cd:7d:69:d7:e4: d7:dd:61:8b:81:4d:8f:a5:16:d1:63:cd:f9:d6:ad: 4c:98:58:fc:d1:b7:ca:55:60:35:78:d6:21:1e:57: 5b:46:d1:cc:cc:14:14:09:4e:a0:9f:50:2f:ae:34: f5:ee:51:11:f2:a3:84:17:8f:fd:60:42:2e:83:7a: 57:91:49:c0:80:c5:df:15:70:2e:79:ea:06:98:67: 8c:4c:0e:1a:7c:9f:5c:6b:2e:4e:2b:86:e4:ac:a4: 6a:89:2b:57:01:03:ee:3d:8e:61:c2:d5:18:12:b9: b5:50:9c:95:03:6a:4e:1a:c6:6d:ab:2c:56:dd:7b: 39:c8:6b:f7:06:e2:0b:68:80:d4:50:ae:2c:9e:56: 04:8d:ca:4b:61:ef:ac:bc:78:94:d6:d6:5a:ee:7c: 17:de:ce:dd:1e:20:b8:1f:6a:c6:e8:20:7d:94:6b: 6f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CE:E3:51:E2:95:42:2E:77:83:E5:A6:AE:E4:7C:7A:C0:E4:E1:D4 X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:2f:e9:8a:40:3b:fc:07:e9:74:fa:69:fe:2e:98:80:c6:a8: 27:a3:af:ba:c7:da:c1:24:f7:2e:42:11:d9:7d:76:2e:d3:ca: 0d:54:9b:3c:48:0a:32:6c:2d:57:72:50:d2:34:bc:28:a9:a9: fe:d2:92:10:17:21:ed:46:a0:6f:c8:27:16:79:a5:9a:d9:fc: c3:7d:ad:6a:cb:b3:14:dc:4c:d4:c9:fb:22:e2:62:af:a0:84: 17:44:fe:51:1d:12:3c:fa:9f:90:29:9a:36:ef:f0:d0:9a:83: 4a:69:c8:42:00:4a:eb:51:e5:6f:f8:1e:2b:47:5f:a2:77:9c: 09:87:23:96:46:fa:f2:37:42:31:06:bd:40:66:84:be:a7:90: 78:eb:9d:11:9e:85:73:95:43:39:25:5f:7c:d1:0a:60:da:a5: 14:62:9f:a8:aa:1f:b6:e5:bd:16:9d:58:d8:fd:d9:0a:93:fa: 28:9a:4b:35:bf:5c:fc:ba:27:14:3b:88:87:dc:06:9d:c6:1e: 68:93:c9:c8:03:38:c9:41:9c:7d:da:74:96:4c:2e:c3:e1:c0: a9:62:c5:b9:1e:f8:17:76:10:9b:06:9a:b3:bd:5e:ed:7d:9d: 04:05:07:fd:3f:e1:e6:a7:6f:65:dd:fd:7b:53:cf:38:50:f3: ae:7d:b2:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUElPGAcHFl344GHANNz2D5ZgdyLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNTEyMDUxNjQ1NDdaFw0yNTEyMDkwNDMyNDdaMDMxMTAvBgNV BAMTKDY2Q0VFMzUxRTI5NTQyMkU3NzgzRTVBNkFFRTQ3QzdBQzBFNEUxRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uEmasyvQWLo74vGpmqOJkecf m1Om3nueDs4m9yKIjyIe+Tz/TnjxvPKG7enqXJ9C56sbEhw3Lc79ZUR5nlG4i9Vm 78fUCsFM3CP7jpXNwbQPMQHNfWnX5NfdYYuBTY+lFtFjzfnWrUyYWPzRt8pVYDV4 1iEeV1tG0czMFBQJTqCfUC+uNPXuURHyo4QXj/1gQi6DeleRScCAxd8VcC556gaY Z4xMDhp8n1xrLk4rhuSspGqJK1cBA+49jmHC1RgSubVQnJUDak4axm2rLFbdeznI a/cG4gtogNRQriyeVgSNykth76y8eJTW1lrufBfezt0eILgfasboIH2Ua2+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZs7jUeKVQi53g+WmruR8esDk4dQwHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgv6YpAO/wH6XT6af4umIDGqCejr7rH2sEk 9y5CEdl9di7Tyg1UmzxICjJsLVdyUNI0vCipqf7SkhAXIe1GoG/IJxZ5pZrZ/MN9 rWrLsxTcTNTJ+yLiYq+ghBdE/lEdEjz6n5Apmjbv8NCag0ppyEIASutR5W/4HitH X6J3nAmHI5ZG+vI3QjEGvUBmhL6nkHjrnRGehXOVQzklX3zRCmDapRRin6iqH7bl vRadWNj92QqT+iiaSzW/XPy6JxQ7iIfcBp3GHmiTycgDOMlBnH3adJZMLsPhwKli xbke+Bd2EJsGmrO9Xu19nQQFB/0/4eanb2Xd/XtTzzhQ8659sog= -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:33 2025 by rpki-client