This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
File:                     ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json)
Hash identifier:          W2hm4oLMDN+22Z3aelwMd8YznIPtbsQU+K4llZBn1pE=
Subject key identifier:   76:D6:FE:36:B0:42:AE:FF:85:8B:A5:73:DF:D0:CA:EF:71:52:71:05
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Certificate issuer:       /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial:       5A02F2EBD55540FAA5BBEDD19A3F11053B1A6780
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
Manifest number:          0521
Signing time:             Sat 06 Dec 2025 14:01:02 +0000
Manifest this update:     Sat 06 Dec 2025 13:56:02 +0000
Manifest next update:     Tue 09 Dec 2025 23:55:02 +0000
Files and hashes:         1: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=)
                          2: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=)
                          3: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=)
                          4: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: zO5LhQznO0cYJd8+mLCoubBS2tDv+QED3b+NQJJJWjk=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
                          rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:f2:eb:d5:55:40:fa:a5:bb:ed:d1:9a:3f:11:05:3b:1a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
        Validity
            Not Before: Dec  6 13:56:02 2025 GMT
            Not After : Dec  9 23:55:02 2025 GMT
        Subject: CN=76D6FE36B042AEFF858BA573DFD0CAEF71527105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7f:db:6d:97:98:53:81:c7:5e:00:63:26:f8:
                    cd:60:0e:59:46:2c:46:d6:53:58:73:d1:3f:f8:3c:
                    6f:86:74:4a:52:63:29:a8:ed:71:f9:55:d8:a0:91:
                    b4:f5:20:88:2f:b6:d4:16:43:aa:41:c7:eb:7f:a7:
                    7f:ec:de:95:31:3f:72:69:27:d1:32:f0:55:2b:f3:
                    89:f4:d4:97:3f:3a:24:c8:2f:08:25:36:56:24:61:
                    26:09:d3:19:c3:98:28:a8:07:08:ec:90:e0:8b:8f:
                    34:8e:aa:7b:1d:ef:eb:82:1e:21:9d:f1:e1:b6:5e:
                    7f:a0:48:81:7e:af:d9:c6:9b:aa:22:98:2f:b0:68:
                    09:73:8e:c4:0d:40:3d:57:84:9f:03:b9:eb:9f:c4:
                    16:95:08:db:5b:31:09:6c:68:41:3d:2d:c9:ac:22:
                    c9:27:e8:b9:23:6c:86:da:53:3f:5c:87:cb:3c:0e:
                    d7:a0:34:ed:18:75:9b:90:41:98:e6:81:49:f0:7d:
                    30:bf:31:5c:5d:16:ba:a5:85:0f:ed:f8:73:35:8b:
                    72:86:9e:7b:74:75:5a:0c:9a:c3:2b:2a:bd:a0:4c:
                    97:26:5f:f2:a5:10:2b:03:ec:0e:bc:ab:40:1d:aa:
                    3f:ff:e4:f5:00:cc:b5:89:ec:d9:dd:3d:7d:b5:6e:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D6:FE:36:B0:42:AE:FF:85:8B:A5:73:DF:D0:CA:EF:71:52:71:05
            X509v3 Authority Key Identifier:
                keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:ba:87:2b:fb:e1:e9:de:61:3b:cd:59:1f:a1:61:78:31:
         f8:8d:59:7b:fc:c7:4e:8a:45:b4:d9:16:24:ca:3e:64:94:41:
         36:d8:91:f3:bb:78:27:41:53:61:3d:b1:79:c3:9f:ed:c3:15:
         62:cd:e8:a1:7e:b1:ad:63:c1:80:d1:6c:d7:ba:ac:a5:b2:c2:
         dc:8e:d0:c9:c7:55:16:22:4f:77:eb:0b:ea:5c:1e:8c:82:4b:
         82:f7:e7:ec:7b:5f:64:b2:6c:ef:c7:b0:6d:43:a9:3a:86:08:
         56:b6:b7:da:84:c7:66:d1:24:bd:24:a9:ec:5c:3b:a5:8d:26:
         a9:6f:ec:cf:65:68:e2:69:68:7a:03:5b:83:72:aa:8b:a1:69:
         5e:1b:a3:42:b2:ec:61:70:e3:b1:7e:43:4e:1e:98:86:72:f5:
         61:39:7a:1e:96:e2:9f:e7:e7:30:54:f0:c9:a3:a1:96:90:b0:
         2f:09:39:84:5b:fd:35:87:51:21:8e:0a:f1:c2:e7:05:08:a6:
         7e:4c:a7:11:04:6e:ac:8b:99:ae:32:de:d5:07:25:d5:8e:9a:
         ff:2c:ee:2c:79:b8:49:3a:95:a9:bc:b0:f2:5c:ef:2b:b5:48:
         89:0b:fa:20:f2:54:b7:d5:8d:da:9a:02:36:d2:aa:c5:d2:9f:
         5d:c2:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:49 2025 by rpki-client