This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
File: ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json)
Hash identifier: W2hm4oLMDN+22Z3aelwMd8YznIPtbsQU+K4llZBn1pE=
Subject key identifier: 76:D6:FE:36:B0:42:AE:FF:85:8B:A5:73:DF:D0:CA:EF:71:52:71:05
Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Certificate serial: 5A02F2EBD55540FAA5BBEDD19A3F11053B1A6780
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
Manifest number: 0521
Signing time: Sat 06 Dec 2025 14:01:02 +0000
Manifest this update: Sat 06 Dec 2025 13:56:02 +0000
Manifest next update: Tue 09 Dec 2025 23:55:02 +0000
Files and hashes: 1: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=)
2: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=)
3: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=)
4: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: zO5LhQznO0cYJd8+mLCoubBS2tDv+QED3b+NQJJJWjk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:02:f2:eb:d5:55:40:fa:a5:bb:ed:d1:9a:3f:11:05:3b:1a:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA
Validity
Not Before: Dec 6 13:56:02 2025 GMT
Not After : Dec 9 23:55:02 2025 GMT
Subject: CN=76D6FE36B042AEFF858BA573DFD0CAEF71527105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:db:6d:97:98:53:81:c7:5e:00:63:26:f8:
cd:60:0e:59:46:2c:46:d6:53:58:73:d1:3f:f8:3c:
6f:86:74:4a:52:63:29:a8:ed:71:f9:55:d8:a0:91:
b4:f5:20:88:2f:b6:d4:16:43:aa:41:c7:eb:7f:a7:
7f:ec:de:95:31:3f:72:69:27:d1:32:f0:55:2b:f3:
89:f4:d4:97:3f:3a:24:c8:2f:08:25:36:56:24:61:
26:09:d3:19:c3:98:28:a8:07:08:ec:90:e0:8b:8f:
34:8e:aa:7b:1d:ef:eb:82:1e:21:9d:f1:e1:b6:5e:
7f:a0:48:81:7e:af:d9:c6:9b:aa:22:98:2f:b0:68:
09:73:8e:c4:0d:40:3d:57:84:9f:03:b9:eb:9f:c4:
16:95:08:db:5b:31:09:6c:68:41:3d:2d:c9:ac:22:
c9:27:e8:b9:23:6c:86:da:53:3f:5c:87:cb:3c:0e:
d7:a0:34:ed:18:75:9b:90:41:98:e6:81:49:f0:7d:
30:bf:31:5c:5d:16:ba:a5:85:0f:ed:f8:73:35:8b:
72:86:9e:7b:74:75:5a:0c:9a:c3:2b:2a:bd:a0:4c:
97:26:5f:f2:a5:10:2b:03:ec:0e:bc:ab:40:1d:aa:
3f:ff:e4:f5:00:cc:b5:89:ec:d9:dd:3d:7d:b5:6e:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D6:FE:36:B0:42:AE:FF:85:8B:A5:73:DF:D0:CA:EF:71:52:71:05
X509v3 Authority Key Identifier:
keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:82:ba:87:2b:fb:e1:e9:de:61:3b:cd:59:1f:a1:61:78:31:
f8:8d:59:7b:fc:c7:4e:8a:45:b4:d9:16:24:ca:3e:64:94:41:
36:d8:91:f3:bb:78:27:41:53:61:3d:b1:79:c3:9f:ed:c3:15:
62:cd:e8:a1:7e:b1:ad:63:c1:80:d1:6c:d7:ba:ac:a5:b2:c2:
dc:8e:d0:c9:c7:55:16:22:4f:77:eb:0b:ea:5c:1e:8c:82:4b:
82:f7:e7:ec:7b:5f:64:b2:6c:ef:c7:b0:6d:43:a9:3a:86:08:
56:b6:b7:da:84:c7:66:d1:24:bd:24:a9:ec:5c:3b:a5:8d:26:
a9:6f:ec:cf:65:68:e2:69:68:7a:03:5b:83:72:aa:8b:a1:69:
5e:1b:a3:42:b2:ec:61:70:e3:b1:7e:43:4e:1e:98:86:72:f5:
61:39:7a:1e:96:e2:9f:e7:e7:30:54:f0:c9:a3:a1:96:90:b0:
2f:09:39:84:5b:fd:35:87:51:21:8e:0a:f1:c2:e7:05:08:a6:
7e:4c:a7:11:04:6e:ac:8b:99:ae:32:de:d5:07:25:d5:8e:9a:
ff:2c:ee:2c:79:b8:49:3a:95:a9:bc:b0:f2:5c:ef:2b:b5:48:
89:0b:fa:20:f2:54:b7:d5:8d:da:9a:02:36:d2:aa:c5:d2:9f:
5d:c2:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:57:49 2025 by rpki-client