This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft File: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft (raw, json) Hash identifier: T0Rl5byubWZxrDGf4dw4YzaFC8R5SGlRn7jUqr2WOuY= Subject key identifier: 1C:EE:7D:A7:8B:FC:E5:FB:34:FB:8A:8D:5B:E3:D7:29:58:69:D6:98 Authority key identifier: AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 Certificate issuer: /CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Certificate serial: 3B715E40487A534B53531330A704CAC8A3B8CA67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft Manifest number: 03F7 Signing time: Thu 04 Dec 2025 17:50:03 +0000 Manifest this update: Thu 04 Dec 2025 17:45:03 +0000 Manifest next update: Mon 08 Dec 2025 00:42:03 +0000 Files and hashes: 1: ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl (hash: NEd4wa5IC79mAtUgA6PaYHLwBHeNdh/KdltsoypQ34c=) 2: 3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (hash: zWM0xGqqaOdxz1Hu9SQE3wCPcPGJcY2qyq+pULXMUKw=) 3: 3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (hash: x0OQqyyh84xdArHozU+dSgyqUpzyJ86TNYhGyZIH4/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:71:5e:40:48:7a:53:4b:53:53:13:30:a7:04:ca:c8:a3:b8:ca:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACDA022F7F3E28A6E131DA80D4C418E83CD07C73 Validity Not Before: Dec 4 17:45:03 2025 GMT Not After : Dec 8 00:42:03 2025 GMT Subject: CN=1CEE7DA78BFCE5FB34FB8A8D5BE3D7295869D698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:09:ff:09:a8:16:b4:bd:05:f7:0b:6b:8e: 77:d9:ad:06:7b:e6:9e:03:1e:f1:af:b8:48:2d:cb: 74:bb:22:64:c3:2e:0c:50:08:79:ba:66:de:22:61: 25:14:e1:25:f3:e3:61:11:ec:65:90:cc:b3:9f:cf: 75:27:e7:53:26:22:1b:8f:ec:5c:9b:b7:09:46:00: 9d:b2:af:77:ed:5a:f4:38:44:bd:b4:b1:db:d4:77: 08:6d:67:53:9a:2a:cb:8c:d6:d8:76:b4:d8:9c:32: 0b:2c:d2:46:d4:8b:57:14:fb:5c:6e:9e:b8:47:b8: 76:d3:88:4e:2b:09:91:82:25:0c:24:66:3d:77:fc: ae:50:7e:96:68:56:86:2c:e8:14:ae:24:13:d4:8a: b7:1a:81:ec:7a:1e:f3:c5:2b:f1:6c:05:c3:98:c6: a1:28:23:2e:fb:4a:95:1f:99:bc:bf:93:30:d0:47: 2c:c4:ee:25:e8:d1:40:1c:34:3c:5b:8f:8c:b5:fa: b3:b2:30:7c:cc:a4:e9:c4:e7:6d:3a:18:86:9f:cc: c8:c0:21:50:d7:26:94:cc:2a:69:89:3b:30:5b:9e: d2:49:14:cb:74:2d:a4:d0:96:b9:f5:49:01:f5:3e: fb:a8:7c:e8:fd:82:f1:86:47:57:76:3f:59:9b:5a: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:7D:A7:8B:FC:E5:FB:34:FB:8A:8D:5B:E3:D7:29:58:69:D6:98 X509v3 Authority Key Identifier: keyid:AC:DA:02:2F:7F:3E:28:A6:E1:31:DA:80:D4:C4:18:E8:3C:D0:7C:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/ACDA022F7F3E28A6E131DA80D4C418E83CD07C73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:02:da:ee:5a:ad:41:7f:d0:4d:02:07:b2:5c:41:96:c6:69: 86:3a:45:8c:cf:83:47:30:46:77:af:4d:40:04:2e:fe:80:88: ff:8d:20:2c:b0:84:57:c7:94:a0:28:42:cd:2c:41:85:0d:0b: 92:ae:25:5e:80:05:36:4c:8f:25:02:ac:b8:c8:c7:62:39:7d: 53:4f:62:68:73:a7:e0:2f:4e:af:27:56:d0:74:89:4e:2c:65: 52:df:82:7b:54:a4:cd:8e:1f:fc:5a:6d:83:ea:d7:e5:67:50: b1:5e:f9:76:c3:e6:af:9d:92:4b:6d:86:5e:a4:a9:33:56:ce: 3c:aa:f5:38:8a:b4:6b:5a:74:a8:6f:6d:37:aa:b8:a6:7f:2a: 57:2e:3d:89:c8:95:61:0f:45:cd:d1:d3:0e:43:31:73:10:c3: ce:38:82:1f:e9:99:8b:fa:d1:e7:5c:e9:04:ee:80:03:a6:be: 1d:55:17:e9:57:1d:68:39:57:bc:47:aa:04:03:a4:32:d7:a8: 46:a6:ca:47:07:a0:7d:76:cc:3b:e6:42:fa:31:b0:f2:e6:26: 71:ed:97:66:2a:78:b5:d1:bc:ba:48:62:c4:7d:f1:79:c9:77: ce:31:2e:15:2c:c9:04:89:00:9a:c5:13:36:96:76:0c:12:f8: 65:b3:21:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3FeQEh6U0tTUxMwpwTKyKO4ymcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgz Q0QwN0M3MzAeFw0yNTEyMDQxNzQ1MDNaFw0yNTEyMDgwMDQyMDNaMDMxMTAvBgNV BAMTKDFDRUU3REE3OEJGQ0U1RkIzNEZCOEE4RDVCRTNENzI5NTg2OUQ2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XQn/CagWtL0F9wtrjnfZrQZ7 5p4DHvGvuEgty3S7ImTDLgxQCHm6Zt4iYSUU4SXz42ER7GWQzLOfz3Un51MmIhuP 7FybtwlGAJ2yr3ftWvQ4RL20sdvUdwhtZ1OaKsuM1th2tNicMgss0kbUi1cU+1xu nrhHuHbTiE4rCZGCJQwkZj13/K5QfpZoVoYs6BSuJBPUircagex6HvPFK/FsBcOY xqEoIy77SpUfmby/kzDQRyzE7iXo0UAcNDxbj4y1+rOyMHzMpOnE5206GIafzMjA IVDXJpTMKmmJOzBbntJJFMt0LaTQlrn1SQH1PvuofOj9gvGGR1d2P1mbWrFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHO59p4v85fs0+4qNW+PXKVhp1pgwHwYDVR0j BBgwFoAUrNoCL38+KKbhMdqA1MQY6DzQfHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmViYjY4YS04YTVkLTQxMWMtOGJiMy04MzM0MjMxMDBiNmUvMC9BQ0RBMDIyRjdG M0UyOEE2RTEzMURBODBENEM0MThFODNDRDA3QzczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4RTgzQ0Qw N0M3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZlYmI2OGEtOGE1ZC00MTFjLThi YjMtODMzNDIzMTAwYjZlLzAvQUNEQTAyMkY3RjNFMjhBNkUxMzFEQTgwRDRDNDE4 RTgzQ0QwN0M3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoC2u5arUF/0E0CB7JcQZbGaYY6RYzPg0cw RnevTUAELv6AiP+NICywhFfHlKAoQs0sQYUNC5KuJV6ABTZMjyUCrLjIx2I5fVNP Ymhzp+AvTq8nVtB0iU4sZVLfgntUpM2OH/xabYPq1+VnULFe+XbD5q+dkktthl6k qTNWzjyq9TiKtGtadKhvbTequKZ/KlcuPYnIlWEPRc3R0w5DMXMQw844gh/pmYv6 0edc6QTugAOmvh1VF+lXHWg5V7xHqgQDpDLXqEamykcHoH12zDvmQvoxsPLmJnHt l2YqeLXRvLpIYsR98XnJd84xLhUsyQSJAJrFEzaWdgwS+GWzIY8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:46:12 2025 by rpki-client