This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json)
Hash identifier: O+8fkOGIO1y9Dda6CSCPX48esv+7pQUt4xSMhvzRsZA=
Subject key identifier: F7:96:D8:4D:C4:B9:84:CC:DF:A0:AE:4F:86:E5:7B:59:30:BF:46:39
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial: 57912DE14B61CBDF7B80A80D4C317772C68D7FCE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
Manifest number: 052C
Signing time: Thu 04 Dec 2025 18:50:59 +0000
Manifest this update: Thu 04 Dec 2025 18:45:59 +0000
Manifest next update: Mon 08 Dec 2025 00:11:59 +0000
Files and hashes: 1: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=)
2: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: ER0ju/GTtncyLm5v6q78UAwXendAv5ojVejdhD7sQi8=)
3: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=)
4: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=)
5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 00:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:91:2d:e1:4b:61:cb:df:7b:80:a8:0d:4c:31:77:72:c6:8d:7f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Validity
Not Before: Dec 4 18:45:59 2025 GMT
Not After : Dec 8 00:11:59 2025 GMT
Subject: CN=F796D84DC4B984CCDFA0AE4F86E57B5930BF4639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:3a:08:a4:1c:bb:5f:0a:c8:ef:1d:e1:fa:
9d:5e:97:8f:88:cf:6f:72:de:ef:21:e1:77:91:fa:
63:c6:41:a3:c1:9a:30:06:f1:38:07:91:45:ff:08:
4c:e6:17:f4:b6:50:8a:72:30:94:73:92:ee:c3:e7:
1e:ee:fd:01:60:d0:45:21:74:bd:dc:dd:29:3e:97:
63:06:e3:89:8e:19:ce:95:c0:8b:d1:66:46:ec:4f:
b7:97:c8:77:29:9a:30:32:68:44:65:8d:42:74:79:
0a:8f:7d:f2:ad:37:a4:14:20:49:eb:e1:10:9d:68:
3a:33:c0:78:f1:3f:a4:07:91:da:c5:b5:6b:e4:57:
30:a2:59:f2:3b:c0:dc:a7:0d:06:79:ac:d8:5b:63:
c7:d8:f0:c2:31:9f:76:60:0c:88:df:9d:c1:eb:52:
65:a2:61:18:59:e6:0e:45:a2:67:bb:7f:c7:38:cd:
ff:a8:a0:d7:a2:8f:b2:14:35:40:4f:75:5a:3c:b1:
0a:fc:2a:73:be:fb:85:46:4a:e9:98:dd:fd:c7:eb:
87:79:c1:9c:e0:48:c6:98:34:82:6e:1c:a8:1b:9b:
a5:69:0e:eb:cb:5f:02:ec:a1:5f:36:20:b1:d9:4d:
a0:3c:22:47:5d:05:0d:3c:61:3a:7a:47:c9:f5:a3:
de:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:96:D8:4D:C4:B9:84:CC:DF:A0:AE:4F:86:E5:7B:59:30:BF:46:39
X509v3 Authority Key Identifier:
keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:bd:2b:c2:92:88:cd:3e:ca:c5:67:13:ac:68:cb:df:a4:c1:
17:64:06:8a:40:93:48:c1:46:4e:d5:64:14:cf:5c:7c:22:3c:
81:97:fc:fa:ce:26:05:f6:b7:06:69:54:f8:b5:bb:29:45:3f:
a3:24:42:14:31:5e:2d:d7:39:60:40:5d:39:34:69:e2:ae:b9:
7d:5f:93:1d:65:c2:d4:29:ba:6a:2c:e3:d6:26:c1:ce:dd:04:
4f:36:a4:96:49:57:6e:c9:b3:c9:6b:a1:37:52:0a:80:f3:17:
ba:40:e5:a4:13:65:9a:7b:04:87:7f:f6:81:39:8e:27:45:2c:
2e:6f:b8:6a:7b:ca:38:9c:97:03:fc:36:35:c7:45:f4:ee:e9:
34:d5:7c:f0:5f:57:ff:dd:98:46:c6:9f:61:82:14:15:92:0c:
fd:22:cf:de:97:cb:c8:6b:27:f9:9b:e5:e0:bd:b2:3c:11:6b:
6e:16:e7:bb:1d:b8:4d:4e:28:9b:f3:41:4d:3d:c3:fb:11:92:
ab:f3:04:61:42:b9:2b:78:e6:d7:2b:e7:c1:b2:e8:f6:68:75:
bc:b6:23:bd:d4:75:94:a7:47:11:50:16:df:d7:25:9b:8e:e9:
07:75:bf:4d:76:e3:02:b0:df:2f:7a:c6:a6:c7:59:70:c8:88:
7f:72:ee:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:11:51 2025 by rpki-client