This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json)
Hash identifier: 4EsA+Ggr9zWZrSxWiUe8B2xLvUDIQldRXksh99qL1Fs=
Subject key identifier: B6:A7:BC:CD:2B:8A:FF:19:61:BA:EB:47:AC:C5:AC:75:BC:AA:45:3F
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial: 64E17A0FD9463247CA2B7BCF590EA35FBFF75E26
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
Manifest number: 0543
Signing time: Sun 25 Jan 2026 00:21:03 +0000
Manifest this update: Sun 25 Jan 2026 00:16:03 +0000
Manifest next update: Wed 28 Jan 2026 07:13:03 +0000
Files and hashes: 1: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=)
2: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=)
3: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: 26U+m+m3z8/rIhkeKmABGxiwkoCR7Nym3js85YyZ30E=)
4: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=)
5: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 07:13:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e1:7a:0f:d9:46:32:47:ca:2b:7b:cf:59:0e:a3:5f:bf:f7:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Validity
Not Before: Jan 25 00:16:03 2026 GMT
Not After : Jan 28 07:13:03 2026 GMT
Subject: CN=B6A7BCCD2B8AFF1961BAEB47ACC5AC75BCAA453F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:e7:37:2a:06:58:e6:04:e1:86:ff:c4:a4:
9a:f7:5e:61:22:e3:4c:0d:9d:ea:ee:33:90:ec:28:
cb:67:ef:9b:02:68:2a:57:be:7d:a5:a4:e1:87:fa:
e3:e3:c0:80:1d:5c:3a:49:14:48:f3:42:f1:cb:7c:
bb:cb:57:07:91:72:83:1c:cb:37:95:ad:88:b9:21:
0f:f4:71:d3:73:6d:ac:7a:aa:25:14:57:fa:6f:f9:
12:18:2a:cd:91:88:eb:83:c2:bb:fc:26:fb:e7:cc:
07:8b:b5:4a:bc:cd:ec:29:09:08:64:42:bd:6b:c5:
d4:60:ab:9c:f4:9e:22:73:a2:a5:6e:ff:a7:92:8a:
fe:39:44:d4:9e:2c:da:35:c3:4c:d9:45:23:69:68:
f7:a7:97:aa:14:0b:f1:7f:96:3e:9a:04:2f:01:02:
3e:ab:e2:18:d5:c4:33:ea:bd:5c:d0:b3:2d:31:eb:
66:fe:3e:d3:04:f7:39:17:21:ab:d2:0b:d8:43:ff:
5f:22:5f:78:ba:43:c9:78:f7:f1:bc:bc:a5:6a:ce:
8a:f4:90:20:9f:63:9f:ba:df:9b:5a:d7:c0:29:9d:
fb:d2:3c:5a:fc:79:e1:04:8c:e3:77:e3:d8:3d:4e:
87:f7:3e:36:94:2c:36:b6:68:fa:b4:34:3a:8a:04:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:BC:CD:2B:8A:FF:19:61:BA:EB:47:AC:C5:AC:75:BC:AA:45:3F
X509v3 Authority Key Identifier:
keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0d:91:7d:a8:e2:74:2d:b9:59:c3:60:c7:d2:a5:bd:c2:2a:
d5:4e:0f:60:5f:9f:6e:74:5a:df:e1:ad:81:af:4b:cc:1a:75:
ff:ec:c7:c6:c6:e6:d5:8b:7e:0d:3b:ca:48:77:b6:7c:b2:e3:
a6:fa:a9:a4:b0:96:c1:e3:a0:d9:19:7f:93:c0:10:0f:7f:5b:
72:0b:e3:6d:ad:e6:3d:32:41:45:6c:54:5d:7e:18:b6:87:79:
68:0c:fd:e2:2b:47:89:97:35:d2:2a:f7:8d:b1:1d:65:ed:4b:
55:63:b8:55:12:84:d8:be:79:e3:e7:c0:2a:e6:c8:25:4e:9b:
b4:fe:d6:be:b1:27:10:d2:8a:d1:66:4b:56:a6:40:c5:be:3d:
c5:7e:1a:45:d3:ad:b4:ad:0c:1a:78:70:4a:32:e9:aa:90:02:
e2:09:46:9e:da:ed:c5:f3:2f:2f:fb:83:95:06:22:0b:64:21:
1b:5e:bd:b0:9b:1d:d7:13:0a:a7:9e:f4:86:05:a7:17:4f:8e:
b8:01:04:31:1d:6f:73:4e:11:60:b6:8d:9d:c1:da:36:d7:60:
91:07:62:a5:dd:1d:7f:9d:f8:9b:0d:ba:d3:88:04:b7:2b:c1:
e5:29:5c:5f:a1:22:3f:54:cf:fd:5a:07:6f:01:72:89:fe:ac:
2e:6e:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:01:11 2026 by rpki-client