This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: v/MBy1GsiWcFARhy33tGadQUMsUKDSzZaURi/0f6m1Y= Subject key identifier: ED:8D:69:29:09:54:B8:E1:EB:06:E5:4E:B3:27:7A:90:72:D7:EA:F4 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 50896DB2D9979DB76C28745A3EAC07ECEACDD0B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 015B Signing time: Fri 05 Dec 2025 22:31:09 +0000 Manifest this update: Fri 05 Dec 2025 22:26:09 +0000 Manifest next update: Tue 09 Dec 2025 00:47:09 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: h7bA1JuL1bzVA/ifkjEhG6dTLI4PXCnCaANmVnRNBkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:89:6d:b2:d9:97:9d:b7:6c:28:74:5a:3e:ac:07:ec:ea:cd:d0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Dec 5 22:26:09 2025 GMT Not After : Dec 9 00:47:09 2025 GMT Subject: CN=ED8D69290954B8E1EB06E54EB3277A9072D7EAF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9d:46:bb:d4:ad:18:65:ed:01:cd:cb:8b:14: 4e:b9:b2:88:8b:83:a4:ab:9f:4b:70:8b:56:f7:b8: c2:cf:e7:87:e0:8b:e8:87:ac:7e:91:27:95:29:2c: 4b:f9:8d:e7:f8:57:86:00:3e:a4:18:fb:d4:42:d3: 88:17:fe:63:e3:f7:6f:8f:31:8f:85:7f:d4:8e:39: b7:38:0d:c5:65:1d:00:90:ab:8f:72:a5:81:62:3d: 9b:6c:85:dd:39:2e:27:5e:f4:63:7c:37:3b:62:ef: 53:3b:0c:68:2f:eb:31:ce:96:ce:bd:fb:55:a0:ed: 30:79:8d:df:08:83:31:6e:d1:1f:90:75:9b:b7:f4: 3a:fe:7c:93:91:45:b0:08:a6:2c:88:6a:7f:ca:ed: 43:5c:ab:2a:7b:bf:df:c0:54:52:f3:56:e1:90:48: 45:a0:eb:13:90:2b:2d:2f:11:6e:b8:74:72:b7:01: dc:f8:76:97:e7:45:25:9d:7a:55:f5:1e:45:d3:cb: 98:c4:d8:00:5a:2a:4a:a3:cf:4a:41:52:05:32:9c: 73:ef:09:81:9d:96:f9:fc:d8:12:1a:e8:e5:d8:a5: b8:d3:8e:02:d2:9a:f9:3a:ca:e4:90:84:53:e3:a6: bb:77:17:4b:1e:d7:40:e8:01:39:75:4e:0d:2b:ce: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8D:69:29:09:54:B8:E1:EB:06:E5:4E:B3:27:7A:90:72:D7:EA:F4 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:da:01:88:13:8d:42:06:aa:b0:f6:37:78:ba:06:dd:b9:cb: bd:8c:c8:5a:5f:0c:f7:8d:27:64:1d:a0:85:aa:91:75:f6:7c: 0b:ed:ed:bd:b0:58:57:62:75:96:d6:c1:d0:1e:c0:88:b7:3f: 74:b1:38:6b:e0:3b:a6:09:24:29:9b:34:b9:01:21:e7:78:b0: ae:8e:50:9b:09:01:49:60:eb:85:92:b0:2f:39:39:24:0f:49: 58:73:c5:76:a8:a2:4c:96:11:91:32:25:85:8e:32:c0:df:54: cd:d6:6e:6f:e8:e5:cf:61:a9:c6:7b:1d:a6:24:62:e9:e9:cf: ed:6f:86:3d:82:76:12:9c:a6:41:78:f6:b0:a7:c4:51:89:58: d3:7f:c3:2c:96:fc:b9:48:6b:50:e8:6b:29:42:ba:b1:32:0f: 52:8f:20:1f:b8:8d:10:03:b9:5e:d0:44:f6:98:cf:ca:3c:2f: 33:46:11:cf:a0:d0:ab:0d:b8:9b:63:8f:c9:51:59:72:76:57: 79:f8:71:6e:98:42:df:5e:4a:dc:98:dc:9d:2c:a8:b6:65:5a: c1:db:97:08:c0:a3:57:f5:97:76:f0:33:a2:cb:8c:c5:2c:e4: 17:7b:aa:a5:91:de:d1:bc:83:67:79:4a:aa:54:c7:fe:ce:8f: a2:31:4e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIltstmXnbdsKHRaPqwH7OrN0LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTEyMDUyMjI2MDlaFw0yNTEyMDkwMDQ3MDlaMDMxMTAvBgNV BAMTKEVEOEQ2OTI5MDk1NEI4RTFFQjA2RTU0RUIzMjc3QTkwNzJEN0VBRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnUa71K0YZe0BzcuLFE65soiL g6Srn0twi1b3uMLP54fgi+iHrH6RJ5UpLEv5jef4V4YAPqQY+9RC04gX/mPj92+P MY+Ff9SOObc4DcVlHQCQq49ypYFiPZtshd05Lide9GN8Nzti71M7DGgv6zHOls69 +1Wg7TB5jd8IgzFu0R+QdZu39Dr+fJORRbAIpiyIan/K7UNcqyp7v9/AVFLzVuGQ SEWg6xOQKy0vEW64dHK3Adz4dpfnRSWdelX1HkXTy5jE2ABaKkqjz0pBUgUynHPv CYGdlvn82BIa6OXYpbjTjgLSmvk6yuSQhFPjprt3F0se10DoATl1Tg0rzpcbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Y1pKQlUuOHrBuVOsyd6kHLX6vQwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHaAYgTjUIGqrD2N3i6Bt25y72MyFpfDPeN J2QdoIWqkXX2fAvt7b2wWFdidZbWwdAewIi3P3SxOGvgO6YJJCmbNLkBIed4sK6O UJsJAUlg64WSsC85OSQPSVhzxXaookyWEZEyJYWOMsDfVM3Wbm/o5c9hqcZ7HaYk Yunpz+1vhj2CdhKcpkF49rCnxFGJWNN/wyyW/LlIa1DoaylCurEyD1KPIB+4jRAD uV7QRPaYz8o8LzNGEc+g0KsNuJtjj8lRWXJ2V3n4cW6YQt9eStyY3J0sqLZlWsHb lwjAo1f1l3bwM6LLjMUs5Bd7qqWR3tG8g2d5SqpUx/7Oj6IxTpg= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:22 2025 by rpki-client