This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft File: ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft (raw, json) Hash identifier: MYhiiB3OFNmsXQPqycgOG9weK7XJjPb0mWfoL/x2v0o= Subject key identifier: 0D:21:C9:B8:7A:5D:2C:D6:52:79:41:E5:27:E1:37:84:27:DD:1A:61 Authority key identifier: AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 Certificate issuer: /CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Certificate serial: 7E48E9DA31C79F07AB6E50C56C34A173CF9D532F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft Manifest number: D8 Signing time: Fri 05 Dec 2025 17:20:01 +0000 Manifest this update: Fri 05 Dec 2025 17:15:01 +0000 Manifest next update: Tue 09 Dec 2025 01:43:01 +0000 Files and hashes: 1: 3136302e32352e3135372e302f32342d3234203d3e20313533303835.roa (hash: EWnjtErVMnBbrrbwTFVBXyhULkzmfdybYpW9vhB6Px8=) 2: ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl (hash: XXchpkqzrFSpeNaBHGfuxlKb+hJYFli2ZQM+8qZ467k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:48:e9:da:31:c7:9f:07:ab:6e:50:c5:6c:34:a1:73:cf:9d:53:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACFB1A5D9938A64B3B54A832D5B79C032486A759 Validity Not Before: Dec 5 17:15:01 2025 GMT Not After : Dec 9 01:43:01 2025 GMT Subject: CN=0D21C9B87A5D2CD6527941E527E1378427DD1A61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:dd:cf:39:91:1f:f6:f1:08:7d:03:a4:1e: 16:9c:f1:74:47:d4:27:e4:77:59:a5:82:ba:30:7d: 10:ad:01:5a:89:86:34:c6:90:e4:1c:24:c7:c8:20: a9:3c:03:cd:0b:a5:c2:9f:e6:04:65:73:fc:de:90: 43:04:98:78:46:4e:63:c4:8e:eb:fe:9b:bd:8c:dc: c5:26:e3:18:c2:cd:a5:c6:4b:6a:d1:20:61:0a:ec: cd:8a:10:87:6a:d7:9a:13:b9:84:f7:e3:68:ca:a5: 0d:2b:c6:d1:59:0d:61:7c:71:a4:d7:7d:ff:fc:37: ab:6a:eb:64:65:1e:3c:ee:d2:22:5d:f8:03:fe:80: f1:1d:03:8c:f6:ae:37:68:5c:f7:f3:ce:ba:cd:4a: 6c:1f:55:fa:e8:70:60:98:ab:b0:89:13:bf:81:56: c1:24:66:be:ba:cf:69:a5:4a:c7:af:92:38:7b:6c: 1a:f3:0b:1c:63:2c:c6:5b:f0:0c:72:4c:76:33:8a: 38:a2:b6:fd:63:ef:a5:ae:35:49:9d:ec:f2:6c:81: 6d:2b:40:55:e6:1d:c4:96:75:80:6e:9b:2d:6b:3f: 45:86:7e:3e:97:25:45:9f:a2:c2:9b:5a:0f:79:46: 7b:91:c5:69:3b:4e:ea:af:36:af:68:72:38:72:d3: 7b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:21:C9:B8:7A:5D:2C:D6:52:79:41:E5:27:E1:37:84:27:DD:1A:61 X509v3 Authority Key Identifier: keyid:AC:FB:1A:5D:99:38:A6:4B:3B:54:A8:32:D5:B7:9C:03:24:86:A7:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/ACFB1A5D9938A64B3B54A832D5B79C032486A759.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be954f42-9452-4247-99a5-31a53e56a9f8/0/ACFB1A5D9938A64B3B54A832D5B79C032486A759.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:25:20:24:92:a2:78:64:b7:91:d3:6a:82:98:1a:1f:e1:c0: 17:0e:56:46:4d:60:2a:e9:ed:1f:a4:b4:7a:3a:ab:14:b7:80: a9:25:e2:4c:dd:0a:f8:ee:3a:7c:0a:0e:62:e2:43:1f:5f:d0: 4f:8d:b3:16:09:da:11:02:e8:64:de:02:29:bd:c0:d7:09:5e: fb:99:b0:96:63:59:bb:68:27:0b:9a:21:39:6a:04:91:81:4f: 7e:25:e1:e4:13:09:86:be:af:72:20:c6:ad:49:20:c2:68:89: 87:02:aa:71:dc:f1:d3:2f:c9:bf:2f:f3:cb:a3:f1:2a:1b:bf: 79:0b:23:03:6f:12:d5:b3:c6:0b:a0:48:df:61:ad:b7:28:a0: 57:8b:78:1b:df:7e:84:19:74:43:f3:78:60:30:dd:a3:01:74: 24:3b:fa:d6:2c:39:c6:6d:5b:a1:7a:50:af:bf:fb:01:42:da: b4:4f:60:21:43:c9:04:60:0c:7e:ca:e5:73:ab:13:0d:81:6a: 2c:de:b0:6c:66:20:6e:8b:4f:dc:8e:f3:71:fd:72:74:54:60: 7e:8b:51:03:cf:0e:ef:bc:f5:8f:30:5c:83:dd:8b:45:f4:8c: 4f:e0:f1:85:84:2e:cb:01:bd:fc:cd:b8:b0:b6:62:1e:18:f3: 98:8f:0d:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkjp2jHHnwerblDFbDShc8+dUy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMy NDg2QTc1OTAeFw0yNTEyMDUxNzE1MDFaFw0yNTEyMDkwMTQzMDFaMDMxMTAvBgNV BAMTKDBEMjFDOUI4N0E1RDJDRDY1Mjc5NDFFNTI3RTEzNzg0MjdERDFBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzA93POZEf9vEIfQOkHhac8XRH 1Cfkd1mlgrowfRCtAVqJhjTGkOQcJMfIIKk8A80LpcKf5gRlc/zekEMEmHhGTmPE juv+m72M3MUm4xjCzaXGS2rRIGEK7M2KEIdq15oTuYT342jKpQ0rxtFZDWF8caTX ff/8N6tq62RlHjzu0iJd+AP+gPEdA4z2rjdoXPfzzrrNSmwfVfrocGCYq7CJE7+B VsEkZr66z2mlSsevkjh7bBrzCxxjLMZb8AxyTHYzijiitv1j76WuNUmd7PJsgW0r QFXmHcSWdYBumy1rP0WGfj6XJUWfosKbWg95RnuRxWk7TuqvNq9ocjhy03tfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDSHJuHpdLNZSeUHlJ+E3hCfdGmEwHwYDVR0j BBgwFoAUrPsaXZk4pks7VKgy1becAySGp1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTk1NGY0Mi05NDUyLTQyNDctOTlhNS0zMWE1M2U1NmE5ZjgvMC9BQ0ZCMUE1RDk5 MzhBNjRCM0I1NEE4MzJENUI3OUMwMzI0ODZBNzU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlDMDMyNDg2 QTc1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmU5NTRmNDItOTQ1Mi00MjQ3LTk5 YTUtMzFhNTNlNTZhOWY4LzAvQUNGQjFBNUQ5OTM4QTY0QjNCNTRBODMyRDVCNzlD MDMyNDg2QTc1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADklICSSonhkt5HTaoKYGh/hwBcOVkZNYCrp 7R+ktHo6qxS3gKkl4kzdCvjuOnwKDmLiQx9f0E+NsxYJ2hEC6GTeAim9wNcJXvuZ sJZjWbtoJwuaITlqBJGBT34l4eQTCYa+r3Igxq1JIMJoiYcCqnHc8dMvyb8v88uj 8Sobv3kLIwNvEtWzxgugSN9hrbcooFeLeBvffoQZdEPzeGAw3aMBdCQ7+tYsOcZt W6F6UK+/+wFC2rRPYCFDyQRgDH7K5XOrEw2BaizesGxmIG6LT9yO83H9cnRUYH6L UQPPDu+89Y8wXIPdi0X0jE/g8YWELssBvfzNuLC2Yh4Y85iPDXQ= -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:32 2025 by rpki-client