This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
File:                     AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json)
Hash identifier:          TrA0yKyGirGknGba3dLv5EM/vVFBHhimzgHvR2ELzVs=
Subject key identifier:   F0:53:7D:49:47:D0:5D:AB:6A:77:37:AA:3A:DB:69:9F:09:4C:86:D1
Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
Certificate issuer:       /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Certificate serial:       381317D22A50473DC28EEC39CA62972FF535BDD3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
Manifest number:          03DE
Signing time:             Sat 06 Dec 2025 02:22:18 +0000
Manifest this update:     Sat 06 Dec 2025 02:17:18 +0000
Manifest next update:     Tue 09 Dec 2025 07:19:18 +0000
Files and hashes:         1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: aEByCMWkiRbU0SI03kQlnARac/TTIuw3vi+FC3vTZ2s=)
                          2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl
                          rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 07:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:13:17:d2:2a:50:47:3d:c2:8e:ec:39:ca:62:97:2f:f5:35:bd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
        Validity
            Not Before: Dec  6 02:17:18 2025 GMT
            Not After : Dec  9 07:19:18 2025 GMT
        Subject: CN=F0537D4947D05DAB6A7737AA3ADB699F094C86D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:36:c5:63:ca:93:65:46:b2:07:46:4b:8c:
                    fa:34:72:5d:de:83:a6:44:5c:15:60:e3:c5:b4:c3:
                    b1:2c:3b:89:cf:73:46:14:8d:24:c9:f1:bd:c8:e1:
                    f1:d2:16:e8:15:51:1b:31:bb:b6:02:ff:d2:9d:30:
                    34:2c:5b:0d:e8:22:c2:f3:d2:ff:9f:55:2d:46:c3:
                    96:38:88:da:af:4e:cd:3e:86:95:64:dc:5b:3e:cb:
                    af:a4:d1:d5:69:35:63:1f:49:38:7d:15:e2:82:11:
                    08:dc:16:09:9b:b8:59:1f:e1:05:99:41:92:72:ff:
                    af:d4:79:ab:c0:df:96:c9:07:1d:d7:9c:62:04:88:
                    15:ee:49:20:58:f5:a2:01:e7:7d:65:78:f3:81:74:
                    bb:db:ef:1a:75:5c:6d:71:82:8f:b4:2e:2d:21:2b:
                    2f:c7:04:41:1a:cd:98:ef:46:d9:b6:e0:d1:d0:d7:
                    fe:db:24:3e:ce:b9:44:d1:ed:d3:c5:b8:45:9e:9a:
                    ee:b8:71:1c:aa:6c:7c:e1:dd:74:fc:88:44:c9:f9:
                    2d:08:12:c9:43:8a:88:cd:da:51:f9:e6:4d:14:cb:
                    de:bc:49:42:20:a4:a6:00:40:4b:9f:86:99:34:90:
                    df:31:03:43:83:5d:b3:df:4b:62:04:59:6b:77:13:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:7D:49:47:D0:5D:AB:6A:77:37:AA:3A:DB:69:9F:09:4C:86:D1
            X509v3 Authority Key Identifier:
                keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b4:ba:35:07:61:7a:61:64:62:4c:e5:8f:43:f2:46:20:a6:
         84:74:30:2d:eb:39:4e:b0:2c:67:e6:cf:17:8a:cf:75:61:1d:
         cd:a0:33:b9:a0:67:a0:91:f1:a5:65:21:aa:af:9e:53:34:a0:
         66:a3:0d:af:d8:1f:36:66:15:72:ca:b7:ba:17:b8:92:82:a5:
         83:c0:f4:6a:3c:a5:ae:2a:a7:05:c8:70:95:38:95:73:f8:c3:
         c6:36:51:03:1e:eb:9f:ec:65:4d:bb:68:f0:fb:13:a7:50:fa:
         75:4b:e2:f4:61:82:1a:d3:09:f2:7e:9d:25:0e:1f:a7:eb:da:
         c0:3a:48:8b:4f:09:6e:00:2a:93:7b:ef:ef:75:36:2b:8c:98:
         51:81:4d:e3:59:f4:3c:6f:89:27:85:0e:33:e8:b1:fe:c5:5a:
         e5:d1:56:67:11:80:f4:65:2c:a7:5b:56:cd:a3:3c:6b:e5:05:
         99:ef:82:39:5f:a0:9f:44:8d:37:c3:c4:53:23:28:ac:78:b6:
         f6:bf:db:48:8e:dc:a7:20:5a:e2:f8:06:05:dd:ef:cf:59:ae:
         36:c6:8c:b8:ca:25:71:70:5a:f5:d4:64:c1:dd:bf:28:60:d3:
         8c:30:a4:6b:0a:98:56:19:4f:d0:e7:46:dd:25:88:fa:61:f0:
         fc:f4:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:16:30 2025 by rpki-client