This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft File: ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft (raw, json) Hash identifier: tCrMS9jf0VQK8+cthlsP0/VkbyQWPN5BhUwInIjj4uY= Subject key identifier: 98:C2:A6:71:C6:62:04:AF:4B:98:2E:6F:F4:41:A9:63:94:32:BF:8B Authority key identifier: AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA Certificate issuer: /CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Certificate serial: 4071B1E1E45520405A0C930F7A2D17A1FB88F0B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft Manifest number: 052B Signing time: Mon 29 Dec 2025 23:01:05 +0000 Manifest this update: Mon 29 Dec 2025 22:56:05 +0000 Manifest next update: Fri 02 Jan 2026 07:34:05 +0000 Files and hashes: 1: 323030313a6466373a616130303a3a2f34382d3438203d3e20313333383030.roa (hash: 2ZsS2VEgZnEWCXg+GRqI2uFHC4HL54ZPfTFqcd0guLc=) 2: 3133372e35392e3132342e302f32322d3234203d3e20313333383030.roa (hash: 9xvDYfAkrAuBORhBg+JkljOUtwulgTLF9m5JOM3oSF4=) 3: ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl (hash: nWFKnfQxkfHOxHohDPq8bX+ql3kJz/iONgca7UURt50=) 4: 3130332e35382e3130302e302f32322d3234203d3e20313333383030.roa (hash: Cea98TN6JOippPT1Yl/tw6t70hFs59kHZ8IV7LC26fU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 07:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:71:b1:e1:e4:55:20:40:5a:0c:93:0f:7a:2d:17:a1:fb:88:f0:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACCECE368F04142505940FF29F4DD361EEF4DFBA Validity Not Before: Dec 29 22:56:05 2025 GMT Not After : Jan 2 07:34:05 2026 GMT Subject: CN=98C2A671C66204AF4B982E6FF441A9639432BF8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e0:40:a8:f0:30:51:e2:7f:09:47:ef:ae:9a: 47:2f:f6:8c:94:9f:a3:4d:88:5a:5d:5e:14:5f:03: 8c:dd:f0:1e:b4:a3:e3:17:3b:d6:09:cb:79:99:99: 6b:6e:ea:05:0d:66:f7:74:e2:e1:78:03:2e:e3:62: 9b:91:d2:bd:ef:e3:25:df:37:26:2f:b9:5f:b1:c8: 44:e1:16:20:18:0b:0a:0f:4b:2f:6e:a4:1e:3c:e5: bd:6e:7d:01:6b:a0:52:3a:2a:43:b8:89:cd:50:9a: e7:02:ca:9f:63:d3:30:dc:4e:ed:a2:fb:36:07:f6: dc:8f:c0:cc:41:ad:78:df:c6:d3:37:bd:be:2a:96: 90:eb:d7:d6:50:df:0d:7a:9e:36:cd:a3:58:63:fd: 23:f2:ed:13:fc:84:06:f5:cd:be:a9:6b:d7:f4:9d: 37:ea:1e:8d:72:da:72:8e:38:97:08:92:36:91:9e: b8:82:b4:ee:c9:0f:6c:1d:4b:e0:67:6b:d7:3a:04: 1d:f0:40:bc:a5:ef:d8:12:1a:e6:ef:19:6f:9c:10: 2e:59:1b:df:2f:17:a5:7f:98:9d:eb:54:80:92:b3: 25:18:35:90:e0:81:cd:73:f0:53:31:b8:95:10:c5: a3:bd:95:67:2c:3f:57:4d:66:13:12:4a:2e:53:c5: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C2:A6:71:C6:62:04:AF:4B:98:2E:6F:F4:41:A9:63:94:32:BF:8B X509v3 Authority Key Identifier: keyid:AC:CE:CE:36:8F:04:14:25:05:94:0F:F2:9F:4D:D3:61:EE:F4:DF:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACCECE368F04142505940FF29F4DD361EEF4DFBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/544cb8d8-1505-4682-9ddb-fcd86200b966/0/ACCECE368F04142505940FF29F4DD361EEF4DFBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:65:35:e9:11:f6:71:76:c9:38:ab:2b:69:12:c3:ac:1e:bc: 73:ee:24:86:2b:8c:7b:e6:e9:2c:8d:70:d0:86:0d:e4:92:50: 19:f3:9a:e6:d9:ef:97:c7:2a:5d:03:8f:09:36:68:ec:92:ba: 94:ef:bd:df:b0:93:40:95:25:70:bf:a6:4c:43:ea:a1:8a:46: ca:5e:b3:48:06:0e:05:ea:35:77:80:c1:22:45:a5:d3:a0:e3: e7:fc:eb:d0:60:6b:b0:16:2f:8e:a7:d3:53:0e:4b:a2:dd:ee: ed:46:ca:85:c2:4b:57:d4:7b:cf:44:f1:2f:50:15:89:1e:4e: e7:a2:1e:71:74:84:78:8e:fe:68:09:c4:c0:cd:b3:0e:0b:dd: 15:07:85:70:94:5c:45:e4:e9:bc:cf:a7:96:48:af:12:ee:88: 9c:29:30:0a:3a:e4:3d:a2:0b:25:a9:72:1a:25:ce:e1:93:63: 33:8f:29:30:c9:99:72:98:c0:d9:ba:55:ba:3b:ab:b1:67:da: dc:c9:3d:00:2a:c8:15:8b:fa:d3:ef:42:50:28:e5:52:ee:97: b8:e9:8f:63:d0:a3:74:7e:e5:02:a2:1c:99:e5:54:fa:9b:eb: 70:da:42:75:33:ef:74:12:38:b1:68:1c:4e:5b:d1:74:d4:5f: 01:57:58:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHGx4eRVIEBaDJMPei0XofuI8LkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFF RUY0REZCQTAeFw0yNTEyMjkyMjU2MDVaFw0yNjAxMDIwNzM0MDVaMDMxMTAvBgNV BAMTKDk4QzJBNjcxQzY2MjA0QUY0Qjk4MkU2RkY0NDFBOTYzOTQzMkJGOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4ECo8DBR4n8JR++umkcv9oyU n6NNiFpdXhRfA4zd8B60o+MXO9YJy3mZmWtu6gUNZvd04uF4Ay7jYpuR0r3v4yXf NyYvuV+xyEThFiAYCwoPSy9upB485b1ufQFroFI6KkO4ic1QmucCyp9j0zDcTu2i +zYH9tyPwMxBrXjfxtM3vb4qlpDr19ZQ3w16njbNo1hj/SPy7RP8hAb1zb6pa9f0 nTfqHo1y2nKOOJcIkjaRnriCtO7JD2wdS+Bna9c6BB3wQLyl79gSGubvGW+cEC5Z G98vF6V/mJ3rVICSsyUYNZDggc1z8FMxuJUQxaO9lWcsP1dNZhMSSi5TxVlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmMKmccZiBK9LmC5v9EGpY5Qyv4swHwYDVR0j BBgwFoAUrM7ONo8EFCUFlA/yn03TYe7037owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDRjYjhkOC0xNTA1LTQ2ODItOWRkYi1mY2Q4NjIwMGI5NjYvMC9BQ0NFQ0UzNjhG MDQxNDI1MDU5NDBGRjI5RjRERDM2MUVFRjRERkJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQzNjFFRUY0 REZCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQ0Y2I4ZDgtMTUwNS00NjgyLTlk ZGItZmNkODYyMDBiOTY2LzAvQUNDRUNFMzY4RjA0MTQyNTA1OTQwRkYyOUY0REQz NjFFRUY0REZCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9lNekR9nF2yTirK2kSw6wevHPuJIYrjHvm 6SyNcNCGDeSSUBnzmubZ75fHKl0Djwk2aOySupTvvd+wk0CVJXC/pkxD6qGKRspe s0gGDgXqNXeAwSJFpdOg4+f869Bga7AWL46n01MOS6Ld7u1GyoXCS1fUe89E8S9Q FYkeTueiHnF0hHiO/mgJxMDNsw4L3RUHhXCUXEXk6bzPp5ZIrxLuiJwpMAo65D2i CyWpcholzuGTYzOPKTDJmXKYwNm6Vbo7q7Fn2tzJPQAqyBWL+tPvQlAo5VLul7jp j2PQo3R+5QKiHJnlVPqb63DaQnUz73QSOLFoHE5b0XTUXwFXWCg= -----END CERTIFICATE-----Generated at Wed Dec 31 20:09:39 2025 by rpki-client