This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft File: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft (raw, json) Hash identifier: qw5uRSkz1dDhdEra5izMeCy0/V5x2VlCydexZJiDHVc= Subject key identifier: 9A:78:A1:ED:29:B4:6D:6B:0A:BA:87:B7:F4:9A:10:E1:73:32:93:DA Authority key identifier: 00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F Certificate issuer: /CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Certificate serial: 73BA0099B7F927A0E0B255B1625A1E4790F07088 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft Manifest number: 053A Signing time: Thu 08 Jan 2026 23:40:50 +0000 Manifest this update: Thu 08 Jan 2026 23:35:50 +0000 Manifest next update: Mon 12 Jan 2026 01:15:50 +0000 Files and hashes: 1: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 33v24/+Rv2iOxGAU7l0du0lgoN/314/yiFhS7aj6fhE=) 2: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: Oqk+2aNoDkz3rAuUwzqbP96AFip7IVOJ+sOmFv2FC3s=) 3: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: HmlGJU60qnT6VsG24BHqwMQLdMGBaxDBrgRKZDFmkxU=) 4: 00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl (hash: IxJqSNJDl7DP3VpMFigtlOEBvm5ta9epGjca0FRYdxI=) 5: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: dqbXh2fh2OaVSVgJTjSWxwpOg/4I40zirFE6nOuWYzo=) 6: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: L25qOwaR1z4WBpyOCt6SGRe3C1qJyUGhLdY1D+C8bH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 01:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ba:00:99:b7:f9:27:a0:e0:b2:55:b1:62:5a:1e:47:90:f0:70:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00AC65E61E4913268C5D0B8AFE8C7D913B686D9F Validity Not Before: Jan 8 23:35:50 2026 GMT Not After : Jan 12 01:15:50 2026 GMT Subject: CN=9A78A1ED29B46D6B0ABA87B7F49A10E1733293DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:63:d4:88:8e:e1:dd:f5:aa:59:a9:9f:cd: 3e:75:6f:dc:7c:6f:35:62:7d:68:ee:f8:3c:1b:08: 7a:66:99:bd:db:c4:5e:3d:f5:93:84:b0:cd:f8:41: a3:40:b1:3a:24:e6:47:8d:93:88:c1:64:c0:43:f2: 9c:79:74:db:10:3c:02:85:18:0a:da:db:e7:fa:7d: 98:c6:86:e9:07:50:29:d0:46:42:0b:bc:1f:da:d9: 07:43:d1:24:76:cb:fb:f9:bf:c0:29:c3:9f:b1:a9: e0:2b:21:a3:c3:1f:c3:6b:9b:df:ff:a9:1b:5a:c4: 10:28:20:c7:d7:ca:b0:37:be:23:e0:f8:30:26:60: 8e:b6:63:df:72:56:1c:24:66:fb:3f:57:d8:8d:6e: 52:27:e6:25:39:46:5a:05:07:00:6d:fa:22:d5:15: 9f:a0:ef:13:5a:b2:db:f5:c3:ab:e5:5d:cb:11:6c: cb:c8:b9:34:fb:bb:fd:96:57:93:f4:0a:9c:c9:04: 12:cc:cd:47:d8:dd:3c:f3:a9:71:6f:86:19:a7:d4: b9:97:8b:4a:0a:6b:f8:67:ff:89:27:df:93:57:bb: de:f7:9d:53:e9:00:f7:cd:be:e7:05:16:b5:ac:dc: 3a:e7:51:72:de:f1:0a:3b:28:82:7d:41:9f:92:f4: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:78:A1:ED:29:B4:6D:6B:0A:BA:87:B7:F4:9A:10:E1:73:32:93:DA X509v3 Authority Key Identifier: keyid:00:AC:65:E6:1E:49:13:26:8C:5D:0B:8A:FE:8C:7D:91:3B:68:6D:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/00AC65E61E4913268C5D0B8AFE8C7D913B686D9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:2a:1d:d4:f2:ac:8d:9e:7b:1c:5e:70:b8:26:d2:33:af:ed: 64:b1:63:d7:9d:57:8a:12:ea:1f:61:bf:ff:d1:0f:05:a8:da: 76:df:34:6e:6b:b6:84:77:c1:a7:7c:66:20:78:45:17:0c:28: 1a:78:e5:22:2b:ef:37:48:4b:23:c9:e1:74:9e:cb:3f:b8:f1: 1a:c3:58:1e:d5:62:a8:2b:b1:3f:45:2b:35:f5:5d:03:94:b8: 1f:4c:87:03:09:e2:12:41:fe:47:85:92:b2:73:72:ed:9e:26: ed:d8:ee:88:64:92:33:15:81:d3:7c:fc:62:0e:83:3f:ec:21: 10:c2:02:5d:24:a6:69:2a:df:de:3e:3b:df:88:72:b8:c2:5d: 60:d1:74:46:92:7c:a4:b2:1f:eb:89:fc:1a:2c:6e:de:4e:bf: 24:c9:4a:3f:4d:7d:89:4e:e9:b3:43:1e:c8:db:94:bd:b3:f0: 51:79:b6:4b:b6:05:dd:f9:0d:b3:1d:01:62:ad:8f:e8:e3:b7: ae:3a:3d:df:2f:e2:74:0d:99:f1:41:32:9a:13:2d:4c:40:96: 85:03:92:c3:2b:99:08:5b:bc:ce:26:92:b4:33:36:84:5e:fb: 0f:69:62:d9:63:5b:73:29:55:16:1c:08:9a:b9:f6:99:c9:cd: 64:35:cf:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc7oAmbf5J6DgslWxYloeR5DwcIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEz QjY4NkQ5RjAeFw0yNjAxMDgyMzM1NTBaFw0yNjAxMTIwMTE1NTBaMDMxMTAvBgNV BAMTKDlBNzhBMUVEMjlCNDZENkIwQUJBODdCN0Y0OUExMEUxNzMzMjkzREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXLWPUiI7h3fWqWamfzT51b9x8 bzVifWju+DwbCHpmmb3bxF499ZOEsM34QaNAsTok5keNk4jBZMBD8px5dNsQPAKF GAra2+f6fZjGhukHUCnQRkILvB/a2QdD0SR2y/v5v8Apw5+xqeArIaPDH8Nrm9// qRtaxBAoIMfXyrA3viPg+DAmYI62Y99yVhwkZvs/V9iNblIn5iU5RloFBwBt+iLV FZ+g7xNastv1w6vlXcsRbMvIuTT7u/2WV5P0CpzJBBLMzUfY3TzzqXFvhhmn1LmX i0oKa/hn/4kn35NXu973nVPpAPfNvucFFrWs3DrnUXLe8Qo7KIJ9QZ+S9O2VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmnih7Sm0bWsKuoe39JoQ4XMyk9owHwYDVR0j BBgwFoAUAKxl5h5JEyaMXQuK/ox9kTtobZ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg5NTBmMC0zYjE0LTRhNmQtYjMwZi03NTM3OWNiMmViY2UvMC8wMEFDNjVFNjFF NDkxMzI2OEM1RDBCOEFGRThDN0Q5MTNCNjg2RDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdEOTEzQjY4 NkQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4OTUwZjAtM2IxNC00YTZkLWIz MGYtNzUzNzljYjJlYmNlLzAvMDBBQzY1RTYxRTQ5MTMyNjhDNUQwQjhBRkU4QzdE OTEzQjY4NkQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEqHdTyrI2eexxecLgm0jOv7WSxY9edV4oS 6h9hv//RDwWo2nbfNG5rtoR3wad8ZiB4RRcMKBp45SIr7zdISyPJ4XSeyz+48RrD WB7VYqgrsT9FKzX1XQOUuB9MhwMJ4hJB/keFkrJzcu2eJu3Y7ohkkjMVgdN8/GIO gz/sIRDCAl0kpmkq394+O9+IcrjCXWDRdEaSfKSyH+uJ/Bosbt5OvyTJSj9NfYlO 6bNDHsjblL2z8FF5tku2Bd35DbMdAWKtj+jjt646Pd8v4nQNmfFBMpoTLUxAloUD ksMrmQhbvM4mkrQzNoRe+w9pYtljW3MpVRYcCJq59pnJzWQ1z+E= -----END CERTIFICATE-----Generated at Fri Jan 9 11:20:52 2026 by rpki-client