This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json)
Hash identifier: mRguwFReOFNIX29BPHUS59jtv+nBzNBF4P/PEn6ygwE=
Subject key identifier: 8E:BF:21:19:BC:6B:B6:53:1C:D2:FE:3F:6D:DA:21:B5:42:FE:6B:28
Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Certificate serial: 3AFFB05C1759DDB1BBC1ABBE1A7055DE562B7C3F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
Manifest number: 0534
Signing time: Wed 17 Dec 2025 04:40:02 +0000
Manifest this update: Wed 17 Dec 2025 04:35:02 +0000
Manifest next update: Sat 20 Dec 2025 07:47:02 +0000
Files and hashes: 1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=)
2: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: gBcM1pVTk9MDT1fJGLau0kb7c5GzHGagLUBPaicOAnc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 07:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ff:b0:5c:17:59:dd:b1:bb:c1:ab:be:1a:70:55:de:56:2b:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36
Validity
Not Before: Dec 17 04:35:02 2025 GMT
Not After : Dec 20 07:47:02 2025 GMT
Subject: CN=8EBF2119BC6BB6531CD2FE3F6DDA21B542FE6B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:e0:7b:71:85:aa:d3:0f:d9:06:5f:5d:56:
ab:5a:f8:88:ce:bd:7f:35:0e:07:00:9e:ca:b6:ea:
43:31:01:0e:2f:bd:4c:84:28:69:23:d7:64:8d:3b:
63:82:e9:35:5c:71:c8:52:25:a4:a8:f2:7e:db:69:
ce:8a:98:0c:e3:10:44:fc:80:75:12:9a:b4:0b:a0:
12:37:7e:ed:c8:ae:44:52:8d:a7:bb:29:97:b6:6f:
16:0f:1a:20:93:57:e0:eb:22:7a:33:3b:ee:c6:b4:
b2:d8:f1:5f:d3:1f:df:4b:20:a6:ef:0a:f8:ce:b2:
29:86:1c:87:44:4d:37:35:9a:e1:03:8d:22:10:0b:
8b:73:2f:bf:7e:64:fd:3c:a5:34:39:df:9e:5a:69:
3d:32:e3:4d:63:ee:d8:df:4f:50:3d:81:75:7f:79:
c9:13:3a:06:19:1d:19:80:b1:ea:70:ac:57:cc:db:
4b:a4:71:53:88:cb:8d:c1:53:9e:75:38:fb:ef:9b:
be:cf:56:76:90:d5:79:4f:ab:eb:d6:9d:8d:3b:7b:
20:0f:bc:95:8b:82:73:3c:54:9c:3a:55:c7:e6:b8:
17:47:69:ba:70:2d:08:26:ae:b0:33:34:1f:a2:7a:
5b:a8:d8:75:9c:5b:92:66:1b:44:6c:82:c8:38:29:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:21:19:BC:6B:B6:53:1C:D2:FE:3F:6D:DA:21:B5:42:FE:6B:28
X509v3 Authority Key Identifier:
keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:d8:e1:77:38:df:5a:d1:e4:e1:73:98:da:53:72:39:ea:
13:c6:7f:78:0c:45:c0:be:be:33:5f:b7:28:0d:8a:24:1d:55:
6e:37:29:87:d7:1a:c2:05:a6:a8:9b:11:8a:a3:a7:28:f8:bc:
ac:d8:99:53:de:c8:b9:fb:b0:5d:bd:0e:20:3d:e2:89:51:43:
58:00:a6:66:84:5c:3c:d9:fa:b0:d0:1e:cd:fb:e1:23:4e:8a:
bd:15:1f:09:b9:03:8e:0c:34:a9:8f:25:f7:c0:d3:03:2d:1e:
92:14:2e:d7:a3:22:ec:69:c4:fc:72:10:7d:8a:12:a6:b7:ad:
18:ad:fe:bf:e4:1a:13:8b:21:cb:33:ec:9c:0b:0e:e7:1f:a7:
f5:fb:a3:43:66:e3:1b:8d:45:20:60:a6:8c:ee:ca:5c:fd:ea:
f9:70:15:a0:bf:33:90:3e:a2:f5:26:95:ae:10:b2:55:3c:66:
3a:20:87:62:2a:4b:7a:bd:db:c3:07:d4:a0:3b:e6:02:bd:32:
88:65:11:f2:ec:6c:54:74:04:16:f0:18:fa:c9:0a:a4:56:e6:
70:e0:39:94:c6:dd:31:49:f5:61:2b:43:4c:1e:6e:32:17:68:
fb:47:77:21:ba:5e:99:4d:9c:9e:41:83:76:e4:b6:58:be:45:
f9:71:bb:9f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOv+wXBdZ3bG7wau+GnBV3lYrfD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB
QTVFOUYzNjAeFw0yNTEyMTcwNDM1MDJaFw0yNTEyMjAwNzQ3MDJaMDMxMTAvBgNV
BAMTKDhFQkYyMTE5QkM2QkI2NTMxQ0QyRkUzRjZEREEyMUI1NDJGRTZCMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJseB7cYWq0w/ZBl9dVqta+IjO
vX81DgcAnsq26kMxAQ4vvUyEKGkj12SNO2OC6TVccchSJaSo8n7bac6KmAzjEET8
gHUSmrQLoBI3fu3IrkRSjae7KZe2bxYPGiCTV+DrInozO+7GtLLY8V/TH99LIKbv
CvjOsimGHIdETTc1muEDjSIQC4tzL79+ZP08pTQ5355aaT0y401j7tjfT1A9gXV/
eckTOgYZHRmAsepwrFfM20ukcVOIy43BU551OPvvm77PVnaQ1XlPq+vWnY07eyAP
vJWLgnM8VJw6VcfmuBdHabpwLQgmrrAzNB+ieluo2HWcW5JmG0Rsgsg4KSBnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUjr8hGbxrtlMc0v4/bdohtUL+aygwHwYDVR0j
BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF
QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF
OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx
N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx
NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFDt2OF3ON9a0eThc5jaU3I56hPGf3gMRcC+
vjNftygNiiQdVW43KYfXGsIFpqibEYqjpyj4vKzYmVPeyLn7sF29DiA94olRQ1gA
pmaEXDzZ+rDQHs374SNOir0VHwm5A44MNKmPJffA0wMtHpIULtejIuxpxPxyEH2K
Eqa3rRit/r/kGhOLIcsz7JwLDucfp/X7o0Nm4xuNRSBgpozuylz96vlwFaC/M5A+
ovUmla4QslU8Zjogh2IqS3q928MH1KA75gK9MohlEfLsbFR0BBbwGPrJCqRW5nDg
OZTG3TFJ9WErQ0webjIXaPtHdyG6XplNnJ5Bg3bktli+Rflxu58=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:18:22 2025 by rpki-client