This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
File: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft (raw, json)
Hash identifier: wu3riHpvMkzqRVa+strfvOl5gqiuPorgLQ8xJdU+ezU=
Subject key identifier: 14:7A:CB:54:33:04:A0:E6:CF:1A:3E:88:ED:71:80:EB:51:91:5F:CA
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Certificate issuer: /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial: 65DC6E83DFAFC2FCB8B39676207D039C69DC865E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
Manifest number: 052B
Signing time: Tue 02 Dec 2025 10:31:01 +0000
Manifest this update: Tue 02 Dec 2025 10:26:01 +0000
Manifest next update: Fri 05 Dec 2025 18:42:01 +0000
Files and hashes: 1: 3130332e35362e3134382e302f32332d3234203d3e203535363838.roa (hash: XTrAUzINtImcd3F+XaTVo5H750rmDxdeBt+LpGOrxS4=)
2: 3130332e32372e3230362e302f32332d3234203d3e203535363838.roa (hash: UUI0UvU6AUH37Q/H9zW8u0Apq7Y6pN001mJMdkH8taI=)
3: 3130312e35302e302e302f32322d3234203d3e203535363838.roa (hash: JE0sJw2Y30gQbCmAIhnjpinJa8eG7Fgewlr8Jax6ero=)
4: 323030313a6466343a336230303a3a2f34382d3438203d3e203535363838.roa (hash: ejfVv9si1K2MpeXhh8zMJGLdHAeeV0dhSQaga8rtoCM=)
5: ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl (hash: 7a2umrDL0j0OHtZbJ+AkbGQNFelK2QNdPI8w5SVy8OE=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Dec 2025 18:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:dc:6e:83:df:af:c2:fc:b8:b3:96:76:20:7d:03:9c:69:dc:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Validity
Not Before: Dec 2 10:26:01 2025 GMT
Not After : Dec 5 18:42:01 2025 GMT
Subject: CN=147ACB543304A0E6CF1A3E88ED7180EB51915FCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:fa:94:ac:5f:c5:5d:cd:f4:47:81:f0:a6:
df:7d:f4:c1:d8:a3:f4:64:a7:48:89:00:5c:82:a5:
29:37:f3:4f:12:56:e0:01:20:0b:9d:c4:f8:e5:fe:
cc:b0:b0:2e:33:f2:4a:af:86:c6:2f:64:9c:ce:c2:
eb:eb:97:1c:c9:89:7f:da:70:b1:f7:6e:ba:ba:49:
dc:1e:27:57:8b:52:f7:c9:6f:44:8b:7e:57:42:14:
36:59:8f:30:2c:b2:59:67:56:e6:11:be:c3:57:c6:
8c:ce:d2:d6:42:32:4a:1b:70:eb:8f:17:9d:ee:f7:
d8:a5:2b:c2:45:51:1a:2c:00:33:ef:9d:6f:b4:d7:
4e:9d:14:05:91:84:07:5a:d4:1a:42:26:05:8c:d9:
8a:b4:ca:71:7a:f1:90:62:19:9c:70:ad:64:ea:25:
f7:bb:0f:39:b5:0c:b2:76:82:b2:00:76:70:87:43:
06:c0:a0:5a:aa:2b:4f:58:da:de:7d:27:4f:1c:2d:
89:32:33:ad:24:dc:2e:63:87:91:3d:fe:7d:a3:f3:
6c:72:35:f3:ce:fc:25:62:e9:f8:93:a4:12:8c:e6:
c5:8d:11:2c:f5:c2:7c:c4:7b:05:58:0a:a0:63:b8:
82:88:a4:50:56:dc:49:1a:f2:13:85:5f:2d:99:3e:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:CB:54:33:04:A0:E6:CF:1A:3E:88:ED:71:80:EB:51:91:5F:CA
X509v3 Authority Key Identifier:
keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ea:25:c7:7a:3a:c7:93:f4:5c:57:3a:54:1e:57:a3:ed:9d:
c6:1d:f0:b6:0a:59:38:3a:3c:f2:9d:65:9c:19:bf:c4:e2:cc:
e0:7d:c9:9a:41:e9:f9:3e:57:0f:7f:d5:70:58:47:67:8c:00:
db:5a:d2:d3:72:40:44:09:24:a7:35:a5:4b:96:b9:78:0f:6f:
b8:8d:f3:58:7a:ca:76:78:f0:7d:d2:35:da:8a:a4:d0:de:16:
96:b7:66:ed:e6:f2:5c:34:e2:98:aa:61:c6:59:a4:a9:3e:96:
48:74:31:d8:d5:62:49:9f:89:5e:4f:1c:06:d3:55:84:2a:16:
c5:a7:d7:21:ca:74:88:88:ad:b3:3d:71:f3:fe:a2:a1:f1:71:
81:59:8d:52:34:0e:91:85:f4:da:41:f7:02:51:48:e6:09:22:
8b:63:22:fc:dd:43:a5:e8:e8:1f:c9:5c:5c:08:76:df:5a:52:
9d:52:ac:b6:34:ef:e4:06:a4:84:74:e5:a7:7f:29:8c:e6:a5:
43:45:49:b9:16:3f:40:8d:7a:b7:13:32:09:3f:ae:4a:1b:55:
91:47:58:cf:58:5d:cf:58:12:55:26:0f:51:d3:06:e7:0a:a2:
99:7f:3e:f8:ef:45:f0:2a:9b:74:85:84:60:f9:f3:02:70:c7:
85:1a:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:29:02 2025 by rpki-client