This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: d7dl+fuRngvO0i+OCyHATaeb2VkSV5bWaK8pYNxAwZA= Subject key identifier: 6E:0D:C9:4E:A9:FA:AF:C1:39:0F:13:BE:CA:E6:35:9B:F5:40:F8:0C Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 397B272946494E34DD331358F10D97670FF1FB8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 015E Signing time: Fri 12 Dec 2025 16:21:10 +0000 Manifest this update: Fri 12 Dec 2025 16:16:10 +0000 Manifest next update: Mon 15 Dec 2025 19:50:10 +0000 Files and hashes: 1: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) 2: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: 92vU0+Aj+YV8YLVQtBt+NKI5qQo3gpqukMim6CplhTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 19:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7b:27:29:46:49:4e:34:dd:33:13:58:f1:0d:97:67:0f:f1:fb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Dec 12 16:16:10 2025 GMT Not After : Dec 15 19:50:10 2025 GMT Subject: CN=6E0DC94EA9FAAFC1390F13BECAE6359BF540F80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:72:72:21:7f:ec:83:c6:e8:a8:1d:4f:fe: 8f:83:e4:e7:f6:4a:14:02:7f:aa:19:6e:5f:2b:ac: e9:78:5f:81:73:f2:0f:f5:ef:02:c8:4a:97:a2:e1: 45:e2:3b:79:6e:ad:74:98:2f:e8:29:06:69:f6:4d: a4:e7:7d:d6:d1:b7:ce:82:f4:d0:f1:a4:6a:df:98: b8:fc:76:bf:e2:b5:96:60:79:12:fb:e8:79:e0:58: 24:81:59:04:28:97:36:21:76:b8:ae:b5:c4:ba:1b: 96:ed:08:9c:ae:8d:f3:1a:d9:c7:9f:27:6c:69:71: 54:6d:d6:c0:2e:b0:90:f4:4c:c1:cc:ba:7f:43:0c: 75:02:7d:02:70:c2:91:dc:31:f1:99:ff:70:f6:58: ff:a4:c4:9d:10:2f:76:e8:25:83:40:a8:7d:02:db: 33:07:7c:9c:9f:92:24:79:5f:0b:fe:3e:48:a6:0e: 74:b5:02:8e:35:d5:6d:fc:57:b9:05:52:40:d0:78: 84:66:10:69:f7:f4:3e:ef:28:3b:70:ee:e5:58:dd: b1:2a:77:6a:30:c8:36:d0:3a:51:41:13:aa:ce:b8: 8e:a3:ab:a6:bf:72:58:e0:d4:4b:ac:d7:9b:c7:00: 1c:a6:7c:11:6f:eb:e8:20:29:59:2c:f8:b0:99:f6: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0D:C9:4E:A9:FA:AF:C1:39:0F:13:BE:CA:E6:35:9B:F5:40:F8:0C X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b3:6e:ad:ec:7b:93:ce:d0:7d:d1:9c:18:31:8a:58:5e:ba: 24:1a:57:54:d4:85:5a:a9:18:31:d7:67:11:35:a1:8e:1d:10: 80:88:5a:2e:64:ab:a4:d0:c7:13:52:59:9d:26:96:a2:78:a3: 9f:aa:6c:67:5b:aa:20:af:3c:ce:bd:a6:ea:e1:3c:82:a6:69: d0:3e:5b:c4:c7:d6:03:96:d2:3f:e8:7d:2b:8f:e0:0c:43:b9: 87:a9:47:12:27:9c:cc:9d:af:21:5a:94:03:65:17:a8:28:c0: 14:c0:72:b4:89:e6:37:aa:d8:88:75:89:c4:45:e6:cd:ff:41: ef:9f:fe:cd:79:4e:e8:d8:0d:c5:ee:70:21:74:41:f3:41:02: 96:bc:b0:bf:1b:39:0a:c1:90:35:b1:01:49:94:09:55:d7:68: df:0f:88:4f:d5:c1:8f:59:db:85:f1:a0:9b:2b:73:f6:b9:3d: c0:f9:cc:8a:c6:0a:82:a9:d5:2a:1c:40:ac:15:89:14:cd:48: 15:75:eb:78:78:c2:95:2c:6a:28:f4:be:35:ae:bf:8e:3c:df: 94:01:88:99:ea:85:d5:98:97:61:39:73:cd:74:de:6f:1a:2d: 06:55:f2:6e:f8:86:26:76:be:c5:7d:ef:60:dc:bf:66:3c:58: b0:89:73:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXsnKUZJTjTdMxNY8Q2XZw/x+40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTEyMTIxNjE2MTBaFw0yNTEyMTUxOTUwMTBaMDMxMTAvBgNV BAMTKDZFMERDOTRFQTlGQUFGQzEzOTBGMTNCRUNBRTYzNTlCRjU0MEY4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGanJyIX/sg8boqB1P/o+D5Of2 ShQCf6oZbl8rrOl4X4Fz8g/17wLISpei4UXiO3lurXSYL+gpBmn2TaTnfdbRt86C 9NDxpGrfmLj8dr/itZZgeRL76HngWCSBWQQolzYhdriutcS6G5btCJyujfMa2cef J2xpcVRt1sAusJD0TMHMun9DDHUCfQJwwpHcMfGZ/3D2WP+kxJ0QL3boJYNAqH0C 2zMHfJyfkiR5Xwv+PkimDnS1Ao411W38V7kFUkDQeIRmEGn39D7vKDtw7uVY3bEq d2owyDbQOlFBE6rOuI6jq6a/cljg1Eus15vHABymfBFv6+ggKVks+LCZ9pmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbg3JTqn6r8E5DxO+yuY1m/VA+AwwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACazbq3se5PO0H3RnBgxilheuiQaV1TUhVqp GDHXZxE1oY4dEICIWi5kq6TQxxNSWZ0mlqJ4o5+qbGdbqiCvPM69purhPIKmadA+ W8TH1gOW0j/ofSuP4AxDuYepRxInnMydryFalANlF6gowBTAcrSJ5jeq2Ih1icRF 5s3/Qe+f/s15TujYDcXucCF0QfNBApa8sL8bOQrBkDWxAUmUCVXXaN8PiE/VwY9Z 24XxoJsrc/a5PcD5zIrGCoKp1SocQKwViRTNSBV163h4wpUsaij0vjWuv44835QB iJnqhdWYl2E5c8103m8aLQZV8m74hiZ2vsV972Dcv2Y8WLCJczQ= -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:02 2025 by rpki-client