This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft File: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft (raw, json) Hash identifier: /q5Y/rl1cYHDnwqZMBuoQjkURjnHaJZmvnMsYwuU5MQ= Subject key identifier: 55:C4:70:6F:D2:A4:DA:37:47:90:23:92:27:03:EB:01:3E:3A:F2:63 Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D Certificate issuer: /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Certificate serial: 04C5B136917A033A7C05FFD2DA5CA411642B4D43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft Manifest number: 0159 Signing time: Mon 01 Dec 2025 16:51:09 +0000 Manifest this update: Mon 01 Dec 2025 16:46:09 +0000 Manifest next update: Thu 04 Dec 2025 17:50:09 +0000 Files and hashes: 1: ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl (hash: p8I/UbNjkwTqjrVwCDftRsH9qEgqXfQX+nBYgmUUHpk=) 2: 3230332e332e39302e302f32342d3234203d3e20313531353938.roa (hash: qxf//YzvZquiMhJd5iJXlsIhTKmJQsFvO/D1AKj+2BM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c5:b1:36:91:7a:03:3a:7c:05:ff:d2:da:5c:a4:11:64:2b:4d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D Validity Not Before: Dec 1 16:46:09 2025 GMT Not After : Dec 4 17:50:09 2025 GMT Subject: CN=55C4706FD2A4DA37479023922703EB013E3AF263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ee:25:3e:92:79:31:f8:98:dd:22:a1:90:b2: 89:23:42:71:53:ef:c9:ae:4b:fd:dc:39:66:e5:00: be:1e:24:d4:d5:d5:27:2a:34:53:1d:5f:0f:e5:31: c7:e1:d3:46:a6:ec:19:a1:02:89:94:7d:fa:8f:05: df:ed:82:ba:21:32:93:cd:52:ab:8d:68:40:53:33: 55:04:00:41:ce:28:0b:0d:81:49:fa:ff:4c:12:f9: cc:93:0a:db:3f:e3:4e:e3:9e:71:d5:4c:4d:d0:90: 25:f0:4b:01:43:d8:f5:55:07:ca:0a:69:8b:af:6c: 1e:3a:00:94:5e:8b:8a:51:bb:5d:52:f9:b6:36:d1: fe:28:c4:b2:8b:8c:c0:7c:cb:dd:8e:1b:02:c4:e3: 41:24:c7:94:f1:c4:da:eb:b7:b4:0f:ce:52:99:49: d1:6e:b4:6c:39:39:83:5c:58:86:24:7e:df:50:f5: fb:7a:70:cd:e7:d7:97:e9:07:39:a3:93:59:ef:8f: c4:e2:aa:7f:98:a6:9b:73:c3:d8:b9:c3:a0:57:a8: c3:14:28:93:53:fd:0d:96:f0:3f:ba:c1:17:13:6f: f9:03:3d:58:b1:b9:17:b0:0e:c1:65:79:6f:1a:45: 4b:94:0e:a1:84:6d:1e:7c:35:66:ef:2e:f9:ea:7c: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C4:70:6F:D2:A4:DA:37:47:90:23:92:27:03:EB:01:3E:3A:F2:63 X509v3 Authority Key Identifier: keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ce:a0:52:c3:43:0f:87:56:82:ec:0c:b8:fe:2b:a8:cb:32: ea:aa:b3:e0:22:74:07:94:d4:33:9f:23:83:fb:83:bd:11:f0: de:62:b7:87:e1:34:8c:b1:86:0a:ea:6d:1b:28:d1:d6:3f:b1: cb:88:97:b0:be:24:6a:39:ea:b5:13:32:11:d0:15:11:66:16: 4b:03:88:3a:4c:76:2c:3a:8c:9e:64:f1:8e:d9:96:e6:c5:09: 34:29:93:e0:13:37:9f:cd:c8:c0:73:9a:b6:eb:2f:dd:20:68: 57:e5:30:47:05:af:5a:f2:c2:14:a4:05:a3:80:b9:54:b1:b2: 54:e8:a5:60:a9:db:a4:02:1c:79:1c:8e:b4:13:79:b0:b7:93: 11:45:d7:b5:b5:f1:aa:c0:58:54:9a:19:ed:77:71:c0:da:bb: 09:31:4e:65:08:c1:c0:35:0d:81:4f:43:4a:42:eb:cf:d8:20: 92:e8:13:fc:f0:78:8e:89:d9:05:4c:46:2f:b2:48:e6:28:0b: 15:76:e6:04:17:39:e6:4b:61:17:87:2e:d0:00:ec:e8:4e:b0: 0a:b7:f8:e4:a5:da:71:2b:21:83:3f:3d:f1:a5:62:2d:e8:a4: d9:b4:e5:ae:45:61:8d:21:37:dd:2c:35:d7:e7:5e:9d:fc:4b: 78:bf:ff:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMWxNpF6Azp8Bf/S2lykEWQrTUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJC NjI2Q0E0RDAeFw0yNTEyMDExNjQ2MDlaFw0yNTEyMDQxNzUwMDlaMDMxMTAvBgNV BAMTKDU1QzQ3MDZGRDJBNERBMzc0NzkwMjM5MjI3MDNFQjAxM0UzQUYyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7iU+knkx+JjdIqGQsokjQnFT 78muS/3cOWblAL4eJNTV1ScqNFMdXw/lMcfh00am7BmhAomUffqPBd/tgrohMpPN UquNaEBTM1UEAEHOKAsNgUn6/0wS+cyTCts/407jnnHVTE3QkCXwSwFD2PVVB8oK aYuvbB46AJRei4pRu11S+bY20f4oxLKLjMB8y92OGwLE40Ekx5TxxNrrt7QPzlKZ SdFutGw5OYNcWIYkft9Q9ft6cM3n15fpBzmjk1nvj8Tiqn+Ypptzw9i5w6BXqMMU KJNT/Q2W8D+6wRcTb/kDPVixuRewDsFleW8aRUuUDqGEbR58NWbvLvnqfDhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVcRwb9Kk2jdHkCOSJwPrAT468mMwHwYDVR0j BBgwFoAUrOLauqJJ1WrZaK19YKCWQrYmyk0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDg3MTMwMy0wMjFhLTRhMGItOWVmYi1hZTJkYjZjOTBkODQvMC9BQ0UyREFCQUEy NDlENTZBRDk2OEFEN0Q2MEEwOTY0MkI2MjZDQTRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2NDJCNjI2 Q0E0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ4NzEzMDMtMDIxYS00YTBiLTll ZmItYWUyZGI2YzkwZDg0LzAvQUNFMkRBQkFBMjQ5RDU2QUQ5NjhBRDdENjBBMDk2 NDJCNjI2Q0E0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPOoFLDQw+HVoLsDLj+K6jLMuqqs+AidAeU 1DOfI4P7g70R8N5it4fhNIyxhgrqbRso0dY/scuIl7C+JGo56rUTMhHQFRFmFksD iDpMdiw6jJ5k8Y7ZlubFCTQpk+ATN5/NyMBzmrbrL90gaFflMEcFr1rywhSkBaOA uVSxslTopWCp26QCHHkcjrQTebC3kxFF17W18arAWFSaGe13ccDauwkxTmUIwcA1 DYFPQ0pC68/YIJLoE/zweI6J2QVMRi+ySOYoCxV25gQXOeZLYReHLtAA7OhOsAq3 +OSl2nErIYM/PfGlYi3opNm05a5FYY0hN90sNdfnXp38S3i//+k= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:59 2025 by rpki-client