This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
File:                     AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft (raw, json)
Hash identifier:          EH9f6+MaUn0tn7/17grcikrzCewa3xkp4X6pTTG+PxE=
Subject key identifier:   37:7A:92:D8:26:BB:5D:2A:8E:53:2D:D7:2B:41:69:3F:9F:34:49:A3
Authority key identifier: AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85
Certificate issuer:       /CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
Certificate serial:       02985FC58D4B8C6D5DA3987B9B577CCC52A86B22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
Manifest number:          03E3
Signing time:             Wed 17 Dec 2025 03:52:18 +0000
Manifest this update:     Wed 17 Dec 2025 03:47:18 +0000
Manifest next update:     Sat 20 Dec 2025 14:36:18 +0000
Files and hashes:         1: AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl (hash: Myvo9v8sn50COo6i94YhAfNYysvuL2hG8C9jDeEWGD8=)
                          2: 3130332e38332e3137322e302f32322d3234203d3e20313332363431.roa (hash: giwifBC0rnkq8RPki0IRKJ4Ij+DcJrJ5JdJxMRZifS0=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl
                          rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 14:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:5f:c5:8d:4b:8c:6d:5d:a3:98:7b:9b:57:7c:cc:52:a8:6b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85
        Validity
            Not Before: Dec 17 03:47:18 2025 GMT
            Not After : Dec 20 14:36:18 2025 GMT
        Subject: CN=377A92D826BB5D2A8E532DD72B41693F9F3449A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:dd:29:70:54:51:6c:1f:a9:4e:f2:5d:bc:
                    3a:f8:a8:91:59:7c:e8:a2:98:5b:63:15:43:bc:20:
                    46:28:0b:a2:f1:44:2c:76:88:95:10:a7:0d:51:80:
                    ba:22:44:5d:72:ea:f2:57:64:2a:88:a8:c0:02:97:
                    c3:59:48:13:81:03:3e:58:61:2d:d3:93:9e:3c:c6:
                    f2:14:79:bf:ab:d0:14:e8:00:40:71:37:51:76:c0:
                    37:59:cc:d9:ef:73:09:3b:32:a1:d1:54:27:3a:31:
                    30:5e:bc:75:de:e4:5d:a9:53:f6:aa:4e:bb:ce:a0:
                    eb:97:45:55:46:2d:13:90:ec:9f:63:b3:cc:a9:2d:
                    ea:c5:90:6e:11:8b:49:b9:c9:1f:d9:60:df:3e:ed:
                    fd:61:0b:04:dc:bf:1a:2a:a4:a1:cd:09:40:0a:bc:
                    85:b7:36:2d:82:81:17:97:35:8a:82:a6:ec:09:c9:
                    e9:bc:dd:d9:23:25:a6:7e:95:5a:a1:5d:5d:77:7f:
                    9b:bf:fe:77:26:5a:d4:1b:8c:5e:43:42:06:0b:85:
                    43:00:58:3a:c2:dc:70:85:d2:df:4c:52:d4:73:67:
                    7a:c5:f7:71:0b:5d:cf:d8:02:6f:db:c0:e3:ca:d2:
                    3a:a3:9f:fa:73:82:25:e7:17:19:33:65:74:63:fc:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:92:D8:26:BB:5D:2A:8E:53:2D:D7:2B:41:69:3F:9F:34:49:A3
            X509v3 Authority Key Identifier:
                keyid:AC:0E:9A:C4:2F:52:F2:15:8C:3E:C5:FD:3E:87:9B:2B:B2:A9:DF:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f6f65dc3-4a2b-4207-bccb-b0d14dd93403/0/AC0E9AC42F52F2158C3EC5FD3E879B2BB2A9DF85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:50:a6:5e:71:66:bd:58:10:12:f2:61:35:99:2f:84:bd:7e:
         d2:f2:8c:58:87:47:c0:90:75:7a:34:a8:47:7f:01:84:04:d5:
         8a:bd:3f:c1:f5:9b:22:75:ab:4b:48:5f:68:7b:4e:a5:df:73:
         fc:15:f2:93:3b:7b:d5:59:50:cb:00:64:48:6d:24:7e:75:c6:
         fd:d4:47:25:96:57:35:8f:7f:8c:ff:1c:ad:43:e7:82:ad:d3:
         3b:33:d9:64:27:fe:57:bf:60:b4:4c:7a:1c:40:dc:d6:9f:e8:
         67:1a:2f:70:96:e3:e9:fa:03:b4:0e:dd:25:e1:11:9a:9d:73:
         21:04:71:e0:a1:c6:6b:ea:cd:81:40:5f:3a:95:b2:ee:43:87:
         2c:5c:20:72:8c:44:8b:a2:18:04:0c:a4:ef:b8:ec:56:b1:0c:
         c5:63:0b:31:23:b7:73:29:fa:ab:57:32:74:c4:8a:f5:36:e6:
         98:84:3a:bb:2f:99:cb:c5:cb:e7:0a:03:a1:b5:0b:34:07:9f:
         d0:a6:95:b5:d7:92:07:6b:ba:29:bd:4f:4b:10:9c:22:79:15:
         50:72:dd:64:98:71:98:7c:6f:d9:21:d0:a2:06:bd:29:9d:70:
         87:22:35:c3:8a:cd:5e:1f:b8:6a:c5:0b:68:7f:53:fe:39:0e:
         f6:9c:32:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUAphfxY1LjG1do5h7m1d8zFKoayIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJC
MkE5REY4NTAeFw0yNTEyMTcwMzQ3MThaFw0yNTEyMjAxNDM2MThaMDMxMTAvBgNV
BAMTKDM3N0E5MkQ4MjZCQjVEMkE4RTUzMkRENzJCNDE2OTNGOUYzNDQ5QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBRt0pcFRRbB+pTvJdvDr4qJFZ
fOiimFtjFUO8IEYoC6LxRCx2iJUQpw1RgLoiRF1y6vJXZCqIqMACl8NZSBOBAz5Y
YS3Tk548xvIUeb+r0BToAEBxN1F2wDdZzNnvcwk7MqHRVCc6MTBevHXe5F2pU/aq
TrvOoOuXRVVGLROQ7J9js8ypLerFkG4Ri0m5yR/ZYN8+7f1hCwTcvxoqpKHNCUAK
vIW3Ni2CgReXNYqCpuwJyem83dkjJaZ+lVqhXV13f5u//ncmWtQbjF5DQgYLhUMA
WDrC3HCF0t9MUtRzZ3rF93ELXc/YAm/bwOPK0jqjn/pzgiXnFxkzZXRj/EfBAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUN3qS2Ca7XSqOUy3XK0FpP580SaMwHwYDVR0j
BBgwFoAUrA6axC9S8hWMPsX9PoebK7Kp34UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NmY2NWRjMy00YTJiLTQyMDctYmNjYi1iMGQxNGRkOTM0MDMvMC9BQzBFOUFDNDJG
NTJGMjE1OEMzRUM1RkQzRTg3OUIyQkIyQTlERjg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlCMkJCMkE5
REY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjZmNjVkYzMtNGEyYi00MjA3LWJj
Y2ItYjBkMTRkZDkzNDAzLzAvQUMwRTlBQzQyRjUyRjIxNThDM0VDNUZEM0U4NzlC
MkJCMkE5REY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJhQpl5xZr1YEBLyYTWZL4S9ftLyjFiHR8CQ
dXo0qEd/AYQE1Yq9P8H1myJ1q0tIX2h7TqXfc/wV8pM7e9VZUMsAZEhtJH51xv3U
RyWWVzWPf4z/HK1D54Kt0zsz2WQn/le/YLRMehxA3Naf6GcaL3CW4+n6A7QO3SXh
EZqdcyEEceChxmvqzYFAXzqVsu5DhyxcIHKMRIuiGAQMpO+47FaxDMVjCzEjt3Mp
+qtXMnTEivU25piEOrsvmcvFy+cKA6G1CzQHn9CmlbXXkgdruim9T0sQnCJ5FVBy
3WSYcZh8b9kh0KIGvSmdcIciNcOKzV4fuGrFC2h/U/45DvacMtU=
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:23:54 2025 by rpki-client