This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: iK6xn3BmZbik+PP8WorfVtOpFKEf8zHeXDipzJYt2nI= Subject key identifier: 9D:91:2F:6E:8A:EA:6E:03:82:B8:74:76:84:08:2E:CE:31:19:90:25 Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 7DB49C3EC8D5DFF13EF9BFD1D9A6886CB7410E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 022D Signing time: Wed 24 Dec 2025 07:12:28 +0000 Manifest this update: Wed 24 Dec 2025 07:07:28 +0000 Manifest next update: Sat 27 Dec 2025 11:11:28 +0000 Files and hashes: 1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: fm2TTyBX7q+P+qHtkSu/+zzdG9foENJts09p6/NKHc0=) 2: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: MSA3Izjg6KzN5Q+MKwDBM7mghQbhoAUxxHKShKe7LT0=) 3: 3130332e3135372e36322e302f32332d3233203d3e20313439393736.roa (hash: Z+uPltjZGSJJVlVHwNz2NCUXUIEBHK05ylu6rUY+FMs=) 4: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: umdrRzgp8Ciqeng1bs/crkT4xOCEEqpUSt3z8J2SnuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b4:9c:3e:c8:d5:df:f1:3e:f9:bf:d1:d9:a6:88:6c:b7:41:0e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: Dec 24 07:07:28 2025 GMT Not After : Dec 27 11:11:28 2025 GMT Subject: CN=9D912F6E8AEA6E0382B8747684082ECE31199025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f9:65:24:6b:6c:1b:a2:e9:ca:bf:aa:f2:6c: f4:47:16:e7:42:93:a0:42:de:56:ea:4a:f0:d0:db: 75:06:24:e9:50:f0:17:55:78:0b:94:d5:7a:77:16: 57:93:1a:46:96:65:7e:6b:a1:86:f3:52:95:47:60: 92:93:c2:3a:d9:d2:fd:b5:da:b7:1a:a2:0e:e8:c6: 5a:a1:4c:73:d7:8d:4f:41:e4:41:12:29:6e:bf:6a: ad:1e:1e:3c:6b:2c:b2:e8:21:9b:96:0f:1a:f2:9b: 41:40:8e:bb:c9:c6:a3:36:9d:a2:47:54:f2:07:88: b1:cd:3e:39:92:ec:03:19:bf:96:75:9b:9d:dd:78: 58:d2:f9:09:17:e8:fd:0b:39:58:98:ce:39:47:33: d0:f5:ed:75:70:e9:98:c0:95:40:03:5b:8e:08:fc: c5:db:07:84:22:a6:42:32:f8:e5:f8:16:50:29:d7: a6:73:ba:ab:94:1a:c7:0e:58:3d:6c:d3:54:9f:83: 4d:e7:32:33:dd:4f:78:d3:b3:97:2c:41:17:a6:d8: 8c:d5:c7:ca:3c:63:74:ce:16:82:d0:e8:db:d5:c4: b2:3c:4a:2c:c7:09:d3:aa:73:42:6c:49:af:48:4f: 39:02:82:16:f3:d7:43:4e:dd:c9:70:a6:93:dc:7c: 99:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:2F:6E:8A:EA:6E:03:82:B8:74:76:84:08:2E:CE:31:19:90:25 X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e1:b9:7a:a5:eb:34:46:15:f9:1e:f0:2f:51:93:9d:8c:4e: 73:48:cb:43:79:7d:8d:d2:51:78:80:40:8e:0a:8f:41:6b:0f: 7d:67:df:78:91:50:be:7d:1c:3d:cb:61:ac:ea:ee:4b:fc:cd: 93:05:cd:be:de:b5:41:ae:28:24:e4:db:92:c7:2f:b0:31:17: 48:54:17:2d:7b:b3:40:fa:6c:45:7b:9a:36:60:f5:77:04:85: ac:4d:60:3f:0b:fd:75:e2:a9:b5:15:2e:70:8d:d4:c7:1f:a6: 82:4b:17:96:77:cb:e3:f4:ee:dd:9e:e3:b9:0b:ee:c9:ea:d3: 9f:95:c2:37:74:4e:93:2e:49:b1:42:e9:e9:77:ba:bd:ea:07: 5b:21:3f:f2:4d:81:ca:9b:21:3a:ff:8d:c0:a9:5f:24:73:a2: a4:86:29:ff:94:58:0a:ca:07:c0:07:46:c8:61:56:f9:0f:f9: 3e:f8:fb:16:b8:5b:06:7c:2a:02:ac:26:a5:0a:05:c3:52:ae: e9:74:22:d8:1c:09:db:f3:02:ca:5c:30:4d:33:d4:2d:37:a1: 56:1e:dc:b8:62:bd:bf:bb:60:06:cc:99:f6:dd:c9:3f:80:d7: 7e:1b:d7:fe:67:6b:2e:f7:5a:c2:ac:b1:fe:69:b1:a6:d5:7e: 39:0c:a3:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbScPsjV3/E++b/R2aaIbLdBDhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTEyMjQwNzA3MjhaFw0yNTEyMjcxMTExMjhaMDMxMTAvBgNV BAMTKDlEOTEyRjZFOEFFQTZFMDM4MkI4NzQ3Njg0MDgyRUNFMzExOTkwMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+WUka2wbounKv6rybPRHFudC k6BC3lbqSvDQ23UGJOlQ8BdVeAuU1Xp3FleTGkaWZX5roYbzUpVHYJKTwjrZ0v21 2rcaog7oxlqhTHPXjU9B5EESKW6/aq0eHjxrLLLoIZuWDxrym0FAjrvJxqM2naJH VPIHiLHNPjmS7AMZv5Z1m53deFjS+QkX6P0LOViYzjlHM9D17XVw6ZjAlUADW44I /MXbB4QipkIy+OX4FlAp16ZzuquUGscOWD1s01Sfg03nMjPdT3jTs5csQRem2IzV x8o8Y3TOFoLQ6NvVxLI8SizHCdOqc0JsSa9ITzkCghbz10NO3clwppPcfJlNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZEvborqbgOCuHR2hAguzjEZkCUwHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/huXql6zRGFfke8C9Rk52MTnNIy0N5fY3S UXiAQI4Kj0FrD31n33iRUL59HD3LYazq7kv8zZMFzb7etUGuKCTk25LHL7AxF0hU Fy17s0D6bEV7mjZg9XcEhaxNYD8L/XXiqbUVLnCN1McfpoJLF5Z3y+P07t2e47kL 7snq05+Vwjd0TpMuSbFC6el3ur3qB1shP/JNgcqbITr/jcCpXyRzoqSGKf+UWArK B8AHRshhVvkP+T74+xa4WwZ8KgKsJqUKBcNSrul0ItgcCdvzAspcME0z1C03oVYe 3Lhivb+7YAbMmfbdyT+A134b1/5nay73WsKssf5psabVfjkMo6M= -----END CERTIFICATE-----Generated at Thu Dec 25 09:24:11 2025 by rpki-client