This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: DKysugZlqPwe6XTjHVC+lOpQuwrNwVWGyE2sAHqJB/I= Subject key identifier: F4:34:1D:F3:D7:CA:A2:5D:FD:A9:FD:AC:12:00:60:63:1B:00:69:C4 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 742F477D2EE3C7CF4CC60A0D11990ABFBDA21812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0471 Signing time: Fri 19 Dec 2025 00:11:26 +0000 Manifest this update: Fri 19 Dec 2025 00:06:26 +0000 Manifest next update: Mon 22 Dec 2025 07:55:26 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: QAiElLgtc4SLDlszFSD9S19qUpKcUql9v7qvOnfFiWU=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 07:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2f:47:7d:2e:e3:c7:cf:4c:c6:0a:0d:11:99:0a:bf:bd:a2:18:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Dec 19 00:06:26 2025 GMT Not After : Dec 22 07:55:26 2025 GMT Subject: CN=F4341DF3D7CAA25DFDA9FDAC120060631B0069C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:54:db:32:08:48:e6:67:88:02:a4:ea:8f:e9: 06:1e:aa:6c:f5:96:05:82:72:b6:0a:c3:93:03:05: 9c:ec:12:05:3b:8e:a5:41:26:5f:8f:64:c2:e6:c8: c1:46:6a:5f:43:d0:5c:dc:da:e4:f5:1b:2c:05:9a: b8:55:5f:e6:16:8e:2b:2c:94:40:07:1f:63:3a:41: ef:4d:31:6d:e3:fa:02:3a:f7:64:d7:d1:37:b7:28: 02:df:4f:7f:95:00:a0:31:0c:65:a5:b9:a7:d6:46: 0b:20:3a:8f:1b:f6:23:6e:94:db:51:3c:79:18:37: 70:f7:68:64:51:18:25:5e:d9:44:9b:a9:b1:3e:05: a7:fc:1e:e7:b0:43:a8:68:1c:d9:8e:db:8f:e8:04: 4a:3c:a5:03:97:d5:38:64:da:e0:02:31:0c:00:88: b9:a1:d3:44:b8:ee:31:ad:f5:88:66:79:6a:17:23: 1e:05:ec:e4:34:90:1e:66:df:24:40:ea:a0:67:13: 9e:87:fe:ba:30:44:a9:96:1a:f1:4d:f4:8d:60:8f: 2d:69:84:70:de:08:fc:78:c7:7d:7f:bc:c9:d5:08: 90:93:07:9d:38:72:2a:c8:76:aa:a0:be:1b:b5:3e: 6a:61:f6:f3:af:28:1e:4f:04:60:a2:b1:60:0b:4e: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:34:1D:F3:D7:CA:A2:5D:FD:A9:FD:AC:12:00:60:63:1B:00:69:C4 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:30:d8:9b:61:02:5b:4e:d1:9c:28:c9:a8:84:b9:db:18:1c: 2a:65:d8:12:11:ec:d3:25:19:25:72:c0:79:a9:36:ec:42:5a: f4:10:57:3b:18:29:25:7d:ce:62:15:ba:1e:20:4a:8a:fb:95: 94:82:de:62:65:10:57:b2:ca:61:01:ab:30:d2:1c:15:85:a6: 92:fb:ab:a9:71:32:92:d2:c9:c9:07:3c:cc:1a:e1:c9:de:f1: 69:5f:dc:47:ec:81:98:ff:a0:65:2a:14:d9:6a:9a:bb:26:ef: ce:17:85:a8:a6:3c:7d:df:f5:6c:8a:bd:c3:2f:84:49:b0:97: c8:67:64:68:e5:16:d2:6c:dd:ba:89:1b:7e:c3:36:6e:e9:a1: 8b:50:3d:07:f7:7f:c9:5f:51:40:63:e2:b4:18:ac:6d:91:5e: 8e:fb:0d:6f:e4:3f:87:4b:a6:2b:e2:c6:fe:c8:7d:9c:6d:38: 16:20:84:74:f6:8c:7f:6c:9a:62:1c:b2:fd:be:10:c0:fc:ad: be:4c:d9:f7:a2:7f:04:18:47:ef:df:34:bf:e7:fe:50:92:59: 74:95:37:06:e1:8d:ac:4a:55:6d:d1:ab:b8:44:3b:91:ab:b8: 10:cd:9e:7e:d8:ea:03:ea:3b:e1:34:1b:20:ee:de:6e:7d:d6: 54:b4:a9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC9HfS7jx89MxgoNEZkKv72iGBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEyMTkwMDA2MjZaFw0yNTEyMjIwNzU1MjZaMDMxMTAvBgNV BAMTKEY0MzQxREYzRDdDQUEyNURGREE5RkRBQzEyMDA2MDYzMUIwMDY5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsVNsyCEjmZ4gCpOqP6QYeqmz1 lgWCcrYKw5MDBZzsEgU7jqVBJl+PZMLmyMFGal9D0Fzc2uT1GywFmrhVX+YWjiss lEAHH2M6Qe9NMW3j+gI692TX0Te3KALfT3+VAKAxDGWluafWRgsgOo8b9iNulNtR PHkYN3D3aGRRGCVe2USbqbE+Baf8HuewQ6hoHNmO24/oBEo8pQOX1Thk2uACMQwA iLmh00S47jGt9YhmeWoXIx4F7OQ0kB5m3yRA6qBnE56H/rowRKmWGvFN9I1gjy1p hHDeCPx4x31/vMnVCJCTB504cirIdqqgvhu1Pmph9vOvKB5PBGCisWALTnv3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9DQd89fKol39qf2sEgBgYxsAacQwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYw2JthAltO0ZwoyaiEudsYHCpl2BIR7NMl GSVywHmpNuxCWvQQVzsYKSV9zmIVuh4gSor7lZSC3mJlEFeyymEBqzDSHBWFppL7 q6lxMpLSyckHPMwa4cne8Wlf3EfsgZj/oGUqFNlqmrsm784XhaimPH3f9WyKvcMv hEmwl8hnZGjlFtJs3bqJG37DNm7poYtQPQf3f8lfUUBj4rQYrG2RXo77DW/kP4dL pivixv7IfZxtOBYghHT2jH9smmIcsv2+EMD8rb5M2feifwQYR+/fNL/n/lCSWXSV NwbhjaxKVW3Rq7hEO5GruBDNnn7Y6gPqO+E0GyDu3m591lS0qTQ= -----END CERTIFICATE-----Generated at Mon Dec 22 00:54:34 2025 by rpki-client