This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
File:                     789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json)
Hash identifier:          DKysugZlqPwe6XTjHVC+lOpQuwrNwVWGyE2sAHqJB/I=
Subject key identifier:   F4:34:1D:F3:D7:CA:A2:5D:FD:A9:FD:AC:12:00:60:63:1B:00:69:C4
Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED
Certificate issuer:       /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
Certificate serial:       742F477D2EE3C7CF4CC60A0D11990ABFBDA21812
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
Manifest number:          0471
Signing time:             Fri 19 Dec 2025 00:11:26 +0000
Manifest this update:     Fri 19 Dec 2025 00:06:26 +0000
Manifest next update:     Mon 22 Dec 2025 07:55:26 +0000
Files and hashes:         1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: QAiElLgtc4SLDlszFSD9S19qUpKcUql9v7qvOnfFiWU=)
                          2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl
                          rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 07:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2f:47:7d:2e:e3:c7:cf:4c:c6:0a:0d:11:99:0a:bf:bd:a2:18:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED
        Validity
            Not Before: Dec 19 00:06:26 2025 GMT
            Not After : Dec 22 07:55:26 2025 GMT
        Subject: CN=F4341DF3D7CAA25DFDA9FDAC120060631B0069C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:54:db:32:08:48:e6:67:88:02:a4:ea:8f:e9:
                    06:1e:aa:6c:f5:96:05:82:72:b6:0a:c3:93:03:05:
                    9c:ec:12:05:3b:8e:a5:41:26:5f:8f:64:c2:e6:c8:
                    c1:46:6a:5f:43:d0:5c:dc:da:e4:f5:1b:2c:05:9a:
                    b8:55:5f:e6:16:8e:2b:2c:94:40:07:1f:63:3a:41:
                    ef:4d:31:6d:e3:fa:02:3a:f7:64:d7:d1:37:b7:28:
                    02:df:4f:7f:95:00:a0:31:0c:65:a5:b9:a7:d6:46:
                    0b:20:3a:8f:1b:f6:23:6e:94:db:51:3c:79:18:37:
                    70:f7:68:64:51:18:25:5e:d9:44:9b:a9:b1:3e:05:
                    a7:fc:1e:e7:b0:43:a8:68:1c:d9:8e:db:8f:e8:04:
                    4a:3c:a5:03:97:d5:38:64:da:e0:02:31:0c:00:88:
                    b9:a1:d3:44:b8:ee:31:ad:f5:88:66:79:6a:17:23:
                    1e:05:ec:e4:34:90:1e:66:df:24:40:ea:a0:67:13:
                    9e:87:fe:ba:30:44:a9:96:1a:f1:4d:f4:8d:60:8f:
                    2d:69:84:70:de:08:fc:78:c7:7d:7f:bc:c9:d5:08:
                    90:93:07:9d:38:72:2a:c8:76:aa:a0:be:1b:b5:3e:
                    6a:61:f6:f3:af:28:1e:4f:04:60:a2:b1:60:0b:4e:
                    7b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:1D:F3:D7:CA:A2:5D:FD:A9:FD:AC:12:00:60:63:1B:00:69:C4
            X509v3 Authority Key Identifier:
                keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:30:d8:9b:61:02:5b:4e:d1:9c:28:c9:a8:84:b9:db:18:1c:
         2a:65:d8:12:11:ec:d3:25:19:25:72:c0:79:a9:36:ec:42:5a:
         f4:10:57:3b:18:29:25:7d:ce:62:15:ba:1e:20:4a:8a:fb:95:
         94:82:de:62:65:10:57:b2:ca:61:01:ab:30:d2:1c:15:85:a6:
         92:fb:ab:a9:71:32:92:d2:c9:c9:07:3c:cc:1a:e1:c9:de:f1:
         69:5f:dc:47:ec:81:98:ff:a0:65:2a:14:d9:6a:9a:bb:26:ef:
         ce:17:85:a8:a6:3c:7d:df:f5:6c:8a:bd:c3:2f:84:49:b0:97:
         c8:67:64:68:e5:16:d2:6c:dd:ba:89:1b:7e:c3:36:6e:e9:a1:
         8b:50:3d:07:f7:7f:c9:5f:51:40:63:e2:b4:18:ac:6d:91:5e:
         8e:fb:0d:6f:e4:3f:87:4b:a6:2b:e2:c6:fe:c8:7d:9c:6d:38:
         16:20:84:74:f6:8c:7f:6c:9a:62:1c:b2:fd:be:10:c0:fc:ad:
         be:4c:d9:f7:a2:7f:04:18:47:ef:df:34:bf:e7:fe:50:92:59:
         74:95:37:06:e1:8d:ac:4a:55:6d:d1:ab:b8:44:3b:91:ab:b8:
         10:cd:9e:7e:d8:ea:03:ea:3b:e1:34:1b:20:ee:de:6e:7d:d6:
         54:b4:a9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:54:34 2025 by rpki-client