This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: /7tr/54yCq9NupqFdQnGoSrTQB7C+gxYjcwVvgsb0/g= Subject key identifier: 76:CB:C2:77:6F:0B:C5:2C:A1:BB:8C:8B:86:F5:EC:30:D8:51:00:09 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 5BFB1CA2F1DF139C6D167D71120B78E30F400FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0472 Signing time: Sun 21 Dec 2025 08:01:25 +0000 Manifest this update: Sun 21 Dec 2025 07:56:25 +0000 Manifest next update: Wed 24 Dec 2025 11:18:25 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: RviEzRtekvOq7oSFZXX5BkODxqpiP4geTKCo17+CELU=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:1c:a2:f1:df:13:9c:6d:16:7d:71:12:0b:78:e3:0f:40:0f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Dec 21 07:56:25 2025 GMT Not After : Dec 24 11:18:25 2025 GMT Subject: CN=76CBC2776F0BC52CA1BB8C8B86F5EC30D8510009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3b:66:26:c1:a9:bf:f4:92:c0:be:56:15:d3: cb:f1:0f:69:70:94:3f:18:c1:c3:c0:75:19:f4:42: c8:23:94:63:b8:e9:0e:1b:59:3d:71:d3:9c:e5:23: ae:f7:b9:9c:e8:ed:34:dc:14:fe:ef:b1:3c:29:d6: 0d:9e:ae:16:72:d9:90:44:db:de:fe:ae:c4:d5:26: 96:2b:e9:bb:f0:4f:67:98:2b:5f:ad:fd:1c:61:a8: b6:f1:2d:ba:fd:a7:d5:92:6f:68:c1:c3:cc:17:6c: 8c:20:21:d8:64:dd:8d:5c:be:b8:24:01:78:5d:f5: 78:eb:5d:9b:5b:cf:29:82:ce:85:c3:23:60:5e:4c: ee:d1:34:03:7d:99:84:d9:bc:20:aa:26:31:5d:b5: 54:a6:fc:7d:24:a0:d0:27:c2:25:29:4b:47:63:22: 9f:b4:65:b5:24:ee:bb:c6:8c:bb:5f:30:08:20:1a: 01:b8:a7:49:27:ab:32:ae:c1:8a:29:ec:60:60:e0: 40:23:2e:fb:f1:f4:09:dd:39:16:cc:b1:74:7a:99: d4:b7:e2:a8:77:8f:49:e3:48:dd:72:63:cc:59:0b: 5f:d6:d2:a2:78:1a:4f:93:02:c0:02:12:6f:bb:f8: d1:84:e6:dc:31:23:4b:18:27:1b:f8:f5:17:d8:22: d4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CB:C2:77:6F:0B:C5:2C:A1:BB:8C:8B:86:F5:EC:30:D8:51:00:09 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ab:9c:54:4e:92:0d:4a:36:4d:18:f7:92:29:63:37:84:cb: 54:83:49:99:01:7a:ea:b0:fb:0b:b2:0b:b8:40:21:e6:3f:53: 33:60:c4:35:3f:49:fc:ff:cb:43:39:05:bc:2f:ce:7b:a5:ac: d5:b2:fc:94:5d:f3:b8:e8:0a:b7:d4:05:96:46:8a:a8:80:ac: 8b:25:54:43:06:e6:95:f0:48:90:bf:79:86:f0:58:c4:35:8f: 0e:f8:06:bf:83:f8:83:e8:02:d5:1b:63:f3:2f:8d:18:fc:85: 66:be:09:ac:64:c1:b6:a6:f2:a5:8f:ed:57:22:40:d4:cc:41: be:0a:25:27:d6:a7:4b:34:9e:c6:1f:0b:c3:e7:88:de:cc:78: 5b:d6:e0:ed:61:1f:99:bc:b7:9c:16:f5:40:e1:d2:3b:77:0d: 8a:e4:90:10:e1:2f:03:66:ea:0f:c0:ac:e2:86:d4:1c:a4:91: 88:44:17:98:34:e4:38:e1:58:6c:9a:9c:16:6f:66:bf:e1:ce: a2:70:f9:04:0b:8f:b2:9e:c9:38:9a:a4:f7:86:e8:19:f9:a7: ad:9f:9a:e0:d9:a8:80:a3:bc:a4:87:52:d1:b7:b8:39:e5:46: 60:4a:e8:3f:5f:60:bf:5d:50:52:f1:d5:d0:3b:0c:33:02:04: 63:39:a0:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/scovHfE5xtFn1xEgt44w9AD8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEyMjEwNzU2MjVaFw0yNTEyMjQxMTE4MjVaMDMxMTAvBgNV BAMTKDc2Q0JDMjc3NkYwQkM1MkNBMUJCOEM4Qjg2RjVFQzMwRDg1MTAwMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqO2Ymwam/9JLAvlYV08vxD2lw lD8YwcPAdRn0QsgjlGO46Q4bWT1x05zlI673uZzo7TTcFP7vsTwp1g2erhZy2ZBE 297+rsTVJpYr6bvwT2eYK1+t/RxhqLbxLbr9p9WSb2jBw8wXbIwgIdhk3Y1cvrgk AXhd9XjrXZtbzymCzoXDI2BeTO7RNAN9mYTZvCCqJjFdtVSm/H0koNAnwiUpS0dj Ip+0ZbUk7rvGjLtfMAggGgG4p0knqzKuwYop7GBg4EAjLvvx9AndORbMsXR6mdS3 4qh3j0njSN1yY8xZC1/W0qJ4Gk+TAsACEm+7+NGE5twxI0sYJxv49RfYItTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdsvCd28LxSyhu4yLhvXsMNhRAAkwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASrnFROkg1KNk0Y95IpYzeEy1SDSZkBeuqw +wuyC7hAIeY/UzNgxDU/Sfz/y0M5BbwvznulrNWy/JRd87joCrfUBZZGiqiArIsl VEMG5pXwSJC/eYbwWMQ1jw74Br+D+IPoAtUbY/MvjRj8hWa+Caxkwbam8qWP7Vci QNTMQb4KJSfWp0s0nsYfC8PniN7MeFvW4O1hH5m8t5wW9UDh0jt3DYrkkBDhLwNm 6g/ArOKG1BykkYhEF5g05DjhWGyanBZvZr/hzqJw+QQLj7KeyTiapPeG6Bn5p62f muDZqICjvKSHUtG3uDnlRmBK6D9fYL9dUFLx1dA7DDMCBGM5oLs= -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:44 2025 by rpki-client