This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: OmlW2/Iaib549xw8L+vLCLDj5xRU3wT1r46Sb4MTjw0= Subject key identifier: 1D:C0:75:F0:CB:C8:15:23:41:BE:F1:BF:B9:3C:A7:70:E8:9C:97:09 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 1E3726171448D70F5C5DFEE96CA69133872CD784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 03A1 Signing time: Mon 22 Dec 2025 22:02:30 +0000 Manifest this update: Mon 22 Dec 2025 21:57:30 +0000 Manifest next update: Thu 25 Dec 2025 23:04:30 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: wKfz7VTCX7iUNE3awqzltunkzUuxsdHql2HCofUpPHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:37:26:17:14:48:d7:0f:5c:5d:fe:e9:6c:a6:91:33:87:2c:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Dec 22 21:57:30 2025 GMT Not After : Dec 25 23:04:30 2025 GMT Subject: CN=1DC075F0CBC8152341BEF1BFB93CA770E89C9709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:a2:ce:3f:21:75:c3:94:98:68:8f:ed:fc: 7e:b7:52:3f:c4:85:2e:b4:1e:ab:93:17:e7:4e:8a: f6:77:3a:d5:07:9f:dc:c7:f7:2e:32:69:cf:db:3c: 69:c6:74:43:20:43:d0:95:4c:09:62:7a:5b:7f:d2: af:fd:df:e1:b8:46:4a:b0:41:86:db:f5:b9:b3:0f: 10:02:72:8e:af:f8:68:9d:76:08:f7:d7:8f:a8:3f: d6:dc:be:35:85:b6:66:35:6b:49:72:7f:5c:94:67: 8f:16:6c:91:4c:0c:fe:e8:9f:08:b0:7d:ce:c4:af: d9:a1:44:68:66:60:67:4a:52:4a:c1:47:6d:77:0b: da:a7:a6:82:51:95:ca:2d:9d:51:41:83:8e:4c:8c: 90:a9:c2:25:74:c2:8e:c1:d7:e1:54:b9:9b:2f:70: 95:ee:04:e9:79:d2:3e:74:5b:3f:fd:66:b2:0f:fb: c7:bf:31:7d:1d:00:63:fc:8c:bf:2a:d4:f3:7a:3d: 06:58:bb:cf:96:33:56:06:2e:29:33:06:4a:d4:09: e5:dc:9f:cd:03:f8:22:b6:00:c8:0c:bf:e4:35:be: 2e:47:72:f2:04:eb:6b:b7:c5:ed:cc:3f:26:a5:3a: 57:4d:34:9e:df:4d:4b:8e:77:da:21:75:d0:23:9f: 5e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:75:F0:CB:C8:15:23:41:BE:F1:BF:B9:3C:A7:70:E8:9C:97:09 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a1:47:8e:a2:18:75:92:65:bc:81:3e:e0:84:4f:4a:67:ab: ff:8b:be:46:3c:9d:0c:31:7e:6a:45:60:0a:51:94:1d:ef:b7: 6c:52:6c:ef:07:45:a6:34:14:4e:fd:04:54:ca:05:da:84:e2: b5:fc:3f:a0:f6:d1:c8:0e:a6:9e:e8:b4:17:48:62:64:dc:ab: 40:80:d3:f0:e4:db:dc:a5:d1:e6:fa:4e:91:bd:cf:4a:9a:0b: d0:00:86:a0:12:d4:3d:c2:74:4c:de:e6:8a:6b:ab:57:1e:3b: 95:17:fc:5a:ff:26:90:7c:60:58:be:88:77:01:83:09:47:80: c7:29:2e:7e:cb:7b:42:59:d6:23:be:f4:93:2a:20:2d:3c:d6: d5:95:ec:0b:31:df:8c:1f:41:3f:00:b6:84:8f:c1:80:5d:4c: 2d:ea:35:68:b2:e1:44:86:52:83:50:7b:d8:53:f3:17:ff:24: 6a:2f:5a:16:82:f8:7a:40:07:6e:d6:9f:58:22:8e:34:09:60: d9:36:77:ef:16:e5:87:aa:ab:64:25:f5:72:7f:d3:e3:7c:6d: a2:90:9e:ed:dd:50:ba:ec:84:ce:60:9a:51:03:f8:d8:07:82: 62:b1:ed:b2:4b:04:6c:07:d9:fa:23:ab:97:ac:32:bc:41:e6: fa:c2:cf:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHjcmFxRI1w9cXf7pbKaRM4cs14QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTEyMjIyMTU3MzBaFw0yNTEyMjUyMzA0MzBaMDMxMTAvBgNV BAMTKDFEQzA3NUYwQ0JDODE1MjM0MUJFRjFCRkI5M0NBNzcwRTg5Qzk3MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt6aLOPyF1w5SYaI/t/H63Uj/E hS60HquTF+dOivZ3OtUHn9zH9y4yac/bPGnGdEMgQ9CVTAlielt/0q/93+G4Rkqw QYbb9bmzDxACco6v+Giddgj314+oP9bcvjWFtmY1a0lyf1yUZ48WbJFMDP7onwiw fc7Er9mhRGhmYGdKUkrBR213C9qnpoJRlcotnVFBg45MjJCpwiV0wo7B1+FUuZsv cJXuBOl50j50Wz/9ZrIP+8e/MX0dAGP8jL8q1PN6PQZYu8+WM1YGLikzBkrUCeXc n80D+CK2AMgMv+Q1vi5HcvIE62u3xe3MPyalOldNNJ7fTUuOd9ohddAjn15rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHcB18MvIFSNBvvG/uTyncOiclwkwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6hR46iGHWSZbyBPuCET0pnq/+LvkY8nQwx fmpFYApRlB3vt2xSbO8HRaY0FE79BFTKBdqE4rX8P6D20cgOpp7otBdIYmTcq0CA 0/Dk29yl0eb6TpG9z0qaC9AAhqAS1D3CdEze5oprq1ceO5UX/Fr/JpB8YFi+iHcB gwlHgMcpLn7Le0JZ1iO+9JMqIC081tWV7Asx34wfQT8AtoSPwYBdTC3qNWiy4USG UoNQe9hT8xf/JGovWhaC+HpAB27Wn1gijjQJYNk2d+8W5Yeqq2Ql9XJ/0+N8baKQ nu3dULrshM5gmlED+NgHgmKx7bJLBGwH2fojq5esMrxB5vrCz2E= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:06 2025 by rpki-client