This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json) Hash identifier: r2hnmrwcKzWzNywbbrQuVr3DDtF1Mm5JrhNNRBsN2yo= Subject key identifier: 56:BF:64:E8:BD:F5:FF:4E:B8:FB:07:86:BA:55:8C:B9:EC:12:C3:1B Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419 Certificate serial: 067F83DA08AAE1FF0DBFA5D3423ED457D13F20E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft Manifest number: F7 Signing time: Fri 19 Dec 2025 04:32:54 +0000 Manifest this update: Fri 19 Dec 2025 04:27:54 +0000 Manifest next update: Mon 22 Dec 2025 13:15:54 +0000 Files and hashes: 1: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: TA8tKrIvDpNW60ud/lCnthH9BfLLxs++ocSNoyT/gr4=) 2: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:7f:83:da:08:aa:e1:ff:0d:bf:a5:d3:42:3e:d4:57:d1:3f:20:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419 Validity Not Before: Dec 19 04:27:54 2025 GMT Not After : Dec 22 13:15:54 2025 GMT Subject: CN=56BF64E8BDF5FF4EB8FB0786BA558CB9EC12C31B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:85:df:a3:e9:89:86:e1:5f:00:bc:65:27:71: ab:13:3e:af:ea:b3:ec:4e:d1:89:18:4b:08:2f:fd: 29:09:bf:17:e0:52:bb:e4:5c:0d:ff:8c:19:7a:98: 00:e3:53:4b:67:7e:6f:39:a7:64:55:b3:2b:d8:f8: 5c:d2:5a:14:d0:b3:af:77:4b:97:3a:1a:dc:6a:0f: 69:e5:22:7f:84:23:df:02:6c:f1:40:dd:90:d5:97: e9:bf:81:de:55:c1:7b:4a:21:75:bd:08:24:62:f7: d9:64:dd:67:84:51:ec:b8:c7:42:d2:41:9b:e2:26: fa:94:86:6f:b5:1e:a7:9d:47:06:33:36:ce:7d:59: 87:6a:c9:1d:73:ea:9b:4a:d0:8e:75:3e:3a:5b:56: ef:eb:dd:97:a4:f2:c9:78:0a:ca:26:c3:79:ce:f5: b4:a6:8d:79:22:b0:29:ad:e0:64:c2:22:d1:08:e9: 3d:ce:08:2a:42:da:ed:eb:c5:d9:5d:ee:a1:2a:78: 5c:ba:fc:e8:c5:e0:c0:56:d7:cc:d8:5c:af:91:81: 7c:7f:a2:55:a1:63:04:e6:b0:a6:ad:99:43:9c:3f: 3a:89:0d:18:2f:5c:a3:01:b4:7e:ae:6f:d0:fc:b6: c7:65:9f:ea:e5:c2:30:34:db:3a:97:10:69:8d:76: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BF:64:E8:BD:F5:FF:4E:B8:FB:07:86:BA:55:8C:B9:EC:12:C3:1B X509v3 Authority Key Identifier: keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:71:34:73:bd:ad:66:0a:db:66:c7:ed:3b:9a:0e:6a:98:af: c6:15:2d:ec:bc:a5:10:61:d2:ac:4b:93:44:93:bd:64:9d:03: 8b:b3:a2:c7:1d:9f:ce:37:dd:8d:59:4d:7d:49:1b:36:0b:59: f5:a3:b5:fc:91:75:db:22:f7:3b:59:a5:f7:06:96:08:aa:be: 55:e1:cf:e4:33:55:5e:97:ad:ad:22:f3:18:e7:79:27:6a:e5: 44:3c:87:62:d8:bd:6d:e2:c4:66:32:5a:6d:88:7f:ff:0b:28: c4:37:3c:2c:aa:e9:76:ce:80:83:02:a0:56:14:ea:0b:86:41: 82:48:ee:c1:01:cf:36:71:2e:43:4e:d8:19:8c:4a:60:a5:54: 56:3f:43:97:da:2c:24:2e:8c:78:e6:b7:95:51:c5:a2:4c:6b: f8:0b:a0:4b:33:b3:c5:33:45:fa:4e:33:ab:36:ca:92:82:67: 5a:73:77:bf:54:9e:a9:50:1d:17:81:47:19:2f:7c:16:71:9f: 12:05:ca:9d:da:c9:83:bf:1a:25:fd:c3:e6:bc:90:53:0c:df: 87:1d:b8:24:67:16:92:40:a3:9e:b8:9b:01:04:73:76:39:c2: d6:ff:7a:b6:8b:c4:72:1d:ea:fa:e4:de:a5:7d:64:ab:67:73: 67:b0:dd:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBn+D2giq4f8Nv6XTQj7UV9E/IOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz NzVEMDQxOTAeFw0yNTEyMTkwNDI3NTRaFw0yNTEyMjIxMzE1NTRaMDMxMTAvBgNV BAMTKDU2QkY2NEU4QkRGNUZGNEVCOEZCMDc4NkJBNTU4Q0I5RUMxMkMzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9hd+j6YmG4V8AvGUncasTPq/q s+xO0YkYSwgv/SkJvxfgUrvkXA3/jBl6mADjU0tnfm85p2RVsyvY+FzSWhTQs693 S5c6GtxqD2nlIn+EI98CbPFA3ZDVl+m/gd5VwXtKIXW9CCRi99lk3WeEUey4x0LS QZviJvqUhm+1HqedRwYzNs59WYdqyR1z6ptK0I51PjpbVu/r3Zek8sl4Csomw3nO 9bSmjXkisCmt4GTCItEI6T3OCCpC2u3rxdld7qEqeFy6/OjF4MBW18zYXK+RgXx/ olWhYwTmsKatmUOcPzqJDRgvXKMBtH6ub9D8tsdln+rlwjA02zqXEGmNdr/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVr9k6L31/064+weGulWMuewSwxswHwYDVR0j BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFxNHO9rWYK22bH7TuaDmqYr8YVLey8pRBh 0qxLk0STvWSdA4uzoscdn8433Y1ZTX1JGzYLWfWjtfyRddsi9ztZpfcGlgiqvlXh z+QzVV6Xra0i8xjneSdq5UQ8h2LYvW3ixGYyWm2If/8LKMQ3PCyq6XbOgIMCoFYU 6guGQYJI7sEBzzZxLkNO2BmMSmClVFY/Q5faLCQujHjmt5VRxaJMa/gLoEszs8Uz RfpOM6s2ypKCZ1pzd79UnqlQHReBRxkvfBZxnxIFyp3ayYO/GiX9w+a8kFMM34cd uCRnFpJAo564mwEEc3Y5wtb/eraLxHId6vrk3qV9ZKtnc2ew3VU= -----END CERTIFICATE-----Generated at Sun Dec 21 17:28:03 2025 by rpki-client