This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft File: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft (raw, json) Hash identifier: JiycidFb2CEduZ2a/RMY9Twqe25WO6MK27xe0EApAMU= Subject key identifier: 78:BD:9C:1E:18:05:43:1C:1C:F7:34:51:DC:5E:3E:7B:28:EC:FB:C2 Authority key identifier: A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D Certificate issuer: /CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Certificate serial: 5425E2AEEA227F76CAF796B5076BEACFC95C3B9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft Manifest number: 0531 Signing time: Mon 15 Dec 2025 22:51:34 +0000 Manifest this update: Mon 15 Dec 2025 22:46:34 +0000 Manifest next update: Fri 19 Dec 2025 08:37:34 +0000 Files and hashes: 1: A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl (hash: Lg4zY4K5rLPtM3sus9vBhzG+BKQoBwGtOt2Yk0F7AnI=) 2: 3230322e3133382e3232342e302f31392d3234203d3e2039363537.roa (hash: Go0CPlPcssjZzIiCTnTf40YOYb6lhMvP1qODXAMUZSM=) 3: 323430333a393530303a3a2f33322d3336203d3e2039363537.roa (hash: m9TQ4kbiWJ7wAU6DJc4l1m4yIYMItzDNgLT+tillKjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 08:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:25:e2:ae:ea:22:7f:76:ca:f7:96:b5:07:6b:ea:cf:c9:5c:3b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A79FD307C37E8C559F65A58EC9CE95BE266F8A6D Validity Not Before: Dec 15 22:46:34 2025 GMT Not After : Dec 19 08:37:34 2025 GMT Subject: CN=78BD9C1E1805431C1CF73451DC5E3E7B28ECFBC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c4:7b:b4:2a:d3:6d:ba:c8:ea:2f:44:82:5e: 82:bf:79:75:40:41:52:f3:b6:60:5b:1f:db:86:fb: 32:68:e4:ff:57:bd:46:4e:b8:21:a5:97:3b:b5:c8: 08:c1:32:69:f3:8b:b0:8e:51:f1:0b:f0:55:2f:37: d6:86:0d:68:3d:07:b6:bb:91:ef:2a:d1:c9:1a:30: 02:27:be:9e:5e:5c:1a:e8:31:14:d2:37:08:4d:0d: 32:c5:1a:e0:87:e0:12:9b:8f:5b:74:c4:dc:53:56: 24:83:f0:1b:14:9e:18:18:b7:73:bb:c7:1e:3e:bf: 1a:1d:0c:45:32:7a:5d:73:6c:b0:fd:6c:8d:88:98: d0:98:6a:a7:7c:2e:97:06:8e:48:57:41:5c:5e:d6: 09:f0:7f:7a:40:16:c8:2b:1e:a9:e4:39:fb:74:b2: e5:16:cf:0e:4b:79:3e:d6:21:6a:f4:90:b0:28:48: 8d:39:5b:27:71:e8:de:fa:c2:41:ea:28:91:0a:cd: d9:4f:1f:df:8d:68:8b:ad:47:57:f2:c6:a4:0b:6a: 7f:7e:b4:92:4f:93:98:4d:bb:d0:8b:56:2c:38:f3: cd:95:7a:01:a7:2c:f7:4f:dc:b7:1c:18:92:74:5f: 83:e3:3d:46:b6:b1:a5:f7:bd:15:2a:a5:e9:e4:be: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:9C:1E:18:05:43:1C:1C:F7:34:51:DC:5E:3E:7B:28:EC:FB:C2 X509v3 Authority Key Identifier: keyid:A7:9F:D3:07:C3:7E:8C:55:9F:65:A5:8E:C9:CE:95:BE:26:6F:8A:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8f6beb8-e4e8-4e39-8275-1c6d77c3eef8/0/A79FD307C37E8C559F65A58EC9CE95BE266F8A6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:ae:c3:54:c0:3f:63:62:75:36:d9:f8:67:c2:35:32:92: 53:4f:bd:8d:46:e4:2a:51:27:99:49:f0:89:87:bb:27:fd:f3: 5d:ad:4c:3b:80:bb:71:6a:c0:98:13:6a:7d:ed:42:12:d1:06: 75:c6:ed:4e:3a:36:6f:6c:aa:0a:4a:2f:80:aa:b2:55:c5:90: f9:45:fa:f4:b1:48:7b:de:dd:7c:9c:86:d6:72:8c:80:ef:8c: 1c:6c:9e:11:c8:6f:f0:2c:cc:f8:92:9c:d6:a5:af:d5:a8:8c: 6d:02:9d:7f:89:a4:d5:54:05:17:a8:f8:57:7f:a1:19:9c:26: 0b:5b:74:32:3e:2f:b2:96:01:4e:95:dc:8e:6a:6b:b6:2f:c0: b2:46:53:29:16:65:d3:93:5d:39:55:b4:fd:0d:ff:22:08:1f: 8a:14:f8:92:ae:ef:b0:71:4e:2b:98:60:ac:31:61:80:ab:2c: 81:20:2b:7f:8d:38:f7:1d:eb:42:bf:96:17:45:a8:ce:4f:59: 32:0e:18:16:86:6e:5d:a9:09:1c:e8:8e:1d:30:ef:b3:91:da: 26:9a:77:0a:9d:61:30:04:ab:66:af:bd:35:58:e8:ad:a7:18: f4:71:41:3a:f9:ac:9c:aa:be:6a:fc:9f:be:9c:f8:4a:96:15: bd:62:69:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCXiruoif3bK95a1B2vqz8lcO58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUy NjZGOEE2RDAeFw0yNTEyMTUyMjQ2MzRaFw0yNTEyMTkwODM3MzRaMDMxMTAvBgNV BAMTKDc4QkQ5QzFFMTgwNTQzMUMxQ0Y3MzQ1MURDNUUzRTdCMjhFQ0ZCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcxHu0KtNtusjqL0SCXoK/eXVA QVLztmBbH9uG+zJo5P9XvUZOuCGllzu1yAjBMmnzi7COUfEL8FUvN9aGDWg9B7a7 ke8q0ckaMAInvp5eXBroMRTSNwhNDTLFGuCH4BKbj1t0xNxTViSD8BsUnhgYt3O7 xx4+vxodDEUyel1zbLD9bI2ImNCYaqd8LpcGjkhXQVxe1gnwf3pAFsgrHqnkOft0 suUWzw5LeT7WIWr0kLAoSI05Wydx6N76wkHqKJEKzdlPH9+NaIutR1fyxqQLan9+ tJJPk5hNu9CLViw4882VegGnLPdP3LccGJJ0X4PjPUa2saX3vRUqpenkvnr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeL2cHhgFQxwc9zRR3F4+eyjs+8IwHwYDVR0j BBgwFoAUp5/TB8N+jFWfZaWOyc6VviZvim0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGY2YmViOC1lNGU4LTRlMzktODI3NS0xYzZkNzdjM2VlZjgvMC9BNzlGRDMwN0Mz N0U4QzU1OUY2NUE1OEVDOUNFOTVCRTI2NkY4QTZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1QkUyNjZG OEE2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhmNmJlYjgtZTRlOC00ZTM5LTgy NzUtMWM2ZDc3YzNlZWY4LzAvQTc5RkQzMDdDMzdFOEM1NTlGNjVBNThFQzlDRTk1 QkUyNjZGOEE2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW4rsNUwD9jYnU22fhnwjUyklNPvY1G5CpR J5lJ8ImHuyf9812tTDuAu3FqwJgTan3tQhLRBnXG7U46Nm9sqgpKL4CqslXFkPlF +vSxSHve3XychtZyjIDvjBxsnhHIb/AszPiSnNalr9WojG0CnX+JpNVUBReo+Fd/ oRmcJgtbdDI+L7KWAU6V3I5qa7YvwLJGUykWZdOTXTlVtP0N/yIIH4oU+JKu77Bx TiuYYKwxYYCrLIEgK3+NOPcd60K/lhdFqM5PWTIOGBaGbl2pCRzojh0w77OR2iaa dwqdYTAEq2avvTVY6K2nGPRxQTr5rJyqvmr8n76c+EqWFb1iac8= -----END CERTIFICATE-----Generated at Wed Dec 17 02:50:49 2025 by rpki-client