This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: c6gNi0n69kBTcpljbj4QmGjPP3h2Mx/Np2zPe4yBP94= Subject key identifier: CC:97:9D:3A:E6:19:FA:04:15:A5:CB:63:31:C8:30:99:83:5A:5D:D8 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 69D56F0A5973A690F999BE80016E575A09A6EEE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 024A Signing time: Wed 17 Dec 2025 19:11:14 +0000 Manifest this update: Wed 17 Dec 2025 19:06:14 +0000 Manifest next update: Sun 21 Dec 2025 02:14:14 +0000 Files and hashes: 1: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) 2: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: KYyD/EQsOVjFlWmX0IfbUTagYfmJw/GdTLjU2CWTZNk=) 3: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d5:6f:0a:59:73:a6:90:f9:99:be:80:01:6e:57:5a:09:a6:ee:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Dec 17 19:06:14 2025 GMT Not After : Dec 21 02:14:14 2025 GMT Subject: CN=CC979D3AE619FA0415A5CB6331C83099835A5DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bb:92:b4:28:2b:c3:28:ed:5a:a6:86:7b:3f: 84:3f:a5:2b:76:52:1b:85:38:91:d9:1c:61:90:e8: 0c:21:a4:59:6b:29:02:a5:bf:c3:2b:40:22:db:26: 64:e6:7f:f2:ac:f9:d0:e1:87:f4:0d:8a:a2:13:e4: 0d:85:ed:96:0a:46:c4:9e:5b:4e:bc:27:21:e5:f2: 79:cf:80:f7:8d:80:44:66:3a:7a:19:10:fd:1f:9e: 41:1f:f5:f6:7e:2a:ef:07:4a:03:4f:30:4e:ae:6c: 14:41:2b:13:76:2f:f5:79:ba:9f:2e:13:c7:25:31: 02:4c:db:c6:a1:c0:17:cc:ed:2e:da:c7:de:d4:2c: 21:0e:22:70:d3:d6:00:73:d3:a8:ab:75:1c:54:04: 6e:60:5e:a4:fb:34:1a:3a:ee:98:16:37:0c:0b:fb: bf:42:dc:48:4c:5a:77:6e:61:b8:8a:c5:96:4f:c2: 0e:17:76:fd:92:ea:5d:a2:d4:8f:ad:dd:46:30:07: c3:07:fd:8d:ea:4f:7d:8c:c0:13:85:72:ef:37:45: e1:b0:60:84:ad:b6:90:56:6d:56:6b:9e:2c:6a:10: be:ff:11:b6:e1:f6:85:59:36:3f:88:af:47:02:69: de:49:de:00:8a:c6:17:05:5d:42:89:f8:5d:e5:c7: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:97:9D:3A:E6:19:FA:04:15:A5:CB:63:31:C8:30:99:83:5A:5D:D8 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:72:fe:5c:14:2c:8f:24:5e:41:48:18:c0:54:33:cc:e0:df: b0:5c:56:1d:c9:50:fb:f1:2e:5a:7c:4d:ef:90:45:a0:89:33: f1:6d:cc:f3:39:1d:31:9c:1a:e5:ac:ab:ef:a7:7b:9b:02:11: bb:4e:fc:32:48:08:ee:fd:9e:c7:67:4b:a0:2f:68:be:f4:a9: f4:39:7c:4b:34:6f:ee:06:2c:36:f6:6d:37:11:30:c4:f8:fc: 99:46:c4:bc:68:27:34:cc:ea:61:27:ab:38:d3:8f:f8:a6:37: 86:0a:ff:e6:9d:0f:39:da:69:ec:e8:7f:f0:26:60:95:de:d9: 44:8d:89:69:ed:68:95:59:f3:22:21:6e:c2:ff:63:41:c7:9c: 4b:87:97:0c:55:3c:45:46:fb:22:0e:a1:5a:bd:e5:ec:1a:b9: 45:b6:1a:ea:a0:65:fa:28:dd:48:f4:ee:2c:a6:d3:74:61:52: ad:b4:fe:88:6f:90:e1:64:8f:fa:64:26:fb:97:c8:33:71:4c: de:a2:ee:d0:df:ba:19:be:d7:d5:82:58:6b:cc:70:07:07:31: b3:fc:bb:26:ce:5f:82:9e:98:1f:03:ba:25:e2:92:8b:bc:d7: 0a:b3:8f:12:76:a0:e6:7d:75:f7:11:ff:09:3a:3a:22:1a:6e: 91:af:85:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadVvCllzppD5mb6AAW5XWgmm7uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTEyMTcxOTA2MTRaFw0yNTEyMjEwMjE0MTRaMDMxMTAvBgNV BAMTKENDOTc5RDNBRTYxOUZBMDQxNUE1Q0I2MzMxQzgzMDk5ODM1QTVERDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvu5K0KCvDKO1apoZ7P4Q/pSt2 UhuFOJHZHGGQ6AwhpFlrKQKlv8MrQCLbJmTmf/Ks+dDhh/QNiqIT5A2F7ZYKRsSe W068JyHl8nnPgPeNgERmOnoZEP0fnkEf9fZ+Ku8HSgNPME6ubBRBKxN2L/V5up8u E8clMQJM28ahwBfM7S7ax97ULCEOInDT1gBz06irdRxUBG5gXqT7NBo67pgWNwwL +79C3EhMWnduYbiKxZZPwg4Xdv2S6l2i1I+t3UYwB8MH/Y3qT32MwBOFcu83ReGw YISttpBWbVZrnixqEL7/Ebbh9oVZNj+Ir0cCad5J3gCKxhcFXUKJ+F3lx185AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJedOuYZ+gQVpctjMcgwmYNaXdgwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANVy/lwULI8kXkFIGMBUM8zg37BcVh3JUPvx Llp8Te+QRaCJM/FtzPM5HTGcGuWsq++ne5sCEbtO/DJICO79nsdnS6AvaL70qfQ5 fEs0b+4GLDb2bTcRMMT4/JlGxLxoJzTM6mEnqzjTj/imN4YK/+adDznaaezof/Am YJXe2USNiWntaJVZ8yIhbsL/Y0HHnEuHlwxVPEVG+yIOoVq95ewauUW2GuqgZfoo 3Uj07iym03RhUq20/ohvkOFkj/pkJvuXyDNxTN6i7tDfuhm+19WCWGvMcAcHMbP8 uybOX4KemB8DuiXikou81wqzjxJ2oOZ9dfcR/wk6OiIabpGvhRQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:50 2025 by rpki-client