This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft File: 78578588503A7F091F1D7CD7B16BDC9E55055889.mft (raw, json) Hash identifier: zBHRBXmR8ZJFcGIdUq2fTSdvUOKs3n/HtZWNQsz2Kxw= Subject key identifier: 9F:AA:08:0B:2B:77:F4:F6:CE:72:0D:0C:54:C2:02:B1:F7:4C:92:53 Authority key identifier: 78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 Certificate issuer: /CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Certificate serial: 5857A68AA303F0988C75074F5BDF96996DA571B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft Manifest number: 0156 Signing time: Tue 23 Dec 2025 09:22:29 +0000 Manifest this update: Tue 23 Dec 2025 09:17:29 +0000 Manifest next update: Fri 26 Dec 2025 12:31:29 +0000 Files and hashes: 1: 78578588503A7F091F1D7CD7B16BDC9E55055889.crl (hash: TYElfTli6o//vUNoq+nT6wkSqcjJYeO9jNODlIUDeBo=) 2: 323030313a6466353a333930303a3a2f34382d3438203d3e203138333531.roa (hash: EBR+p3PkcTAiMYCAgv6PbSayq0bFAGHJD99zgOmEdFk=) 3: 3130332e3131352e3232382e302f32322d3234203d3e203138333531.roa (hash: nvXxgMVYVQTfNR+4bpW+Ps8HHDED8r4qVZcdX5Y3BiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:57:a6:8a:a3:03:f0:98:8c:75:07:4f:5b:df:96:99:6d:a5:71:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78578588503A7F091F1D7CD7B16BDC9E55055889 Validity Not Before: Dec 23 09:17:29 2025 GMT Not After : Dec 26 12:31:29 2025 GMT Subject: CN=9FAA080B2B77F4F6CE720D0C54C202B1F74C9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:2f:40:3b:29:31:49:0c:8a:8f:e3:53:03: 70:30:60:46:5d:ea:e6:c2:24:23:e8:83:e7:8e:87: 01:0e:3d:88:73:59:61:65:ce:8d:0f:3c:6c:c3:17: 44:72:dc:b2:17:c1:01:79:ee:4a:fa:4a:1d:06:e6: d0:b2:5e:b1:1e:fd:70:f3:41:2f:8e:29:4c:18:65: 6e:25:b7:23:a2:60:99:da:9c:3d:f2:39:c5:65:50: 35:0e:82:bf:87:95:c9:ae:8f:4c:31:76:41:c0:6d: 9c:f8:de:02:4d:98:66:cf:da:10:31:c1:a3:00:0b: 19:d9:eb:6a:06:64:e5:93:52:65:38:40:2a:e2:b5: 58:95:c3:60:65:e2:a4:85:99:b8:9a:16:5b:93:b1: cf:2e:87:05:35:f0:e8:66:21:c4:27:80:ba:8e:fc: f5:7c:ae:7a:dc:eb:6c:af:49:fa:8f:7c:0c:45:7f: 6a:92:61:20:c4:c7:6d:91:fa:a5:22:e4:58:17:6b: 58:dd:5c:12:75:4f:ea:a7:18:19:18:ed:be:7f:13: 0f:d6:7f:6a:ba:43:25:f2:e8:c3:1e:56:e2:b0:09: 7d:2d:b4:9a:a2:af:d9:88:98:8a:fc:bd:bf:fd:ef: 33:1e:58:a9:4e:f9:8c:3e:63:7f:20:9b:87:5b:6e: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:08:0B:2B:77:F4:F6:CE:72:0D:0C:54:C2:02:B1:F7:4C:92:53 X509v3 Authority Key Identifier: keyid:78:57:85:88:50:3A:7F:09:1F:1D:7C:D7:B1:6B:DC:9E:55:05:58:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/78578588503A7F091F1D7CD7B16BDC9E55055889.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e4ca54-857b-4f68-ab5f-0d8c472e6c92/0/78578588503A7F091F1D7CD7B16BDC9E55055889.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:76:96:28:cb:a9:a6:98:71:23:ff:f8:e2:bd:dd:07:a6: 89:5b:bf:79:24:d6:ab:17:a6:ba:8c:c9:60:ee:67:4c:61:36: 34:a1:64:2e:65:9d:ab:d5:c9:b1:92:52:01:73:50:df:1c:a4: c1:cc:7a:f6:13:97:10:52:3c:53:89:b7:f6:da:e6:2b:44:34: a0:3c:d9:50:4a:a5:a5:67:50:2e:37:98:74:7f:0d:de:21:5a: b4:0a:43:93:15:10:08:1f:5d:f7:25:40:41:fe:36:4a:69:93: f5:95:73:62:44:c3:64:9c:8f:f1:37:00:6a:6b:ac:e2:92:41: 10:dc:d8:ea:df:aa:cf:15:39:c0:65:9c:36:65:cb:a3:e8:a6: bc:4f:a0:4c:c2:e4:55:af:9d:35:8f:56:15:47:05:25:37:06: 49:6e:a3:7e:54:fd:c2:39:46:97:43:13:ee:28:a0:cf:9f:6f: dc:3b:4b:c7:2f:b0:26:a6:b0:08:d9:31:36:0c:5d:15:a3:ed: 22:49:c6:da:e2:d6:9a:4c:2e:97:2f:86:21:11:bb:a9:15:93: 37:6e:be:f2:24:c8:f9:99:c6:02:30:bb:37:1f:75:18:52:c5: b1:73:ca:39:e1:11:e2:4a:c9:db:9d:e6:a5:d3:55:47:5a:d3: 11:7e:94:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFemiqMD8JiMdQdPW9+WmW2lcbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1 NTA1NTg4OTAeFw0yNTEyMjMwOTE3MjlaFw0yNTEyMjYxMjMxMjlaMDMxMTAvBgNV BAMTKDlGQUEwODBCMkI3N0Y0RjZDRTcyMEQwQzU0QzIwMkIxRjc0QzkyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJMC9AOykxSQyKj+NTA3AwYEZd 6ubCJCPog+eOhwEOPYhzWWFlzo0PPGzDF0Ry3LIXwQF57kr6Sh0G5tCyXrEe/XDz QS+OKUwYZW4ltyOiYJnanD3yOcVlUDUOgr+Hlcmuj0wxdkHAbZz43gJNmGbP2hAx waMACxnZ62oGZOWTUmU4QCritViVw2Bl4qSFmbiaFluTsc8uhwU18OhmIcQngLqO /PV8rnrc62yvSfqPfAxFf2qSYSDEx22R+qUi5FgXa1jdXBJ1T+qnGBkY7b5/Ew/W f2q6QyXy6MMeVuKwCX0ttJqir9mImIr8vb/97zMeWKlO+Yw+Y38gm4dbbnuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn6oICyt39PbOcg0MVMICsfdMklMwHwYDVR0j BBgwFoAUeFeFiFA6fwkfHXzXsWvcnlUFWIkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGU0Y2E1NC04NTdiLTRmNjgtYWI1Zi0wZDhjNDcyZTZjOTIvMC83ODU3ODU4ODUw M0E3RjA5MUYxRDdDRDdCMTZCREM5RTU1MDU1ODg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRDOUU1NTA1 NTg4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlNGNhNTQtODU3Yi00ZjY4LWFi NWYtMGQ4YzQ3MmU2YzkyLzAvNzg1Nzg1ODg1MDNBN0YwOTFGMUQ3Q0Q3QjE2QkRD OUU1NTA1NTg4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlRdpYoy6mmmHEj//jivd0Hpolbv3kk1qsX prqMyWDuZ0xhNjShZC5lnavVybGSUgFzUN8cpMHMevYTlxBSPFOJt/ba5itENKA8 2VBKpaVnUC43mHR/Dd4hWrQKQ5MVEAgfXfclQEH+Nkppk/WVc2JEw2Scj/E3AGpr rOKSQRDc2Orfqs8VOcBlnDZly6PoprxPoEzC5FWvnTWPVhVHBSU3Bkluo35U/cI5 RpdDE+4ooM+fb9w7S8cvsCamsAjZMTYMXRWj7SJJxtri1ppMLpcvhiERu6kVkzdu vvIkyPmZxgIwuzcfdRhSxbFzyjnhEeJKydud5qXTVUda0xF+lKM= -----END CERTIFICATE-----Generated at Wed Dec 24 20:01:50 2025 by rpki-client