This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: e80KaMIqkOcvD/+MZ4dqdeGWsFQ4V8U6zvIhsMLZADA= Subject key identifier: 62:07:6E:91:EA:BC:59:52:A0:46:07:22:DB:A5:F5:8D:0B:AB:C0:8F Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 396B29B945BDC719463CB98595E4E6B6621D608B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0153 Signing time: Thu 04 Dec 2025 23:22:13 +0000 Manifest this update: Thu 04 Dec 2025 23:17:13 +0000 Manifest next update: Mon 08 Dec 2025 09:40:13 +0000 Files and hashes: 1: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: TnqtCPjePGsn6B/ASuQmwOqfFKkjJupyiw7ri/Rk/Ms=) 2: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: gvo9V/vnXO5MlNpk1yPiU+0sBfoU6SAVYrLdM0QnX0Q=) 4: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:6b:29:b9:45:bd:c7:19:46:3c:b9:85:95:e4:e6:b6:62:1d:60:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Dec 4 23:17:13 2025 GMT Not After : Dec 8 09:40:13 2025 GMT Subject: CN=62076E91EABC5952A0460722DBA5F58D0BABC08F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:6f:32:dc:0b:54:c4:e1:ff:af:60:68:24: 6a:cc:0e:39:48:cd:3c:c4:55:a8:fc:ef:fe:3b:54: b1:f6:4a:9e:47:fd:f8:22:1d:b2:89:87:ad:15:96: ee:e4:8a:6c:56:8d:f8:b2:78:e2:1d:60:ac:a6:51: d7:98:b2:f0:b2:69:59:63:54:0c:de:27:e4:b9:9c: 57:b9:e9:d0:ec:8d:51:86:d4:93:e0:55:15:4f:07: 3d:fa:f4:f5:bd:9a:5c:22:ac:8a:3d:7d:d4:25:88: bb:e2:9d:d7:00:22:7a:2d:c0:2e:df:21:de:53:21: 6c:fe:60:4c:8f:90:d9:ba:57:77:a6:c6:b1:22:f5: 25:dd:a3:1e:08:b0:98:bc:e7:34:14:aa:83:ad:35: ac:f0:12:a1:41:ca:a5:a4:79:bc:73:34:89:d3:5b: 5e:01:a6:96:7c:cb:09:87:5a:b5:1b:09:ed:40:cc: d6:5e:d4:36:4a:74:a4:15:2b:a0:6b:f0:69:87:00: 2c:05:83:33:54:9b:59:1c:9c:00:b7:09:c6:43:82: cf:d6:44:b1:34:aa:3e:cd:59:81:f6:72:77:9d:4d: a0:0b:32:2f:d9:39:ff:0d:3f:d4:5f:c1:e9:55:0d: 99:4b:c3:4f:90:fe:ef:f1:17:a5:48:be:9a:fa:73: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:6E:91:EA:BC:59:52:A0:46:07:22:DB:A5:F5:8D:0B:AB:C0:8F X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f1:a4:e7:33:8e:3d:aa:95:c4:6a:80:4e:eb:94:51:b9:74: f3:ea:3a:cf:3e:6c:54:54:2c:c4:71:8c:db:dc:0a:9a:24:d7: cf:b5:c8:fa:23:f8:16:55:49:4a:5d:16:28:3e:53:21:5f:1a: 39:84:52:21:88:5b:4a:91:94:95:f1:ea:4b:aa:98:79:ea:e7: ca:37:f4:6d:67:7b:52:d7:2a:14:4f:42:1c:74:81:c6:81:87: c6:f1:cc:6a:de:53:34:7f:c3:13:cd:3c:ba:8b:43:2b:32:be: f1:7a:b4:75:33:bd:a3:98:15:43:97:1e:fd:d7:09:68:e5:b5: 2d:3d:8e:dd:84:2b:68:f9:9f:dc:50:f6:09:a5:c7:23:66:93: 7c:17:67:95:fd:6f:33:98:66:8b:46:c4:f2:29:4e:32:aa:52: 30:28:58:6c:43:0a:17:5d:29:c0:0e:7c:9f:3e:dc:61:c9:a6: 72:a0:85:41:7a:16:bc:c5:28:f3:75:25:c7:4c:9d:55:87:93: ea:f8:73:4e:bb:f8:55:d3:b3:8a:03:6e:35:d9:5e:8d:be:43: 91:c2:cf:81:a3:c8:66:82:35:93:2a:54:12:4d:4b:47:8d:42: 11:dd:ff:ba:d6:82:07:38:b6:ad:44:fc:9b:9f:9d:ba:36:ad: 78:77:b8:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOWspuUW9xxlGPLmFleTmtmIdYIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTEyMDQyMzE3MTNaFw0yNTEyMDgwOTQwMTNaMDMxMTAvBgNV BAMTKDYyMDc2RTkxRUFCQzU5NTJBMDQ2MDcyMkRCQTVGNThEMEJBQkMwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5bG8y3AtUxOH/r2BoJGrMDjlI zTzEVaj87/47VLH2Sp5H/fgiHbKJh60Vlu7kimxWjfiyeOIdYKymUdeYsvCyaVlj VAzeJ+S5nFe56dDsjVGG1JPgVRVPBz369PW9mlwirIo9fdQliLvindcAInotwC7f Id5TIWz+YEyPkNm6V3emxrEi9SXdox4IsJi85zQUqoOtNazwEqFByqWkebxzNInT W14BppZ8ywmHWrUbCe1AzNZe1DZKdKQVK6Br8GmHACwFgzNUm1kcnAC3CcZDgs/W RLE0qj7NWYH2cnedTaALMi/ZOf8NP9RfwelVDZlLw0+Q/u/xF6VIvpr6c9Y9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYgdukeq8WVKgRgci26X1jQurwI8wHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXxpOczjj2qlcRqgE7rlFG5dPPqOs8+bFRU LMRxjNvcCpok18+1yPoj+BZVSUpdFig+UyFfGjmEUiGIW0qRlJXx6kuqmHnq58o3 9G1ne1LXKhRPQhx0gcaBh8bxzGreUzR/wxPNPLqLQysyvvF6tHUzvaOYFUOXHv3X CWjltS09jt2EK2j5n9xQ9gmlxyNmk3wXZ5X9bzOYZotGxPIpTjKqUjAoWGxDChdd KcAOfJ8+3GHJpnKghUF6FrzFKPN1JcdMnVWHk+r4c067+FXTs4oDbjXZXo2+Q5HC z4GjyGaCNZMqVBJNS0eNQhHd/7rWggc4tq1E/Jufnbo2rXh3uE0= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:15 2025 by rpki-client