This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: Dl0DLhzEUi85nug/epBOPrCOofDTNIX3lNhz5qmpZxg= Subject key identifier: 39:43:35:D0:FD:DE:7B:9E:39:02:36:B3:DA:89:D7:FE:58:32:81:7A Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 424397C1E47EBB94FFA5D6126C3FC953F361F61E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 046B Signing time: Fri 05 Dec 2025 09:31:22 +0000 Manifest this update: Fri 05 Dec 2025 09:26:22 +0000 Manifest next update: Mon 08 Dec 2025 19:05:22 +0000 Files and hashes: 1: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: R4z57h6tjINTikv+3i5tc+exlffciQXDFFY31/UjxZA=) 2: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:43:97:c1:e4:7e:bb:94:ff:a5:d6:12:6c:3f:c9:53:f3:61:f6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Dec 5 09:26:22 2025 GMT Not After : Dec 8 19:05:22 2025 GMT Subject: CN=394335D0FDDE7B9E390236B3DA89D7FE5832817A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:07:70:c6:78:28:9b:82:63:a0:57:19:12: 28:63:55:6c:6a:57:b2:96:32:75:7c:5b:45:35:9a: 54:c4:1b:45:2f:37:47:f4:49:b8:c4:b2:6e:fc:19: 09:0b:8a:35:d1:bf:4c:8f:f6:1b:eb:4e:39:29:e4: e7:90:72:1a:dc:8c:8a:67:a3:8b:6a:3f:5f:ce:74: 50:f2:45:7d:b7:e3:7a:ba:03:bd:e3:0d:35:93:ca: dd:42:33:67:60:23:b1:d7:d4:39:73:64:40:5b:36: b6:45:7b:96:09:b1:a4:08:63:23:54:78:88:9c:e2: 3d:5e:ee:86:31:09:bc:e2:82:2a:a0:06:6b:94:39: 10:94:af:0b:da:f1:1c:78:16:69:c3:37:1f:1e:43: 66:74:0e:57:84:92:5a:06:63:94:c0:66:06:ca:ab: bd:ee:0e:67:43:f0:9f:89:b3:f8:a0:fa:31:55:96: c4:1e:0d:e5:ec:71:10:11:56:27:d9:11:7a:8f:d5: 46:22:c9:72:3a:d6:bd:6d:9d:5a:c6:94:83:45:fd: d9:c7:6b:65:ac:dc:eb:7f:8e:4b:63:5a:f3:ca:4c: 1b:b6:c0:ee:25:06:b4:30:4c:45:b7:da:f1:0b:57: e5:e7:7e:cf:d3:b2:a2:60:6e:08:3f:68:58:e3:c0: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:35:D0:FD:DE:7B:9E:39:02:36:B3:DA:89:D7:FE:58:32:81:7A X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b0:a7:a0:c6:49:e9:ad:22:06:5b:e5:d9:dd:7f:e2:6c:ca: 8e:c4:aa:3d:db:db:65:40:b8:11:f5:4c:34:27:ab:fd:96:e6: 01:1e:f8:10:40:03:e5:fc:14:25:74:be:cf:64:e6:82:b2:94: da:69:ad:70:0d:f8:38:ad:61:0b:ed:8f:f9:0a:a4:f4:2c:1d: 7c:f7:66:36:c1:08:99:1d:ec:f8:84:15:98:05:4d:b9:f4:9b: c1:e8:c2:70:2d:41:16:bb:6b:ea:ca:63:92:84:3b:98:83:7a: 4e:00:21:c6:47:10:4f:2e:f4:b2:78:b2:d1:4e:c0:51:6c:cc: 96:d0:77:f6:5e:67:cf:bf:a4:8c:6a:25:ce:33:c6:2e:a9:83: 3e:55:cb:05:df:a7:2e:f0:a5:1f:ae:64:d8:89:7f:de:cf:4d: d4:4e:3e:1f:96:89:33:82:92:66:13:9f:9b:42:86:93:4a:34: 42:8f:dd:93:28:83:d6:ad:8f:c4:2c:d6:bb:7b:3c:27:b0:6b: a4:c6:e0:63:b6:88:14:62:3c:f3:6d:04:02:ec:b8:ed:a9:30: ce:27:10:3b:6c:51:28:3e:ce:e4:6f:c0:05:7c:e9:0a:68:19: 4a:1f:a7:89:2b:18:ef:3b:81:80:65:8a:d6:23:35:09:8f:24: c2:cf:e0:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkOXweR+u5T/pdYSbD/JU/Nh9h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEyMDUwOTI2MjJaFw0yNTEyMDgxOTA1MjJaMDMxMTAvBgNV BAMTKDM5NDMzNUQwRkRERTdCOUUzOTAyMzZCM0RBODlEN0ZFNTgzMjgxN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVggdwxngom4JjoFcZEihjVWxq V7KWMnV8W0U1mlTEG0UvN0f0SbjEsm78GQkLijXRv0yP9hvrTjkp5OeQchrcjIpn o4tqP1/OdFDyRX2343q6A73jDTWTyt1CM2dgI7HX1DlzZEBbNrZFe5YJsaQIYyNU eIic4j1e7oYxCbzigiqgBmuUORCUrwva8Rx4FmnDNx8eQ2Z0DleEkloGY5TAZgbK q73uDmdD8J+Js/ig+jFVlsQeDeXscRARVifZEXqP1UYiyXI61r1tnVrGlINF/dnH a2Ws3Ot/jktjWvPKTBu2wO4lBrQwTEW32vELV+Xnfs/TsqJgbgg/aFjjwErFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOUM10P3ee545Ajaz2onX/lgygXowHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKawp6DGSemtIgZb5dndf+Jsyo7Eqj3b22VA uBH1TDQnq/2W5gEe+BBAA+X8FCV0vs9k5oKylNpprXAN+DitYQvtj/kKpPQsHXz3 ZjbBCJkd7PiEFZgFTbn0m8HownAtQRa7a+rKY5KEO5iDek4AIcZHEE8u9LJ4stFO wFFszJbQd/ZeZ8+/pIxqJc4zxi6pgz5VywXfpy7wpR+uZNiJf97PTdROPh+WiTOC kmYTn5tChpNKNEKP3ZMog9atj8Qs1rt7PCewa6TG4GO2iBRiPPNtBALsuO2pMM4n EDtsUSg+zuRvwAV86QpoGUofp4krGO87gYBlitYjNQmPJMLP4No= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:35 2025 by rpki-client