This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: tcDWlGV5MbA9rAJNpQrgYAxMWMcdSqkRQgHAFrTWhds= Subject key identifier: 8D:D2:9F:9C:71:36:AE:3A:42:F4:63:54:03:85:A1:8F:AD:93:46:2A Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 635303FCF7FA31936738B428441834113B68D044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 0470 Signing time: Tue 16 Dec 2025 15:21:23 +0000 Manifest this update: Tue 16 Dec 2025 15:16:23 +0000 Manifest next update: Sat 20 Dec 2025 00:02:23 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: H+OMeBcSRUv4wI7bbFL/Sy/sD9fqgdCXQY+4kvxFX/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 00:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:53:03:fc:f7:fa:31:93:67:38:b4:28:44:18:34:11:3b:68:d0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Dec 16 15:16:23 2025 GMT Not After : Dec 20 00:02:23 2025 GMT Subject: CN=8DD29F9C7136AE3A42F463540385A18FAD93462A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:7a:74:8f:e9:72:84:22:91:82:5b:bb:1d: a9:99:81:e9:05:ec:0c:bd:ca:4d:ab:aa:0c:4a:e1: 79:a9:3e:e0:58:29:df:0a:39:7e:3f:d9:a5:fc:a0: 64:5b:ed:f2:26:a4:e2:a3:15:5d:53:ed:f4:b8:43: 7b:c8:60:a3:ec:af:d5:c3:0c:dc:7c:22:a6:61:f6: 54:63:b1:bc:ff:18:49:f2:8d:8b:35:b2:e8:86:42: 0e:a0:47:3f:81:8d:69:5b:47:54:e7:b7:4f:39:cf: 11:d4:f2:39:41:8e:72:8b:94:92:78:6c:64:90:8a: d5:b2:41:d1:9c:10:c9:a8:d9:12:fd:bc:21:34:4f: ae:b6:e3:f1:48:70:64:48:87:51:d7:2a:c3:b3:52: 38:5a:b3:36:f1:84:6e:17:16:3d:51:6a:70:dd:11: a0:11:ec:8d:be:90:bc:67:be:89:06:ef:1c:19:1f: fe:b8:4b:49:6c:77:4c:14:b9:0f:e9:58:f7:4b:1d: 2a:3f:7d:8c:28:0c:ca:36:e4:89:e2:38:aa:7b:c5: 7a:cf:ca:19:c5:0d:ac:a8:e6:5d:c0:e8:69:9a:6f: 1d:86:94:e5:ea:d2:41:c1:7c:7f:e0:5f:30:88:6c: c2:31:cf:50:64:2e:94:63:f3:a8:cc:07:cf:9c:6c: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D2:9F:9C:71:36:AE:3A:42:F4:63:54:03:85:A1:8F:AD:93:46:2A X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7e:e9:ca:2b:15:61:ab:50:09:a8:83:5b:87:bc:d0:0d:1a: dc:5f:33:95:5f:57:71:0c:ea:c1:b9:13:d7:80:10:63:89:fa: 8c:4d:56:7c:a5:ef:9e:c9:50:ae:f0:c1:41:11:73:7c:bd:c1: 7e:2e:5d:00:1c:ea:96:75:f5:14:b0:a7:4d:7b:4c:b5:f3:91: 95:83:d4:11:27:1e:5d:d7:a3:be:b3:c1:18:e2:4d:f0:23:6f: 24:a9:37:dd:8f:86:7d:6b:34:37:18:65:9a:b1:74:d4:37:91: c7:f9:96:45:6e:d3:7c:c7:09:63:c1:1f:82:8b:81:bb:ea:93: 68:ec:c8:d1:c3:de:ce:85:c9:81:6f:05:6d:d1:58:3b:9e:f1: 85:5b:29:89:f3:c4:2d:c1:39:59:7a:25:b3:ed:cf:35:e1:44: fe:e7:fd:9f:1f:d9:27:1a:49:86:33:6e:1e:54:21:06:8e:ce: 6b:77:47:87:2e:44:13:b8:65:85:ec:11:d0:c5:81:c5:05:20: a4:9b:a4:12:93:97:20:57:7d:97:c3:da:a4:f3:0c:3b:ba:ee: fb:6f:08:aa:54:0f:2e:af:66:ee:dc:91:81:ad:08:77:a7:e2: 35:e6:1b:9d:b7:6f:e0:fe:f9:fe:10:ae:82:71:99:a4:02:c7: 24:b2:7a:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY1MD/Pf6MZNnOLQoRBg0ETto0EQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEyMTYxNTE2MjNaFw0yNTEyMjAwMDAyMjNaMDMxMTAvBgNV BAMTKDhERDI5RjlDNzEzNkFFM0E0MkY0NjM1NDAzODVBMThGQUQ5MzQ2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeBXp0j+lyhCKRglu7HamZgekF 7Ay9yk2rqgxK4XmpPuBYKd8KOX4/2aX8oGRb7fImpOKjFV1T7fS4Q3vIYKPsr9XD DNx8IqZh9lRjsbz/GEnyjYs1suiGQg6gRz+BjWlbR1Tnt085zxHU8jlBjnKLlJJ4 bGSQitWyQdGcEMmo2RL9vCE0T6624/FIcGRIh1HXKsOzUjhaszbxhG4XFj1RanDd EaAR7I2+kLxnvokG7xwZH/64S0lsd0wUuQ/pWPdLHSo/fYwoDMo25IniOKp7xXrP yhnFDayo5l3A6Gmabx2GlOXq0kHBfH/gXzCIbMIxz1BkLpRj86jMB8+cbEMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjdKfnHE2rjpC9GNUA4Whj62TRiowHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADV+6corFWGrUAmog1uHvNANGtxfM5VfV3EM 6sG5E9eAEGOJ+oxNVnyl757JUK7wwUERc3y9wX4uXQAc6pZ19RSwp017TLXzkZWD 1BEnHl3Xo76zwRjiTfAjbySpN92Phn1rNDcYZZqxdNQ3kcf5lkVu03zHCWPBH4KL gbvqk2jsyNHD3s6FyYFvBW3RWDue8YVbKYnzxC3BOVl6JbPtzzXhRP7n/Z8f2Sca SYYzbh5UIQaOzmt3R4cuRBO4ZYXsEdDFgcUFIKSbpBKTlyBXfZfD2qTzDDu67vtv CKpUDy6vZu7ckYGtCHen4jXmG523b+D++f4QroJxmaQCxySyeoM= -----END CERTIFICATE-----Generated at Thu Dec 18 23:43:12 2025 by rpki-client