This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json) Hash identifier: 85oYL3fgbd2woLKn+ZAgcyk+BQZQxcYUzSZdrSQQFBQ= Subject key identifier: 89:37:21:92:80:57:F1:FD:4C:13:69:F2:9F:A9:81:C8:C5:EE:ED:49 Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Certificate issuer: /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Certificate serial: 6F8190F71E7E73CC6DA5CD8E61B61893ED856929 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft Manifest number: 0399 Signing time: Thu 04 Dec 2025 22:12:26 +0000 Manifest this update: Thu 04 Dec 2025 22:07:26 +0000 Manifest next update: Mon 08 Dec 2025 05:15:26 +0000 Files and hashes: 1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: Gsl7K6I4KI0sWgia4lWR3RRhhIac8ea5LRFrMI4YT30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:81:90:f7:1e:7e:73:cc:6d:a5:cd:8e:61:b6:18:93:ed:85:69:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Validity Not Before: Dec 4 22:07:26 2025 GMT Not After : Dec 8 05:15:26 2025 GMT Subject: CN=893721928057F1FD4C1369F29FA981C8C5EEED49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4c:e0:ba:26:a1:b3:2d:01:ab:c4:16:61:6e: f8:eb:94:17:8e:1a:4e:08:ee:2d:98:bd:a5:40:5a: 89:01:3e:d4:21:94:60:99:97:d3:87:f2:77:72:ca: 1d:e7:28:e4:2c:1c:66:e9:24:12:5b:0e:05:4e:44: fe:44:54:1c:95:25:6d:6a:8d:47:ed:7d:ca:39:48: dd:67:95:0e:ff:27:45:4a:96:d4:7e:9a:83:80:b6: 18:7d:09:3d:8c:bb:c0:25:73:f6:00:82:43:64:e6: b8:50:33:91:a1:f7:b1:b8:1b:50:68:38:e6:8c:3e: 61:da:9f:7e:5f:14:9a:d2:d7:88:68:b6:09:ea:09: 96:4c:be:3e:d4:fc:9b:ae:ab:b4:30:66:3f:84:68: 98:42:52:d8:25:16:76:28:54:b4:b4:bf:77:15:c7: 85:77:bc:73:34:f2:de:aa:8c:b8:8b:a3:7f:6d:d9: 5a:0e:98:f3:3b:77:9b:64:94:b5:fa:9e:8b:15:18: 1f:39:30:51:cc:38:e9:b4:df:c5:d3:70:8f:b7:7c: 4a:6a:98:fa:17:bf:29:42:37:2e:29:e1:90:82:5a: 70:b5:9b:41:8f:43:6a:8e:63:ed:42:60:a8:ff:e8: 10:51:5f:7c:cd:cb:ed:dd:20:2d:14:e5:3d:d6:7b: 9b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:37:21:92:80:57:F1:FD:4C:13:69:F2:9F:A9:81:C8:C5:EE:ED:49 X509v3 Authority Key Identifier: keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e4:31:bb:62:5c:13:a0:ed:9e:9f:a0:8b:fe:65:9e:a7:1e: b5:1d:97:0b:8a:dc:62:2f:44:b2:ae:a1:e8:07:8f:c1:0b:53: a0:56:a0:b0:0b:a5:97:ca:f8:77:ca:aa:ae:78:b5:56:0a:9e: 5c:39:d9:51:2c:d6:05:68:c8:8d:70:e4:f4:7b:f5:4e:97:db: 5d:19:09:36:10:f8:ac:7c:d2:33:d5:8f:a2:7f:b8:a0:bc:c9: 54:e8:fa:34:6e:b5:c3:64:d0:e2:3e:ec:54:a9:5b:c4:2f:c1: d7:8a:d2:7d:a9:89:f2:14:d9:e4:08:85:00:2e:d4:d4:c7:8a: 50:94:d9:d6:6f:50:06:53:e2:15:e5:2f:49:cc:97:77:91:a7: 1a:65:2d:22:55:7a:33:ca:e8:c3:de:90:35:1c:d9:d1:59:78: 75:e9:ab:f7:34:56:d7:f4:d8:ac:42:01:96:be:a7:28:73:36: ad:60:f9:29:ac:f1:a2:95:e2:48:f5:58:a3:31:12:31:1c:2e: b5:f4:95:be:e3:1a:fd:93:3a:60:c5:81:93:07:e8:8f:f9:7c: d3:89:60:63:b2:b3:de:b7:35:86:ca:18:13:ed:54:c9:c1:d9: 7b:1d:0a:7d:53:0a:bb:cb:ef:83:00:98:dc:be:e5:9b:0c:e9: 77:78:6b:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb4GQ9x5+c8xtpc2OYbYYk+2FaSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB ODIzNzQ2OTAeFw0yNTEyMDQyMjA3MjZaFw0yNTEyMDgwNTE1MjZaMDMxMTAvBgNV BAMTKDg5MzcyMTkyODA1N0YxRkQ0QzEzNjlGMjlGQTk4MUM4QzVFRUVENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TOC6JqGzLQGrxBZhbvjrlBeO Gk4I7i2YvaVAWokBPtQhlGCZl9OH8ndyyh3nKOQsHGbpJBJbDgVORP5EVByVJW1q jUftfco5SN1nlQ7/J0VKltR+moOAthh9CT2Mu8Alc/YAgkNk5rhQM5Gh97G4G1Bo OOaMPmHan35fFJrS14hotgnqCZZMvj7U/Juuq7QwZj+EaJhCUtglFnYoVLS0v3cV x4V3vHM08t6qjLiLo39t2VoOmPM7d5tklLX6nosVGB85MFHMOOm038XTcI+3fEpq mPoXvylCNy4p4ZCCWnC1m0GPQ2qOY+1CYKj/6BBRX3zNy+3dIC0U5T3We5v/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiTchkoBX8f1ME2nyn6mByMXu7UkwHwYDVR0j BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz NzQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3NGQ3NmItNWIxNi00YWI1LWFi Y2YtZTRhODYwN2EyOGIyLzAvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQz Q0FBODIzNzQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3kMbtiXBOg7Z6foIv+ZZ6nHrUdlwuK3GIv RLKuoegHj8ELU6BWoLALpZfK+HfKqq54tVYKnlw52VEs1gVoyI1w5PR79U6X210Z CTYQ+Kx80jPVj6J/uKC8yVTo+jRutcNk0OI+7FSpW8QvwdeK0n2pifIU2eQIhQAu 1NTHilCU2dZvUAZT4hXlL0nMl3eRpxplLSJVejPK6MPekDUc2dFZeHXpq/c0Vtf0 2KxCAZa+pyhzNq1g+Sms8aKV4kj1WKMxEjEcLrX0lb7jGv2TOmDFgZMH6I/5fNOJ YGOys963NYbKGBPtVMnB2XsdCn1TCrvL74MAmNy+5ZsM6Xd4ayQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:26 2025 by rpki-client