This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: faEdqftMh9Vgnke+izsmSER00LDOf0HUpeSlk0w3KKY= Subject key identifier: B3:F9:0B:11:B6:8C:3B:93:F6:2C:4D:42:2F:72:63:98:C5:44:B2:EB Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 787D02B18754FC5CC248CAA6E1A15506FF570746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01FE Signing time: Fri 05 Dec 2025 00:41:28 +0000 Manifest this update: Fri 05 Dec 2025 00:36:28 +0000 Manifest next update: Mon 08 Dec 2025 03:58:28 +0000 Files and hashes: 1: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: dbPjN2LUuuCSjMRX40wOAFJpfzNifil0oISSCIQbkOU=) 2: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 3: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7d:02:b1:87:54:fc:5c:c2:48:ca:a6:e1:a1:55:06:ff:57:07:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Dec 5 00:36:28 2025 GMT Not After : Dec 8 03:58:28 2025 GMT Subject: CN=B3F90B11B68C3B93F62C4D422F726398C544B2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:8e:e1:e1:e3:12:6e:9d:f4:b9:f6:a8:2d: 07:54:55:1a:82:71:1f:77:49:ed:b8:9b:df:00:8f: 11:de:78:ac:1c:79:e4:62:5b:ee:8d:34:08:78:ff: 66:49:c4:4c:54:21:46:04:4d:df:56:bc:4b:de:63: 3b:fc:25:b3:c7:7d:79:f6:72:54:e7:ef:60:14:19: 60:3c:8d:9f:55:8d:6f:82:c2:8e:de:a8:e6:e2:2b: 86:fe:77:02:09:c3:b3:0d:2a:54:19:c5:45:ae:11: 7a:50:df:73:15:eb:0e:f4:ad:aa:db:19:42:88:af: 7d:79:31:10:29:c4:8d:f3:dc:a2:21:b2:18:e8:cc: 8e:ba:f9:fe:4c:c7:75:07:c2:19:22:1d:d7:92:90: 36:e8:4a:aa:ee:19:d5:0d:61:e7:a2:07:29:b9:78: 31:bb:ef:6a:c6:17:86:c8:a8:31:56:1e:b8:35:19: 5a:54:30:32:38:09:0d:8f:86:ba:c9:61:ba:c3:30: 78:d0:24:26:5f:97:96:31:22:92:03:88:aa:30:6f: 76:60:e1:cc:81:b2:9f:e0:3e:83:70:f7:85:af:62: 6b:f0:04:12:4a:c6:da:2e:a7:6a:28:61:33:10:53: 40:00:cf:9b:79:d0:b6:c2:f5:9d:ad:cb:54:2e:c9: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:0B:11:B6:8C:3B:93:F6:2C:4D:42:2F:72:63:98:C5:44:B2:EB X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:43:13:be:d9:14:dd:7c:6a:09:08:2b:2f:50:4d:b5:c7:76: b7:3c:3e:7d:3d:7d:0e:2d:38:1d:93:b9:3d:9a:68:bf:d5:87: ac:d0:1d:3f:ec:de:62:b1:03:df:bb:93:68:0e:4b:6e:7a:b6: 9c:79:f9:68:e7:90:75:55:21:6a:31:64:94:e1:ef:7c:59:02: 46:7a:2d:0e:2f:79:ba:6a:85:be:ee:42:13:c6:12:8f:7d:87: 36:4c:fa:57:09:19:53:4b:09:27:96:49:c6:4f:fb:2e:80:86: 93:72:14:5d:13:a9:7c:4c:7d:90:0a:c0:9e:9e:71:c7:e2:3b: 24:26:69:59:0a:80:67:71:3a:0e:e7:59:46:b5:89:cd:d1:5c: fa:00:9d:d7:50:22:57:3e:1b:3f:f5:96:d8:94:94:03:20:d5: cb:13:05:c0:5c:5b:9e:79:66:34:fe:7e:b5:e8:00:c3:54:f9: 23:76:9a:19:08:12:7a:61:a5:a0:5a:18:d4:fd:c5:42:50:2d: b2:3f:45:38:ab:da:d7:7e:f1:f2:1a:2f:9c:f9:a5:3c:f1:75: 4e:22:ca:f7:a9:e1:87:a1:88:ec:0b:02:34:07:5d:23:cd:f0: ac:17:3a:01:8c:29:e0:cf:8f:d3:07:81:90:4c:70:68:b1:72: 7f:46:f0:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeH0CsYdU/FzCSMqm4aFVBv9XB0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTEyMDUwMDM2MjhaFw0yNTEyMDgwMzU4MjhaMDMxMTAvBgNV BAMTKEIzRjkwQjExQjY4QzNCOTNGNjJDNEQ0MjJGNzI2Mzk4QzU0NEIyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRfo7h4eMSbp30ufaoLQdUVRqC cR93Se24m98AjxHeeKwceeRiW+6NNAh4/2ZJxExUIUYETd9WvEveYzv8JbPHfXn2 clTn72AUGWA8jZ9VjW+Cwo7eqObiK4b+dwIJw7MNKlQZxUWuEXpQ33MV6w70rarb GUKIr315MRApxI3z3KIhshjozI66+f5Mx3UHwhkiHdeSkDboSqruGdUNYeeiBym5 eDG772rGF4bIqDFWHrg1GVpUMDI4CQ2PhrrJYbrDMHjQJCZfl5YxIpIDiKowb3Zg 4cyBsp/gPoNw94WvYmvwBBJKxtoup2ooYTMQU0AAz5t50LbC9Z2ty1QuyVKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs/kLEbaMO5P2LE1CL3JjmMVEsuswHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9DE77ZFN18agkIKy9QTbXHdrc8Pn09fQ4t OB2TuT2aaL/Vh6zQHT/s3mKxA9+7k2gOS256tpx5+WjnkHVVIWoxZJTh73xZAkZ6 LQ4vebpqhb7uQhPGEo99hzZM+lcJGVNLCSeWScZP+y6AhpNyFF0TqXxMfZAKwJ6e ccfiOyQmaVkKgGdxOg7nWUa1ic3RXPoAnddQIlc+Gz/1ltiUlAMg1csTBcBcW555 ZjT+frXoAMNU+SN2mhkIEnphpaBaGNT9xUJQLbI/RTir2td+8fIaL5z5pTzxdU4i yvep4YehiOwLAjQHXSPN8KwXOgGMKeDPj9MHgZBMcGixcn9G8Cs= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:36 2025 by rpki-client