This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
File: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft (raw, json)
Hash identifier: ZRaIa1hiQUYOgkqQ5oQuZDjWOWC3tYZA6M1Au24baUc=
Subject key identifier: 4E:EC:EE:49:F8:46:89:15:B6:0F:85:DB:86:8A:DE:AD:F4:07:A0:3F
Authority key identifier: 78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
Certificate issuer: /CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Certificate serial: 2D98041A61D016D3C8D2A5C597423BEC72C91CC9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
Manifest number: A5
Signing time: Fri 05 Dec 2025 18:31:21 +0000
Manifest this update: Fri 05 Dec 2025 18:26:21 +0000
Manifest next update: Mon 08 Dec 2025 21:34:21 +0000
Files and hashes: 1: 3136302e3139312e3139382e302f32332d3233203d3e20313533313537.roa (hash: BKOeIpPmZ/JlEup668j4Ru9S2UzMSJK/Lz9NsYvcvj4=)
2: 3136302e3139312e3139382e302f32342d3234203d3e20313533313537.roa (hash: pcrYcQfetv/rc/0VTi5Yuk7X3ubcBjWkKo4wzgdZiSs=)
3: 3136302e3139312e3139392e302f32342d3234203d3e20313533313537.roa (hash: PB5sEIidful8Aq2vYl2cOVwqgMl/aNUVGYhSLpss8uA=)
4: 78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl (hash: YepGg7SnCHa2kHd/sjkahDj1G8os9H/IO0Vd3GEZhuc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 21:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:98:04:1a:61:d0:16:d3:c8:d2:a5:c5:97:42:3b:ec:72:c9:1c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78B7FAA2881ABFBC117C0F83ECDC9D554DF41414
Validity
Not Before: Dec 5 18:26:21 2025 GMT
Not After : Dec 8 21:34:21 2025 GMT
Subject: CN=4EECEE49F8468915B60F85DB868ADEADF407A03F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e3:af:7e:a0:25:1e:bd:2b:4f:60:3d:e3:2a:
2f:05:9c:00:d3:fc:06:ab:30:9f:0d:5e:4a:9f:55:
3e:b5:39:88:da:0c:6d:c3:7f:f9:a1:2c:44:46:ba:
ef:8e:61:a1:3a:3e:43:1e:0e:86:ea:cf:d6:b0:fd:
02:a2:5d:71:2c:f1:da:f5:b1:23:b8:53:8e:7b:6a:
cd:04:11:96:99:c8:4b:9e:22:6c:72:df:3c:cc:e2:
22:e2:91:45:92:40:cb:65:ea:af:86:64:39:7a:84:
69:52:46:54:a7:d1:e8:a4:16:73:a4:18:78:a5:f3:
3a:86:4e:89:18:1c:2a:ed:ea:97:6e:3d:ac:5e:a2:
0e:1c:03:db:da:e7:ef:0f:f6:fa:ca:79:c6:b2:05:
f2:79:b4:59:df:94:c1:fd:08:79:d5:f9:56:4d:8a:
42:b3:19:9e:e6:70:db:f5:e0:77:54:93:16:8c:e0:
db:94:62:63:d2:d9:88:0f:f5:a4:7a:98:ce:ec:69:
e7:a2:1c:16:e7:40:6c:d4:bf:39:9a:da:4d:b1:18:
37:14:02:0b:3d:70:20:e7:b3:e2:96:dc:c1:3e:6a:
88:80:bc:49:1a:ce:fe:a4:f9:1d:7e:03:38:66:f9:
71:89:1c:c8:9b:67:d5:ae:61:2c:61:a5:44:11:a3:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EC:EE:49:F8:46:89:15:B6:0F:85:DB:86:8A:DE:AD:F4:07:A0:3F
X509v3 Authority Key Identifier:
keyid:78:B7:FA:A2:88:1A:BF:BC:11:7C:0F:83:EC:DC:9D:55:4D:F4:14:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/769f8aa8-8971-4e51-8b51-803b49b32a4f/0/78B7FAA2881ABFBC117C0F83ECDC9D554DF41414.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:37:ed:35:d0:4b:02:c0:13:98:4b:f3:b9:4f:7e:0b:87:86:
4d:bb:21:af:1d:2f:17:36:25:1d:43:d9:dc:77:f7:f8:21:86:
61:c5:d4:f9:c8:a7:cc:27:0b:f8:f7:27:e9:15:e7:11:66:43:
41:c8:1e:65:2b:bb:4b:a4:67:18:38:28:69:89:18:b4:6e:f1:
ac:30:2b:59:43:2d:9a:04:19:ce:da:b5:c7:c0:c5:80:2a:bb:
2b:1b:58:a1:c1:e8:f7:e7:97:72:d1:3c:01:24:e0:ec:8a:1c:
76:f4:1d:c3:5d:30:d2:0d:8c:85:f9:0e:33:7b:34:78:bb:95:
2a:f0:7d:e7:7e:b7:3e:cc:f8:08:9f:c9:80:36:8d:2e:d3:0d:
d4:75:8b:3d:dc:65:26:90:6d:26:df:71:6d:23:87:18:55:fe:
a4:af:c5:35:d6:e7:e7:3d:f3:09:b4:ab:45:20:65:3b:aa:cb:
17:e0:c5:92:3a:72:47:6c:f3:57:4f:d5:e6:c6:fc:f5:8e:f8:
51:41:b0:0c:15:fa:74:28:96:71:11:97:3e:78:85:aa:2c:79:
e0:75:b6:88:d4:bc:2f:e2:2f:54:a3:65:06:f5:e9:90:3c:24:
f4:40:a4:cc:68:1c:61:4e:f5:9b:94:e5:9f:5b:fb:a4:8c:27:
0e:c5:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:35:33 2025 by rpki-client