This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: 7xbKLPW1+iYIZMil1GdeHXdKrfv0MGHp+5MPgVVw+S8= Subject key identifier: 97:CD:8A:B0:60:A0:E4:69:39:C4:76:FB:A9:33:B4:B5:53:98:39:79 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 1B9C27DDC3FED2E30C847B25301902EDFCEF6456 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 025C Signing time: Sat 24 Jan 2026 09:51:14 +0000 Manifest this update: Sat 24 Jan 2026 09:46:14 +0000 Manifest next update: Tue 27 Jan 2026 19:44:14 +0000 Files and hashes: 1: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: Q+Fpcp/YaYdSp43WPR6v3UBrxySsziVLE4UbiS9iDXs=) 2: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: TDJsbNMl+lAMAT0NLVIT8psIHchVbCcnWDmPVMhPBr8=) 3: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: BfE//xvVejg3fdCudp6ObvOH+VIRGgD97l2vlDnmK9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 19:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9c:27:dd:c3:fe:d2:e3:0c:84:7b:25:30:19:02:ed:fc:ef:64:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Jan 24 09:46:14 2026 GMT Not After : Jan 27 19:44:14 2026 GMT Subject: CN=97CD8AB060A0E46939C476FBA933B4B553983979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:56:52:ef:af:34:9d:fa:cd:61:27:0c:fc: b2:12:5a:ca:7e:aa:cf:3e:fb:aa:e3:10:1d:4f:e2: 50:c3:85:e2:38:a2:30:9c:46:36:db:07:49:0b:21: 5b:37:98:d3:d7:f8:1e:0f:44:23:b2:aa:6e:18:ed: 57:af:89:e3:4f:5f:d2:37:d7:b9:6f:c9:01:44:f1: ff:68:62:e2:ea:a4:5e:c8:f9:b2:60:d3:e0:2f:75: d3:ba:ee:e0:2d:ad:f1:f1:10:45:1a:36:2c:61:69: b7:67:0e:8a:c5:8c:34:31:07:81:87:b5:a4:25:95: 7e:cf:24:b1:47:0b:92:49:61:ca:09:be:00:da:91: 16:b1:e2:ae:5f:90:0d:8b:1e:0b:38:5b:03:44:a7: b4:a2:01:a8:4e:c3:d9:47:7c:4b:cd:1a:a2:3f:64: d2:bb:de:27:38:67:7e:2b:9f:0b:49:b8:3d:90:62: ba:12:5a:18:b5:3e:ba:64:86:86:47:4e:d1:0c:94: a9:aa:97:cc:92:2d:5f:c9:eb:04:7e:26:43:a8:8e: c5:cb:58:05:92:e8:06:d6:ea:ee:0c:43:7f:c5:d2: f5:ed:4a:ca:bd:32:55:f8:fd:cb:f9:5a:2e:23:cb: 78:c2:25:ba:bd:77:fd:1d:89:b6:dd:35:73:c0:ac: dc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CD:8A:B0:60:A0:E4:69:39:C4:76:FB:A9:33:B4:B5:53:98:39:79 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:0e:b4:90:fe:59:b6:53:2b:04:19:0b:7e:b1:7c:e4:47:86: 3f:71:04:65:57:53:b9:a2:5a:62:4b:d5:b4:40:8a:2e:4d:ff: 53:2b:0b:c1:7e:b9:64:99:2f:ef:c2:1e:1d:75:7c:b9:66:a1: b8:21:43:8a:cc:52:13:c3:48:43:88:65:12:08:d1:5f:94:d5: ab:9c:6d:4a:f0:52:6b:82:b7:c2:2b:5f:e6:ad:51:1e:73:3b: e8:44:ae:fc:5d:82:1b:30:17:9b:3b:29:57:24:86:45:07:10: 82:c4:a1:dc:09:7e:d3:a3:3f:73:2c:ae:83:df:0e:e5:bd:0f: 0f:f9:d3:6f:db:46:b3:4a:f1:7b:fe:95:ea:1b:56:ed:90:df: 2f:29:df:d5:7d:03:f6:89:5b:6f:86:01:3d:08:1c:f9:92:b2: 49:e7:94:79:bc:02:66:1c:01:a9:f3:15:93:cc:ce:58:c5:44: 08:2b:5e:27:bb:b5:45:fe:90:66:03:90:4e:3b:f3:e7:3d:06: 63:0f:f8:cf:08:59:e7:ae:1d:77:50:f3:86:b8:e5:a2:60:d8: b4:fc:ac:b1:4d:45:29:71:74:87:9b:10:0d:7c:16:da:47:fe: 34:80:3b:58:9b:fb:ec:0e:28:a4:b5:5d:2d:c4:d5:57:0e:fa: b2:4c:59:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5wn3cP+0uMMhHslMBkC7fzvZFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNjAxMjQwOTQ2MTRaFw0yNjAxMjcxOTQ0MTRaMDMxMTAvBgNV BAMTKDk3Q0Q4QUIwNjBBMEU0NjkzOUM0NzZGQkE5MzNCNEI1NTM5ODM5NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcBVZS7680nfrNYScM/LISWsp+ qs8++6rjEB1P4lDDheI4ojCcRjbbB0kLIVs3mNPX+B4PRCOyqm4Y7VevieNPX9I3 17lvyQFE8f9oYuLqpF7I+bJg0+AvddO67uAtrfHxEEUaNixhabdnDorFjDQxB4GH taQllX7PJLFHC5JJYcoJvgDakRax4q5fkA2LHgs4WwNEp7SiAahOw9lHfEvNGqI/ ZNK73ic4Z34rnwtJuD2QYroSWhi1PrpkhoZHTtEMlKmql8ySLV/J6wR+JkOojsXL WAWS6AbW6u4MQ3/F0vXtSsq9MlX4/cv5Wi4jy3jCJbq9d/0dibbdNXPArNyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl82KsGCg5Gk5xHb7qTO0tVOYOXkwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsOtJD+WbZTKwQZC36xfORHhj9xBGVXU7mi WmJL1bRAii5N/1MrC8F+uWSZL+/CHh11fLlmobghQ4rMUhPDSEOIZRII0V+U1auc bUrwUmuCt8IrX+atUR5zO+hErvxdghswF5s7KVckhkUHEILEodwJftOjP3MsroPf DuW9Dw/502/bRrNK8Xv+leobVu2Q3y8p39V9A/aJW2+GAT0IHPmSsknnlHm8AmYc AanzFZPMzljFRAgrXie7tUX+kGYDkE478+c9BmMP+M8IWeeuHXdQ84a45aJg2LT8 rLFNRSlxdIebEA18FtpH/jSAO1ib++wOKKS1XS3E1VcO+rJMWTo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:38:03 2026 by rpki-client