This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: GY7As0jW3unJ+m9D1D4Rlt/I26w6G8ycsaINYGecNLE= Subject key identifier: 0C:79:06:FB:EC:BB:A8:6E:A8:40:50:F5:F1:B2:8B:5D:D5:20:95:FD Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 3DF7C399DB0C9CABD9674DF6C34B57AA68BFDCC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 9E Signing time: Wed 17 Dec 2025 23:32:02 +0000 Manifest this update: Wed 17 Dec 2025 23:27:02 +0000 Manifest next update: Sun 21 Dec 2025 07:01:02 +0000 Files and hashes: 1: 3135372e32302e3132312e302f32342d3234203d3e20313439343039.roa (hash: OSAo9QWqyVe1VudNV/7NSJlH0xk8Gb3rIp16xTTxTOk=) 2: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: QdHtvh5lxUTllNcggltxK9A44upr18a40IfVVa/1gn0=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:f7:c3:99:db:0c:9c:ab:d9:67:4d:f6:c3:4b:57:aa:68:bf:dc:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Dec 17 23:27:02 2025 GMT Not After : Dec 21 07:01:02 2025 GMT Subject: CN=0C7906FBECBBA86EA84050F5F1B28B5DD52095FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:46:de:ec:01:28:0c:48:f1:98:2d:12:4a:ac: d6:3d:5c:1c:b3:93:cd:90:d3:14:ba:54:ff:47:30: 0b:20:bf:3e:e8:05:20:ce:cf:6b:88:3f:00:8f:f3: 9f:f1:b2:a8:bd:f9:12:18:6e:1b:ca:4a:fc:be:98: d0:bb:89:d9:3f:36:25:a3:50:e6:fc:6f:9a:e8:83: 96:bf:f1:d2:44:35:fa:64:54:6e:ad:b4:36:f7:9a: f8:aa:15:b8:e7:40:45:3f:fc:48:53:14:0d:d6:7d: fb:6f:43:f7:57:fa:3a:6f:89:74:cb:b2:97:bb:cb: 15:b4:3b:c0:ef:19:69:52:b4:e8:0c:6e:fd:55:82: a4:5e:02:84:53:7b:2e:a5:28:c6:fb:ed:3a:e8:92: 8f:c9:3e:f1:0b:98:58:79:a3:ab:e6:f4:8e:ee:a9: 57:26:60:59:cf:c0:46:a9:a2:9b:be:c9:7e:ed:19: 02:b9:f9:5f:70:5b:b8:e7:c3:91:72:c0:70:b2:fb: 88:b1:48:02:7e:57:e0:bc:c4:f5:9c:55:e4:d1:a5: d9:35:47:84:c4:ea:c4:73:b1:9b:93:92:65:40:97: 7b:54:42:14:31:7b:68:1e:b4:07:39:38:cd:93:a9: 18:6b:cb:23:1c:54:65:09:c1:c3:d0:1b:fa:87:e2: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:79:06:FB:EC:BB:A8:6E:A8:40:50:F5:F1:B2:8B:5D:D5:20:95:FD X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:54:f9:fd:97:b8:de:bb:b9:30:69:00:95:a9:61:c7:21:b7: d0:ce:ce:c6:87:09:45:be:5b:99:4a:18:ee:40:fe:e4:ca:9d: 89:dd:e3:78:52:29:08:0f:88:52:32:0f:df:df:d8:cf:93:05: e8:d3:39:8c:fb:e0:2b:df:43:bb:39:c2:9c:f4:56:d7:f8:f8: fa:65:0e:37:01:78:00:d5:8f:33:f9:ee:46:26:3a:fc:94:95: 54:a2:a9:ed:41:96:1b:2e:c0:f3:a6:d0:36:dc:91:08:3b:30: f9:cc:90:80:79:eb:34:11:c5:81:76:30:98:d5:b9:b5:d5:30: fc:40:26:01:a5:2d:5c:28:99:f6:07:2e:10:43:62:3c:86:b9: 89:ec:31:61:bb:70:cc:1a:16:84:5c:aa:6c:0f:da:e5:e9:1a: 0f:25:b4:f0:18:69:cd:54:b1:89:af:09:56:76:ce:fe:df:f8: 1e:d1:83:ce:60:db:84:07:22:2f:fb:2d:cb:95:6c:ee:77:09: 6c:41:d3:fc:8e:21:31:5c:c2:57:5f:9b:91:0f:dc:93:05:1d: 66:9e:aa:a0:ba:51:ee:29:37:04:e6:cc:35:78:4c:33:e5:60: 7a:fb:59:a3:21:90:0c:a1:e8:53:ea:e0:cd:5b:08:17:9f:92: cf:cf:de:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPffDmdsMnKvZZ032w0tXqmi/3MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTEyMTcyMzI3MDJaFw0yNTEyMjEwNzAxMDJaMDMxMTAvBgNV BAMTKDBDNzkwNkZCRUNCQkE4NkVBODQwNTBGNUYxQjI4QjVERDUyMDk1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRt7sASgMSPGYLRJKrNY9XByz k82Q0xS6VP9HMAsgvz7oBSDOz2uIPwCP85/xsqi9+RIYbhvKSvy+mNC7idk/NiWj UOb8b5rog5a/8dJENfpkVG6ttDb3mviqFbjnQEU//EhTFA3WfftvQ/dX+jpviXTL spe7yxW0O8DvGWlStOgMbv1VgqReAoRTey6lKMb77Troko/JPvELmFh5o6vm9I7u qVcmYFnPwEapopu+yX7tGQK5+V9wW7jnw5FywHCy+4ixSAJ+V+C8xPWcVeTRpdk1 R4TE6sRzsZuTkmVAl3tUQhQxe2getAc5OM2TqRhryyMcVGUJwcPQG/qH4sjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDHkG++y7qG6oQFD18bKLXdUglf0wHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVU+f2XuN67uTBpAJWpYccht9DOzsaHCUW+ W5lKGO5A/uTKnYnd43hSKQgPiFIyD9/f2M+TBejTOYz74CvfQ7s5wpz0Vtf4+Ppl DjcBeADVjzP57kYmOvyUlVSiqe1BlhsuwPOm0DbckQg7MPnMkIB56zQRxYF2MJjV ubXVMPxAJgGlLVwomfYHLhBDYjyGuYnsMWG7cMwaFoRcqmwP2uXpGg8ltPAYac1U sYmvCVZ2zv7f+B7Rg85g24QHIi/7LcuVbO53CWxB0/yOITFcwldfm5EP3JMFHWae qqC6Ue4pNwTmzDV4TDPlYHr7WaMhkAyh6FPq4M1bCBefks/P3gg= -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:47 2025 by rpki-client