This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: PyWndkRHauFnmHVaVUtHuJsFWLLI5xot47I/74QvJIA= Subject key identifier: 26:AB:F5:90:60:16:E6:EE:EC:26:1C:62:0C:D0:B3:A2:F1:CA:B4:6B Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 66EF05AFAE9DA2B673BE22739F89E1BDC64170E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 97 Signing time: Sat 06 Dec 2025 01:42:02 +0000 Manifest this update: Sat 06 Dec 2025 01:37:02 +0000 Manifest next update: Tue 09 Dec 2025 03:08:02 +0000 Files and hashes: 1: 3135372e32302e3132312e302f32342d3234203d3e20313532343133.roa (hash: J+HA2voObMJkLTe14IHtv1+pBD6tmTWcTW3nQp6DPrc=) 2: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: /VltEvFg+g6SWNQiUQCYqLBvrsr6T5hGCJ08dbWiUiE=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ef:05:af:ae:9d:a2:b6:73:be:22:73:9f:89:e1:bd:c6:41:70:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Dec 6 01:37:02 2025 GMT Not After : Dec 9 03:08:02 2025 GMT Subject: CN=26ABF5906016E6EEEC261C620CD0B3A2F1CAB46B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:4d:87:e1:98:8a:5a:18:2c:53:d0:88:eb: 78:09:ce:37:22:a7:e8:28:63:5a:80:29:be:cd:40: e9:64:8b:bb:c0:dd:26:6e:21:1f:f9:63:a0:44:fa: 5c:cc:06:79:50:35:fc:c6:09:29:32:28:92:f1:26: e9:48:66:58:89:2e:e4:55:61:89:9b:20:5a:be:5f: 3a:1c:17:2e:2d:8b:78:72:3e:dc:a7:a6:08:bc:02: ac:fc:86:0b:3f:a5:0f:5d:bd:4a:fe:1b:e2:e6:f0: 6b:e8:42:5a:19:56:2c:5a:af:ff:20:1d:65:0c:ca: 90:44:b6:36:ad:d6:ac:6f:9e:ec:63:89:4f:ca:da: 42:93:fa:b9:6a:19:ac:f4:09:a3:0a:d7:2d:f0:7e: 6c:1c:a1:c0:1c:43:1f:4f:4a:29:88:35:1c:35:4b: 91:ae:c1:2a:49:e0:45:56:b9:d5:55:6f:2d:92:4a: 88:ad:59:05:cb:c3:92:31:d3:26:81:c0:9b:89:86: ac:63:23:b4:87:ab:3b:34:d9:e9:2b:8c:36:32:31: f9:37:19:76:b5:a9:c4:d9:5f:ec:a8:45:eb:ad:e8: b9:0a:d1:9d:ec:79:f0:ce:f1:26:34:83:3e:4d:45: 3b:89:ac:2c:b8:ca:5d:8e:4c:9e:af:0e:60:61:b5: 8c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AB:F5:90:60:16:E6:EE:EC:26:1C:62:0C:D0:B3:A2:F1:CA:B4:6B X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e8:36:91:07:2c:70:29:a0:23:82:5e:2d:85:e4:fd:33:b7: d8:60:44:75:f4:dd:10:6d:d9:ad:a0:bf:f0:fd:df:61:ef:24: 92:cf:af:e5:69:cb:00:ba:8e:94:8c:a1:02:31:c8:37:2b:f2: c7:b3:16:c2:78:ca:20:40:7c:bc:62:bd:58:f0:66:2d:c7:25: 4f:d0:f9:63:8b:44:d4:ad:2f:e1:25:64:44:8c:3b:35:22:0d: 95:9d:a2:c0:d8:1e:19:e1:a7:b1:b8:2a:dc:d5:c2:c4:36:2e: dc:ac:83:a9:8e:93:4a:80:72:68:8d:cd:27:a0:81:2a:af:2d: 7e:a6:b9:b9:4f:0b:18:22:15:28:76:f4:02:d3:6c:e8:ef:1b: 5d:37:37:86:a0:34:b1:f1:7f:a8:8f:6b:ed:21:60:19:c9:cd: 1a:94:9c:8e:8b:34:c3:0b:e7:6a:52:ea:4b:ae:2c:82:22:6c: 08:5d:cb:41:82:82:15:d9:a6:aa:bd:2a:79:da:ef:a3:c9:13: 76:91:ce:39:8e:ca:a9:74:55:c9:b3:a3:09:50:46:66:a0:82: 0f:69:3d:e3:87:0c:b4:9f:73:4f:6d:15:3b:fa:cb:5e:98:6d: 48:9c:99:fd:4e:84:3f:76:64:2b:16:20:70:95:15:9b:c4:af: 7d:77:aa:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZu8Fr66dorZzviJzn4nhvcZBcOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTEyMDYwMTM3MDJaFw0yNTEyMDkwMzA4MDJaMDMxMTAvBgNV BAMTKDI2QUJGNTkwNjAxNkU2RUVFQzI2MUM2MjBDRDBCM0EyRjFDQUI0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgEU2H4ZiKWhgsU9CI63gJzjci p+goY1qAKb7NQOlki7vA3SZuIR/5Y6BE+lzMBnlQNfzGCSkyKJLxJulIZliJLuRV YYmbIFq+XzocFy4ti3hyPtynpgi8Aqz8hgs/pQ9dvUr+G+Lm8GvoQloZVixar/8g HWUMypBEtjat1qxvnuxjiU/K2kKT+rlqGaz0CaMK1y3wfmwcocAcQx9PSimINRw1 S5GuwSpJ4EVWudVVby2SSoitWQXLw5Ix0yaBwJuJhqxjI7SHqzs02ekrjDYyMfk3 GXa1qcTZX+yoReut6LkK0Z3sefDO8SY0gz5NRTuJrCy4yl2OTJ6vDmBhtYw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqv1kGAW5u7sJhxiDNCzovHKtGswHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/oNpEHLHApoCOCXi2F5P0zt9hgRHX03RBt 2a2gv/D932HvJJLPr+VpywC6jpSMoQIxyDcr8sezFsJ4yiBAfLxivVjwZi3HJU/Q +WOLRNStL+ElZESMOzUiDZWdosDYHhnhp7G4KtzVwsQ2Ltysg6mOk0qAcmiNzSeg gSqvLX6mublPCxgiFSh29ALTbOjvG103N4agNLHxf6iPa+0hYBnJzRqUnI6LNMML 52pS6kuuLIIibAhdy0GCghXZpqq9Knna76PJE3aRzjmOyql0VcmzowlQRmaggg9p PeOHDLSfc09tFTv6y16YbUicmf1OhD92ZCsWIHCVFZvEr313qqc= -----END CERTIFICATE-----Generated at Sun Dec 7 18:46:51 2025 by rpki-client