This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft File: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft (raw, json) Hash identifier: yCmnASwEu/Qe210QiJKdyG0pNHQFT0sD7ZRS/d71uo0= Subject key identifier: CB:08:88:05:13:8F:91:05:15:7B:71:AC:1F:31:46:51:8E:B9:34:61 Authority key identifier: 78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED Certificate issuer: /CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Certificate serial: 5D1F542B6C0CBD83FD625FE58A6470E04F3DFF81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft Manifest number: 046A Signing time: Wed 03 Dec 2025 00:41:22 +0000 Manifest this update: Wed 03 Dec 2025 00:36:22 +0000 Manifest next update: Sat 06 Dec 2025 09:31:22 +0000 Files and hashes: 1: 3130332e3231312e3134332e302f32342d3234203d3e203435333138.roa (hash: Y0HTNIxciTP1JYEk53UJRfKBr5bisZIo+A6n6oiY4Hg=) 2: 789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl (hash: vi/DD8YRPtDzfVc3ymSGhRls8GDu0RQqip0zjpd7YW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1f:54:2b:6c:0c:bd:83:fd:62:5f:e5:8a:64:70:e0:4f:3d:ff:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED Validity Not Before: Dec 3 00:36:22 2025 GMT Not After : Dec 6 09:31:22 2025 GMT Subject: CN=CB088805138F9105157B71AC1F3146518EB93461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:cf:37:e8:ab:1d:ce:8a:fb:0f:e7:27:73: e9:7a:17:87:e0:4f:7a:23:08:79:0d:4c:d7:da:59: ed:4c:8f:c3:3c:b6:4e:2e:1b:77:4c:88:ae:3f:df: cb:79:8b:07:78:43:1b:03:31:6f:0c:28:7d:fb:01: 11:4d:19:bc:83:64:ec:b0:bb:b7:e1:de:49:01:dc: cb:13:09:34:1a:ec:36:1c:bc:a9:02:fe:03:b5:07: 3d:e6:7c:32:d9:26:6d:60:3a:c1:6f:3e:ab:43:35: b0:d2:e0:cb:7f:6c:3a:97:0d:54:b2:8c:45:58:7b: e8:5f:d9:60:e6:e3:b3:e1:a8:90:45:c8:30:6f:a9: e6:c8:b9:79:18:c6:8b:cc:08:b8:47:73:7c:5a:23: 68:5e:47:1c:d7:33:7a:2c:cc:d4:15:08:55:9b:39: de:dd:1d:3e:07:d7:43:11:cf:f2:23:ce:e8:42:27: ca:ae:31:fd:20:2c:cf:88:e0:49:02:f0:91:e2:24: 32:e3:75:f6:fc:ed:91:cf:ea:c7:5e:43:42:f5:9e: e0:be:17:71:8f:98:82:f8:da:33:67:71:16:7a:01: 90:7c:7a:fa:6f:5b:2e:ca:20:7b:9e:52:4b:67:b0: ba:39:e9:b6:ed:2f:f4:dc:d8:f2:b8:6e:f3:92:61: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:88:05:13:8F:91:05:15:7B:71:AC:1F:31:46:51:8E:B9:34:61 X509v3 Authority Key Identifier: keyid:78:9C:8F:CB:CF:FC:68:C4:83:A9:68:DF:14:EE:37:E7:5A:FE:A2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a3b6881-ba11-4330-a164-b55f42085b89/0/789C8FCBCFFC68C483A968DF14EE37E75AFEA2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c6:5e:c4:e9:63:fb:d1:4d:e4:0f:d9:fb:56:91:f3:f4:ec: cc:ba:4e:39:0c:d9:32:c0:2b:74:28:79:e2:e6:83:86:e9:08: 13:5e:f7:54:2e:5e:f4:ce:26:3e:ef:f0:1b:dd:63:34:ab:a2: 55:21:cf:94:51:df:ac:46:ee:49:34:fb:04:95:eb:e8:2f:b4: 5a:28:e2:40:59:22:53:76:30:eb:d7:6d:d3:23:b2:0b:24:7a: 0e:f8:b3:46:f3:53:72:3d:49:12:fb:d7:68:24:39:19:6e:2e: 88:41:d7:ee:0e:1e:48:48:e0:31:13:01:bd:91:24:71:93:39: ba:7d:39:48:13:6c:88:2a:10:e2:4d:fd:38:23:f4:56:d0:1c: 26:4a:51:b8:a7:2d:f3:1c:55:38:1e:74:26:c4:5b:99:d6:a2: 1d:69:74:ac:ce:ad:f2:a1:84:40:3e:61:61:3a:25:af:a8:bb: 65:5c:98:2a:3e:eb:e9:34:64:af:e9:de:a0:cb:8e:65:01:26: a0:99:9c:96:71:f6:f9:0a:7c:6f:54:9c:a4:de:c0:02:32:db: d7:73:60:cd:32:56:62:9f:77:ee:80:45:11:61:1c:1f:ac:74: a9:aa:15:b2:d2:03:0c:32:62:33:43:16:dd:54:14:84:6d:74: 82:1e:16:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXR9UK2wMvYP9Yl/limRw4E89/4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1 QUZFQTJFRDAeFw0yNTEyMDMwMDM2MjJaFw0yNTEyMDYwOTMxMjJaMDMxMTAvBgNV BAMTKENCMDg4ODA1MTM4RjkxMDUxNTdCNzFBQzFGMzE0NjUxOEVCOTM0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/8836Ksdzor7D+cnc+l6F4fg T3ojCHkNTNfaWe1Mj8M8tk4uG3dMiK4/38t5iwd4QxsDMW8MKH37ARFNGbyDZOyw u7fh3kkB3MsTCTQa7DYcvKkC/gO1Bz3mfDLZJm1gOsFvPqtDNbDS4Mt/bDqXDVSy jEVYe+hf2WDm47PhqJBFyDBvqebIuXkYxovMCLhHc3xaI2heRxzXM3oszNQVCFWb Od7dHT4H10MRz/IjzuhCJ8quMf0gLM+I4EkC8JHiJDLjdfb87ZHP6sdeQ0L1nuC+ F3GPmIL42jNncRZ6AZB8evpvWy7KIHueUktnsLo56bbtL/Tc2PK4bvOSYW0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywiIBROPkQUVe3GsHzFGUY65NGEwHwYDVR0j BBgwFoAUeJyPy8/8aMSDqWjfFO4351r+ou0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTNiNjg4MS1iYTExLTQzMzAtYTE2NC1iNTVmNDIwODViODkvMC83ODlDOEZDQkNG RkM2OEM0ODNBOTY4REYxNEVFMzdFNzVBRkVBMkVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3RTc1QUZF QTJFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWEzYjY4ODEtYmExMS00MzMwLWEx NjQtYjU1ZjQyMDg1Yjg5LzAvNzg5QzhGQ0JDRkZDNjhDNDgzQTk2OERGMTRFRTM3 RTc1QUZFQTJFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrGXsTpY/vRTeQP2ftWkfP07My6TjkM2TLA K3QoeeLmg4bpCBNe91QuXvTOJj7v8BvdYzSrolUhz5RR36xG7kk0+wSV6+gvtFoo 4kBZIlN2MOvXbdMjsgskeg74s0bzU3I9SRL712gkORluLohB1+4OHkhI4DETAb2R JHGTObp9OUgTbIgqEOJN/Tgj9FbQHCZKUbinLfMcVTgedCbEW5nWoh1pdKzOrfKh hEA+YWE6Ja+ou2VcmCo+6+k0ZK/p3qDLjmUBJqCZnJZx9vkKfG9UnKTewAIy29dz YM0yVmKfd+6ARRFhHB+sdKmqFbLSAwwyYjNDFt1UFIRtdIIeFqg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:14 2025 by rpki-client