This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
File:                     789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft (raw, json)
Hash identifier:          umy5+JLDBTSYxoiIOD3dtQOJusAlNDL0nSYRM/VYJrI=
Subject key identifier:   AE:A2:2F:D3:56:AF:29:8C:68:B2:2E:D4:19:6B:74:B0:FB:64:C2:BF
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Certificate issuer:       /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial:       48DC3B524863C5158916D4D290EF86DC8AD45923
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
Manifest number:          0398
Signing time:             Tue 02 Dec 2025 21:52:22 +0000
Manifest this update:     Tue 02 Dec 2025 21:47:22 +0000
Manifest next update:     Fri 05 Dec 2025 22:11:22 +0000
Files and hashes:         1: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl (hash: uG3PneXeUYgi8H215x3P8ryhQDMCQ8WSVZKNgUkQo7A=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
                          rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 05 Dec 2025 22:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:dc:3b:52:48:63:c5:15:89:16:d4:d2:90:ef:86:dc:8a:d4:59:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
        Validity
            Not Before: Dec  2 21:47:22 2025 GMT
            Not After : Dec  5 22:11:22 2025 GMT
        Subject: CN=AEA22FD356AF298C68B22ED4196B74B0FB64C2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:98:76:ff:76:5e:64:49:9c:a0:51:3c:ba:
                    ef:e5:d9:dd:ba:63:66:89:76:37:ec:ba:62:c2:c7:
                    f4:82:c7:36:d4:74:54:56:19:20:6a:ee:fb:12:f7:
                    4f:46:27:60:7a:28:fc:ad:22:68:60:fc:78:18:ff:
                    80:e7:ee:c9:b4:20:b8:38:9e:c0:5b:50:7a:fb:e2:
                    6c:b5:fc:88:c2:f9:c5:4d:51:34:4b:44:7a:df:d4:
                    f8:e7:8e:11:fe:cb:d4:ad:ab:63:ea:dd:c2:e1:c2:
                    aa:62:20:de:89:21:74:29:ab:90:46:7b:a7:16:5f:
                    a2:4f:4d:63:1d:d8:75:0c:56:8d:ed:5c:f5:24:04:
                    b8:18:d4:61:48:c3:5f:09:f0:a0:ff:74:7a:b8:ac:
                    d7:63:1f:d7:52:91:ab:4f:cd:9d:fd:c2:e7:b0:20:
                    27:07:8a:88:82:76:3a:a5:15:9f:4e:b5:82:7b:a7:
                    af:e2:ad:ef:bc:54:58:12:a5:d0:ab:92:5d:77:2a:
                    db:b0:37:ee:fb:3e:a6:39:8d:3b:cd:6e:92:ee:8f:
                    f2:dc:a3:9b:9e:66:54:14:2e:37:aa:4c:d9:9a:23:
                    18:39:83:22:12:77:b7:c7:cf:bf:60:2b:77:fb:46:
                    5d:f1:f8:ef:c2:2f:9a:12:05:f2:21:5e:16:a3:2e:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A2:2F:D3:56:AF:29:8C:68:B2:2E:D4:19:6B:74:B0:FB:64:C2:BF
            X509v3 Authority Key Identifier:
                keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:da:fb:78:1e:32:9a:4b:e0:8c:82:d5:41:f6:74:1c:55:04:
         47:4e:e2:01:d3:7d:59:4f:80:fa:4b:23:0d:4e:f3:bc:32:bd:
         76:68:68:40:b3:32:e7:c5:e4:df:61:36:70:80:19:b5:5a:c1:
         bb:ef:b9:d3:7b:dd:35:c0:8f:00:c7:9b:ce:9e:7e:fb:d0:1f:
         36:d8:98:f2:81:ec:b9:cc:b9:df:17:d3:97:81:3c:4e:cd:92:
         b8:44:5a:f0:95:c1:32:ce:86:9a:9d:ab:ab:a8:06:c5:cd:6d:
         ba:90:9c:e5:e2:01:cf:65:4b:ec:85:28:12:ee:9a:c2:c4:7d:
         c1:a6:6b:d2:2a:00:f9:1f:b0:c8:4e:00:f6:63:c8:a3:b3:a6:
         e0:55:0f:e1:b5:22:84:71:f4:ba:8d:71:3d:42:fd:ff:1e:b5:
         ff:b6:c9:53:da:db:82:c4:f5:df:62:00:82:c4:8e:01:7c:63:
         6d:12:ba:9e:1f:8c:71:d1:04:ab:82:d5:c7:11:0a:8c:7b:01:
         be:ea:e3:20:6d:98:a3:9a:23:89:a4:32:72:da:d6:d0:fb:89:
         e4:36:ed:09:65:cd:50:0e:f3:3b:f4:c4:f4:31:f2:0f:b4:a3:
         99:fa:42:e9:98:65:6b:10:06:ee:3b:5d:06:32:b6:9b:fe:f9:
         bd:44:19:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:58:08 2025 by rpki-client