This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft File: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft (raw, json) Hash identifier: ILP/SacMEVSlxmJkdKdkeuhA2F2VsQFUeuB/K4RSpBU= Subject key identifier: 0E:6F:6E:B4:3E:71:77:32:7B:D0:43:39:8C:70:D9:EB:C1:57:2E:9A Authority key identifier: 87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE Certificate issuer: /CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Certificate serial: 1538162C41422394E4131AC954E18AF61ED77BFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft Manifest number: 01FD Signing time: Wed 03 Dec 2025 00:21:29 +0000 Manifest this update: Wed 03 Dec 2025 00:16:29 +0000 Manifest next update: Sat 06 Dec 2025 00:38:29 +0000 Files and hashes: 1: 3130332e3135362e39362e302f32342d3234203d3e20313431303837.roa (hash: vljo5Oi0hl2aQpZ4Kaqz7NdJ52vgowFgq0RTxUCluvc=) 2: 323430363a383434303a3a2f33322d3332203d3e20313431303837.roa (hash: cXUkxWwyVPS60XbTkvXKCEQggyZtT3odfL2WdxtdbQM=) 3: 878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl (hash: ajako8sBVv24i58o2deIJfgagEQagtFVn6y/1O2npdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:38:16:2c:41:42:23:94:e4:13:1a:c9:54:e1:8a:f6:1e:d7:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE Validity Not Before: Dec 3 00:16:29 2025 GMT Not After : Dec 6 00:38:29 2025 GMT Subject: CN=0E6F6EB43E7177327BD043398C70D9EBC1572E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:2e:80:c8:95:23:e5:c7:a5:63:41:0c:ce: 0c:9f:99:ce:04:53:9b:f9:92:41:4f:33:56:66:a1: 1b:d0:25:0e:7b:ea:47:f7:c7:65:cd:3b:c9:28:05: 7f:6b:b9:7a:75:e0:81:f9:a2:d9:22:3f:60:d4:2b: 65:bb:56:55:8c:77:c4:c7:40:fb:73:1f:f9:39:ae: 52:5e:f5:30:24:4a:ca:7d:c4:8d:6f:04:7a:35:5d: 1d:38:ae:54:1f:cb:2e:07:3e:cf:69:11:41:c2:af: ff:d0:e6:3c:ee:92:4b:d2:05:0f:be:47:d0:25:9d: 80:bc:f0:68:ac:e2:bc:b5:c0:3f:86:3d:ae:58:e5: 49:3a:14:16:34:3f:b8:80:76:2b:d9:61:8b:b4:15: 20:78:b7:f3:85:31:92:86:51:f4:f0:1f:57:e3:4e: b9:47:b0:c1:55:bc:ab:bd:8b:7d:d8:6f:f1:4a:30: a0:70:d9:9d:00:c0:d6:62:74:d3:ab:b4:17:fd:96: b7:4c:b0:9b:08:fa:57:be:0e:74:23:5d:96:23:80: 5b:d4:e7:7c:7d:9a:17:94:da:6e:98:a1:f0:cd:04: 45:61:2c:8e:94:88:be:22:df:95:86:05:f2:90:86: 61:90:1a:0c:13:18:91:13:b5:d4:29:87:d0:77:41: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6F:6E:B4:3E:71:77:32:7B:D0:43:39:8C:70:D9:EB:C1:57:2E:9A X509v3 Authority Key Identifier: keyid:87:8D:F4:B7:E3:C7:76:B2:ED:C1:75:2F:CC:BC:5E:28:9C:45:3B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c897c4a-e0ff-4652-a591-ff2d48e72c91/0/878DF4B7E3C776B2EDC1752FCCBC5E289C453BEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3d:38:e5:29:b1:13:68:4f:c6:cb:85:72:aa:b5:bc:97:52: 40:dd:d0:c5:1c:4e:47:8d:b9:f3:fb:be:36:29:de:6b:5f:a4: ef:cd:95:93:45:88:0f:a5:ed:ad:ab:90:a2:af:6c:8a:97:33: e4:ab:01:a6:85:a6:7a:55:e4:84:08:18:83:a8:f4:38:6b:7e: a1:8b:ac:4c:83:58:a9:5a:33:c1:02:e2:9d:f1:5a:a1:25:05: 02:48:af:28:9f:14:22:db:24:eb:57:32:24:cd:40:26:64:c8: c7:05:ca:19:87:47:45:6f:c2:41:3e:6e:4d:8a:0c:32:d1:5e: 51:b9:4b:3a:e0:aa:2a:4c:aa:a5:fe:a7:1a:87:c7:05:06:21: f0:16:42:17:ac:b6:c8:d9:49:8c:3f:02:90:44:5e:81:5a:40: 61:51:dd:25:46:0a:d9:42:24:e8:69:b5:56:fa:c4:d0:53:3f: 61:66:21:30:a4:31:7f:a5:3a:5f:a4:d7:c8:28:80:ee:07:f0: 20:0f:43:29:54:2f:b2:55:85:a9:34:95:a4:43:e1:58:c4:1c: 53:69:27:6a:37:b4:be:e7:e5:d5:d2:60:2d:36:21:ff:57:a3: e2:0c:98:a5:fc:4d:a9:cd:46:c7:b0:26:3e:27:d5:9d:e3:79: c3:a8:8a:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTgWLEFCI5TkExrJVOGK9h7Xe/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5 QzQ1M0JFRTAeFw0yNTEyMDMwMDE2MjlaFw0yNTEyMDYwMDM4MjlaMDMxMTAvBgNV BAMTKDBFNkY2RUI0M0U3MTc3MzI3QkQwNDMzOThDNzBEOUVCQzE1NzJFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3VS6AyJUj5celY0EMzgyfmc4E U5v5kkFPM1ZmoRvQJQ576kf3x2XNO8koBX9ruXp14IH5otkiP2DUK2W7VlWMd8TH QPtzH/k5rlJe9TAkSsp9xI1vBHo1XR04rlQfyy4HPs9pEUHCr//Q5jzukkvSBQ++ R9AlnYC88Gis4ry1wD+GPa5Y5Uk6FBY0P7iAdivZYYu0FSB4t/OFMZKGUfTwH1fj TrlHsMFVvKu9i33Yb/FKMKBw2Z0AwNZidNOrtBf9lrdMsJsI+le+DnQjXZYjgFvU 53x9mheU2m6YofDNBEVhLI6UiL4i35WGBfKQhmGQGgwTGJETtdQph9B3QRRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDm9utD5xdzJ70EM5jHDZ68FXLpowHwYDVR0j BBgwFoAUh430t+PHdrLtwXUvzLxeKJxFO+4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Yzg5N2M0YS1lMGZmLTQ2NTItYTU5MS1mZjJkNDhlNzJjOTEvMC84NzhERjRCN0Uz Qzc3NkIyRURDMTc1MkZDQ0JDNUUyODlDNDUzQkVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVFMjg5QzQ1 M0JFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM4OTdjNGEtZTBmZi00NjUyLWE1 OTEtZmYyZDQ4ZTcyYzkxLzAvODc4REY0QjdFM0M3NzZCMkVEQzE3NTJGQ0NCQzVF Mjg5QzQ1M0JFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA9OOUpsRNoT8bLhXKqtbyXUkDd0MUcTkeN ufP7vjYp3mtfpO/NlZNFiA+l7a2rkKKvbIqXM+SrAaaFpnpV5IQIGIOo9DhrfqGL rEyDWKlaM8EC4p3xWqElBQJIryifFCLbJOtXMiTNQCZkyMcFyhmHR0VvwkE+bk2K DDLRXlG5SzrgqipMqqX+pxqHxwUGIfAWQhestsjZSYw/ApBEXoFaQGFR3SVGCtlC JOhptVb6xNBTP2FmITCkMX+lOl+k18gogO4H8CAPQylUL7JVhak0laRD4VjEHFNp J2o3tL7n5dXSYC02If9Xo+IMmKX8TanNRsewJj4n1Z3jecOoiog= -----END CERTIFICATE-----Generated at Wed Dec 3 14:51:26 2025 by rpki-client