This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
File: 798A229C42DA54D0690064D264AA7AA2375D0419.mft (raw, json)
Hash identifier: grJUS7BCPQHPvvl1hmBO5tpK+H5trUB4C/MYDH2Jf68=
Subject key identifier: 19:15:2D:E4:A2:AF:C5:CD:E8:BF:25:E4:FA:D2:21:A4:4D:D8:46:DE
Authority key identifier: 79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
Certificate issuer: /CN=798A229C42DA54D0690064D264AA7AA2375D0419
Certificate serial: 2BE4130E019B55B5358470A9B89CF51E807CB5F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
Manifest number: F0
Signing time: Wed 03 Dec 2025 05:32:16 +0000
Manifest this update: Wed 03 Dec 2025 05:27:16 +0000
Manifest next update: Sat 06 Dec 2025 08:19:16 +0000
Files and hashes: 1: 323030313a6466333a643934303a3a2f34382d3438203d3e20313532373732.roa (hash: VG6+4O5llgQnLe8B6hYlDtcuv5x9Z/46JdLy5SPzH+0=)
2: 798A229C42DA54D0690064D264AA7AA2375D0419.crl (hash: PvelE5WvD2k8+dYy0wSBulo8bXtiB7aB8k6axdYcF5w=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e4:13:0e:01:9b:55:b5:35:84:70:a9:b8:9c:f5:1e:80:7c:b5:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798A229C42DA54D0690064D264AA7AA2375D0419
Validity
Not Before: Dec 3 05:27:16 2025 GMT
Not After : Dec 6 08:19:16 2025 GMT
Subject: CN=19152DE4A2AFC5CDE8BF25E4FAD221A44DD846DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:2e:e2:83:2b:1a:56:e3:8b:24:ca:62:74:
e4:9e:c3:5e:12:a0:4a:a6:69:75:c1:52:07:91:d2:
c9:51:36:11:12:11:ae:4e:eb:cf:4b:f5:db:da:2a:
87:53:79:7a:e9:de:f1:f0:cc:f6:18:5d:63:04:8e:
b9:eb:ef:f8:a0:64:cc:70:de:19:88:1c:ca:58:ca:
73:e7:10:02:f3:03:ad:02:74:f2:dd:62:8e:3b:80:
6c:ca:7c:d7:0c:cd:e4:26:12:f3:2a:91:a9:ef:92:
8a:0e:f1:31:6a:a1:d1:3b:99:e7:2b:0a:d5:f5:6a:
4c:25:62:7a:a0:8b:c7:06:65:7d:ca:dc:ab:f6:ad:
77:c7:ad:be:a9:b8:20:1f:fe:44:22:8f:9f:ab:9d:
f3:29:e2:e0:52:7a:a3:b4:1a:a9:d5:e9:30:4a:9e:
20:64:33:1d:c3:bb:b2:90:7d:c3:d2:b7:1b:3e:0f:
1b:19:91:c6:49:dc:3d:e6:ed:6d:fc:0c:8e:5f:74:
20:98:d0:c7:22:76:b9:f8:bd:aa:67:a0:d0:92:69:
fc:f9:74:3c:a3:ef:33:f1:ec:c4:0b:59:ee:f1:5c:
39:20:61:82:d7:c1:72:16:13:9a:a8:9c:6c:87:71:
af:7d:ee:3c:74:51:06:25:c4:cd:8f:8a:14:7c:fb:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:2D:E4:A2:AF:C5:CD:E8:BF:25:E4:FA:D2:21:A4:4D:D8:46:DE
X509v3 Authority Key Identifier:
keyid:79:8A:22:9C:42:DA:54:D0:69:00:64:D2:64:AA:7A:A2:37:5D:04:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798A229C42DA54D0690064D264AA7AA2375D0419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/1/798A229C42DA54D0690064D264AA7AA2375D0419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1c:c4:d2:cd:9a:8b:2e:b4:bf:fa:41:3f:50:43:59:4e:42:
31:cc:26:7e:d3:17:21:db:11:72:e3:1d:44:4f:12:73:b1:62:
c7:5c:29:b8:6a:bb:52:e4:1c:4c:d1:e6:a6:af:05:7e:a9:10:
6c:57:06:6a:7d:84:9d:0f:01:08:8a:5b:64:6e:1e:bb:d4:39:
e4:c8:94:55:0e:7a:90:7c:41:d3:08:30:6e:65:23:04:d8:e3:
41:ce:b2:3e:e4:e8:21:6b:3e:75:05:27:f6:7b:83:f6:82:76:
cc:ae:66:99:2b:0e:d0:a8:6e:71:07:7d:49:e3:e9:56:62:e2:
d4:ea:d6:0a:72:0b:8e:0a:2e:6e:ec:fa:da:6f:2c:9c:a7:7a:
ec:7d:ce:11:ac:48:22:77:bc:eb:1d:1e:a1:94:e9:1f:8d:7a:
26:3b:ba:93:40:65:e4:0a:1f:57:0f:02:82:60:16:4c:45:78:
55:3f:f4:18:0e:10:76:68:f4:30:f4:7b:05:89:b2:04:c8:88:
a6:c5:31:8f:26:81:ca:f7:a1:e9:8a:59:bd:b3:89:23:7d:71:
09:ff:fc:19:05:a7:d7:85:35:db:15:81:54:61:1b:32:5d:b3:
f9:82:e9:57:64:12:b4:50:c0:5d:d6:f9:d9:5d:01:c9:d4:8a:
c8:3c:3c:5e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUK+QTDgGbVbU1hHCpuJz1HoB8tfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIz
NzVEMDQxOTAeFw0yNTEyMDMwNTI3MTZaFw0yNTEyMDYwODE5MTZaMDMxMTAvBgNV
BAMTKDE5MTUyREU0QTJBRkM1Q0RFOEJGMjVFNEZBRDIyMUE0NEREODQ2REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRbi7igysaVuOLJMpidOSew14S
oEqmaXXBUgeR0slRNhESEa5O689L9dvaKodTeXrp3vHwzPYYXWMEjrnr7/igZMxw
3hmIHMpYynPnEALzA60CdPLdYo47gGzKfNcMzeQmEvMqkanvkooO8TFqodE7mecr
CtX1akwlYnqgi8cGZX3K3Kv2rXfHrb6puCAf/kQij5+rnfMp4uBSeqO0GqnV6TBK
niBkMx3Du7KQfcPStxs+DxsZkcZJ3D3m7W38DI5fdCCY0Mcidrn4vapnoNCSafz5
dDyj7zPx7MQLWe7xXDkgYYLXwXIWE5qonGyHca997jx0UQYlxM2PihR8+w3dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUGRUt5KKvxc3ovyXk+tIhpE3YRt4wHwYDVR0j
BBgwFoAUeYoinELaVNBpAGTSZKp6ojddBBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMS83OThBMjI5QzQy
REE1NEQwNjkwMDY0RDI2NEFBN0FBMjM3NUQwNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdBQTIzNzVE
MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw
YzctNTBjNmYxNGNkMjQyLzEvNzk4QTIyOUM0MkRBNTREMDY5MDA2NEQyNjRBQTdB
QTIzNzVEMDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAKUcxNLNmosutL/6QT9QQ1lOQjHMJn7TFyHb
EXLjHURPEnOxYsdcKbhqu1LkHEzR5qavBX6pEGxXBmp9hJ0PAQiKW2RuHrvUOeTI
lFUOepB8QdMIMG5lIwTY40HOsj7k6CFrPnUFJ/Z7g/aCdsyuZpkrDtCobnEHfUnj
6VZi4tTq1gpyC44KLm7s+tpvLJyneux9zhGsSCJ3vOsdHqGU6R+NeiY7upNAZeQK
H1cPAoJgFkxFeFU/9BgOEHZo9DD0ewWJsgTIiKbFMY8mgcr3oemKWb2ziSN9cQn/
/BkFp9eFNdsVgVRhGzJds/mC6VdkErRQwF3W+dldAcnUisg8PF4=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:13:34 2025 by rpki-client