This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft File: 798D703C19A93E4E19F716304D78F20AA3261B8A.mft (raw, json) Hash identifier: jQtA7xybJn8GSK2clNSxMDGliWs2DwuSXfa1/1XXfIA= Subject key identifier: 16:FC:58:7C:32:0D:CA:23:3C:8F:E9:7F:62:31:D7:D2:08:A3:E2:AC Authority key identifier: 79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A Certificate issuer: /CN=798D703C19A93E4E19F716304D78F20AA3261B8A Certificate serial: 048D8288F0BDE86190F09BEE18254F1079F8CC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft Manifest number: 052F Signing time: Mon 01 Dec 2025 18:31:59 +0000 Manifest this update: Mon 01 Dec 2025 18:26:59 +0000 Manifest next update: Fri 05 Dec 2025 03:45:59 +0000 Files and hashes: 1: 3130332e38332e39362e302f32322d3234203d3e20313336303738.roa (hash: h+98Hl+FH7IDfemSrtBXhbDJo99hfIfndXfQe3JekOA=) 2: 323430303a393163303a3a2f33322d3438203d3e20313336303738.roa (hash: JtI1jfgaZBEwCqyUB72ksPn3QargIoHZ6U4tHyErJjI=) 3: 798D703C19A93E4E19F716304D78F20AA3261B8A.crl (hash: fhNSZKEBgffyatZmbK6wGeusDPpvGnroJCyuKFPjut4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8d:82:88:f0:bd:e8:61:90:f0:9b:ee:18:25:4f:10:79:f8:cc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798D703C19A93E4E19F716304D78F20AA3261B8A Validity Not Before: Dec 1 18:26:59 2025 GMT Not After : Dec 5 03:45:59 2025 GMT Subject: CN=16FC587C320DCA233C8FE97F6231D7D208A3E2AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:36:0f:80:a9:c0:fd:0e:d4:98:a5:2e:31: 60:0b:41:ea:01:d6:60:0e:ad:52:3f:90:9b:cb:9d: f6:c0:66:a9:e6:bb:ce:db:4f:07:5c:10:db:d1:2a: 9e:00:49:3d:63:6e:83:ac:67:69:b9:b0:49:8a:66: da:40:22:4e:a4:d4:60:a1:79:26:03:a3:a7:9a:8c: 64:bb:91:b7:f2:7d:d7:85:4c:fe:d6:68:d9:7c:39: 54:eb:65:81:33:3b:b7:bb:73:00:3d:cb:10:32:a3: 97:08:82:c0:b8:84:9d:62:1c:56:cc:57:5f:13:c3: 15:c7:4b:c2:69:32:55:cd:d5:5a:b3:e4:98:12:98: 30:f0:74:0e:90:87:2b:03:35:94:b2:9e:59:4e:33: 44:86:05:8b:57:cf:45:0a:d7:92:80:2d:f5:d4:06: 8e:19:b0:61:b0:95:9f:0e:a8:be:d7:36:3c:37:15: bc:6b:e0:7d:aa:e5:77:7d:a2:5d:98:67:e1:8d:23: e5:78:ef:72:f9:25:bf:fd:21:a2:8a:e7:f5:2f:74: b1:e7:b4:e7:51:4e:36:76:00:6f:9f:41:53:ed:75: cb:7e:85:41:15:6a:38:87:04:24:ac:eb:3a:6b:c7: c6:d5:89:a1:f1:c8:24:61:fa:01:6c:ce:fc:b4:41: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:58:7C:32:0D:CA:23:3C:8F:E9:7F:62:31:D7:D2:08:A3:E2:AC X509v3 Authority Key Identifier: keyid:79:8D:70:3C:19:A9:3E:4E:19:F7:16:30:4D:78:F2:0A:A3:26:1B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798D703C19A93E4E19F716304D78F20AA3261B8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6ec35ed-0f36-43d7-b537-06db314c90d5/0/798D703C19A93E4E19F716304D78F20AA3261B8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:22:35:7d:10:38:77:dd:63:df:70:64:e9:56:db:03:df:4c: 9f:e7:c5:42:f3:74:1d:0e:54:97:d0:07:ec:8d:47:82:f8:99: fc:fe:26:8f:d9:24:96:6f:0f:52:d4:c0:65:ed:90:3d:ab:77: 14:6a:98:49:ea:f9:9e:72:cf:17:78:53:c6:03:6a:e4:7f:6b: 58:ed:39:1d:8d:48:67:3e:49:f4:62:c1:51:20:dc:a4:53:ac: bc:98:9b:74:66:65:55:39:da:63:a9:82:20:a7:60:da:26:9a: c6:ee:08:3e:fd:ee:96:9b:54:bc:5b:96:36:5e:54:57:a1:be: 36:33:1c:ba:a1:2b:e3:26:d7:a1:fa:99:62:b9:c1:c4:92:a5: bb:0b:75:1b:56:6b:df:c5:97:72:7c:25:99:64:50:11:e4:59: 8c:ce:a0:58:50:a8:f1:96:fc:c6:b9:f3:87:a8:56:a8:7e:ff: 83:6e:ab:4a:97:90:95:6e:2a:0e:63:f2:f1:51:3a:68:dc:a4: 24:c4:13:3d:3d:67:b0:57:0f:46:62:11:8b:90:e6:95:93:fe: aa:ee:62:ba:05:25:ed:3f:35:f2:01:be:d9:81:f1:89:4b:25: 4a:4b:8b:83:a5:cf:37:ce:64:e2:e7:80:97:30:20:94:d4:f6: c3:5c:be:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBI2CiPC96GGQ8JvuGCVPEHn4zCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFB MzI2MUI4QTAeFw0yNTEyMDExODI2NTlaFw0yNTEyMDUwMzQ1NTlaMDMxMTAvBgNV BAMTKDE2RkM1ODdDMzIwRENBMjMzQzhGRTk3RjYyMzFEN0QyMDhBM0UyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxDYPgKnA/Q7UmKUuMWALQeoB 1mAOrVI/kJvLnfbAZqnmu87bTwdcENvRKp4AST1jboOsZ2m5sEmKZtpAIk6k1GCh eSYDo6eajGS7kbfyfdeFTP7WaNl8OVTrZYEzO7e7cwA9yxAyo5cIgsC4hJ1iHFbM V18TwxXHS8JpMlXN1Vqz5JgSmDDwdA6QhysDNZSynllOM0SGBYtXz0UK15KALfXU Bo4ZsGGwlZ8OqL7XNjw3Fbxr4H2q5Xd9ol2YZ+GNI+V473L5Jb/9IaKK5/UvdLHn tOdRTjZ2AG+fQVPtdct+hUEVajiHBCSs6zprx8bViaHxyCRh+gFszvy0QZ6VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvxYfDINyiM8j+l/YjHX0gij4qwwHwYDVR0j BBgwFoAUeY1wPBmpPk4Z9xYwTXjyCqMmG4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmVjMzVlZC0wZjM2LTQzZDctYjUzNy0wNmRiMzE0YzkwZDUvMC83OThENzAzQzE5 QTkzRTRFMTlGNzE2MzA0RDc4RjIwQUEzMjYxQjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYyMEFBMzI2 MUI4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZlYzM1ZWQtMGYzNi00M2Q3LWI1 MzctMDZkYjMxNGM5MGQ1LzAvNzk4RDcwM0MxOUE5M0U0RTE5RjcxNjMwNEQ3OEYy MEFBMzI2MUI4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMiNX0QOHfdY99wZOlW2wPfTJ/nxULzdB0O VJfQB+yNR4L4mfz+Jo/ZJJZvD1LUwGXtkD2rdxRqmEnq+Z5yzxd4U8YDauR/a1jt OR2NSGc+SfRiwVEg3KRTrLyYm3RmZVU52mOpgiCnYNommsbuCD797pabVLxbljZe VFehvjYzHLqhK+Mm16H6mWK5wcSSpbsLdRtWa9/Fl3J8JZlkUBHkWYzOoFhQqPGW /Ma584eoVqh+/4Nuq0qXkJVuKg5j8vFROmjcpCTEEz09Z7BXD0ZiEYuQ5pWT/qru YroFJe0/NfIBvtmB8YlLJUpLi4OlzzfOZOLngJcwIJTU9sNcvgU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:08 2025 by rpki-client