This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft File: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft (raw, json) Hash identifier: 6VqUfoGu2USIwQwDMQvj5ikmYay3EgzS3rJ9W5wrTpQ= Subject key identifier: DA:21:3C:AE:EF:DA:95:19:B5:45:2E:6B:E1:5E:8B:2E:C2:8C:B7:29 Authority key identifier: 78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C Certificate issuer: /CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Certificate serial: 4850B8FBAB4B237F96E82A315D106830C6E0ED43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft Manifest number: 0243 Signing time: Mon 01 Dec 2025 20:11:17 +0000 Manifest this update: Mon 01 Dec 2025 20:06:17 +0000 Manifest next update: Thu 04 Dec 2025 20:23:17 +0000 Files and hashes: 1: 3130332e3134352e3230302e302f32332d3234203d3e20313339343530.roa (hash: DxhHqoUAAMdaWjOHEj/Le98DcBLSN3wsgkEpHqCel+c=) 2: 323430353a386363303a3a2f33322d3332203d3e20313339343530.roa (hash: QqyJNASMZtjn96t+A2cpl22xR0g97zOoHQCrnEWX+Fo=) 3: 789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl (hash: z2Dl7knFMWXrxspx2PWE2u4paV1AS4NPol3P46XkszA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:50:b8:fb:ab:4b:23:7f:96:e8:2a:31:5d:10:68:30:c6:e0:ed:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=789C41F8FF72D4E00F36194AF24A543B3264FF5C Validity Not Before: Dec 1 20:06:17 2025 GMT Not After : Dec 4 20:23:17 2025 GMT Subject: CN=DA213CAEEFDA9519B5452E6BE15E8B2EC28CB729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1f:4b:77:0c:51:1b:ff:4f:f4:cc:91:25:41: 55:e4:7d:69:bf:eb:45:8d:9b:79:9e:0d:80:f6:20: 22:11:b0:c7:cd:da:ff:ef:74:24:be:eb:a6:b3:ba: f6:63:6c:a4:f1:2d:b1:8c:eb:e6:be:72:63:da:ea: 59:ac:aa:bd:57:0e:3e:6c:46:05:62:a8:ac:a4:f5: af:89:35:56:68:a6:4c:32:d6:9d:ce:b8:98:57:08: a0:2c:a5:4e:3a:c7:55:35:79:2f:02:ce:96:69:47: 14:ea:ba:dc:d2:94:38:1d:80:36:ad:4d:cf:a2:7f: 4b:81:12:d3:6a:7d:2e:58:c9:55:8f:a5:16:39:d7: be:41:0b:cc:72:c1:ff:58:64:42:3a:b9:94:8b:96: b3:f3:05:c9:fb:d8:71:04:81:8d:95:78:55:a4:77: 3d:93:ae:3b:8a:bd:1e:2a:cb:3c:f2:d2:c2:10:3d: 95:09:03:9e:13:18:b3:65:c3:80:56:c1:40:85:9d: 4e:f2:f9:5d:80:3b:78:60:00:14:2f:5e:92:24:5a: c7:f2:f5:be:4f:2f:37:f1:a8:e3:c1:0c:ad:32:13: d8:1c:44:63:95:c4:6d:17:d0:73:30:0f:37:2b:8e: 06:2b:e4:22:90:25:eb:3c:7c:fb:4f:a2:56:a6:4c: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:3C:AE:EF:DA:95:19:B5:45:2E:6B:E1:5E:8B:2E:C2:8C:B7:29 X509v3 Authority Key Identifier: keyid:78:9C:41:F8:FF:72:D4:E0:0F:36:19:4A:F2:4A:54:3B:32:64:FF:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789C41F8FF72D4E00F36194AF24A543B3264FF5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccf1706b-6c17-4786-abd9-47a3844da8f8/0/789C41F8FF72D4E00F36194AF24A543B3264FF5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:62:20:81:2f:ee:ec:6a:7b:50:21:09:6e:66:55:8f:fb:d0: 3b:ea:da:27:39:42:64:eb:73:ac:85:8a:1b:50:f9:80:da:b9: 0c:81:11:8b:f7:6e:e1:51:99:c3:da:ba:4a:a1:a9:1c:68:5f: 6e:0d:20:63:31:1b:f4:cf:e5:1c:25:54:2e:30:2e:44:68:fd: 8c:59:41:5e:06:fe:4f:f9:83:53:1e:8e:12:45:a9:b3:70:f5: 65:51:04:fa:36:c2:72:9a:fd:53:a5:4c:db:af:f5:91:e6:07: 86:63:81:53:4f:0c:a8:4b:84:35:ec:c4:3f:4e:77:b1:96:cd: e3:55:d0:e8:15:a1:26:fa:d4:0e:6d:81:64:ce:38:e0:ef:50: 1e:ee:ce:fa:28:1c:4f:03:86:cb:9d:9a:75:b0:62:dd:6b:35: ea:2b:99:43:d1:c0:ef:e7:eb:ec:c2:27:dc:7b:b7:18:3c:de: ec:3d:07:37:95:4c:4a:08:2a:51:fb:4e:80:53:ec:fe:a9:33: 9f:83:28:3c:fd:d0:2f:c2:a2:67:a7:31:d9:53:d7:01:06:ed: 04:9f:13:a3:b2:4d:46:98:a1:03:dd:29:57:be:69:90:2f:73: b4:1c:5c:8c:2f:ba:13:b1:f5:63:ea:0a:b0:25:8c:ba:7f:7b: f2:62:f2:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFC4+6tLI3+W6CoxXRBoMMbg7UMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0Iz MjY0RkY1QzAeFw0yNTEyMDEyMDA2MTdaFw0yNTEyMDQyMDIzMTdaMDMxMTAvBgNV BAMTKERBMjEzQ0FFRUZEQTk1MTlCNTQ1MkU2QkUxNUU4QjJFQzI4Q0I3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbH0t3DFEb/0/0zJElQVXkfWm/ 60WNm3meDYD2ICIRsMfN2v/vdCS+66azuvZjbKTxLbGM6+a+cmPa6lmsqr1XDj5s RgViqKyk9a+JNVZopkwy1p3OuJhXCKAspU46x1U1eS8CzpZpRxTqutzSlDgdgDat Tc+if0uBEtNqfS5YyVWPpRY5175BC8xywf9YZEI6uZSLlrPzBcn72HEEgY2VeFWk dz2TrjuKvR4qyzzy0sIQPZUJA54TGLNlw4BWwUCFnU7y+V2AO3hgABQvXpIkWsfy 9b5PLzfxqOPBDK0yE9gcRGOVxG0X0HMwDzcrjgYr5CKQJes8fPtPolamTHvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iE8ru/alRm1RS5r4V6LLsKMtykwHwYDVR0j BBgwFoAUeJxB+P9y1OAPNhlK8kpUOzJk/1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2YxNzA2Yi02YzE3LTQ3ODYtYWJkOS00N2EzODQ0ZGE4ZjgvMC83ODlDNDFGOEZG NzJENEUwMEYzNjE5NEFGMjRBNTQzQjMyNjRGRjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0M0IzMjY0 RkY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NmMTcwNmItNmMxNy00Nzg2LWFi ZDktNDdhMzg0NGRhOGY4LzAvNzg5QzQxRjhGRjcyRDRFMDBGMzYxOTRBRjI0QTU0 M0IzMjY0RkY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANFiIIEv7uxqe1AhCW5mVY/70Dvq2ic5QmTr c6yFihtQ+YDauQyBEYv3buFRmcPaukqhqRxoX24NIGMxG/TP5RwlVC4wLkRo/YxZ QV4G/k/5g1MejhJFqbNw9WVRBPo2wnKa/VOlTNuv9ZHmB4ZjgVNPDKhLhDXsxD9O d7GWzeNV0OgVoSb61A5tgWTOOODvUB7uzvooHE8DhsudmnWwYt1rNeormUPRwO/n 6+zCJ9x7txg83uw9BzeVTEoIKlH7ToBT7P6pM5+DKDz90C/ComenMdlT1wEG7QSf E6OyTUaYoQPdKVe+aZAvc7QcXIwvuhOx9WPqCrAljLp/e/Ji8gQ= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:20 2025 by rpki-client