This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft File: 78702A768CA1E1867D543013BB6186EDA3C06C16.mft (raw, json) Hash identifier: rm2aJ8gYeh6DFssqMYmUBIG/ftyTQ4NqUUfNcGAVkYg= Subject key identifier: 21:2C:A1:2A:22:3E:68:E4:C1:7A:92:FF:6B:98:95:08:98:96:5E:08 Authority key identifier: 78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 Certificate issuer: /CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Certificate serial: 6CB5013798A0898B73CB201FB5A93CB4EF17FC47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft Manifest number: BC Signing time: Sun 07 Dec 2025 00:21:24 +0000 Manifest this update: Sun 07 Dec 2025 00:16:24 +0000 Manifest next update: Wed 10 Dec 2025 02:01:24 +0000 Files and hashes: 1: 78702A768CA1E1867D543013BB6186EDA3C06C16.crl (hash: 78xVgtlEv+752IuOV1Bz8urCYaLkRuSUUmsAJUaO5aA=) 2: 3135372e36362e3134312e302f32342d3234203d3e20313532373539.roa (hash: movLiT++PBKuPBzz5dXs+l8kqn3e27i1U3F37q5BVns=) 3: 3135372e36362e3134302e302f32342d3234203d3e20313532373539.roa (hash: wI2gL+xeUj5R4U7m3JbkXYMiUcHbqqc4tcsVpsPURE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b5:01:37:98:a0:89:8b:73:cb:20:1f:b5:a9:3c:b4:ef:17:fc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78702A768CA1E1867D543013BB6186EDA3C06C16 Validity Not Before: Dec 7 00:16:24 2025 GMT Not After : Dec 10 02:01:24 2025 GMT Subject: CN=212CA12A223E68E4C17A92FF6B98950898965E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:61:a0:f2:49:93:46:1b:49:a9:3a:6b:20: 33:88:11:38:42:62:25:e7:b1:76:8a:d6:cf:26:b5: 0b:c6:16:57:26:b3:af:d7:2a:ee:aa:6f:4a:41:6a: 3a:92:59:fb:1f:4a:a3:ee:0b:75:b4:f6:e3:8b:69: 02:f8:d6:de:7c:4d:4c:59:4f:8d:e6:f8:7e:2f:ce: ef:f7:68:74:df:6c:3e:b1:9b:7a:95:28:95:ef:e1: 15:95:ad:74:40:65:fa:91:ef:00:44:f7:c5:5a:b2: 5b:6a:62:14:08:ac:df:df:6b:b9:86:54:e4:c8:22: 03:50:83:56:3d:1f:50:38:ce:c7:ef:26:8d:95:24: 2a:d2:96:a9:6c:36:80:21:d1:21:8d:94:b9:e5:9e: e1:d6:12:68:6c:1f:3d:45:84:53:7f:a6:b9:26:4e: 17:25:24:71:05:1d:d2:6b:b9:45:da:7f:9e:e9:10: 13:6b:02:50:eb:03:04:b8:ef:09:89:6c:a2:2a:07: a2:e0:f3:d8:07:b0:0b:c9:13:13:fa:75:a7:1d:58: 12:81:db:6a:f6:40:fe:53:47:81:37:82:45:aa:73: 80:e4:b3:ed:f1:f7:d7:4d:4d:d1:40:a1:4b:3b:76: 80:c7:a4:22:e7:22:4f:5b:4e:24:18:5e:29:c1:8f: 56:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2C:A1:2A:22:3E:68:E4:C1:7A:92:FF:6B:98:95:08:98:96:5E:08 X509v3 Authority Key Identifier: keyid:78:70:2A:76:8C:A1:E1:86:7D:54:30:13:BB:61:86:ED:A3:C0:6C:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/78702A768CA1E1867D543013BB6186EDA3C06C16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dba9f4e2-c73b-4427-9829-1da1baab870b/0/78702A768CA1E1867D543013BB6186EDA3C06C16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:b8:21:d9:a7:bb:2a:5e:8c:38:77:f1:39:f9:3f:4f:25:ef: a1:ea:8c:fa:2c:25:b7:f8:18:05:28:83:5a:33:d4:be:14:0a: 96:5e:a1:1d:8c:3c:4e:95:73:f4:c2:24:20:b2:fc:ce:25:42: 3f:24:00:26:fd:2c:74:3e:65:f1:7a:e6:e5:a4:e6:f3:5c:5a: 40:dc:96:9f:70:cd:bb:67:39:5e:95:27:fd:15:da:fb:b5:cd: 9a:70:e6:ed:74:e5:2f:71:2d:eb:49:77:23:3f:80:71:82:0e: 6e:55:d0:57:0b:5f:79:18:a5:41:58:e8:da:64:d0:37:ab:f5: 5f:e7:8d:6e:a3:25:33:41:0e:f7:98:92:4f:ca:38:0e:08:f4: 59:b3:82:5b:4d:3e:ec:28:74:b1:87:60:d9:51:1a:92:3b:b0: 1f:92:7d:0f:67:ba:61:ff:c6:60:17:be:14:f8:64:90:d7:d4: 0b:bb:46:04:02:2e:2e:3b:b6:ff:25:fd:34:e5:a2:bd:8a:98: 86:5d:63:b0:a7:13:2f:c1:61:ac:95:58:b4:05:b4:50:b2:04: 05:b9:af:7b:3d:ac:b6:ff:0c:16:17:6c:0b:c0:5f:39:a6:0f: b3:d1:b1:d8:f1:c9:df:1b:d4:14:62:64:db:de:bc:8e:bc:83: e5:62:ab:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLUBN5igiYtzyyAftak8tO8X/EcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURB M0MwNkMxNjAeFw0yNTEyMDcwMDE2MjRaFw0yNTEyMTAwMjAxMjRaMDMxMTAvBgNV BAMTKDIxMkNBMTJBMjIzRTY4RTRDMTdBOTJGRjZCOTg5NTA4OTg5NjVFMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdPmGg8kmTRhtJqTprIDOIEThC YiXnsXaK1s8mtQvGFlcms6/XKu6qb0pBajqSWfsfSqPuC3W09uOLaQL41t58TUxZ T43m+H4vzu/3aHTfbD6xm3qVKJXv4RWVrXRAZfqR7wBE98VasltqYhQIrN/fa7mG VOTIIgNQg1Y9H1A4zsfvJo2VJCrSlqlsNoAh0SGNlLnlnuHWEmhsHz1FhFN/prkm ThclJHEFHdJruUXaf57pEBNrAlDrAwS47wmJbKIqB6Lg89gHsAvJExP6dacdWBKB 22r2QP5TR4E3gkWqc4Dks+3x99dNTdFAoUs7doDHpCLnIk9bTiQYXinBj1ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUISyhKiI+aOTBepL/a5iVCJiWXggwHwYDVR0j BBgwFoAUeHAqdoyh4YZ9VDATu2GG7aPAbBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmE5ZjRlMi1jNzNiLTQ0MjctOTgyOS0xZGExYmFhYjg3MGIvMC83ODcwMkE3NjhD QTFFMTg2N0Q1NDMwMTNCQjYxODZFREEzQzA2QzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2RURBM0Mw NkMxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJhOWY0ZTItYzczYi00NDI3LTk4 MjktMWRhMWJhYWI4NzBiLzAvNzg3MDJBNzY4Q0ExRTE4NjdENTQzMDEzQkI2MTg2 RURBM0MwNkMxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABC4IdmnuypejDh38Tn5P08l76HqjPosJbf4 GAUog1oz1L4UCpZeoR2MPE6Vc/TCJCCy/M4lQj8kACb9LHQ+ZfF65uWk5vNcWkDc lp9wzbtnOV6VJ/0V2vu1zZpw5u105S9xLetJdyM/gHGCDm5V0FcLX3kYpUFY6Npk 0Der9V/njW6jJTNBDveYkk/KOA4I9FmzgltNPuwodLGHYNlRGpI7sB+SfQ9numH/ xmAXvhT4ZJDX1Au7RgQCLi47tv8l/TTlor2KmIZdY7CnEy/BYayVWLQFtFCyBAW5 r3s9rLb/DBYXbAvAXzmmD7PRsdjxyd8b1BRiZNvevI68g+Viq7A= -----END CERTIFICATE-----Generated at Sun Dec 7 18:56:12 2025 by rpki-client