This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: r32ucwhb+Uyau7CMWBL0o7X5vrbRT9PbFbPQa1GYNCU= Subject key identifier: 80:03:5A:9C:BB:ED:FA:88:57:7D:6C:E0:64:B4:49:20:27:AF:EC:87 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 1CE8E56DF301A99014AA5F0769B5669C4E9D746A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0278 Signing time: Wed 24 Dec 2025 05:01:16 +0000 Manifest this update: Wed 24 Dec 2025 04:56:16 +0000 Manifest next update: Sat 27 Dec 2025 12:55:16 +0000 Files and hashes: 1: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) 2: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) 3: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: 4BjIplL8iRdhi1Qmyqg28d0wlXG/h0fvcVyd6kt9A9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e8:e5:6d:f3:01:a9:90:14:aa:5f:07:69:b5:66:9c:4e:9d:74:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Dec 24 04:56:16 2025 GMT Not After : Dec 27 12:55:16 2025 GMT Subject: CN=80035A9CBBEDFA88577D6CE064B4492027AFEC87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:3f:01:5d:cb:d1:7f:a3:b0:dd:d1:38:e8: 8d:e0:bb:3b:a0:d6:db:ad:f8:6a:f0:9e:1e:8a:0f: c6:6b:54:d2:ab:77:25:59:64:65:59:2f:37:72:bd: d0:31:33:b9:c8:b6:2d:4e:4a:98:19:4e:26:d4:b6: ea:4d:71:12:b2:e5:2c:9c:77:b8:6d:65:b7:68:5f: ed:dd:77:83:88:c0:1e:75:e7:cb:a2:8c:e1:df:cd: d3:de:29:f1:9f:5e:d9:dc:8d:d2:7a:b4:97:7c:d8: 28:ec:e9:1b:45:7e:ab:5a:0c:c0:ce:3d:08:4e:c3: c8:f6:1f:9f:5b:6e:27:21:62:1d:e4:7d:8a:de:5c: 2a:59:1d:00:63:18:2c:74:8f:df:e3:9d:22:e8:9b: 21:b6:ad:a2:18:87:b3:5a:32:50:c7:ba:6a:44:c1: c6:4f:3f:dc:43:bb:f0:3c:1c:07:8b:c7:8e:42:85: d2:13:eb:18:a3:85:95:75:90:a9:40:9f:f4:14:9b: 36:a1:a2:bf:59:35:30:03:d3:4c:f4:b2:c1:f1:92: 2f:32:ed:29:b1:60:ec:f5:ed:5b:52:5e:fe:38:ee: 24:52:c9:e3:5c:21:bc:4e:dd:40:12:c9:7d:70:e0: 55:e7:a3:f1:a4:cc:ea:64:61:16:53:78:89:98:60: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:03:5A:9C:BB:ED:FA:88:57:7D:6C:E0:64:B4:49:20:27:AF:EC:87 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:30:16:f3:b6:60:1a:9e:fc:bc:c8:ed:ae:14:7e:48:f0:96: a7:54:80:83:14:ff:52:ec:14:af:61:3a:09:b3:66:6d:8c:4a: a9:24:97:f2:1d:35:12:13:7e:42:af:70:d2:ba:23:7f:e0:ac: f6:97:29:0e:94:7b:09:82:00:52:0f:b1:89:6f:50:e8:04:af: ff:af:66:97:01:71:e9:05:33:10:99:00:0b:7a:84:c2:cc:17: 69:ab:2f:9f:5c:08:b9:a3:37:4c:37:16:c7:d0:5d:0a:e2:0d: 1b:64:cb:c9:38:0a:ce:8a:0a:9f:fe:a1:50:08:00:ed:79:89: b9:9e:70:7a:dc:c5:a3:a4:db:8a:ee:8f:0a:23:06:ee:2f:b1: 70:fc:10:ac:7f:bd:ba:a0:88:90:72:ff:c0:15:ea:6a:02:45: f8:78:45:4c:4e:b2:52:50:3d:9c:d2:9b:0d:0e:0b:f7:7f:b4: d1:ef:8d:fb:ed:54:e1:06:ab:68:d1:3f:c6:18:6d:5e:f8:fa: bf:c3:8f:24:6b:8f:ee:8f:dc:ca:70:d5:bc:1b:69:41:fe:1e: b6:eb:a7:da:57:ee:f8:91:a6:11:0f:61:38:8b:a1:03:7e:17: a1:5f:a6:6f:ce:f6:40:bf:97:30:07:a6:ab:3b:b9:d9:da:e2: d7:c7:b5:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOjlbfMBqZAUql8HabVmnE6ddGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTEyMjQwNDU2MTZaFw0yNTEyMjcxMjU1MTZaMDMxMTAvBgNV BAMTKDgwMDM1QTlDQkJFREZBODg1NzdENkNFMDY0QjQ0OTIwMjdBRkVDODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oT8BXcvRf6Ow3dE46I3guzug 1tut+Grwnh6KD8ZrVNKrdyVZZGVZLzdyvdAxM7nIti1OSpgZTibUtupNcRKy5Syc d7htZbdoX+3dd4OIwB5158uijOHfzdPeKfGfXtncjdJ6tJd82Cjs6RtFfqtaDMDO PQhOw8j2H59bbichYh3kfYreXCpZHQBjGCx0j9/jnSLomyG2raIYh7NaMlDHumpE wcZPP9xDu/A8HAeLx45ChdIT6xijhZV1kKlAn/QUmzahor9ZNTAD00z0ssHxki8y 7SmxYOz17VtSXv447iRSyeNcIbxO3UASyX1w4FXno/GkzOpkYRZTeImYYDhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgANanLvt+ohXfWzgZLRJICev7IcwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0wFvO2YBqe/LzI7a4UfkjwlqdUgIMU/1Ls FK9hOgmzZm2MSqkkl/IdNRITfkKvcNK6I3/grPaXKQ6UewmCAFIPsYlvUOgEr/+v ZpcBcekFMxCZAAt6hMLMF2mrL59cCLmjN0w3FsfQXQriDRtky8k4Cs6KCp/+oVAI AO15ibmecHrcxaOk24rujwojBu4vsXD8EKx/vbqgiJBy/8AV6moCRfh4RUxOslJQ PZzSmw0OC/d/tNHvjfvtVOEGq2jRP8YYbV74+r/DjyRrj+6P3Mpw1bwbaUH+Hrbr p9pX7viRphEPYTiLoQN+F6Ffpm/O9kC/lzAHpqs7udna4tfHtQA= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:40 2025 by rpki-client