This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: VzBCD+7eouaYTJR9+i376gN/jHufE97o8okaBprFxpY= Subject key identifier: 63:61:7E:40:57:4D:D8:24:A0:D9:20:9F:65:34:20:DF:3E:3B:F0:06 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 7EC23E29E43576D9677BE13BDF293320D2D91CF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04FD Signing time: Thu 18 Dec 2025 23:52:22 +0000 Manifest this update: Thu 18 Dec 2025 23:47:22 +0000 Manifest next update: Mon 22 Dec 2025 09:00:22 +0000 Files and hashes: 1: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 2: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 3: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: U9DvkmNvYbz6JOjwAL/676JaXsRZAsD7JHpCDsgmBjE=) 4: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 5: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:c2:3e:29:e4:35:76:d9:67:7b:e1:3b:df:29:33:20:d2:d9:1c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Dec 18 23:47:22 2025 GMT Not After : Dec 22 09:00:22 2025 GMT Subject: CN=63617E40574DD824A0D9209F653420DF3E3BF006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:32:d7:27:30:ed:a1:10:4a:37:00:77:c6: 14:f0:0c:50:66:37:18:55:fa:ee:69:98:bf:e4:a9: c2:31:a3:f1:f5:85:85:af:df:c9:84:b6:ff:78:64: 0a:7c:10:87:e2:7e:a5:45:a1:37:79:23:37:3c:6c: 47:79:2e:40:c9:e9:f6:1a:12:0e:7b:44:a4:a3:66: 2a:14:98:17:0d:93:d6:b5:3c:65:22:da:a9:0e:06: e8:a7:24:34:1e:8a:9a:ce:05:2e:04:ec:7e:ea:fe: e1:c6:b0:26:30:57:dc:28:96:df:d4:24:e2:1c:bc: c4:72:52:93:3f:92:94:be:c4:4c:ec:ea:20:72:12: d2:c4:a5:a4:16:1e:ac:6c:11:b7:2d:69:ca:67:0e: 2f:61:78:ca:4e:08:6f:dc:ab:cd:11:85:77:73:0f: c6:fa:87:b1:4e:fe:4e:30:56:2d:6e:a7:82:f6:34: 3d:e6:21:3f:e1:ba:7d:70:9c:6c:b5:ea:8e:49:67: df:65:0d:db:09:cc:ad:7b:fd:1a:c4:81:09:90:f3: 28:8c:41:ef:78:d1:b2:39:ce:74:02:a0:84:f8:83: 85:5f:61:96:3b:88:5b:1d:30:0e:98:98:fa:14:01: 90:94:70:73:a2:ea:5b:07:07:71:82:c7:6d:b3:29: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:61:7E:40:57:4D:D8:24:A0:D9:20:9F:65:34:20:DF:3E:3B:F0:06 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4d:8b:37:16:80:de:f7:ac:53:99:96:61:26:ac:3e:c5:87: 24:f3:71:fc:c7:86:f8:c7:88:b1:1b:3a:95:40:9c:e5:6c:d6: e8:44:d7:63:55:85:6d:c0:57:83:14:6a:a3:b0:3c:af:c7:18: d7:4c:9f:64:22:86:bb:52:2a:3e:34:1c:07:ea:38:79:98:a1: 0f:73:9e:24:e2:bd:34:6b:0a:7c:e0:93:e6:65:11:18:a8:35: da:c9:5b:f5:66:94:60:fd:f2:2a:68:8a:fb:82:50:d1:5e:9c: 48:66:11:5d:f2:fb:94:e4:5f:96:e0:2d:ac:95:65:b0:f0:5a: d8:e1:89:90:39:6a:85:17:5c:ee:d5:6a:7d:c4:db:6f:2d:d5: 5a:62:f0:93:2f:a9:df:f5:61:ed:52:31:e8:1c:cc:47:d6:b3: 39:fd:b4:6b:ef:b6:44:49:01:51:b8:95:ce:a6:f2:dc:14:a9: f2:61:26:73:8a:a6:38:ff:a6:48:8d:0d:4d:f5:d8:c8:95:85: 3b:34:c8:25:06:5d:01:f8:65:e6:d1:fa:d1:c0:a1:be:a5:29: d2:d4:2f:e5:6f:c0:8e:0d:1f:76:4c:b4:e3:a6:fb:9d:d3:e0: d0:b7:1d:8a:2a:e6:aa:41:3e:c6:77:d8:94:50:58:0b:eb:4c: 22:31:81:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfsI+KeQ1dtlne+E73ykzINLZHPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTEyMTgyMzQ3MjJaFw0yNTEyMjIwOTAwMjJaMDMxMTAvBgNV BAMTKDYzNjE3RTQwNTc0REQ4MjRBMEQ5MjA5RjY1MzQyMERGM0UzQkYwMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXDLXJzDtoRBKNwB3xhTwDFBm NxhV+u5pmL/kqcIxo/H1hYWv38mEtv94ZAp8EIfifqVFoTd5Izc8bEd5LkDJ6fYa Eg57RKSjZioUmBcNk9a1PGUi2qkOBuinJDQeiprOBS4E7H7q/uHGsCYwV9wolt/U JOIcvMRyUpM/kpS+xEzs6iByEtLEpaQWHqxsEbctacpnDi9heMpOCG/cq80RhXdz D8b6h7FO/k4wVi1up4L2ND3mIT/hun1wnGy16o5JZ99lDdsJzK17/RrEgQmQ8yiM Qe940bI5znQCoIT4g4VfYZY7iFsdMA6YmPoUAZCUcHOi6lsHB3GCx22zKcwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY2F+QFdN2CSg2SCfZTQg3z478AYwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxNizcWgN73rFOZlmEmrD7FhyTzcfzHhvjH iLEbOpVAnOVs1uhE12NVhW3AV4MUaqOwPK/HGNdMn2QihrtSKj40HAfqOHmYoQ9z niTivTRrCnzgk+ZlERioNdrJW/VmlGD98ipoivuCUNFenEhmEV3y+5TkX5bgLayV ZbDwWtjhiZA5aoUXXO7Van3E228t1Vpi8JMvqd/1Ye1SMegczEfWszn9tGvvtkRJ AVG4lc6m8twUqfJhJnOKpjj/pkiNDU312MiVhTs0yCUGXQH4ZebR+tHAob6lKdLU L+VvwI4NH3ZMtOOm+53T4NC3HYoq5qpBPsZ32JRQWAvrTCIxgUw= -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:38 2025 by rpki-client