This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: uze4fAr3hsb2psJ+JOoS9UWSbT/EI0okclPW/SRDJmw= Subject key identifier: 5B:4B:9F:78:31:BF:FB:62:C7:71:CA:21:AC:90:CE:B2:5C:D2:FB:8C Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 5EDDB3D84AD50044550C65EC44724D983B41C55C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0350 Signing time: Thu 18 Dec 2025 19:01:18 +0000 Manifest this update: Thu 18 Dec 2025 18:56:18 +0000 Manifest next update: Sun 21 Dec 2025 22:21:18 +0000 Files and hashes: 1: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 2: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: Y9zuJwACr+1sqWQXSiPIMdeBCaptI/kL57ZwynAh/kE=) 3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) 4: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 5: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 6: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:b3:d8:4a:d5:00:44:55:0c:65:ec:44:72:4d:98:3b:41:c5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Dec 18 18:56:18 2025 GMT Not After : Dec 21 22:21:18 2025 GMT Subject: CN=5B4B9F7831BFFB62C771CA21AC90CEB25CD2FB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:91:35:e2:eb:38:29:38:51:54:de:29:75:13: aa:bc:d6:1c:df:1d:b5:d3:35:4c:95:cd:0d:14:5b: 79:eb:5b:22:8d:a1:fb:8e:97:45:d3:7b:58:43:c7: 04:e5:ab:28:1f:a5:29:54:c1:39:e2:aa:f8:6c:9d: 43:c3:3d:54:77:00:19:23:91:d3:be:5f:1f:2c:14: 41:64:35:63:04:2c:bd:cc:0d:49:8c:82:9d:ab:fc: 01:18:e7:3b:63:8f:31:5b:e2:8c:5a:0a:f6:cf:b5: 4d:db:55:64:06:8e:02:93:db:73:e9:e2:63:cc:4f: 59:31:a7:02:38:c9:f3:75:df:ba:35:e5:a6:28:05: 5b:3f:cb:77:17:9b:04:4b:06:70:3a:c3:59:84:f6: 7b:c8:21:e1:f0:53:b8:d5:01:07:28:dd:48:e7:8b: 61:45:b1:2b:3c:7b:59:b1:76:4e:4e:0b:c1:71:a8: 88:05:b3:23:db:36:80:07:6b:a7:ef:bf:84:6f:c7: 8e:03:f2:05:4f:06:28:49:10:94:c2:e4:a3:d4:f7: 4b:eb:6f:59:2f:0c:75:83:b9:55:df:1f:84:4c:39: e4:ca:46:f7:e6:05:22:59:e4:10:0b:cc:40:e8:86: 69:d2:54:5c:c7:46:3a:71:99:bd:c9:52:b6:1b:44: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:9F:78:31:BF:FB:62:C7:71:CA:21:AC:90:CE:B2:5C:D2:FB:8C X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4e:0a:c4:25:a6:7b:5a:3f:d5:cb:9c:3a:ff:fe:10:64:27: 71:e2:0d:42:6a:13:fd:72:01:d9:21:0d:4d:df:97:bb:fc:5b: ea:4d:31:e2:af:5d:e9:ff:6f:bc:ac:53:18:08:47:a4:ab:cc: 3e:97:5b:be:ec:57:67:ed:cf:cb:23:e4:26:a6:0c:eb:39:12: 0a:41:db:b6:07:4c:94:6c:62:3f:13:5b:f2:0f:f1:09:77:e8: 70:fc:be:ff:8e:ea:00:9d:f2:80:92:a2:ae:f7:d8:b7:53:8a: dd:60:fd:74:07:c7:4d:ab:5e:7e:f8:fb:ef:23:9a:69:07:c1: 6b:af:f6:b4:20:f3:89:bc:cc:4f:0b:10:a5:9b:63:49:9b:c9: 8e:5c:02:21:d1:47:ed:94:2b:ae:61:90:3a:e9:32:0c:bf:be: 4a:9e:69:0d:7c:20:0a:72:51:ec:7b:1b:84:bd:ca:58:6e:ab: 98:a0:e2:ca:8c:d1:64:91:b7:bf:25:62:f7:cd:78:a4:b5:54: 01:63:45:35:c5:32:5a:cd:74:71:ec:c8:16:86:a3:d5:3f:8b: 67:db:e7:a6:9b:dc:6e:2a:63:d5:cb:30:ae:df:33:97:16:67: 9b:f2:88:a0:a0:a0:0f:82:8d:c0:b0:42:3f:48:8f:f3:9a:1c: a4:94:49:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXt2z2ErVAERVDGXsRHJNmDtBxVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTEyMTgxODU2MThaFw0yNTEyMjEyMjIxMThaMDMxMTAvBgNV BAMTKDVCNEI5Rjc4MzFCRkZCNjJDNzcxQ0EyMUFDOTBDRUIyNUNEMkZCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkTXi6zgpOFFU3il1E6q81hzf HbXTNUyVzQ0UW3nrWyKNofuOl0XTe1hDxwTlqygfpSlUwTniqvhsnUPDPVR3ABkj kdO+Xx8sFEFkNWMELL3MDUmMgp2r/AEY5ztjjzFb4oxaCvbPtU3bVWQGjgKT23Pp 4mPMT1kxpwI4yfN137o15aYoBVs/y3cXmwRLBnA6w1mE9nvIIeHwU7jVAQco3Ujn i2FFsSs8e1mxdk5OC8FxqIgFsyPbNoAHa6fvv4Rvx44D8gVPBihJEJTC5KPU90vr b1kvDHWDuVXfH4RMOeTKRvfmBSJZ5BALzEDohmnSVFzHRjpxmb3JUrYbRHpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0ufeDG/+2LHccohrJDOslzS+4wwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpOCsQlpntaP9XLnDr//hBkJ3HiDUJqE/1y AdkhDU3fl7v8W+pNMeKvXen/b7ysUxgIR6SrzD6XW77sV2ftz8sj5CamDOs5EgpB 27YHTJRsYj8TW/IP8Ql36HD8vv+O6gCd8oCSoq732LdTit1g/XQHx02rXn74++8j mmkHwWuv9rQg84m8zE8LEKWbY0mbyY5cAiHRR+2UK65hkDrpMgy/vkqeaQ18IApy Uex7G4S9ylhuq5ig4sqM0WSRt78lYvfNeKS1VAFjRTXFMlrNdHHsyBaGo9U/i2fb 56ab3G4qY9XLMK7fM5cWZ5vyiKCgoA+CjcCwQj9Ij/OaHKSUSSw= -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:40 2025 by rpki-client