This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: sDMkt82lxg/0vVsHLpKBRmIrk8+626ivmCNtXN/XnL0= Subject key identifier: 0D:5B:54:88:0C:D5:7E:BC:0E:87:0F:82:7D:3D:63:30:56:3A:50:FC Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 2574661C251C1E04FD9F7581B589C0AB101BCA8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: CC Signing time: Thu 18 Dec 2025 08:31:05 +0000 Manifest this update: Thu 18 Dec 2025 08:26:05 +0000 Manifest next update: Sun 21 Dec 2025 10:09:05 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: tvuWW3M138EJzUyJ9LLzR8yC8St3Aerurvrw8s8xsbU=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:74:66:1c:25:1c:1e:04:fd:9f:75:81:b5:89:c0:ab:10:1b:ca:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Dec 18 08:26:05 2025 GMT Not After : Dec 21 10:09:05 2025 GMT Subject: CN=0D5B54880CD57EBC0E870F827D3D6330563A50FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:96:ca:5c:5a:73:00:ce:f0:26:35:c6:24: 85:1f:ba:9b:05:f0:55:f4:1e:bd:b4:24:19:45:73: db:88:02:a8:47:ff:f7:d1:c3:6e:30:34:00:b8:1a: 81:6b:07:91:bb:13:78:6b:fd:82:bd:70:92:5e:88: 57:07:1e:21:20:6f:b8:3e:b3:3f:f2:e2:84:c0:3d: 60:56:7f:82:0d:19:86:80:db:2a:dc:1c:94:1b:76: 4f:72:ce:f8:21:9e:10:16:8b:37:7f:e6:db:e2:1b: 56:b7:0b:32:2c:18:a2:7b:d6:c6:08:f0:c2:00:b7: a0:79:b2:61:f1:da:98:83:50:a7:a5:58:63:0d:6f: d4:17:42:f1:7d:05:53:52:c8:9e:77:7f:53:eb:f2: 14:c4:86:89:f9:39:d6:f5:ec:7e:22:22:21:f7:a0: b8:a7:cb:7d:5c:a5:e9:11:e7:87:fb:b1:70:c0:d3: b7:24:1f:22:fe:f8:15:f7:9a:df:6b:00:50:29:22: 67:48:c8:ad:4c:ab:9c:db:05:dc:0e:48:f2:91:03: ec:41:2c:8e:13:17:74:ec:13:c6:00:48:45:2b:d2: 9c:56:94:f6:d1:38:64:be:3e:43:dd:c5:f0:a2:97: 71:05:3b:79:eb:62:39:ca:fd:cf:6b:53:3a:2b:e8: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:54:88:0C:D5:7E:BC:0E:87:0F:82:7D:3D:63:30:56:3A:50:FC X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:e2:4b:0f:1e:ac:9c:09:ea:49:0d:be:1a:94:b8:c1:f0:ba: 8c:17:41:3a:3b:06:3d:0a:ed:91:e9:b2:fc:ee:75:d0:1e:d8: 57:5a:6c:a9:db:e9:c4:00:7d:da:8e:7c:e7:ba:8e:9f:a5:e9: 86:32:93:53:ab:23:ef:31:55:f8:52:b5:3b:6e:1a:13:d4:44: 41:d9:b7:93:45:4a:c3:89:fc:18:f8:c5:56:60:ed:9d:eb:ac: 24:a8:26:c8:69:2e:6e:54:1e:2d:26:e9:c7:48:f8:de:9b:b7: 38:93:a7:f6:a8:27:b1:1d:e8:42:77:0b:ff:eb:f0:40:7b:73: a8:f7:56:66:cc:de:d7:3e:82:91:65:c4:eb:c8:ef:c3:e9:de: 29:c1:0d:ec:76:d9:22:17:82:a1:81:97:62:23:fc:8f:59:ec: d9:82:f6:f4:25:e1:6a:36:28:16:ea:f2:50:bb:e6:e5:9d:9e: 78:39:1d:71:66:55:c1:3e:2e:97:a5:5e:34:9f:85:9b:ac:eb: 32:93:86:b6:ab:d7:8a:47:e1:56:64:29:dc:02:91:ed:14:7e: a5:1f:8e:6a:ed:17:69:12:57:bc:39:0f:2c:6c:94:94:e9:dc: 23:c0:2e:0f:39:a6:c5:6a:5f:7b:0c:73:d9:72:5e:95:1c:74: c3:8c:93:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXRmHCUcHgT9n3WBtYnAqxAbyoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTEyMTgwODI2MDVaFw0yNTEyMjExMDA5MDVaMDMxMTAvBgNV BAMTKDBENUI1NDg4MENENTdFQkMwRTg3MEY4MjdEM0Q2MzMwNTYzQTUwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzM5bKXFpzAM7wJjXGJIUfupsF 8FX0Hr20JBlFc9uIAqhH//fRw24wNAC4GoFrB5G7E3hr/YK9cJJeiFcHHiEgb7g+ sz/y4oTAPWBWf4INGYaA2yrcHJQbdk9yzvghnhAWizd/5tviG1a3CzIsGKJ71sYI 8MIAt6B5smHx2piDUKelWGMNb9QXQvF9BVNSyJ53f1Pr8hTEhon5Odb17H4iIiH3 oLiny31cpekR54f7sXDA07ckHyL++BX3mt9rAFApImdIyK1Mq5zbBdwOSPKRA+xB LI4TF3TsE8YASEUr0pxWlPbROGS+PkPdxfCil3EFO3nrYjnK/c9rUzor6JlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVtUiAzVfrwOhw+CfT1jMFY6UPwwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIriSw8erJwJ6kkNvhqUuMHwuowXQTo7Bj0K 7ZHpsvzuddAe2FdabKnb6cQAfdqOfOe6jp+l6YYyk1OrI+8xVfhStTtuGhPUREHZ t5NFSsOJ/Bj4xVZg7Z3rrCSoJshpLm5UHi0m6cdI+N6btziTp/aoJ7Ed6EJ3C//r 8EB7c6j3VmbM3tc+gpFlxOvI78Pp3inBDex22SIXgqGBl2Ij/I9Z7NmC9vQl4Wo2 KBbq8lC75uWdnng5HXFmVcE+LpelXjSfhZus6zKThrar14pH4VZkKdwCke0UfqUf jmrtF2kSV7w5DyxslJTp3CPALg85psVqX3sMc9lyXpUcdMOMk6U= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:48 2025 by rpki-client