This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: o8AnTbm1Jd6AoE8+X3IgXnXWeH1tZ4jMw8HvSpI2qL0= Subject key identifier: 84:D2:92:ED:7C:77:E4:4C:49:BA:CE:D4:63:5C:10:53:40:41:B1:67 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 54398BD71720D1457354DF0A046394F0E874EF27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: CE Signing time: Mon 22 Dec 2025 15:41:08 +0000 Manifest this update: Mon 22 Dec 2025 15:36:08 +0000 Manifest next update: Thu 25 Dec 2025 16:42:08 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: YtIBRTvSILXMPs8XtXc+U0DirpG+3YfL0Z4lQCzbR/c=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:39:8b:d7:17:20:d1:45:73:54:df:0a:04:63:94:f0:e8:74:ef:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Dec 22 15:36:08 2025 GMT Not After : Dec 25 16:42:08 2025 GMT Subject: CN=84D292ED7C77E44C49BACED4635C10534041B167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:ef:a6:e3:54:20:6f:78:d1:94:be:fb:c5: c4:d4:06:f1:63:fd:09:5d:27:f5:13:e0:31:59:2e: e3:58:90:86:c1:5d:92:86:9c:01:d9:1f:9c:39:c8: 6a:5b:91:e1:07:04:dc:0c:31:66:2e:da:6c:48:5c: 6e:a7:d5:78:5b:ed:b3:0d:75:bc:65:bd:80:02:ca: f8:3d:82:0e:b1:76:57:7d:f9:4f:00:b8:c2:a4:18: b5:4e:26:cb:6c:d9:16:43:7b:69:a8:03:dc:ec:ae: 83:a2:bb:9d:72:d9:48:69:4c:56:30:10:b4:56:27: 9b:70:28:9a:5c:0b:de:02:9f:a6:40:07:f1:11:1a: 4b:e0:f8:32:c9:94:57:26:5e:29:73:c5:3b:b2:a1: da:cb:87:f1:76:a6:77:b1:83:93:96:3a:80:8f:d6: 70:63:63:fb:a3:9f:75:17:86:ff:22:aa:6f:07:81: b6:a3:5f:35:fe:83:a3:48:64:06:be:fc:a9:43:e3: 82:d4:7f:63:a0:40:34:11:9b:24:d6:c6:41:47:ae: fa:b5:99:51:e6:8c:93:6a:81:fc:1d:99:41:76:b5: 64:91:2d:46:a2:ab:62:5f:2d:1d:2f:87:76:07:3a: c2:b8:db:59:2b:89:bf:e9:ab:68:a5:90:b9:ae:d9: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D2:92:ED:7C:77:E4:4C:49:BA:CE:D4:63:5C:10:53:40:41:B1:67 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e6:28:ef:0d:fe:dc:7d:1e:0a:6a:06:4f:22:57:ee:81:f6: be:d6:f1:c9:ac:2f:90:06:41:76:ad:92:62:cd:78:0e:bc:3c: c0:de:5c:ba:e1:50:9e:b2:ac:c3:b2:13:18:e4:8d:a4:e8:d2: 66:94:fe:0e:57:e4:49:63:a7:8e:0d:6d:87:0c:32:2e:84:24: a6:5c:a8:79:26:7b:f7:8a:bc:c3:d1:96:c1:6f:eb:69:ee:e0: 0d:3f:95:aa:37:2e:66:08:58:33:51:47:36:fb:dd:61:2d:4a: 92:2c:0a:12:21:f5:56:8c:ee:2f:e4:fb:88:42:87:71:c5:9d: b1:56:5a:3a:cc:b8:9a:9e:dc:1c:df:b3:7f:8d:02:9c:d3:0f: 7b:02:b9:54:a7:22:7b:bb:b0:06:1d:bc:e1:c1:94:4c:e5:e6: f4:ce:82:44:2d:42:4d:73:a9:2e:15:bd:3b:d2:18:e9:8f:12: 7d:96:2d:e2:36:06:00:03:a1:a8:09:0e:36:59:0d:1d:46:ff: 21:6d:c9:96:b0:ec:9b:fb:be:09:5c:a4:9c:12:73:cd:1c:4c: 85:5e:04:b9:8f:c1:a8:6d:43:35:8f:0a:71:c4:1b:c3:24:11: 5f:2f:2d:b8:5c:2e:4e:96:a8:4c:40:7d:7c:83:3e:08:7e:9e: 68:93:e8:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDmL1xcg0UVzVN8KBGOU8Oh07ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTEyMjIxNTM2MDhaFw0yNTEyMjUxNjQyMDhaMDMxMTAvBgNV BAMTKDg0RDI5MkVEN0M3N0U0NEM0OUJBQ0VENDYzNUMxMDUzNDA0MUIxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRu+m41Qgb3jRlL77xcTUBvFj /QldJ/UT4DFZLuNYkIbBXZKGnAHZH5w5yGpbkeEHBNwMMWYu2mxIXG6n1Xhb7bMN dbxlvYACyvg9gg6xdld9+U8AuMKkGLVOJsts2RZDe2moA9zsroOiu51y2UhpTFYw ELRWJ5twKJpcC94Cn6ZAB/ERGkvg+DLJlFcmXilzxTuyodrLh/F2pnexg5OWOoCP 1nBjY/ujn3UXhv8iqm8HgbajXzX+g6NIZAa+/KlD44LUf2OgQDQRmyTWxkFHrvq1 mVHmjJNqgfwdmUF2tWSRLUaiq2JfLR0vh3YHOsK421krib/pq2ilkLmu2csfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNKS7Xx35ExJus7UY1wQU0BBsWcwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvmKO8N/tx9HgpqBk8iV+6B9r7W8cmsL5AG QXatkmLNeA68PMDeXLrhUJ6yrMOyExjkjaTo0maU/g5X5Eljp44NbYcMMi6EJKZc qHkme/eKvMPRlsFv62nu4A0/lao3LmYIWDNRRzb73WEtSpIsChIh9VaM7i/k+4hC h3HFnbFWWjrMuJqe3Bzfs3+NApzTD3sCuVSnInu7sAYdvOHBlEzl5vTOgkQtQk1z qS4VvTvSGOmPEn2WLeI2BgADoagJDjZZDR1G/yFtyZaw7Jv7vglcpJwSc80cTIVe BLmPwahtQzWPCnHEG8MkEV8vLbhcLk6WqExAfXyDPgh+nmiT6GE= -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:55 2025 by rpki-client