This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: 42nzMlI7YOlq54QyJLDkobXIO9Rduxh/k+qrqlfvMzg= Subject key identifier: FE:B3:35:04:AC:03:86:C7:D1:C3:C8:7E:F5:13:C0:1F:BF:56:CE:57 Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 0857B34F697C3ECC3F44EEBCBE0A838657376141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 04A4 Signing time: Thu 18 Dec 2025 07:00:52 +0000 Manifest this update: Thu 18 Dec 2025 06:55:52 +0000 Manifest next update: Sun 21 Dec 2025 13:05:52 +0000 Files and hashes: 1: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: r3hadkPGIqZSH4RufGDMf+PGobXRojqtU6Sj2FILNxI=) 2: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: 4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=) 3: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: 4BUZEUszxbkJAKTn89oXRelHnbQyPtwvUjsittAvrxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:05:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:57:b3:4f:69:7c:3e:cc:3f:44:ee:bc:be:0a:83:86:57:37:61:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Dec 18 06:55:52 2025 GMT Not After : Dec 21 13:05:52 2025 GMT Subject: CN=FEB33504AC0386C7D1C3C87EF513C01FBF56CE57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:f0:04:df:7c:33:53:bd:92:1d:34:04:5d: 6b:71:85:32:72:99:f8:1d:4b:07:71:b4:e2:54:62: 69:f3:3a:04:dd:fc:81:d5:ce:8f:27:bc:d4:fb:87: 48:db:48:9c:08:35:00:0f:f0:c1:a8:74:22:fa:a6: e8:48:30:94:8e:ac:35:92:04:95:a3:b0:03:7c:87: 99:9c:83:cf:5b:31:9e:83:78:ea:5a:f0:43:e6:b4: eb:7e:b2:66:0d:c7:f0:d6:46:ed:e2:4a:bb:0e:d1: 25:3c:c8:ce:4e:55:2e:76:5a:b1:12:a0:96:6c:9d: 3e:20:70:fb:29:4f:71:ae:c7:13:bb:d3:33:a4:ae: f2:e6:bf:19:fa:3f:5a:27:08:c7:31:07:e0:c0:fb: c6:28:92:cd:ee:22:be:e9:a9:ad:6f:75:f4:bd:68: 7b:60:f6:bf:61:90:78:49:3c:25:06:0e:89:bd:bc: 4d:63:06:c5:8f:6e:f0:f3:ab:12:3c:5b:e3:af:eb: 78:e0:ba:6c:c6:6a:e8:f0:a9:3f:ec:c1:ff:21:92: 8d:cf:eb:9f:07:6b:fe:19:41:68:0c:6c:74:9d:eb: 26:1f:a9:e5:81:63:89:97:54:9f:18:63:df:35:69: 40:91:17:40:19:3e:69:7e:13:93:61:82:3b:6d:1d: 86:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:35:04:AC:03:86:C7:D1:C3:C8:7E:F5:13:C0:1F:BF:56:CE:57 X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5d:2b:1d:01:a7:a8:c3:36:aa:f5:e9:39:e3:77:44:be:0f: 0b:7c:cb:70:79:9f:03:8b:9b:9d:3e:a3:cd:4b:66:c5:9a:09: 2b:c5:df:8b:33:3c:95:c8:05:0b:95:4e:99:16:e6:62:f8:4f: 22:9d:8f:e9:61:1e:52:bb:d2:a2:cb:56:a8:6d:51:ca:c5:44: 25:f8:ef:ef:3d:7a:89:f8:97:f1:46:a5:a3:64:c3:1a:b8:f0: 3c:b0:89:35:ed:c1:2c:56:95:1c:2a:09:dc:a0:8f:35:6d:4e: 4d:09:18:c0:40:02:90:3a:8a:71:30:3a:50:0d:09:a6:7f:9e: 96:96:30:20:d7:a0:3b:2b:05:0f:6c:2b:d9:aa:49:a3:bb:17: d6:c6:6e:9d:37:2a:8b:b8:ad:a0:8f:4a:b2:cf:b9:ea:3b:c2: 51:7b:ba:36:a0:06:38:44:78:2e:eb:3a:7c:9c:07:ec:06:64: c6:06:55:66:40:26:84:c5:6a:9d:a6:07:b4:79:cd:9a:38:a6: 01:dd:42:e6:9b:da:9d:cc:73:6c:4a:02:a7:29:fe:8f:16:4f: 39:05:c0:d3:79:6e:59:df:09:ed:3e:b7:be:53:7f:32:12:ef: fa:e8:e1:58:86:50:dc:f5:3f:49:23:5f:03:0c:9d:d4:c6:a6: de:f3:c4:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFezT2l8Psw/RO68vgqDhlc3YUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNTEyMTgwNjU1NTJaFw0yNTEyMjExMzA1NTJaMDMxMTAvBgNV BAMTKEZFQjMzNTA0QUMwMzg2QzdEMUMzQzg3RUY1MTNDMDFGQkY1NkNFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtT/AE33wzU72SHTQEXWtxhTJy mfgdSwdxtOJUYmnzOgTd/IHVzo8nvNT7h0jbSJwINQAP8MGodCL6puhIMJSOrDWS BJWjsAN8h5mcg89bMZ6DeOpa8EPmtOt+smYNx/DWRu3iSrsO0SU8yM5OVS52WrES oJZsnT4gcPspT3GuxxO70zOkrvLmvxn6P1onCMcxB+DA+8Yoks3uIr7pqa1vdfS9 aHtg9r9hkHhJPCUGDom9vE1jBsWPbvDzqxI8W+Ov63jgumzGaujwqT/swf8hko3P 658Ha/4ZQWgMbHSd6yYfqeWBY4mXVJ8YY981aUCRF0AZPml+E5NhgjttHYZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rM1BKwDhsfRw8h+9RPAH79WzlcwHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZdKx0Bp6jDNqr16Tnjd0S+Dwt8y3B5nwOL m50+o81LZsWaCSvF34szPJXIBQuVTpkW5mL4TyKdj+lhHlK70qLLVqhtUcrFRCX4 7+89eon4l/FGpaNkwxq48DywiTXtwSxWlRwqCdygjzVtTk0JGMBAApA6inEwOlAN CaZ/npaWMCDXoDsrBQ9sK9mqSaO7F9bGbp03Kou4raCPSrLPueo7wlF7ujagBjhE eC7rOnycB+wGZMYGVWZAJoTFap2mB7R5zZo4pgHdQuab2p3Mc2xKAqcp/o8WTzkF wNN5blnfCe0+t75TfzIS7/ro4ViGUNz1P0kjXwMMndTGpt7zxAI= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:24 2025 by rpki-client