This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json) Hash identifier: I4HP3y3JWNAw0z+RhSwWEhyfIBL3lhwxee2OfZyyrHs= Subject key identifier: F1:6D:3A:1B:15:2D:A1:B1:2B:D7:38:EF:C5:89:CE:4C:E3:68:B7:55 Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A Certificate serial: 64BD9B1B456666FFBDEEFD46F0C84B64D40A82AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft Manifest number: FF Signing time: Fri 26 Dec 2025 10:30:03 +0000 Manifest this update: Fri 26 Dec 2025 10:25:03 +0000 Manifest next update: Mon 29 Dec 2025 13:29:03 +0000 Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=) 2: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: fdG+WQcxbSCH7NNjuaC4k+UFS9+rq0PMrepLbDYg93g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 13:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:bd:9b:1b:45:66:66:ff:bd:ee:fd:46:f0:c8:4b:64:d4:0a:82:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A Validity Not Before: Dec 26 10:25:03 2025 GMT Not After : Dec 29 13:29:03 2025 GMT Subject: CN=F16D3A1B152DA1B12BD738EFC589CE4CE368B755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:45:26:af:01:e5:ec:90:5e:f4:e9:94:33: 52:b7:04:85:62:9e:1c:fd:c7:ae:24:db:76:04:87: 07:98:a6:43:97:3b:9e:dc:15:a2:91:67:6c:2e:40: b7:a8:13:ce:dc:ca:46:6b:7f:ec:51:a1:bf:02:eb: 17:b6:17:29:63:d9:9e:c2:b0:91:f5:f2:5f:9f:b6: e5:f7:07:fc:c7:e3:83:ff:43:1f:47:98:ce:23:ea: 23:2c:7b:1e:c0:be:74:9f:ce:8c:23:e3:4d:15:22: d8:42:5d:e1:14:48:61:01:76:ee:4d:05:b7:d5:61: 08:e8:6d:6f:db:63:0d:1a:05:57:44:20:65:1f:16: 7f:66:6a:2b:81:92:7f:43:a1:c7:49:77:31:32:cb: 53:ec:e6:68:43:b3:ce:5d:84:6c:a6:50:b1:aa:28: a5:b2:b6:59:47:2e:0e:7f:e3:c9:e3:0a:a5:b1:43: 31:94:1e:1d:f2:5d:20:13:28:e5:55:1b:ae:0c:39: 79:29:95:bc:85:4a:df:13:2d:20:27:2d:13:81:c3: 67:25:0c:44:82:2e:9a:64:12:0c:db:0f:17:cf:54: 9f:10:d9:dc:da:48:34:5b:2a:dd:90:01:e2:27:7c: ee:fb:e2:82:6d:07:0f:df:25:a7:fa:dd:51:34:19: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6D:3A:1B:15:2D:A1:B1:2B:D7:38:EF:C5:89:CE:4C:E3:68:B7:55 X509v3 Authority Key Identifier: keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c8:77:3c:36:bb:76:a1:bf:0d:45:ab:48:c1:af:d5:88:fb: 37:48:6a:73:d3:14:ac:f1:b0:4e:0a:53:4e:ff:a0:7c:18:16: b8:cf:10:5e:51:37:31:e4:75:aa:9b:be:70:5c:6e:07:d9:ff: 15:c7:2e:27:b0:1b:7d:48:16:50:42:0b:f0:1e:b5:25:3d:ee: 08:db:35:28:4d:2a:18:85:ba:c1:fc:6b:89:35:6c:85:04:bb: 7a:e3:d0:a3:0a:67:68:ab:e8:06:0a:48:95:79:c6:ec:9c:40: 6f:50:ba:c2:13:c8:f7:14:97:8f:db:7f:29:2f:82:77:b3:29: 5e:ca:b8:6f:e6:c5:c8:30:71:aa:78:1f:87:e8:03:d1:21:4b: b0:3d:49:26:77:1a:dd:02:b5:94:c1:6e:cb:b9:c2:ec:bf:1f: 1e:42:ef:f0:32:aa:19:51:a1:f8:1e:34:0d:56:80:3b:b5:b3: bb:83:c6:91:8d:ff:f2:65:c1:c9:3b:d8:c0:ae:b8:72:65:72: 88:5a:1b:96:8e:eb:53:2d:65:e4:7d:de:1d:fb:71:71:a7:24: c1:44:dc:6c:bc:46:e9:6d:00:08:d8:f7:9a:23:ef:15:13:d3: d3:f0:29:a1:14:61:3f:94:ca:a1:32:d7:06:bb:47:f6:a3:bd: 61:2a:9e:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL2bG0VmZv+97v1G8MhLZNQKgq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMz QzQwQkE3QTAeFw0yNTEyMjYxMDI1MDNaFw0yNTEyMjkxMzI5MDNaMDMxMTAvBgNV BAMTKEYxNkQzQTFCMTUyREExQjEyQkQ3MzhFRkM1ODlDRTRDRTM2OEI3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KEUmrwHl7JBe9OmUM1K3BIVi nhz9x64k23YEhweYpkOXO57cFaKRZ2wuQLeoE87cykZrf+xRob8C6xe2Fylj2Z7C sJH18l+ftuX3B/zH44P/Qx9HmM4j6iMsex7AvnSfzowj400VIthCXeEUSGEBdu5N BbfVYQjobW/bYw0aBVdEIGUfFn9maiuBkn9DocdJdzEyy1Ps5mhDs85dhGymULGq KKWytllHLg5/48njCqWxQzGUHh3yXSATKOVVG64MOXkplbyFSt8TLSAnLROBw2cl DESCLppkEgzbDxfPVJ8Q2dzaSDRbKt2QAeInfO774oJtBw/fJaf63VE0GcfXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8W06GxUtobEr1zjvxYnOTONot1UwHwYDVR0j BBgwFoAUFwl5wOMZWPp2JZ82C4QFIzxAunowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC8xNzA5NzlDMEUz MTk1OEZBNzYyNTlGMzYwQjg0MDUyMzNDNDBCQTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMzQzQw QkE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1 MjMzQzQwQkE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDIdzw2u3ahvw1Fq0jBr9WI+zdIanPTFKzx sE4KU07/oHwYFrjPEF5RNzHkdaqbvnBcbgfZ/xXHLiewG31IFlBCC/AetSU97gjb NShNKhiFusH8a4k1bIUEu3rj0KMKZ2ir6AYKSJV5xuycQG9QusITyPcUl4/bfykv gnezKV7KuG/mxcgwcap4H4foA9EhS7A9SSZ3Gt0CtZTBbsu5wuy/Hx5C7/AyqhlR ofgeNA1WgDu1s7uDxpGN//Jlwck72MCuuHJlcohaG5aO61MtZeR93h37cXGnJMFE 3Gy8RultAAjY95oj7xUT09PwKaEUYT+UyqEy1wa7R/ajvWEqnuU= -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:46 2025 by rpki-client