This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: 4sOMNC5q6VSNGjDTx4foRZp9XmoB6yZun55FCoLaNaU= Subject key identifier: FF:66:62:23:AA:C7:BE:36:69:2B:2B:A5:D3:39:F7:14:22:A1:40:02 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 6604E3A54716769AF59D151CC42A619F0B8A5CC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 04F7 Signing time: Fri 05 Dec 2025 08:21:56 +0000 Manifest this update: Fri 05 Dec 2025 08:16:56 +0000 Manifest next update: Mon 08 Dec 2025 20:02:56 +0000 Files and hashes: 1: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 2: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 3: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) 4: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: DcJMl9ueBwpD9L1EpMXxsSc85B2arSyyET1hvkfsxzk=) 5: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:04:e3:a5:47:16:76:9a:f5:9d:15:1c:c4:2a:61:9f:0b:8a:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Dec 5 08:16:56 2025 GMT Not After : Dec 8 20:02:56 2025 GMT Subject: CN=FF666223AAC7BE36692B2BA5D339F71422A14002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:c0:d4:62:12:76:18:43:65:58:a7:9e:82: cb:05:85:7a:82:f0:b8:95:f2:68:16:58:aa:a0:88: 2e:b3:f4:4c:8d:45:8f:1b:67:d4:dc:3c:18:82:03: 15:f2:8e:53:88:91:e9:ed:7d:2d:a2:a3:32:22:92: 6d:f0:0d:d3:81:64:3b:06:61:eb:66:23:96:94:55: c6:77:e6:61:b7:65:0c:9a:57:84:f6:9e:7f:ec:94: 1d:e8:65:ac:c9:e7:44:4e:c7:41:d2:6a:0c:d3:b6: f9:b6:c0:32:45:81:75:b7:1e:95:d6:d2:75:d1:9b: 7d:be:90:e6:63:93:ed:9e:70:96:d4:bf:55:9f:a9: 7a:4b:3d:f0:ba:2b:5a:a5:f9:eb:ed:bc:57:54:aa: bb:86:d7:15:87:c0:fe:00:8a:1f:92:93:db:04:72: 76:5e:f6:48:b4:23:82:ed:d8:bf:96:ef:64:d3:4a: 26:76:75:0b:e9:8c:d4:55:f9:dd:3c:64:1b:cf:13: 09:03:11:47:05:9f:76:6d:18:ad:f3:87:13:69:e6: 67:75:20:02:6c:f6:f7:6c:a2:f0:bb:f6:aa:b4:1a: 19:0a:b3:8f:a4:90:7e:66:a2:04:ae:c9:7d:3f:fb: 45:c6:66:6c:63:3c:1a:ac:ba:4e:51:2b:cf:2b:0e: 7c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:66:62:23:AA:C7:BE:36:69:2B:2B:A5:D3:39:F7:14:22:A1:40:02 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:97:f0:f5:08:b6:e5:8d:e1:ac:4c:ed:6d:93:1d:c1:76:2c: 89:bc:0a:eb:bb:ee:2b:f5:4b:5d:77:a2:e7:47:09:42:fb:db: 51:51:2d:74:ad:a8:3d:2a:34:f3:eb:2a:6d:65:01:a4:43:fa: ce:a4:39:d4:12:de:81:45:93:d5:27:59:a7:ee:64:05:13:91: 58:b1:60:25:a0:ab:b5:02:52:77:39:76:8d:d8:ea:0a:ba:76: 6c:53:55:67:95:b5:2e:fb:a3:99:54:a0:11:e6:89:48:2f:53: 49:61:23:30:74:f9:88:dd:1f:ce:b6:90:01:54:12:71:b6:47: f3:1f:3d:4f:c6:3c:8c:c9:46:29:89:14:35:b2:3a:5c:b0:ba: ba:91:0c:76:bf:32:d2:4c:e5:e1:92:a3:52:cc:6f:9c:74:1b: f5:a5:07:3a:a3:08:fb:9e:88:08:4e:b8:96:08:0b:90:2d:f2: 0f:6a:f9:6b:11:8b:d3:6c:8c:54:1e:77:19:a7:3f:8d:95:97: e6:a9:d8:91:e0:b4:0d:4f:9e:22:23:fd:cd:3a:cd:aa:3e:bf: 11:d5:10:b7:3c:65:35:e5:6a:75:d4:4f:19:e2:f7:75:28:35: ca:c7:26:db:33:c6:d7:cd:88:7a:60:93:42:1f:79:c6:21:13: 15:95:fb:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgTjpUcWdpr1nRUcxCphnwuKXMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNTEyMDUwODE2NTZaFw0yNTEyMDgyMDAyNTZaMDMxMTAvBgNV BAMTKEZGNjY2MjIzQUFDN0JFMzY2OTJCMkJBNUQzMzlGNzE0MjJBMTQwMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dsDUYhJ2GENlWKeegssFhXqC 8LiV8mgWWKqgiC6z9EyNRY8bZ9TcPBiCAxXyjlOIkentfS2iozIikm3wDdOBZDsG YetmI5aUVcZ35mG3ZQyaV4T2nn/slB3oZazJ50ROx0HSagzTtvm2wDJFgXW3HpXW 0nXRm32+kOZjk+2ecJbUv1WfqXpLPfC6K1ql+evtvFdUqruG1xWHwP4Aih+Sk9sE cnZe9ki0I4Lt2L+W72TTSiZ2dQvpjNRV+d08ZBvPEwkDEUcFn3ZtGK3zhxNp5md1 IAJs9vdsovC79qq0GhkKs4+kkH5mogSuyX0/+0XGZmxjPBqsuk5RK88rDnz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/2ZiI6rHvjZpKyul0zn3FCKhQAIwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCX8PUItuWN4axM7W2THcF2LIm8Cuu77iv1 S113oudHCUL721FRLXStqD0qNPPrKm1lAaRD+s6kOdQS3oFFk9UnWafuZAUTkVix YCWgq7UCUnc5do3Y6gq6dmxTVWeVtS77o5lUoBHmiUgvU0lhIzB0+YjdH862kAFU EnG2R/MfPU/GPIzJRimJFDWyOlywurqRDHa/MtJM5eGSo1LMb5x0G/WlBzqjCPue iAhOuJYIC5At8g9q+WsRi9NsjFQedxmnP42Vl+ap2JHgtA1PniIj/c06zao+vxHV ELc8ZTXlanXUTxni93UoNcrHJtszxtfNiHpgk0IfecYhExWV++k= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:38 2025 by rpki-client