This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft (raw, json) Hash identifier: G3DyvnrmLriaMR0w7jJyaIsJNh8jmWCNRXJmCgYPVJQ= Subject key identifier: 40:FF:CD:98:B7:61:05:49:27:8B:67:35:B8:E4:3A:1C:BF:B6:3D:94 Authority key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Certificate issuer: /CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Certificate serial: 4D2CB385D1CFAE14D20373B69A4782A051A75F88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft Manifest number: 050D Signing time: Sat 24 Jan 2026 13:31:54 +0000 Manifest this update: Sat 24 Jan 2026 13:26:54 +0000 Manifest next update: Wed 28 Jan 2026 00:04:54 +0000 Files and hashes: 1: 3130332e34372e3133342e302f32342d3234203d3e203633383539.roa (hash: ISUPB5yjW6tmMrkjewjTPmASyvfsPyLCAirfzGZHkUw=) 2: 3130332e34372e3133322e302f32342d3234203d3e203633383539.roa (hash: KrQXE8D2Q5Yo3g//mdDYJidQwyMwsHM3lR4ILfL9Uvk=) 3: 3130332e34372e3133332e302f32342d3234203d3e203633383539.roa (hash: EZteEph/2m/6PSU4HhniFTSW+lioN4P6OqCDsqE63rs=) 4: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl (hash: pYs63idBRb+cQCUJ+I/YQLZAQ6Xlwvt3CorkP0rRQos=) 5: 3130332e34372e3133352e302f32342d3234203d3e203633383539.roa (hash: Lg5dQN6opERAWYn9yaTR81th2kNEptreAqT5F7qUOxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 00:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:2c:b3:85:d1:cf:ae:14:d2:03:73:b6:9a:47:82:a0:51:a7:5f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Validity Not Before: Jan 24 13:26:54 2026 GMT Not After : Jan 28 00:04:54 2026 GMT Subject: CN=40FFCD98B7610549278B6735B8E43A1CBFB63D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:76:cc:fc:0b:1a:90:97:30:87:7b:02:be: c4:09:33:8e:64:8c:42:51:a7:5a:60:9d:e8:33:63: 72:4b:6e:a2:33:3d:e8:1b:20:10:53:7c:92:fd:5b: b8:8e:61:b9:93:c0:fc:2a:00:68:95:86:f6:57:43: 52:eb:ae:f5:b8:64:3b:8b:e9:74:9d:b3:38:7d:34: 1e:08:c7:bc:92:a2:a1:16:89:91:9a:e1:a3:1e:a9: da:f7:cd:34:f5:a0:cd:43:49:c9:59:b2:f5:d8:fb: 99:78:0f:f0:1c:d5:d9:ae:48:f0:9e:84:b7:5e:67: 06:1f:66:08:8b:8a:92:74:b2:76:2e:3f:0d:6f:b0: 21:69:e7:e0:02:30:fd:30:5d:95:6b:c5:6f:2b:46: 53:ec:e1:fb:d7:57:58:28:a7:c7:a1:41:bb:a7:e4: 9d:ce:9b:88:c9:78:b1:67:fe:e5:50:a2:33:29:cc: f5:6d:50:68:54:5e:c8:e8:72:f9:e7:2a:bb:f9:c1: 7b:3f:5c:8e:a4:6e:ad:d2:3c:ee:b9:f8:d9:86:e7: 4a:bf:68:b3:1f:2f:1d:be:e0:ba:ae:a9:c1:26:0a: bb:ef:45:89:f3:c6:69:98:67:3c:1a:f3:7e:8d:0d: 24:bc:b5:9d:72:a4:e7:7e:e8:c6:63:aa:6b:7e:9f: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:CD:98:B7:61:05:49:27:8B:67:35:B8:E4:3A:1C:BF:B6:3D:94 X509v3 Authority Key Identifier: keyid:17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f4:63:18:4d:f0:0b:fc:76:81:ec:ec:91:80:52:0b:f0:37: 4a:84:51:aa:ac:68:a4:ab:be:64:f7:f0:8f:e2:b0:92:aa:91: aa:13:ef:b2:ad:15:e8:82:86:98:8b:1f:cc:cd:97:a8:18:93: d5:f9:81:7f:58:44:b5:1d:9a:82:f0:e3:f5:90:ce:5e:05:67: ac:0c:97:15:58:38:b6:56:05:3b:d4:75:c0:12:bd:ba:6c:f0: 09:43:32:34:35:fd:81:34:ea:87:ad:9e:3d:95:12:da:01:e9: 01:96:84:1e:2c:ea:bd:ff:30:69:f9:3b:90:47:60:8e:6c:62: 91:a0:5c:60:12:07:c4:c6:34:68:5d:8e:59:22:bd:39:12:63: e6:2d:39:ff:4d:19:fb:94:e6:cb:9b:83:83:1f:9a:1b:45:1c: bd:ef:82:b9:4d:58:29:a3:a0:74:b3:ee:35:a7:56:ee:71:5a: ef:a0:f1:3d:1e:fe:0a:b7:e9:eb:aa:2f:66:a4:31:f4:8f:c6: cf:99:c1:59:a5:8d:8e:82:db:6d:a5:05:c1:e6:19:a3:e9:93: 1c:b5:37:34:22:fb:53:84:f4:4d:68:53:b5:12:15:53:79:6f: 88:f0:42:a0:ed:b2:6c:f0:a3:d6:08:2a:3c:34:0b:a8:cd:f8: 8f:4d:99:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSyzhdHPrhTSA3O2mkeCoFGnX4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTky N0E3NDRFNDAeFw0yNjAxMjQxMzI2NTRaFw0yNjAxMjgwMDA0NTRaMDMxMTAvBgNV BAMTKDQwRkZDRDk4Qjc2MTA1NDkyNzhCNjczNUI4RTQzQTFDQkZCNjNEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzHbM/AsakJcwh3sCvsQJM45k jEJRp1pgnegzY3JLbqIzPegbIBBTfJL9W7iOYbmTwPwqAGiVhvZXQ1LrrvW4ZDuL 6XSdszh9NB4Ix7ySoqEWiZGa4aMeqdr3zTT1oM1DSclZsvXY+5l4D/Ac1dmuSPCe hLdeZwYfZgiLipJ0snYuPw1vsCFp5+ACMP0wXZVrxW8rRlPs4fvXV1gop8ehQbun 5J3Om4jJeLFn/uVQojMpzPVtUGhUXsjocvnnKrv5wXs/XI6kbq3SPO65+NmG50q/ aLMfLx2+4LquqcEmCrvvRYnzxmmYZzwa836NDSS8tZ1ypOd+6MZjqmt+nwSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQP/NmLdhBUkni2c1uOQ6HL+2PZQwHwYDVR0j BBgwFoAUF9ArEW1LumUSRcvHzMMKWSenROQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMC8xN0QwMkIxMTZE NEJCQTY1MTI0NUNCQzdDQ0MzMEE1OTI3QTc0NEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBBNTkyN0E3 NDRFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2JiYjI3MzQtZTVmYS00MGViLTg1 OTgtYjdjZDEwMTM0M2NhLzAvMTdEMDJCMTE2RDRCQkE2NTEyNDVDQkM3Q0NDMzBB NTkyN0E3NDRFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT0YxhN8Av8doHs7JGAUgvwN0qEUaqsaKSr vmT38I/isJKqkaoT77KtFeiChpiLH8zNl6gYk9X5gX9YRLUdmoLw4/WQzl4FZ6wM lxVYOLZWBTvUdcASvbps8AlDMjQ1/YE06oetnj2VEtoB6QGWhB4s6r3/MGn5O5BH YI5sYpGgXGASB8TGNGhdjlkivTkSY+YtOf9NGfuU5subg4MfmhtFHL3vgrlNWCmj oHSz7jWnVu5xWu+g8T0e/gq36euqL2akMfSPxs+ZwVmljY6C222lBcHmGaPpkxy1 NzQi+1OE9E1oU7USFVN5b4jwQqDtsmzwo9YIKjw0C6jN+I9Nmb0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:04 2026 by rpki-client