This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft File: 17502B1B8651CDBBCD43315B12E26B9625112CEB.mft (raw, json) Hash identifier: FyRcQVGxvcYe+r3zaSYo0qqlxK5dL0urMKaVFI9HwyU= Subject key identifier: 0F:15:C0:E9:D3:73:D5:DA:56:0B:E3:E8:2F:97:84:1C:84:B1:6C:CF Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB Certificate issuer: /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Certificate serial: 4224BA41797ACDA07AD44FD5A4380E6ED7783955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft Manifest number: 01F6 Signing time: Sat 24 Jan 2026 02:11:22 +0000 Manifest this update: Sat 24 Jan 2026 02:06:22 +0000 Manifest next update: Tue 27 Jan 2026 05:26:22 +0000 Files and hashes: 1: 17502B1B8651CDBBCD43315B12E26B9625112CEB.crl (hash: uCu5Ig3Yu3l3/2AGTKHD6YjGT+uq14xcwsA+GCmtnBc=) 2: 3130332e35362e39322e302f32342d3234203d3e203538343737.roa (hash: 9XvG7lgnGTa2TMybG5m34Ghm7U76tWIWHi96o5X/RSg=) 3: 3130332e35362e39332e302f32342d3234203d3e203538343737.roa (hash: BBYheiBkB3dBiiEhGQeh9Khilzpm4R8TSiKBpkInNLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 05:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:24:ba:41:79:7a:cd:a0:7a:d4:4f:d5:a4:38:0e:6e:d7:78:39:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB Validity Not Before: Jan 24 02:06:22 2026 GMT Not After : Jan 27 05:26:22 2026 GMT Subject: CN=0F15C0E9D373D5DA560BE3E82F97841C84B16CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d4:e9:b0:2e:1a:ce:06:e7:81:a7:1b:e3:52: e4:89:d8:de:14:bd:50:b8:d5:62:00:ca:35:a0:b1: d2:d4:85:b5:21:11:87:55:03:55:e3:32:c0:2e:97: f7:2d:85:08:d9:11:47:17:6b:25:6a:1e:04:cf:95: 1a:78:12:b5:83:74:b6:87:37:79:2f:e0:93:09:58: 7e:16:16:b4:e7:ce:6b:1d:b1:89:57:71:c9:a9:dc: 2f:67:6e:89:cd:f3:50:7f:f6:bd:4d:f4:e3:20:81: 5c:93:ae:a6:94:dd:28:98:32:c6:99:12:3b:83:2c: ab:ed:85:29:a6:45:1e:70:02:c4:a4:cd:37:dc:9d: 5c:15:45:e4:eb:ea:15:a3:47:f4:09:a9:cc:cb:60: 68:cd:e7:0d:a8:cb:f7:db:c6:88:90:f3:64:3e:ed: 00:7f:ac:92:79:35:e2:c8:5c:e1:02:72:18:42:5f: 32:a7:d2:15:7e:e0:7d:20:00:c5:2c:cd:a1:40:13: fe:db:28:fc:6c:fa:57:01:38:36:8f:12:0d:3f:63: 50:bc:a0:f6:94:23:40:50:53:0b:fa:0a:20:a9:bb: 1a:73:c0:37:01:cf:47:59:ef:14:5a:c9:34:84:2b: 93:b7:7d:f9:77:43:49:de:09:20:13:f6:56:7b:66: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:15:C0:E9:D3:73:D5:DA:56:0B:E3:E8:2F:97:84:1C:84:B1:6C:CF X509v3 Authority Key Identifier: keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a6:e7:85:45:1a:05:af:16:60:36:b0:90:1c:2c:b3:ce:44: dd:8e:ff:7d:e0:58:08:fc:7c:ca:3e:13:76:67:21:46:d2:82: 98:ea:55:4a:5f:0f:2b:21:55:d7:5f:84:99:e4:24:68:e3:cd: 93:b1:99:4b:41:02:c2:6c:1d:cd:59:fe:a9:c6:55:8a:02:1a: e8:c5:6b:d1:f2:21:f1:b5:e2:49:8f:9b:08:d3:53:ef:75:3f: 37:d0:df:52:6d:dd:45:59:e3:74:2f:e3:2c:e1:31:41:bb:1b: dd:d4:72:42:3f:00:78:0e:00:ad:13:a4:d2:82:76:fb:71:39: af:5e:da:69:81:bd:07:be:70:21:a9:01:c9:16:df:d1:04:22: a1:26:b0:7c:ce:5a:1d:e2:a4:67:9d:cc:12:a9:d5:f8:03:4b: ef:71:06:05:52:4d:49:25:6e:55:e4:e1:ba:15:d1:d8:80:0a: 45:e0:e9:f2:a6:a1:eb:ae:56:34:60:f0:1a:e1:bd:04:79:2c: 5b:9a:d7:5e:bb:2a:e0:ae:55:14:d1:5d:55:ba:c7:95:27:81: b8:19:11:33:f2:27:d5:87:1a:d3:59:d3:c0:f5:48:e3:50:54: 53:95:28:72:76:ac:78:67:92:e0:6c:91:c4:0f:0c:ef:33:c6: f8:0b:3b:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQiS6QXl6zaB61E/VpDgObtd4OVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYy NTExMkNFQjAeFw0yNjAxMjQwMjA2MjJaFw0yNjAxMjcwNTI2MjJaMDMxMTAvBgNV BAMTKDBGMTVDMEU5RDM3M0Q1REE1NjBCRTNFODJGOTc4NDFDODRCMTZDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1OmwLhrOBueBpxvjUuSJ2N4U vVC41WIAyjWgsdLUhbUhEYdVA1XjMsAul/cthQjZEUcXayVqHgTPlRp4ErWDdLaH N3kv4JMJWH4WFrTnzmsdsYlXccmp3C9nbonN81B/9r1N9OMggVyTrqaU3SiYMsaZ EjuDLKvthSmmRR5wAsSkzTfcnVwVReTr6hWjR/QJqczLYGjN5w2oy/fbxoiQ82Q+ 7QB/rJJ5NeLIXOECchhCXzKn0hV+4H0gAMUszaFAE/7bKPxs+lcBODaPEg0/Y1C8 oPaUI0BQUwv6CiCpuxpzwDcBz0dZ7xRayTSEK5O3ffl3Q0neCSAT9lZ7ZnebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxXA6dNz1dpWC+PoL5eEHISxbM8wHwYDVR0j BBgwFoAUF1ArG4ZRzbvNQzFbEuJrliURLOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MjZjZDI2Zi1mYmRhLTRjZDgtYTAxYy1iMDE1NTUxMzAxNWYvMC8xNzUwMkIxQjg2 NTFDREJCQ0Q0MzMxNUIxMkUyNkI5NjI1MTEyQ0VCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZCOTYyNTEx MkNFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzI2Y2QyNmYtZmJkYS00Y2Q4LWEw MWMtYjAxNTU1MTMwMTVmLzAvMTc1MDJCMUI4NjUxQ0RCQkNENDMzMTVCMTJFMjZC OTYyNTExMkNFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmm54VFGgWvFmA2sJAcLLPORN2O/33gWAj8 fMo+E3ZnIUbSgpjqVUpfDyshVddfhJnkJGjjzZOxmUtBAsJsHc1Z/qnGVYoCGujF a9HyIfG14kmPmwjTU+91PzfQ31Jt3UVZ43Qv4yzhMUG7G93UckI/AHgOAK0TpNKC dvtxOa9e2mmBvQe+cCGpAckW39EEIqEmsHzOWh3ipGedzBKp1fgDS+9xBgVSTUkl blXk4boV0diACkXg6fKmoeuuVjRg8BrhvQR5LFua1167KuCuVRTRXVW6x5UngbgZ ETPyJ9WHGtNZ08D1SONQVFOVKHJ2rHhnkuBskcQPDO8zxvgLO7Q= -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:22 2026 by rpki-client