This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: enCDTaKKqjl7Ilhi+5qEQQpIzY28Si1vEaO7W3tYhKs= Subject key identifier: 78:AE:53:B4:A2:31:7A:69:63:56:2D:30:E2:77:47:C3:10:9D:B8:23 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 319D81C0CA708986B130812C5E1D113762A1005F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01BD Signing time: Sat 24 Jan 2026 15:02:05 +0000 Manifest this update: Sat 24 Jan 2026 14:57:05 +0000 Manifest next update: Wed 28 Jan 2026 01:07:05 +0000 Files and hashes: 1: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: oHg8orFYVaES6mHJjsGUybNJrgwK++oxHJFCpmLsDU8=) 2: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 01:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:81:c0:ca:70:89:86:b1:30:81:2c:5e:1d:11:37:62:a1:00:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Jan 24 14:57:05 2026 GMT Not After : Jan 28 01:07:05 2026 GMT Subject: CN=78AE53B4A2317A6963562D30E27747C3109DB823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:8d:09:da:c7:85:f5:16:a4:fb:0b:96:4a: c0:82:4b:a4:59:39:96:95:dd:85:20:b0:9c:98:e0: dc:c4:2f:33:ca:8b:65:cc:6f:e0:66:eb:19:42:b2: cd:02:cf:e3:48:f0:4f:5d:89:d3:f5:e3:ff:a0:e7: c5:b9:af:da:3f:51:58:49:c0:df:a6:75:22:a0:73: 29:63:fa:c1:0c:e9:80:a2:8f:93:86:f5:e0:af:00: c8:f9:f2:50:cb:00:ec:d5:1d:ce:ac:5c:fe:a2:bb: 55:d7:f4:5a:43:17:6b:d4:54:30:5b:d4:c3:f8:a1: a7:f3:7f:cc:11:ba:f3:13:65:fb:36:80:93:be:f7: 18:b8:c4:b0:9a:41:99:44:61:94:e3:99:97:95:57: f5:c4:28:5e:1f:4e:ce:04:5d:ec:12:03:fe:c8:ba: 65:05:9e:b9:b4:81:61:26:8f:82:e2:7b:0a:13:85: 78:f5:d3:3e:09:8d:91:c2:f8:a3:24:75:26:62:4c: 2b:e6:e6:0c:80:2f:e2:5b:62:57:59:ad:9a:88:86: 84:56:b6:ad:ac:1d:51:5a:21:8a:4c:71:67:38:af: 31:b3:d7:6c:ea:bf:32:6b:ad:bd:b8:e4:06:25:9a: 41:b4:0e:26:83:2d:0b:f3:97:cd:c9:c0:b4:ad:54: 20:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AE:53:B4:A2:31:7A:69:63:56:2D:30:E2:77:47:C3:10:9D:B8:23 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:4b:89:42:19:44:4f:cb:15:10:8a:92:6e:14:cd:9f:00:a4: 0b:e2:bb:a8:17:a2:27:e9:dd:19:37:65:87:18:78:ad:fc:6e: d8:0e:79:81:f9:2f:80:42:44:c3:d1:fd:01:33:d5:8f:2b:2b: 74:65:39:6d:66:52:d9:5a:f7:0d:86:44:42:86:84:4a:38:bb: 16:10:4a:f3:03:49:8a:87:f6:39:99:ca:0b:9e:ca:ea:d2:9d: 54:a7:b3:c9:96:33:9f:f4:e5:52:da:37:0a:88:2f:8d:a8:9a: 6a:2c:1b:45:82:53:6e:1f:a3:0c:f6:ef:30:a3:28:09:3b:d1: 6f:a4:f8:ce:8c:de:38:56:58:77:22:e4:63:66:8c:3b:12:3e: 7d:f7:63:81:13:6e:21:1c:fc:9b:a8:f3:fb:62:45:1e:51:ba: 72:51:62:26:3b:a0:93:4a:03:35:f6:f2:c5:9e:50:02:69:b5: 37:be:69:ed:60:ce:93:64:67:6b:0d:3a:eb:c8:9c:97:ed:90: 5c:f9:b9:ef:aa:0a:0d:b5:64:9f:a7:b5:fb:72:fe:57:28:09: ba:ef:5a:d0:89:6b:5e:45:04:8b:8b:35:7b:ed:05:35:36:a1: 0a:20:a9:db:8a:35:11:88:69:8e:9b:68:ec:49:0c:a8:91:1e: 50:ad:0d:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZ2BwMpwiYaxMIEsXh0RN2KhAF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNjAxMjQxNDU3MDVaFw0yNjAxMjgwMTA3MDVaMDMxMTAvBgNV BAMTKDc4QUU1M0I0QTIzMTdBNjk2MzU2MkQzMEUyNzc0N0MzMTA5REI4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIY0J2seF9Rak+wuWSsCCS6RZ OZaV3YUgsJyY4NzELzPKi2XMb+Bm6xlCss0Cz+NI8E9didP14/+g58W5r9o/UVhJ wN+mdSKgcylj+sEM6YCij5OG9eCvAMj58lDLAOzVHc6sXP6iu1XX9FpDF2vUVDBb 1MP4oafzf8wRuvMTZfs2gJO+9xi4xLCaQZlEYZTjmZeVV/XEKF4fTs4EXewSA/7I umUFnrm0gWEmj4LiewoThXj10z4JjZHC+KMkdSZiTCvm5gyAL+JbYldZrZqIhoRW tq2sHVFaIYpMcWc4rzGz12zqvzJrrb245AYlmkG0DiaDLQvzl83JwLStVCBFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeK5TtKIxemljVi0w4ndHwxCduCMwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhLiUIZRE/LFRCKkm4UzZ8ApAviu6gXoifp 3Rk3ZYcYeK38btgOeYH5L4BCRMPR/QEz1Y8rK3RlOW1mUtla9w2GREKGhEo4uxYQ SvMDSYqH9jmZygueyurSnVSns8mWM5/05VLaNwqIL42ommosG0WCU24fowz27zCj KAk70W+k+M6M3jhWWHci5GNmjDsSPn33Y4ETbiEc/Juo8/tiRR5RunJRYiY7oJNK AzX28sWeUAJptTe+ae1gzpNkZ2sNOuvInJftkFz5ue+qCg21ZJ+ntfty/lcoCbrv WtCJa15FBIuLNXvtBTU2oQogqduKNRGIaY6baOxJDKiRHlCtDXc= -----END CERTIFICATE-----Generated at Mon Jan 26 01:13:19 2026 by rpki-client