This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft File: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft (raw, json) Hash identifier: fAcJfUQgx0N8OB6NaoAFnvPOgoo7Ok76Kf4o8nClOQE= Subject key identifier: 5C:FF:77:F0:10:85:D6:3D:8F:AB:F8:3A:15:91:36:C2:1C:DD:F2:E5 Authority key identifier: 17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 Certificate issuer: /CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Certificate serial: 36EBA1BA983AB927F895E3045A8825300B83E786 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft Manifest number: 01A7 Signing time: Fri 05 Dec 2025 22:52:03 +0000 Manifest this update: Fri 05 Dec 2025 22:47:03 +0000 Manifest next update: Tue 09 Dec 2025 08:41:03 +0000 Files and hashes: 1: 3130332e3130352e35382e302f32332d3234203d3e20313530393533.roa (hash: hBmchGMN/fVNaE6sdiETaj0MX0seDIVkXhvDCN24afc=) 2: 17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl (hash: YoyaPca1sAB2r1BHG6bg9RQjiMX82dZBiYvoKjxWXwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:eb:a1:ba:98:3a:b9:27:f8:95:e3:04:5a:88:25:30:0b:83:e7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17A6007EC6373EC9501F9956E12B6D5CBE0FDC21 Validity Not Before: Dec 5 22:47:03 2025 GMT Not After : Dec 9 08:41:03 2025 GMT Subject: CN=5CFF77F01085D63D8FABF83A159136C21CDDF2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:e7:b6:4f:b2:c5:77:52:26:25:df:4d:5c: c2:f6:e2:bf:bf:42:ac:01:06:2a:33:91:37:61:d0: c9:d9:00:31:32:39:3a:fd:f6:6f:20:8f:fa:32:dc: 6f:ac:f6:42:8f:40:86:e6:e5:b4:eb:c2:48:ed:f3: 3f:25:85:da:4e:01:d4:a6:a1:b7:cb:d5:00:e7:08: 3c:1c:0d:b6:dc:5b:97:50:13:b9:52:ff:20:34:4a: a3:80:e7:13:df:5f:42:43:74:6a:94:3d:9c:8b:c7: 79:80:15:31:b1:e6:2c:f2:8a:81:b2:ce:4b:fb:b2: ba:81:82:e6:21:13:fd:4f:eb:87:e9:61:ce:fa:11: bb:dd:11:f5:15:0e:3d:87:65:88:07:db:38:f6:f5: 8e:67:61:68:c8:f6:92:f2:f1:c8:8c:51:c8:38:0e: 9c:a3:01:4d:06:2b:8e:6a:21:ab:35:2f:85:e1:11: 9d:a7:90:78:33:65:57:a7:f4:97:17:97:be:c0:bd: 5f:ec:f1:52:d6:4a:ce:e3:c5:52:d7:e9:ae:c0:d6: 21:66:3e:e0:f5:00:f1:06:5f:fa:45:58:b3:52:94: e8:d6:8c:41:85:3c:5d:f0:6f:38:0e:05:14:96:58: 1c:07:bf:52:6c:4a:d4:bf:e3:b2:f9:c1:00:72:10: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FF:77:F0:10:85:D6:3D:8F:AB:F8:3A:15:91:36:C2:1C:DD:F2:E5 X509v3 Authority Key Identifier: keyid:17:A6:00:7E:C6:37:3E:C9:50:1F:99:56:E1:2B:6D:5C:BE:0F:DC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8de4af7-bf48-4cb8-8f63-81cae17364de/0/17A6007EC6373EC9501F9956E12B6D5CBE0FDC21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:38:cf:32:0e:97:54:41:aa:9b:41:c3:a8:2f:c0:62:d0:90: fc:1e:c9:b0:5b:9f:63:36:25:af:5c:1c:13:27:4b:17:82:bf: 6d:d5:bc:75:36:79:cc:78:b0:dd:11:c8:0c:83:7a:be:f2:b4: 34:54:34:39:29:0b:04:0c:bb:13:9b:59:8d:1d:bb:b2:db:12: 2d:1d:e7:6e:3a:f5:2c:2f:3d:92:16:cd:ef:5c:3d:14:35:8d: 5d:86:6e:22:54:2b:9c:99:8e:3c:93:75:72:08:99:3d:a8:f6: e1:ac:cc:aa:3b:83:41:a7:b4:13:b6:2b:9f:46:a3:74:ee:b9: a2:96:d6:6a:27:7c:ae:96:2d:ef:b0:65:6b:96:3e:83:df:bb: 6b:6f:70:5b:2a:35:99:d6:98:79:e7:81:41:85:65:5a:08:96: d1:e2:92:72:13:6d:90:bd:7f:51:79:e8:12:0d:9b:75:46:11: c1:d2:46:51:ee:5d:35:ba:58:bd:66:88:34:f7:34:19:1b:7b: f7:b5:10:1d:47:36:1b:ae:70:b8:0f:10:02:43:a6:a4:25:88: 06:be:a4:dc:c7:24:21:1b:13:54:25:b8:9a:1c:6c:48:35:33: bd:94:4f:71:fb:a9:ba:e8:28:2b:a7:c6:5f:f5:19:b2:2c:4e: e3:34:f5:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNuuhupg6uSf4leMEWoglMAuD54YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNC RTBGREMyMTAeFw0yNTEyMDUyMjQ3MDNaFw0yNTEyMDkwODQxMDNaMDMxMTAvBgNV BAMTKDVDRkY3N0YwMTA4NUQ2M0Q4RkFCRjgzQTE1OTEzNkMyMUNEREYyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJOe2T7LFd1ImJd9NXML24r+/ QqwBBiozkTdh0MnZADEyOTr99m8gj/oy3G+s9kKPQIbm5bTrwkjt8z8lhdpOAdSm obfL1QDnCDwcDbbcW5dQE7lS/yA0SqOA5xPfX0JDdGqUPZyLx3mAFTGx5izyioGy zkv7srqBguYhE/1P64fpYc76EbvdEfUVDj2HZYgH2zj29Y5nYWjI9pLy8ciMUcg4 DpyjAU0GK45qIas1L4XhEZ2nkHgzZVen9JcXl77AvV/s8VLWSs7jxVLX6a7A1iFm PuD1APEGX/pFWLNSlOjWjEGFPF3wbzgOBRSWWBwHv1JsStS/47L5wQByEMC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXP938BCF1j2Pq/g6FZE2whzd8uUwHwYDVR0j BBgwFoAUF6YAfsY3PslQH5lW4SttXL4P3CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGRlNGFmNy1iZjQ4LTRjYjgtOGY2My04MWNhZTE3MzY0ZGUvMC8xN0E2MDA3RUM2 MzczRUM5NTAxRjk5NTZFMTJCNkQ1Q0JFMEZEQzIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZENUNCRTBG REMyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThkZTRhZjctYmY0OC00Y2I4LThm NjMtODFjYWUxNzM2NGRlLzAvMTdBNjAwN0VDNjM3M0VDOTUwMUY5OTU2RTEyQjZE NUNCRTBGREMyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo4zzIOl1RBqptBw6gvwGLQkPweybBbn2M2 Ja9cHBMnSxeCv23VvHU2ecx4sN0RyAyDer7ytDRUNDkpCwQMuxObWY0du7LbEi0d 52469SwvPZIWze9cPRQ1jV2GbiJUK5yZjjyTdXIImT2o9uGszKo7g0GntBO2K59G o3TuuaKW1monfK6WLe+wZWuWPoPfu2tvcFsqNZnWmHnngUGFZVoIltHiknITbZC9 f1F56BINm3VGEcHSRlHuXTW6WL1miDT3NBkbe/e1EB1HNhuucLgPEAJDpqQliAa+ pNzHJCEbE1QluJocbEg1M72UT3H7qbroKCunxl/1GbIsTuM09UI= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:04 2025 by rpki-client