This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: idHM7WTuxVZTu1uh5BXyOhnoxB83gF/2WPF1cwrKJCE= Subject key identifier: 67:1B:E1:AB:AC:32:B9:82:83:53:9D:78:BA:15:A7:F4:9C:BA:ED:42 Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 1F675825935D8CCA5007B100DA18EDA301588C03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 034A Signing time: Fri 05 Dec 2025 10:51:16 +0000 Manifest this update: Fri 05 Dec 2025 10:46:16 +0000 Manifest next update: Mon 08 Dec 2025 14:38:16 +0000 Files and hashes: 1: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 2: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 3: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 4: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: dmC+jKg9aedoqnxXHbOC5zs80plKKO3tbej0BTwoWM4=) 5: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 6: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:67:58:25:93:5d:8c:ca:50:07:b1:00:da:18:ed:a3:01:58:8c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Dec 5 10:46:16 2025 GMT Not After : Dec 8 14:38:16 2025 GMT Subject: CN=671BE1ABAC32B98283539D78BA15A7F49CBAED42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:b4:a1:d2:b1:ab:34:08:86:77:a6:dd:e4: 7a:cb:dc:ff:44:04:9f:a9:4d:b3:dd:94:16:78:10: 3b:e8:cd:00:9f:07:51:ff:25:24:6b:01:1a:cb:9d: 48:dd:16:0d:87:0e:11:be:49:30:f7:8a:f2:51:42: 14:a8:1d:26:a8:51:13:4c:21:e2:81:42:81:ba:e8: f7:9c:9e:85:49:c4:77:4b:12:31:6a:f0:56:62:7f: 17:47:35:36:62:89:5c:b6:4b:b3:8b:38:7b:2c:91: 12:c0:b1:84:67:32:0b:3d:fb:04:7e:33:d3:4f:90: 81:14:7d:6c:86:10:17:7f:1c:c9:62:fc:4e:d3:44: 7d:78:75:48:be:16:32:22:03:6f:e3:86:b8:58:63: 31:26:11:f5:8b:07:78:49:77:1a:59:ee:e9:62:79: 07:66:11:03:a6:ca:37:64:dc:c0:24:d1:a1:52:ff: 99:29:50:40:64:05:eb:6c:1b:f0:c0:0f:6d:25:fc: de:6e:12:0e:05:59:8f:cb:37:8e:d6:a2:6d:77:fb: 55:bb:f0:4a:41:1c:89:02:5c:1f:88:4f:a0:ab:9a: 5e:15:5d:1d:34:33:7d:8f:ee:eb:5a:c0:f8:a1:02: c7:37:1e:1e:21:46:12:02:86:07:2d:a0:76:19:4c: 47:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:E1:AB:AC:32:B9:82:83:53:9D:78:BA:15:A7:F4:9C:BA:ED:42 X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ff:3a:24:f7:09:5c:d6:a6:8c:4a:d9:41:20:5b:72:98:29: 6b:72:51:89:70:33:aa:da:8a:ba:cf:13:6c:3f:96:76:fd:bb: f8:14:1a:df:70:f6:6b:68:fc:fb:56:b6:a4:61:cf:2c:a3:20: 88:35:07:08:98:fd:8a:b0:ba:3b:bd:85:60:e0:77:31:dd:f1: f9:8f:db:85:60:9c:a3:cb:96:f6:1c:16:4b:68:17:8a:b7:58: 84:f2:70:28:50:39:8a:e5:f7:e9:89:e1:ab:e3:27:70:3f:a0: 58:61:9e:8b:a9:06:4b:cc:94:13:2b:25:be:5d:6b:0a:e1:bd: cf:41:aa:88:26:bb:e0:66:94:97:66:b4:69:1f:9b:0a:7f:27: 0c:d1:61:8c:8b:61:b1:2d:df:48:d0:04:2b:c3:39:5e:e7:91: 96:c9:fe:83:49:36:ba:ac:8a:f9:b5:38:a1:9b:97:5c:2a:34: f5:2f:b3:a2:7f:43:c2:bf:94:04:2a:50:f3:65:8a:f5:46:e3: a8:78:98:bb:82:0a:05:3e:bd:4d:54:39:16:6b:2c:be:91:a3: ea:16:47:0f:d2:f6:8a:3b:83:c8:fa:5a:82:e7:20:7c:d3:95: 7f:30:69:5a:ae:a1:ad:a2:82:b9:da:59:1f:6e:f2:44:1e:7f: ef:bc:f3:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2dYJZNdjMpQB7EA2hjtowFYjAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTEyMDUxMDQ2MTZaFw0yNTEyMDgxNDM4MTZaMDMxMTAvBgNV BAMTKDY3MUJFMUFCQUMzMkI5ODI4MzUzOUQ3OEJBMTVBN0Y0OUNCQUVENDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9QLSh0rGrNAiGd6bd5HrL3P9E BJ+pTbPdlBZ4EDvozQCfB1H/JSRrARrLnUjdFg2HDhG+STD3ivJRQhSoHSaoURNM IeKBQoG66PecnoVJxHdLEjFq8FZifxdHNTZiiVy2S7OLOHsskRLAsYRnMgs9+wR+ M9NPkIEUfWyGEBd/HMli/E7TRH14dUi+FjIiA2/jhrhYYzEmEfWLB3hJdxpZ7uli eQdmEQOmyjdk3MAk0aFS/5kpUEBkBetsG/DAD20l/N5uEg4FWY/LN47Wom13+1W7 8EpBHIkCXB+IT6Crml4VXR00M32P7utawPihAsc3Hh4hRhIChgctoHYZTEctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxvhq6wyuYKDU514uhWn9Jy67UIwHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADT/OiT3CVzWpoxK2UEgW3KYKWtyUYlwM6ra irrPE2w/lnb9u/gUGt9w9mto/PtWtqRhzyyjIIg1BwiY/Yqwuju9hWDgdzHd8fmP 24VgnKPLlvYcFktoF4q3WITycChQOYrl9+mJ4avjJ3A/oFhhnoupBkvMlBMrJb5d awrhvc9Bqogmu+BmlJdmtGkfmwp/JwzRYYyLYbEt30jQBCvDOV7nkZbJ/oNJNrqs ivm1OKGbl1wqNPUvs6J/Q8K/lAQqUPNlivVG46h4mLuCCgU+vU1UORZrLL6Ro+oW Rw/S9oo7g8j6WoLnIHzTlX8waVquoa2igrnaWR9u8kQef++886o= -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:23 2025 by rpki-client