This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: ihLTyElJi3iUc/Vo2toSsrm3iqxhpvhyoH+b+7OeqeA= Subject key identifier: 48:E2:E0:CE:BE:DE:0C:D9:6D:27:D2:1C:44:14:95:4A:CE:91:E5:66 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 5431E42999D4A416ECCC79CAA4308853C9F91FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: C7 Signing time: Sat 06 Dec 2025 16:51:04 +0000 Manifest this update: Sat 06 Dec 2025 16:46:04 +0000 Manifest next update: Tue 09 Dec 2025 21:39:04 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) 2: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: 7T4RM7Kk3qcjBd6NfU8wT2XNri7ksVq831Qwc+8nW2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:31:e4:29:99:d4:a4:16:ec:cc:79:ca:a4:30:88:53:c9:f9:1f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Dec 6 16:46:04 2025 GMT Not After : Dec 9 21:39:04 2025 GMT Subject: CN=48E2E0CEBEDE0CD96D27D21C4414954ACE91E566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:63:1e:12:6b:47:00:a5:dd:ad:ea:12:6f: c7:07:9f:fc:98:a1:97:ac:7c:f4:74:bf:1e:65:ab: 34:81:d8:f4:4e:80:9f:52:42:d6:eb:8c:8f:80:50: eb:8c:8a:05:a1:4b:5b:56:55:1d:16:ad:15:4c:4e: e3:6f:5d:57:61:7b:22:c0:24:14:86:5a:94:32:5e: 9e:1e:fe:c6:bc:16:5f:48:3b:b9:1f:ea:48:f5:75: 94:df:75:da:79:a6:e0:75:2a:f7:53:4e:f1:a6:bd: 9d:06:fa:3e:94:ee:42:9b:c5:5a:c7:6f:07:f1:7d: 1d:b9:42:f9:23:84:e1:cd:30:2d:35:c1:b6:bf:c0: 6d:8f:c0:46:85:ed:06:e1:51:dc:5e:1d:19:fa:05: 6e:78:d8:91:82:de:1e:b9:f6:ae:df:a0:eb:e7:f6: 6b:8f:00:54:44:5f:6d:af:2c:f9:9b:e1:58:20:81: 04:5b:58:55:74:a5:1f:fc:08:c0:8d:fd:62:94:4b: 89:2f:8d:b4:1c:65:1d:a4:e4:c1:3d:2f:62:d5:0e: 74:51:34:ea:08:71:7f:eb:43:28:f7:00:5d:63:ec: 4d:c8:e9:da:9f:5c:52:f7:42:c1:25:71:e9:e8:af: b3:76:b9:c6:7c:fe:e2:c9:f2:95:b9:f4:c8:08:55: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:E0:CE:BE:DE:0C:D9:6D:27:D2:1C:44:14:95:4A:CE:91:E5:66 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:fc:86:3d:d6:86:92:ff:11:74:a1:14:3e:15:ca:e4:97:1a: 15:ad:00:79:17:fa:92:4f:75:7a:ac:69:3d:0e:a9:2a:61:5d: 95:9c:b1:99:b8:d7:a7:4f:f7:46:0c:12:0c:1f:d4:bf:6b:01: dc:20:1f:e7:2b:5b:64:bc:ce:9b:e7:0f:27:ca:fd:54:92:50: 06:8b:58:58:72:8d:e5:33:74:70:ce:69:22:50:f8:2f:0e:04: ff:8f:af:c3:fd:34:7d:ce:75:da:9c:35:93:99:81:81:82:d5: 1a:23:5a:95:a3:52:16:f2:67:24:dc:5b:7f:11:19:3b:48:7e: 8b:6f:2d:bf:6c:b8:48:20:09:47:eb:16:4a:d0:43:fd:60:b6: 97:fa:4c:5b:17:6e:1f:f4:dc:64:17:59:10:b6:5b:25:79:0a: 60:07:fe:58:65:d1:82:a2:fd:e2:87:95:25:7c:69:3e:79:6b: ea:59:27:db:58:dd:1d:17:15:b9:3b:4f:1b:cc:e5:c0:f7:61: 02:5c:22:44:b6:fc:38:9d:92:1b:f5:8c:6c:52:67:37:b4:24: f6:b7:4e:49:4b:5b:fd:f4:a9:da:6e:b9:1e:95:7a:f4:dc:29: 9e:99:c4:86:4f:62:13:3b:f1:72:f7:07:fb:c7:b1:f0:49:73: 0a:c7:76:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVDHkKZnUpBbszHnKpDCIU8n5H+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTEyMDYxNjQ2MDRaFw0yNTEyMDkyMTM5MDRaMDMxMTAvBgNV BAMTKDQ4RTJFMENFQkVERTBDRDk2RDI3RDIxQzQ0MTQ5NTRBQ0U5MUU1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndmMeEmtHAKXdreoSb8cHn/yY oZesfPR0vx5lqzSB2PROgJ9SQtbrjI+AUOuMigWhS1tWVR0WrRVMTuNvXVdheyLA JBSGWpQyXp4e/sa8Fl9IO7kf6kj1dZTfddp5puB1KvdTTvGmvZ0G+j6U7kKbxVrH bwfxfR25QvkjhOHNMC01wba/wG2PwEaF7QbhUdxeHRn6BW542JGC3h659q7foOvn 9muPAFREX22vLPmb4VgggQRbWFV0pR/8CMCN/WKUS4kvjbQcZR2k5ME9L2LVDnRR NOoIcX/rQyj3AF1j7E3I6dqfXFL3QsElcenor7N2ucZ8/uLJ8pW59MgIVRRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOLgzr7eDNltJ9IcRBSVSs6R5WYwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJf8hj3WhpL/EXShFD4VyuSXGhWtAHkX+pJP dXqsaT0OqSphXZWcsZm416dP90YMEgwf1L9rAdwgH+crW2S8zpvnDyfK/VSSUAaL WFhyjeUzdHDOaSJQ+C8OBP+Pr8P9NH3OddqcNZOZgYGC1RojWpWjUhbyZyTcW38R GTtIfotvLb9suEggCUfrFkrQQ/1gtpf6TFsXbh/03GQXWRC2WyV5CmAH/lhl0YKi /eKHlSV8aT55a+pZJ9tY3R0XFbk7TxvM5cD3YQJcIkS2/Didkhv1jGxSZze0JPa3 TklLW/30qdpuuR6VevTcKZ6ZxIZPYhM78XL3B/vHsfBJcwrHdk8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:27 2025 by rpki-client