This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft File: 170979C0E31958FA76259F360B8405233C40BA7A.mft (raw, json) Hash identifier: LaqurEBY3rr8f3kvA3ThqHFnrS5GgPrNn6QjWMz0WkA= Subject key identifier: 74:70:8C:46:6F:1F:0F:08:C8:C9:BF:A3:37:20:A0:F9:C8:0A:DF:FE Authority key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Certificate issuer: /CN=170979C0E31958FA76259F360B8405233C40BA7A Certificate serial: 1FE35CECF623C4BE0030A6EF1BEF57D2E5A7469F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft Manifest number: F5 Signing time: Thu 04 Dec 2025 11:50:03 +0000 Manifest this update: Thu 04 Dec 2025 11:45:03 +0000 Manifest next update: Sun 07 Dec 2025 16:47:03 +0000 Files and hashes: 1: 3135372e32302e33382e302f32332d3234203d3e20313532333838.roa (hash: mVf5a9vExgGJKEfnRVhSrrkQjjAkp42h9gYkIf1hcMA=) 2: 170979C0E31958FA76259F360B8405233C40BA7A.crl (hash: KF94j2UQWYacn5QS4dgda9yuQiz4Gy7v113XTqqZ+lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 16:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e3:5c:ec:f6:23:c4:be:00:30:a6:ef:1b:ef:57:d2:e5:a7:46:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170979C0E31958FA76259F360B8405233C40BA7A Validity Not Before: Dec 4 11:45:03 2025 GMT Not After : Dec 7 16:47:03 2025 GMT Subject: CN=74708C466F1F0F08C8C9BFA33720A0F9C80ADFFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:34:fa:9e:47:f2:2e:1a:ed:3f:0d:43:94: 8e:4e:a9:26:74:5c:a0:d2:d5:47:b3:b5:77:ef:11: a0:e0:a5:fb:75:42:e0:72:73:97:98:7b:15:9f:f1: 8c:52:fd:13:fa:e2:64:4f:d9:75:60:39:99:70:f3: c2:8c:13:3f:5c:36:5d:ef:b9:26:a6:ab:fe:5b:14: e2:87:bd:b8:54:79:a0:fa:c7:6f:8c:f4:2f:bb:82: 9c:1a:6d:64:c7:db:ed:14:ed:22:de:1a:4b:10:aa: b9:79:ef:26:a1:7a:0a:a1:88:96:98:95:ca:ab:47: b0:fd:b2:f6:10:e9:96:a6:a9:64:e8:0f:41:2c:7c: 69:ff:91:c4:ed:74:c3:17:da:5c:3f:47:32:d3:5a: 9f:de:3a:d3:19:31:43:e2:4a:19:52:ba:c7:8d:c0: a1:49:d9:01:3e:d2:2c:b8:f6:07:db:1f:9c:75:b8: 6b:fb:46:5a:4a:9c:b7:54:23:cd:34:bd:50:8a:5a: 54:f1:7e:cf:f7:bf:04:2c:ad:3e:f2:5e:89:40:98: cf:47:02:e1:1b:c1:05:f9:4d:c1:e0:74:50:8d:4a: dc:3b:ae:ef:ba:7b:ec:61:5f:8a:82:ab:2a:d0:1a: 84:e4:f7:f1:0f:ce:7b:2b:ea:7c:07:55:fe:38:34: 0d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:70:8C:46:6F:1F:0F:08:C8:C9:BF:A3:37:20:A0:F9:C8:0A:DF:FE X509v3 Authority Key Identifier: keyid:17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:45:85:5a:6f:30:90:5e:51:a7:41:eb:1a:ac:f5:50:88:74: 00:0d:01:bc:0f:e8:b2:dc:73:85:a9:4e:ff:bf:ac:04:0d:06: 11:41:f9:07:f6:fa:9b:e4:65:61:58:39:62:35:55:ae:aa:e7: f7:7e:3e:82:d5:7e:96:9d:d8:44:db:08:15:fe:88:3c:85:b6: ef:18:a0:7d:d3:aa:69:44:44:1d:f6:9e:b6:3e:8c:f3:3c:86: 97:d1:97:58:4c:0e:eb:76:b8:47:bd:b4:bc:24:05:89:43:40: d3:eb:63:ab:08:74:63:a1:8a:94:80:8e:0d:e3:87:e6:18:32: a7:9f:56:1a:67:06:99:a2:a1:9f:e4:48:cc:88:89:eb:bc:5a: 9e:58:9b:ac:08:9c:9d:0c:cb:a9:9e:aa:4b:4c:df:2d:ac:83: 74:70:ca:13:3b:2e:a6:d1:6b:78:09:d9:af:2d:d1:26:7c:2c: db:49:3f:4c:a4:76:19:3e:0f:64:6c:21:70:1b:a2:3c:81:ae: 6b:a5:92:17:a6:a5:e8:99:64:5c:ac:c0:b9:b3:60:8f:2d:ae: 72:ec:7c:42:5e:d4:81:11:9d:22:c4:c8:c9:2d:b9:96:33:45: e3:19:7c:d5:06:c5:bc:b8:35:9e:c1:63:70:d5:47:0a:4a:de: 34:0f:c8:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH+Nc7PYjxL4AMKbvG+9X0uWnRp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMz QzQwQkE3QTAeFw0yNTEyMDQxMTQ1MDNaFw0yNTEyMDcxNjQ3MDNaMDMxMTAvBgNV BAMTKDc0NzA4QzQ2NkYxRjBGMDhDOEM5QkZBMzM3MjBBMEY5QzgwQURGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ZzT6nkfyLhrtPw1DlI5OqSZ0 XKDS1UeztXfvEaDgpft1QuByc5eYexWf8YxS/RP64mRP2XVgOZlw88KMEz9cNl3v uSamq/5bFOKHvbhUeaD6x2+M9C+7gpwabWTH2+0U7SLeGksQqrl57yahegqhiJaY lcqrR7D9svYQ6ZamqWToD0EsfGn/kcTtdMMX2lw/RzLTWp/eOtMZMUPiShlSuseN wKFJ2QE+0iy49gfbH5x1uGv7RlpKnLdUI800vVCKWlTxfs/3vwQsrT7yXolAmM9H AuEbwQX5TcHgdFCNStw7ru+6e+xhX4qCqyrQGoTk9/EPznsr6nwHVf44NA1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdHCMRm8fDwjIyb+jNyCg+cgK3/4wHwYDVR0j BBgwFoAUFwl5wOMZWPp2JZ82C4QFIzxAunowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMC8xNzA5NzlDMEUz MTk1OEZBNzYyNTlGMzYwQjg0MDUyMzNDNDBCQTdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1MjMzQzQw QkE3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5MmJmMjYtYzhlNi00YTg2LTli MzMtZWEzYTJhZjU1N2YwLzAvMTcwOTc5QzBFMzE5NThGQTc2MjU5RjM2MEI4NDA1 MjMzQzQwQkE3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZFhVpvMJBeUadB6xqs9VCIdAANAbwP6LLc c4WpTv+/rAQNBhFB+Qf2+pvkZWFYOWI1Va6q5/d+PoLVfpad2ETbCBX+iDyFtu8Y oH3TqmlERB32nrY+jPM8hpfRl1hMDut2uEe9tLwkBYlDQNPrY6sIdGOhipSAjg3j h+YYMqefVhpnBpmioZ/kSMyIieu8Wp5Ym6wInJ0My6meqktM3y2sg3RwyhM7LqbR a3gJ2a8t0SZ8LNtJP0ykdhk+D2RsIXAbojyBrmulkhempeiZZFyswLmzYI8trnLs fEJe1IERnSLEyMktuZYzReMZfNUGxby4NZ7BY3DVRwpK3jQPyFA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:54:44 2025 by rpki-client