This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft File: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft (raw, json) Hash identifier: U+rPJi+r1W5Ksp6DzFMU47qKw0QQ103jlqAdaRVPN6U= Subject key identifier: DB:15:E2:1B:AF:7D:01:2A:56:A7:D1:FE:56:49:D0:D3:3E:A4:D6:F3 Authority key identifier: 91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 Certificate issuer: /CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Certificate serial: 3F976C78EE13856C084C5A546B5E7D7D03E54BC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft Manifest number: 0274 Signing time: Sun 14 Dec 2025 18:10:41 +0000 Manifest this update: Sun 14 Dec 2025 18:05:41 +0000 Manifest next update: Thu 18 Dec 2025 04:17:41 +0000 Files and hashes: 1: 3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (hash: +et6XAZaJYtUR6Dc2zidlhc9nlrgtLBlWzalZZGRqM4=) 2: 917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl (hash: oX/nD71U4qZQ+S9uGIKZxHVFMOnZwU8DFcPZxZKc29Q=) 3: 323430303a346265303a3a2f33322d3438203d3e20313431383938.roa (hash: cViD++tff+X7xq1z33jmPNpr3W6MqEIUFSVqOeIQ0V4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 04:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:97:6c:78:ee:13:85:6c:08:4c:5a:54:6b:5e:7d:7d:03:e5:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784 Validity Not Before: Dec 14 18:05:41 2025 GMT Not After : Dec 18 04:17:41 2025 GMT Subject: CN=DB15E21BAF7D012A56A7D1FE5649D0D33EA4D6F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:61:94:2c:b1:cb:1a:9c:88:29:dc:cf:b7: 7c:64:06:46:34:9e:24:5d:1a:3e:9c:7e:ba:5d:bd: f0:d4:07:f4:9e:29:e4:76:a1:fb:0c:f7:fc:65:f1: fb:47:0c:44:4d:c0:1c:44:88:5f:4f:22:8a:9e:ea: f5:fa:36:83:77:30:2a:71:b8:6d:0d:b2:cb:57:ae: 6c:93:29:2a:27:ab:db:98:f6:a3:7d:38:8f:38:2c: 43:1f:4a:ce:7d:27:59:75:3e:2f:b0:e2:0f:ca:88: fc:07:76:98:78:58:a7:2b:d9:1b:37:cc:f7:32:d2: 10:8b:27:8d:73:0f:df:99:23:8c:b8:a8:60:b1:bf: af:c1:64:58:48:8c:06:ca:be:b0:ac:19:23:96:92: 78:d5:6b:de:4c:93:a8:ce:0f:5e:c3:56:c3:2a:2f: d2:d2:33:46:e6:ec:80:f7:1d:65:e3:46:0c:8e:39: 7d:59:4d:84:ad:ee:9e:12:c2:9c:ec:a3:76:14:65: a7:3e:5b:7d:d0:a1:96:de:66:ac:c4:8a:d8:47:2b: 51:93:a8:42:17:e3:43:4b:80:b3:77:94:3e:ed:17: d3:29:09:d9:e7:81:62:5d:f5:9b:c6:2c:02:2c:c0: 45:3f:37:9b:72:8f:48:9b:51:08:f0:48:11:99:7f: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:15:E2:1B:AF:7D:01:2A:56:A7:D1:FE:56:49:D0:D3:3E:A4:D6:F3 X509v3 Authority Key Identifier: keyid:91:7A:9D:24:BF:1E:AD:6F:A4:A1:F8:FD:81:D5:31:37:EF:52:E7:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdff819-2bad-483d-9fa8-b6ebc484031a/0/917A9D24BF1EAD6FA4A1F8FD81D53137EF52E784.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:06:f6:e5:25:51:6f:e5:0c:3f:6f:19:f3:a2:eb:1d:93:fc: 50:b2:76:96:15:b3:92:68:da:e9:ae:39:db:5d:c2:9e:a9:f9: 69:70:c8:24:75:44:4f:e3:60:e2:56:27:12:10:6c:ed:1a:c2: 20:c2:14:ef:1e:68:30:21:83:50:13:af:df:36:69:f7:e5:e1: a1:f3:1b:59:1c:73:cd:9e:52:6c:4b:4b:0a:0d:07:3d:2c:4c: 25:6e:b1:4e:21:c7:8a:da:a8:51:c0:d6:4a:0c:ea:ab:94:b0: 3f:74:e2:da:58:c0:54:9d:2a:24:7c:ff:e4:b6:b4:dc:08:6d: f1:d8:9d:d2:bc:83:f3:f5:36:44:76:bb:d9:10:91:26:02:ae: b7:e0:93:4e:32:ff:51:71:38:6e:27:2f:ec:2b:8d:15:d0:54: 7e:85:92:92:bf:b8:32:b5:47:04:ad:a3:3a:2a:91:79:44:b1: b0:de:f4:8b:c4:47:79:6e:c3:e8:77:84:5e:0d:1f:74:f2:26: f8:f0:b7:7c:71:09:a6:56:eb:be:e2:88:bd:2e:00:8b:f7:76: 27:2e:5d:7b:1c:4e:53:09:8a:51:d9:44:f1:a5:fb:98:82:36: 0a:6e:d2:f3:88:85:fe:25:8f:a5:32:28:d7:6d:fb:1b:15:4d: 5b:60:3b:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5dseO4ThWwITFpUa159fQPlS8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdF RjUyRTc4NDAeFw0yNTEyMTQxODA1NDFaFw0yNTEyMTgwNDE3NDFaMDMxMTAvBgNV BAMTKERCMTVFMjFCQUY3RDAxMkE1NkE3RDFGRTU2NDlEMEQzM0VBNEQ2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEWGULLHLGpyIKdzPt3xkBkY0 niRdGj6cfrpdvfDUB/SeKeR2ofsM9/xl8ftHDERNwBxEiF9PIoqe6vX6NoN3MCpx uG0NsstXrmyTKSonq9uY9qN9OI84LEMfSs59J1l1Pi+w4g/KiPwHdph4WKcr2Rs3 zPcy0hCLJ41zD9+ZI4y4qGCxv6/BZFhIjAbKvrCsGSOWknjVa95Mk6jOD17DVsMq L9LSM0bm7ID3HWXjRgyOOX1ZTYSt7p4Swpzso3YUZac+W33QoZbeZqzEithHK1GT qEIX40NLgLN3lD7tF9MpCdnngWJd9ZvGLAIswEU/N5tyj0ibUQjwSBGZf+6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2xXiG699ASpWp9H+VknQ0z6k1vMwHwYDVR0j BBgwFoAUkXqdJL8erW+kofj9gdUxN+9S54QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRmZjgxOS0yYmFkLTQ4M2QtOWZhOC1iNmViYzQ4NDAzMWEvMC85MTdBOUQyNEJG MUVBRDZGQTRBMUY4RkQ4MUQ1MzEzN0VGNTJFNzg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMxMzdFRjUy RTc4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZmY4MTktMmJhZC00ODNkLTlm YTgtYjZlYmM0ODQwMzFhLzAvOTE3QTlEMjRCRjFFQUQ2RkE0QTFGOEZEODFENTMx MzdFRjUyRTc4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMG9uUlUW/lDD9vGfOi6x2T/FCydpYVs5Jo 2umuOdtdwp6p+WlwyCR1RE/jYOJWJxIQbO0awiDCFO8eaDAhg1ATr982affl4aHz G1kcc82eUmxLSwoNBz0sTCVusU4hx4raqFHA1koM6quUsD904tpYwFSdKiR8/+S2 tNwIbfHYndK8g/P1NkR2u9kQkSYCrrfgk04y/1FxOG4nL+wrjRXQVH6FkpK/uDK1 RwStozoqkXlEsbDe9IvER3luw+h3hF4NH3TyJvjwt3xxCaZW677iiL0uAIv3dicu XXscTlMJilHZRPGl+5iCNgpu0vOIhf4lj6UyKNdt+xsVTVtgO5g= -----END CERTIFICATE-----Generated at Tue Dec 16 20:03:56 2025 by rpki-client