This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft File: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft (raw, json) Hash identifier: jS72ZgYI8vG0I3uiLxcU6sYdXqnLcXIakk5cMaWPnEU= Subject key identifier: B9:65:A2:12:05:B0:0A:CC:0C:FD:05:FF:35:9F:17:74:06:35:21:6A Authority key identifier: 17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 Certificate issuer: /CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Certificate serial: 417B1A785168B86E0D0F54FA38482594297D146E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft Manifest number: 013F Signing time: Wed 03 Dec 2025 00:41:51 +0000 Manifest this update: Wed 03 Dec 2025 00:36:51 +0000 Manifest next update: Sat 06 Dec 2025 07:07:51 +0000 Files and hashes: 1: 170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl (hash: YNIQsqZr9+kN/9UPrE4CIVL8Yu63Xh+GcTXbZS7ISxw=) 2: 3130332e332e34372e302f32342d3234203d3e203536323338.roa (hash: R9+89SgRY/t0tmu72BY2SfLfNg/9wdtNupYFgMHeobM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 07:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7b:1a:78:51:68:b8:6e:0d:0f:54:fa:38:48:25:94:29:7d:14:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=170364F664BF0A4CDB9EEC7A8C1282D0B314F186 Validity Not Before: Dec 3 00:36:51 2025 GMT Not After : Dec 6 07:07:51 2025 GMT Subject: CN=B965A21205B00ACC0CFD05FF359F17740635216A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2e:9b:dc:25:46:a3:03:5a:cf:d7:10:bd:47: 5a:bf:f5:ac:c3:14:fb:7f:40:c4:e9:70:40:1c:85: 2c:b9:58:73:af:af:79:93:bb:93:58:eb:8b:b4:18: ae:74:66:1c:26:fa:36:2c:71:20:72:b0:d8:23:d7: 3f:4a:82:78:6e:c6:e1:71:4c:5b:cc:c2:88:13:ad: 6c:31:0b:e9:6f:97:2a:99:6f:53:43:29:d1:bf:73: 4a:77:01:03:36:49:44:e6:a7:ab:5f:9e:cf:13:63: d1:e6:3e:e9:b2:e3:35:ee:c5:e5:54:84:86:61:9c: 8b:6f:e0:a8:7d:bd:d8:ee:e9:e2:5f:fb:25:2f:c9: 1d:e5:fe:69:78:36:85:bb:0c:9d:a7:c7:44:cc:1e: 10:ae:85:fc:d6:b8:2c:f1:69:1e:38:f9:14:fb:fb: f8:08:b4:9d:0b:b3:90:0c:54:3d:63:f1:81:a7:62: 05:3e:a0:a6:68:f4:2b:af:b0:af:69:9c:d4:7d:ba: 4b:e2:c7:92:31:a0:44:12:88:6c:08:82:ed:93:1f: f1:4e:b2:cf:b2:52:ec:b2:2e:cb:40:0a:d0:0c:42: 13:f4:40:89:58:d3:38:82:80:b7:b6:70:e8:8e:00: 72:fc:9b:bd:85:95:4b:01:76:ba:87:6c:0a:5b:b9: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:65:A2:12:05:B0:0A:CC:0C:FD:05:FF:35:9F:17:74:06:35:21:6A X509v3 Authority Key Identifier: keyid:17:03:64:F6:64:BF:0A:4C:DB:9E:EC:7A:8C:12:82:D0:B3:14:F1:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66095c85-8c92-414b-bd55-0601c11b51af/0/170364F664BF0A4CDB9EEC7A8C1282D0B314F186.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a9:7c:e9:ec:33:70:83:b8:a9:f6:41:9c:7d:d6:df:fe:e1: bc:cb:83:c9:97:19:95:24:f0:24:ab:62:16:09:69:83:ff:f3: 32:0d:fc:e8:a3:62:26:d6:70:55:e7:de:55:33:15:b9:c7:33: c1:06:36:53:90:fb:68:2d:b5:ef:07:9b:14:a1:fa:8b:9b:df: 6f:46:90:56:b8:48:ea:f3:16:d6:bf:4f:05:71:28:1b:14:7a: 80:ad:8b:ff:c9:29:2e:fc:19:7c:dd:0b:ae:55:cd:dd:cb:79: 63:3f:81:99:e3:5e:6b:e2:51:e6:5e:d3:ed:32:89:cf:d4:88: 60:8e:be:26:84:ea:88:83:20:b2:1a:ed:bd:8d:63:c2:6d:31: 69:8e:92:b6:a3:56:a8:84:a6:4c:70:de:ac:d3:a2:c5:13:b2: 73:b6:32:ae:dc:3d:93:76:5d:35:32:57:90:4a:7c:db:3d:66: 79:3d:b5:6f:97:22:ec:c9:ba:a8:33:9d:76:52:ec:90:16:37: a1:3d:00:2f:cd:07:df:00:49:cd:e5:c4:2e:a1:27:dd:23:e3: be:3e:5b:1a:4c:77:22:a5:fe:99:c8:b6:b7:79:7f:54:b0:dd: c7:22:f4:1c:33:d4:7e:ef:2a:9f:36:c3:ff:05:62:b2:0c:83: a9:f8:5c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXsaeFFouG4ND1T6OEgllCl9FG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBC MzE0RjE4NjAeFw0yNTEyMDMwMDM2NTFaFw0yNTEyMDYwNzA3NTFaMDMxMTAvBgNV BAMTKEI5NjVBMjEyMDVCMDBBQ0MwQ0ZEMDVGRjM1OUYxNzc0MDYzNTIxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LpvcJUajA1rP1xC9R1q/9azD FPt/QMTpcEAchSy5WHOvr3mTu5NY64u0GK50Zhwm+jYscSBysNgj1z9KgnhuxuFx TFvMwogTrWwxC+lvlyqZb1NDKdG/c0p3AQM2SUTmp6tfns8TY9HmPumy4zXuxeVU hIZhnItv4Kh9vdju6eJf+yUvyR3l/ml4NoW7DJ2nx0TMHhCuhfzWuCzxaR44+RT7 +/gItJ0Ls5AMVD1j8YGnYgU+oKZo9CuvsK9pnNR9ukvix5IxoEQSiGwIgu2TH/FO ss+yUuyyLstACtAMQhP0QIlY0ziCgLe2cOiOAHL8m72FlUsBdrqHbApbuYNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuWWiEgWwCswM/QX/NZ8XdAY1IWowHwYDVR0j BBgwFoAUFwNk9mS/Ckzbnux6jBKC0LMU8YYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NjA5NWM4NS04YzkyLTQxNGItYmQ1NS0wNjAxYzExYjUxYWYvMC8xNzAzNjRGNjY0 QkYwQTRDREI5RUVDN0E4QzEyODJEMEIzMTRGMTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgyRDBCMzE0 RjE4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjYwOTVjODUtOGM5Mi00MTRiLWJk NTUtMDYwMWMxMWI1MWFmLzAvMTcwMzY0RjY2NEJGMEE0Q0RCOUVFQzdBOEMxMjgy RDBCMzE0RjE4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqpfOnsM3CDuKn2QZx91t/+4bzLg8mXGZUk 8CSrYhYJaYP/8zIN/OijYibWcFXn3lUzFbnHM8EGNlOQ+2gtte8HmxSh+oub329G kFa4SOrzFta/TwVxKBsUeoCti//JKS78GXzdC65Vzd3LeWM/gZnjXmviUeZe0+0y ic/UiGCOviaE6oiDILIa7b2NY8JtMWmOkrajVqiEpkxw3qzTosUTsnO2Mq7cPZN2 XTUyV5BKfNs9Znk9tW+XIuzJuqgznXZS7JAWN6E9AC/NB98ASc3lxC6hJ90j474+ WxpMdyKl/pnItrd5f1Sw3cci9Bwz1H7vKp82w/8FYrIMg6n4XFM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:29 2025 by rpki-client