This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: yWU4ieVWKHGdrmJ9rv6/K+0HhIQb4LvtkmsQCRGT0jI= Subject key identifier: 56:C4:CF:58:1D:82:FA:6D:FF:99:AF:53:B9:93:31:EA:84:5B:55:C3 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 180C908013A13EDDF3C884F4DFBF9BCCBF12B3AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: C5 Signing time: Mon 01 Dec 2025 22:01:06 +0000 Manifest this update: Mon 01 Dec 2025 21:56:06 +0000 Manifest next update: Fri 05 Dec 2025 06:15:06 +0000 Files and hashes: 1: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: Gm9RFJLle1Vo3nraFPAmtH/2FuyLzbowqj47Uwgbp7k=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0c:90:80:13:a1:3e:dd:f3:c8:84:f4:df:bf:9b:cc:bf:12:b3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Dec 1 21:56:06 2025 GMT Not After : Dec 5 06:15:06 2025 GMT Subject: CN=56C4CF581D82FA6DFF99AF53B99331EA845B55C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:32:cd:49:44:a1:fd:a8:35:69:c6:51:d8: 4b:76:d3:e6:85:80:52:19:60:a2:13:35:e5:53:cf: 67:a2:1e:89:55:c9:44:42:b1:56:93:64:84:b0:cc: fa:e5:39:01:0c:a0:96:4c:8c:c3:ed:b9:21:f1:69: f5:55:72:70:92:8d:9e:68:31:b1:4f:35:5f:ae:ad: e8:c8:0d:03:4b:eb:b1:61:02:d3:fa:a3:f5:1e:82: d0:8c:ec:78:69:09:7d:66:af:31:7b:1a:6e:bd:0c: 67:27:b9:e9:23:8c:f1:ab:2c:4b:e4:40:d0:d5:73: e5:bf:eb:e8:8a:00:be:59:51:ba:97:3b:ec:6d:e3: 05:b8:1b:b2:c9:c7:86:85:35:fb:6e:96:b2:56:60: aa:29:55:cb:33:24:fe:2a:d2:9e:29:73:f6:43:f6: 93:90:cf:c8:ea:74:09:6f:92:97:28:55:8b:41:7e: b3:96:58:ad:16:98:b7:d1:c6:3f:e7:0e:a4:bc:c9: 45:83:70:02:89:bd:f0:95:f0:01:4e:52:d4:89:5d: a8:58:89:6b:5d:27:6b:9f:b7:90:e0:12:cf:82:77: ca:8c:77:97:d6:21:ee:d6:e3:de:e8:62:1b:86:39: 52:4d:31:b2:6b:3c:f4:fb:67:73:99:4d:ee:a0:f6: b9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C4:CF:58:1D:82:FA:6D:FF:99:AF:53:B9:93:31:EA:84:5B:55:C3 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:5d:4c:75:65:1d:87:3e:51:aa:f9:48:2f:3d:b1:9d:1f: 69:7d:f2:cd:b3:6f:b3:c2:1e:f4:31:a2:a4:39:7c:ef:c0:cb: 81:33:1c:f2:a4:54:a6:ee:c9:08:62:8b:06:e6:07:55:e3:76: 8e:92:2f:4e:75:6b:a6:d5:af:28:52:30:bf:64:fd:3d:48:55: df:06:89:a3:db:b7:a3:08:e2:33:54:7f:cb:7c:08:14:a3:f2: 86:ac:56:9c:d9:0a:98:43:86:61:07:5b:85:25:37:0d:ab:99: bc:ea:cc:c5:e4:7c:41:42:da:c4:5e:b3:f7:c7:6a:84:5d:84: 6b:0d:a9:98:a6:6b:5c:23:e9:02:43:51:92:2a:b9:45:06:8b: 8f:71:91:80:56:31:77:b7:5b:c2:73:d9:cf:a6:51:b3:aa:36: 64:3d:9b:a3:cc:2e:6a:90:4f:fc:82:b4:7a:19:50:56:b5:7f: fd:40:14:00:d7:dc:ed:43:fb:6b:42:58:fe:b2:3e:0b:39:b5: 6e:2d:0e:39:34:e9:da:0b:b7:05:4c:95:80:ae:58:19:09:2f: 68:b1:07:a8:7f:82:e7:92:b9:4c:35:99:0c:3d:ab:4a:38:f2: 64:b9:bd:9d:e7:e0:a3:9c:75:18:9b:7b:3f:4d:0a:de:79:f7: 4a:cb:3c:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAyQgBOhPt3zyIT037+bzL8Ss6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNTEyMDEyMTU2MDZaFw0yNTEyMDUwNjE1MDZaMDMxMTAvBgNV BAMTKDU2QzRDRjU4MUQ4MkZBNkRGRjk5QUY1M0I5OTMzMUVBODQ1QjU1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UDLNSUSh/ag1acZR2Et20+aF gFIZYKITNeVTz2eiHolVyURCsVaTZISwzPrlOQEMoJZMjMPtuSHxafVVcnCSjZ5o MbFPNV+urejIDQNL67FhAtP6o/UegtCM7HhpCX1mrzF7Gm69DGcnuekjjPGrLEvk QNDVc+W/6+iKAL5ZUbqXO+xt4wW4G7LJx4aFNftulrJWYKopVcszJP4q0p4pc/ZD 9pOQz8jqdAlvkpcoVYtBfrOWWK0WmLfRxj/nDqS8yUWDcAKJvfCV8AFOUtSJXahY iWtdJ2uft5DgEs+Cd8qMd5fWIe7W497oYhuGOVJNMbJrPPT7Z3OZTe6g9rk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVsTPWB2C+m3/ma9TuZMx6oRbVcMwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsgXUx1ZR2HPlGq+UgvPbGdH2l98s2zb7PC HvQxoqQ5fO/Ay4EzHPKkVKbuyQhiiwbmB1Xjdo6SL051a6bVryhSML9k/T1IVd8G iaPbt6MI4jNUf8t8CBSj8oasVpzZCphDhmEHW4UlNw2rmbzqzMXkfEFC2sRes/fH aoRdhGsNqZima1wj6QJDUZIquUUGi49xkYBWMXe3W8Jz2c+mUbOqNmQ9m6PMLmqQ T/yCtHoZUFa1f/1AFADX3O1D+2tCWP6yPgs5tW4tDjk06doLtwVMlYCuWBkJL2ix B6h/gueSuUw1mQw9q0o48mS5vZ3n4KOcdRibez9NCt5590rLPFM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:12 2025 by rpki-client