This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft File: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft (raw, json) Hash identifier: mwFem2y5+dtNLH6cmRfpfrTRBSA+tbdclR4dKFhCgYY= Subject key identifier: 71:F4:EB:1B:FC:93:53:A9:A6:8F:44:9B:8A:23:D2:76:0A:1E:20:86 Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD Certificate issuer: /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Certificate serial: 742414F401E10F3642F89990CF11C8FEBB41EFAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft Manifest number: E1 Signing time: Sun 01 Feb 2026 18:43:30 +0000 Manifest this update: Sun 01 Feb 2026 18:38:30 +0000 Manifest next update: Thu 05 Feb 2026 01:46:30 +0000 Files and hashes: 1: 3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (hash: K9hLNaJsVqOwSy9Ix0jk05uLxSrKFjPApuz0gPW2bKo=) 2: 3130332e3136362e3137382e302f32342d3234203d3e20313534343130.roa (hash: gzXm2H1SRhJOnW165GmOJoJuVcF7cAXPU5ZcWnDj+6k=) 3: 17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl (hash: DUp9SJpzsE++6fUNUyEdDf2Gh6Y0z2DlzZbjLIPuP7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Feb 2026 01:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:24:14:f4:01:e1:0f:36:42:f8:99:90:cf:11:c8:fe:bb:41:ef:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD Validity Not Before: Feb 1 18:38:30 2026 GMT Not After : Feb 5 01:46:30 2026 GMT Subject: CN=71F4EB1BFC9353A9A68F449B8A23D2760A1E2086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:4f:ae:8e:1f:b3:68:d1:7a:79:6b:41:07: 6a:e3:ec:80:a4:9c:e4:26:be:dc:b9:30:4a:e0:98: 4f:ab:19:32:ed:8f:ed:a6:b9:18:ab:e2:ea:97:0e: 8e:bd:fb:e4:14:d1:ab:66:13:6e:70:7a:e2:b4:ff: 64:68:fa:7b:7f:8c:e3:2d:94:0e:ec:c3:75:6e:fc: d9:02:de:2b:28:c4:29:47:1e:de:53:5a:82:fd:7c: d3:e1:45:e6:b4:e6:ff:bb:72:60:15:8e:32:f7:3e: d6:97:fd:4b:e6:6d:76:95:fe:2a:e9:09:38:e8:b5: ef:51:a7:c6:91:40:4b:4d:cf:03:55:cc:63:20:18: fc:73:e0:a2:41:be:5a:b2:3b:99:bd:b6:10:d6:1c: aa:46:ad:f8:7a:a2:bd:4b:d8:29:27:7a:1e:ab:55: 05:e8:d8:ed:2a:d1:2c:37:73:fc:56:7b:55:ef:f1: 15:a5:f0:f7:ff:03:93:88:74:0a:c8:79:eb:20:d1: 85:93:0b:0e:1c:8e:da:45:28:9c:5c:4b:70:38:c7: a0:ee:70:29:16:c6:8b:d3:b3:5b:0b:90:10:57:f4: f1:a9:69:e3:95:7c:db:51:3f:6a:66:01:f1:cc:65: ec:36:dc:f9:ca:9a:f3:f8:75:a6:4b:f0:0b:04:1f: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F4:EB:1B:FC:93:53:A9:A6:8F:44:9B:8A:23:D2:76:0A:1E:20:86 X509v3 Authority Key Identifier: keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6b:6b:8e:b9:a8:29:2b:e3:27:42:86:9d:96:12:0e:f3:7c: e6:03:e0:45:81:69:06:1a:15:b9:dc:e8:05:56:f3:5c:a1:e9: 92:0c:e0:49:b3:ab:11:e9:57:dd:8e:38:d3:63:3b:4c:72:30: f7:92:6f:f6:fe:2c:8e:18:27:4b:e6:68:01:11:26:f0:52:18: 0b:77:e6:2a:a7:84:b8:d4:bd:5f:b2:70:18:bb:06:e5:88:1a: 08:79:79:8c:3c:57:62:76:0c:19:3a:99:3d:72:5b:9a:32:b4: 6a:c4:fb:78:74:97:1d:ee:5c:e0:75:96:9b:25:df:a1:bd:f9: 72:85:4e:d7:7d:0e:db:4f:76:67:1f:b5:05:e3:29:f6:ab:7d: cb:12:03:e3:61:f4:3f:c5:4a:b2:54:bb:26:fb:40:1a:0b:35: 59:3e:cf:f6:cd:e5:2c:ec:f5:a7:d1:d5:e9:e3:03:6e:d4:9c: 7e:94:69:1a:a3:be:93:81:50:2d:1c:cd:77:32:fb:23:39:27: 58:14:3b:fe:03:d2:3e:77:63:4e:a2:24:5c:e0:45:c5:dd:c9: ac:f1:b4:1b:45:9f:98:d6:17:b0:54:a2:cb:0a:3a:56:0d:ff: e5:8f:bb:2f:df:0b:c3:3c:e6:be:64:74:33:ce:e2:fa:78:25: c9:b0:4f:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdCQU9AHhDzZC+JmQzxHI/rtB760wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4 MzQyM0NCRDAeFw0yNjAyMDExODM4MzBaFw0yNjAyMDUwMTQ2MzBaMDMxMTAvBgNV BAMTKDcxRjRFQjFCRkM5MzUzQTlBNjhGNDQ5QjhBMjNEMjc2MEExRTIwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuE+ujh+zaNF6eWtBB2rj7ICk nOQmvty5MErgmE+rGTLtj+2muRir4uqXDo69++QU0atmE25weuK0/2Ro+nt/jOMt lA7sw3Vu/NkC3isoxClHHt5TWoL9fNPhRea05v+7cmAVjjL3PtaX/UvmbXaV/irp CTjote9Rp8aRQEtNzwNVzGMgGPxz4KJBvlqyO5m9thDWHKpGrfh6or1L2Ckneh6r VQXo2O0q0Sw3c/xWe1Xv8RWl8Pf/A5OIdArIeesg0YWTCw4cjtpFKJxcS3A4x6Du cCkWxovTs1sLkBBX9PGpaeOVfNtRP2pmAfHMZew23PnKmvP4daZL8AsEHxWTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfTrG/yTU6mmj0SbiiPSdgoeIIYwHwYDVR0j BBgwFoAUF7YvDl318jBvBlaHXvYYf4NCPL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTBhYzVjYS0zNWRmLTQ2MDctOTQwNS0zOTdiN2FhZGIyYTcvMC8xN0I2MkYwRTVE RjVGMjMwNkYwNjU2ODc1RUY2MTg3RjgzNDIzQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4N0Y4MzQy M0NCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwYWM1Y2EtMzVkZi00NjA3LTk0 MDUtMzk3YjdhYWRiMmE3LzAvMTdCNjJGMEU1REY1RjIzMDZGMDY1Njg3NUVGNjE4 N0Y4MzQyM0NCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABra465qCkr4ydChp2WEg7zfOYD4EWBaQYa Fbnc6AVW81yh6ZIM4EmzqxHpV92OONNjO0xyMPeSb/b+LI4YJ0vmaAERJvBSGAt3 5iqnhLjUvV+ycBi7BuWIGgh5eYw8V2J2DBk6mT1yW5oytGrE+3h0lx3uXOB1lpsl 36G9+XKFTtd9DttPdmcftQXjKfarfcsSA+Nh9D/FSrJUuyb7QBoLNVk+z/bN5Szs 9afR1enjA27UnH6UaRqjvpOBUC0czXcy+yM5J1gUO/4D0j53Y06iJFzgRcXdyazx tBtFn5jWF7BUossKOlYN/+WPuy/fC8M85r5kdDPO4vp4JcmwTx8= -----END CERTIFICATE-----Generated at Mon Feb 2 12:48:59 2026 by rpki-client