This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: 9/F6W6HVTwsJSW7BRE5RDWQNIizCtatXjutsKw2gn30= Subject key identifier: 69:1C:01:CC:9F:7C:A3:E1:F2:39:E9:2D:FC:9C:DD:4B:6C:DA:C1:FB Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 2638E3EE5A15D652AAADC33F2DA2CE53D585D1ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 049D Signing time: Tue 02 Dec 2025 09:21:01 +0000 Manifest this update: Tue 02 Dec 2025 09:16:01 +0000 Manifest next update: Fri 05 Dec 2025 14:52:01 +0000 Files and hashes: 1: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: Sf7w/tniaEgtG9e3chzH1Imt1XdAqUhpt7KCvialMV4=) 2: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: 4BUZEUszxbkJAKTn89oXRelHnbQyPtwvUjsittAvrxc=) 3: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: 4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:38:e3:ee:5a:15:d6:52:aa:ad:c3:3f:2d:a2:ce:53:d5:85:d1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Dec 2 09:16:01 2025 GMT Not After : Dec 5 14:52:01 2025 GMT Subject: CN=691C01CC9F7CA3E1F239E92DFC9CDD4B6CDAC1FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:58:d0:46:2c:2e:d2:3e:aa:1c:be:ea:a9: 8c:b6:47:32:93:0e:64:f1:33:63:c5:4f:5b:4a:2b: 1e:ba:a4:0f:b4:b4:49:41:bf:20:3f:a7:69:53:5e: 24:93:fb:22:f0:3c:26:2e:36:83:f5:f1:ae:71:a7: 97:d3:fa:93:a8:d6:f2:37:e1:ff:b6:7d:74:64:19: b8:7d:8e:33:bb:10:10:2a:ea:d3:3d:15:c5:32:92: 0c:9f:15:67:2f:dd:17:94:85:13:04:12:08:72:58: 69:05:bc:54:23:9c:6c:ac:a0:0e:92:c9:95:17:c8: e6:5b:26:bb:86:87:2f:08:d5:40:ab:b5:1e:a7:3c: dd:ea:87:58:b2:4b:2c:16:d9:f8:41:64:4e:e8:ff: 04:11:8d:67:96:e6:eb:ab:6b:43:ec:78:6a:bf:17: 43:1b:c8:f4:11:d0:bb:bc:00:90:59:b8:69:f6:27: f3:76:54:4e:03:10:23:23:0d:af:78:72:ea:41:d6: 72:11:73:f6:3f:5f:a6:6b:9d:d5:e6:ef:a5:4c:18: 0e:46:d0:0b:0c:46:ec:74:b6:ac:a2:74:3b:ad:91: 2f:de:f0:b5:6e:7f:87:04:de:68:31:6d:05:2f:d6: 58:35:96:f0:1a:f6:80:22:02:35:86:bc:30:1d:1b: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1C:01:CC:9F:7C:A3:E1:F2:39:E9:2D:FC:9C:DD:4B:6C:DA:C1:FB X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:33:b9:eb:32:15:af:56:aa:56:00:21:bb:15:98:68:d8: b4:4d:11:14:cb:32:37:a6:eb:6f:05:8b:c1:33:9a:8b:70:eb: 25:da:46:a5:df:9a:b4:24:26:11:98:44:65:93:4d:8d:8f:e5: 90:dc:49:a9:61:3b:c9:54:b3:bc:2f:e2:f2:d5:7e:61:10:2b: b8:87:b1:7b:f7:87:42:f7:37:25:6f:50:1a:9d:25:e1:b4:e7: 13:31:bd:b1:27:1a:fd:40:e7:9b:6a:d1:5f:c3:c6:05:54:79: ac:19:97:97:2b:c3:d9:b9:2e:22:2b:52:e5:ef:16:29:dc:8a: e8:45:35:41:d1:60:13:be:59:1d:82:17:25:c7:c5:2f:43:61: 40:5b:03:bf:cc:ed:6d:76:94:2e:c7:0f:46:95:a8:a4:35:e2: d4:7c:24:1b:73:54:ce:61:9e:ef:c0:c3:79:02:9d:a1:36:9d: e0:7d:54:5b:bf:d0:10:a6:1a:45:a8:ea:d9:f6:6d:44:46:9c: 7e:fa:f4:04:2e:42:4f:ee:81:30:a7:cb:9b:d5:2d:7e:df:ea: 96:72:1d:21:77:22:b2:d5:17:f6:20:77:04:14:54:d0:05:bc: 8c:33:9d:05:1e:59:62:da:f5:ef:7b:11:ba:02:0f:1f:11:21: f2:eb:5b:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjjj7loV1lKqrcM/LaLOU9WF0e0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNTEyMDIwOTE2MDFaFw0yNTEyMDUxNDUyMDFaMDMxMTAvBgNV BAMTKDY5MUMwMUNDOUY3Q0EzRTFGMjM5RTkyREZDOUNERDRCNkNEQUMxRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpcFjQRiwu0j6qHL7qqYy2RzKT DmTxM2PFT1tKKx66pA+0tElBvyA/p2lTXiST+yLwPCYuNoP18a5xp5fT+pOo1vI3 4f+2fXRkGbh9jjO7EBAq6tM9FcUykgyfFWcv3ReUhRMEEghyWGkFvFQjnGysoA6S yZUXyOZbJruGhy8I1UCrtR6nPN3qh1iySywW2fhBZE7o/wQRjWeW5uura0PseGq/ F0MbyPQR0Lu8AJBZuGn2J/N2VE4DECMjDa94cupB1nIRc/Y/X6ZrndXm76VMGA5G 0AsMRux0tqyidDutkS/e8LVuf4cE3mgxbQUv1lg1lvAa9oAiAjWGvDAdG+XjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaRwBzJ98o+HyOekt/JzdS2zawfswHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlwM7nrMhWvVqpWACG7FZho2LRNERTLMjem 628Fi8Ezmotw6yXaRqXfmrQkJhGYRGWTTY2P5ZDcSalhO8lUs7wv4vLVfmEQK7iH sXv3h0L3NyVvUBqdJeG05xMxvbEnGv1A55tq0V/DxgVUeawZl5crw9m5LiIrUuXv FinciuhFNUHRYBO+WR2CFyXHxS9DYUBbA7/M7W12lC7HD0aVqKQ14tR8JBtzVM5h nu/Aw3kCnaE2neB9VFu/0BCmGkWo6tn2bURGnH769AQuQk/ugTCny5vVLX7f6pZy HSF3IrLVF/YgdwQUVNAFvIwznQUeWWLa9e97EboCDx8RIfLrW9Y= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:15 2025 by rpki-client