This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft File: 717B1F47696EEFA7498BEB563D97EBD8515B883E.mft (raw, json) Hash identifier: yOMvG9crk/P761+HZ58a1MjCL10DBfRM4OIuzTxDfFw= Subject key identifier: 74:0A:F7:E1:7A:8A:38:25:9E:E2:00:B3:35:B1:84:1F:4F:25:F5:C8 Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E Certificate issuer: /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Certificate serial: 4080AAB2BC83357DD7180D771B865675F52D781C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft Manifest number: 04B8 Signing time: Sun 01 Feb 2026 00:50:53 +0000 Manifest this update: Sun 01 Feb 2026 00:45:53 +0000 Manifest next update: Wed 04 Feb 2026 04:36:53 +0000 Files and hashes: 1: 3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (hash: 4BUZEUszxbkJAKTn89oXRelHnbQyPtwvUjsittAvrxc=) 2: 3230322e35322e35322e302f32342d3234203d3e203436303537.roa (hash: 4nFz268f/uJTcH9+bnn64I8vEEEHTwIdibCbTflD9+Y=) 3: 717B1F47696EEFA7498BEB563D97EBD8515B883E.crl (hash: kylsj4GVKsQ81OIltBUVb9PR+bMAzoLHJKDGChiGwcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Feb 2026 04:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:aa:b2:bc:83:35:7d:d7:18:0d:77:1b:86:56:75:f5:2d:78:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E Validity Not Before: Feb 1 00:45:53 2026 GMT Not After : Feb 4 04:36:53 2026 GMT Subject: CN=740AF7E17A8A38259EE200B335B1841F4F25F5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:54:9d:d1:c9:0c:1c:0a:01:4f:84:b6:97: 1d:1e:28:0d:d3:c4:58:78:39:04:c2:cf:0f:69:bc: b9:58:0b:cf:00:88:25:c0:fb:0f:0d:eb:86:fa:23: 74:ab:2a:e8:dc:96:21:1c:ec:d4:ac:d5:98:71:cd: 49:f5:ae:92:9f:a1:88:67:7d:00:03:0a:24:8a:ab: a7:95:11:6e:e1:0e:b0:8b:e9:de:9a:03:98:3d:dc: 08:21:24:29:c7:57:99:1f:8f:b8:56:bf:88:05:78: 6c:b0:dc:d4:da:17:cc:51:65:0b:e1:e5:cf:b3:47: 6a:f3:a7:9a:50:30:14:58:80:60:d7:b9:c3:5a:53: ff:1e:db:cd:83:a5:26:ae:b0:d4:47:82:72:32:79: 9e:bc:be:6a:fa:94:5a:fd:c8:04:57:2f:95:5b:39: f8:e2:cf:7d:80:8a:df:7a:7b:39:46:81:2a:37:cd: 2c:28:9e:f3:90:51:73:c1:04:9e:20:4f:e8:a7:a7: a4:58:51:9a:bb:2b:59:c2:6b:51:9f:f3:49:b8:63: 58:8b:18:66:88:37:d0:e6:b8:25:4e:5c:80:f9:c0: b9:b6:c5:ec:8d:90:e8:cb:0e:21:4e:2b:8c:3d:a3: 70:09:f9:79:f4:ec:ab:c2:b1:84:ba:f5:12:59:40: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0A:F7:E1:7A:8A:38:25:9E:E2:00:B3:35:B1:84:1F:4F:25:F5:C8 X509v3 Authority Key Identifier: keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:4a:1a:37:ea:06:fc:3d:5b:99:69:d0:62:ac:18:b5:3f: 00:b8:62:b6:4c:57:e8:6d:e8:ae:cc:16:74:10:2c:c2:20:8b: b1:4c:45:c4:18:d3:44:36:f6:1c:61:82:e6:fa:3a:34:70:51: d1:f1:04:82:e6:22:b4:f7:2e:f1:ed:11:47:7a:db:d6:c0:ad: 19:75:7c:00:74:20:ae:53:29:69:93:59:83:ec:a1:a4:ef:69: ef:9c:7e:6a:a8:66:23:21:47:53:df:63:09:fd:a1:ac:cf:37: be:b4:c9:4a:2f:df:d3:e2:9e:8c:42:64:37:c2:c1:a0:33:9d: ff:ff:7e:2f:d6:dd:53:70:8c:0d:a1:62:ae:b3:7c:f5:d7:cf: bc:64:d8:69:e6:13:c6:4b:b5:a3:8c:1e:2c:de:52:53:1e:31: 86:42:bb:28:44:b3:ee:cb:68:00:a5:50:a3:a0:4a:d7:bb:ff: 16:24:0d:7b:15:c7:9f:c4:75:8e:23:55:c3:0f:1e:4f:3f:26: ac:1c:60:42:67:f3:1f:91:12:67:01:f5:e5:3e:85:c4:bc:78: ff:57:dd:e2:e2:a7:e2:80:9d:f8:11:e1:9b:c9:ac:80:ac:f1: bb:0c:50:68:d5:05:46:80:93:d0:91:de:77:64:4b:2d:ae:e7: a0:d1:2b:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQICqsryDNX3XGA13G4ZWdfUteBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1 MTVCODgzRTAeFw0yNjAyMDEwMDQ1NTNaFw0yNjAyMDQwNDM2NTNaMDMxMTAvBgNV BAMTKDc0MEFGN0UxN0E4QTM4MjU5RUUyMDBCMzM1QjE4NDFGNEYyNUY1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVSlSd0ckMHAoBT4S2lx0eKA3T xFh4OQTCzw9pvLlYC88AiCXA+w8N64b6I3SrKujcliEc7NSs1ZhxzUn1rpKfoYhn fQADCiSKq6eVEW7hDrCL6d6aA5g93AghJCnHV5kfj7hWv4gFeGyw3NTaF8xRZQvh 5c+zR2rzp5pQMBRYgGDXucNaU/8e282DpSausNRHgnIyeZ68vmr6lFr9yARXL5Vb Ofjiz32Ait96ezlGgSo3zSwonvOQUXPBBJ4gT+inp6RYUZq7K1nCa1Gf80m4Y1iL GGaIN9DmuCVOXID5wLm2xeyNkOjLDiFOK4w9o3AJ+Xn07KvCsYS69RJZQFgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdAr34XqKOCWe4gCzNbGEH08l9cgwHwYDVR0j BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5 NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC ODgzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc1ZDdkZWYtNWViOS00MDU0LWEz YWItZDdlY2Y0ODYzNzlhLzAvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VC RDg1MTVCODgzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+fSho36gb8PVuZadBirBi1PwC4YrZMV+ht 6K7MFnQQLMIgi7FMRcQY00Q29hxhgub6OjRwUdHxBILmIrT3LvHtEUd629bArRl1 fAB0IK5TKWmTWYPsoaTvae+cfmqoZiMhR1PfYwn9oazPN760yUov39PinoxCZDfC waAznf//fi/W3VNwjA2hYq6zfPXXz7xk2GnmE8ZLtaOMHizeUlMeMYZCuyhEs+7L aAClUKOgSte7/xYkDXsVx5/EdY4jVcMPHk8/JqwcYEJn8x+REmcB9eU+hcS8eP9X 3eLip+KAnfgR4ZvJrICs8bsMUGjVBUaAk9CR3ndkSy2u56DRK1I= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:08 2026 by rpki-client