This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft File: 37A94886A0E275DC8F922930328C955CC4307FF1.mft (raw, json) Hash identifier: 8gNxdwTQmv6fSar4/f0BtUUro0qTIaiJN+tjOV1n/lg= Subject key identifier: 14:D0:FD:61:B2:40:6D:12:82:C8:DE:B8:77:7F:BD:43:82:AA:56:70 Authority key identifier: 37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 Certificate issuer: /CN=37A94886A0E275DC8F922930328C955CC4307FF1 Certificate serial: 2C96D069CE0679FA1894B88BD6EE662534125BE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft Manifest number: 0113 Signing time: Tue 02 Dec 2025 15:52:26 +0000 Manifest this update: Tue 02 Dec 2025 15:47:26 +0000 Manifest next update: Fri 05 Dec 2025 19:26:26 +0000 Files and hashes: 1: 37A94886A0E275DC8F922930328C955CC4307FF1.crl (hash: +1efoHsuII/SDRQWcRNP5UBTwbewli6V46yyqmX2N8U=) 2: 33362e35302e3235332e302f32342d3234203d3e20313338383239.roa (hash: LdkOVHPRJZ2FR3qmT6KJhjMmjG6naW4xlLBSVHp1k1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:96:d0:69:ce:06:79:fa:18:94:b8:8b:d6:ee:66:25:34:12:5b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37A94886A0E275DC8F922930328C955CC4307FF1 Validity Not Before: Dec 2 15:47:26 2025 GMT Not After : Dec 5 19:26:26 2025 GMT Subject: CN=14D0FD61B2406D1282C8DEB8777FBD4382AA5670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:ce:f7:02:10:14:65:cf:b3:1d:0f:73:63: 9b:04:f2:b0:d0:be:e3:53:ca:58:c2:30:a6:d5:d1: a7:59:cc:84:70:84:50:90:bc:b8:97:56:17:57:2d: 2d:d6:2a:fc:3b:a7:9a:be:45:ff:3b:d4:02:1a:7b: 95:86:e3:18:3a:ed:27:88:db:33:45:1b:9e:5d:2a: d9:c3:22:5a:4b:fe:c8:30:3f:67:28:36:34:d3:4a: ff:0c:ce:8f:29:c1:75:fe:3d:5e:cd:e1:08:46:a7: 30:57:64:1e:1e:78:06:2e:0c:d3:27:1b:f0:e4:9e: 57:ea:65:8b:cb:95:7a:b8:4c:e4:06:9a:6c:58:78: af:bf:94:5a:8a:ad:98:9b:77:ad:c5:bc:9a:d6:f2: 17:6b:29:f4:e0:e8:00:65:15:48:23:70:28:56:c0: 09:35:d9:ab:73:86:27:ce:1d:06:bb:e5:b8:34:c0: b2:20:ac:96:b2:ef:5d:e9:c0:8b:f3:d9:78:ac:98: 85:b7:17:6b:a2:fe:2d:36:46:52:5c:8e:71:a5:5d: bc:81:6e:d0:1f:03:d7:d8:45:57:b1:0f:a7:dd:51: c4:3e:e8:3b:1c:37:98:5a:b5:8c:26:1b:2a:f0:31: 89:6f:5c:64:24:d6:ff:a1:2c:53:5a:a6:f7:02:9f: cd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D0:FD:61:B2:40:6D:12:82:C8:DE:B8:77:7F:BD:43:82:AA:56:70 X509v3 Authority Key Identifier: keyid:37:A9:48:86:A0:E2:75:DC:8F:92:29:30:32:8C:95:5C:C4:30:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37A94886A0E275DC8F922930328C955CC4307FF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/37A94886A0E275DC8F922930328C955CC4307FF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:e3:e9:50:b5:0d:23:b5:00:f9:5a:59:03:5c:4e:da:b3:24: f1:08:71:22:4f:73:8c:22:fb:02:e1:75:90:2e:24:38:6f:22: 37:6e:c0:f6:4a:2b:10:88:43:6e:fd:fb:e0:ca:56:95:d9:e8: 12:d3:26:b8:69:99:44:c8:1c:33:72:62:90:f0:e4:1c:f3:7e: 7c:eb:79:d1:58:cc:b2:a0:79:17:aa:7e:53:03:fc:b9:1b:43: df:8c:e9:3b:8e:a1:1f:88:fb:1e:2e:1c:bb:5b:01:ec:9b:37: 9d:e8:e8:6e:9f:82:06:65:fc:59:a9:98:39:cd:74:fc:2b:28: 61:b5:7f:7f:0b:89:97:9b:d5:ee:d5:ee:29:af:92:cc:10:0c: 27:80:f5:f5:a8:f5:7c:09:e2:47:12:b8:c5:03:3e:4b:b6:18: dc:13:e7:d8:4d:39:9d:53:0f:1a:45:0e:24:bc:ad:8a:36:a3: 24:e1:37:42:d7:62:5c:74:5a:4c:37:f7:2e:22:9f:08:15:41: c1:bb:9f:43:f7:e9:f7:49:c1:e9:a1:93:76:76:5e:35:ca:dd: 01:e8:b4:fb:8b:f8:a9:da:e8:ec:e8:3d:49:35:9c:58:f7:3a: b8:bf:fc:1f:23:76:59:81:46:fe:2d:b9:34:e5:ed:c4:da:92: 10:82:e1:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJbQac4GefoYlLiL1u5mJTQSW+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUND NDMwN0ZGMTAeFw0yNTEyMDIxNTQ3MjZaFw0yNTEyMDUxOTI2MjZaMDMxMTAvBgNV BAMTKDE0RDBGRDYxQjI0MDZEMTI4MkM4REVCODc3N0ZCRDQzODJBQTU2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5c73AhAUZc+zHQ9zY5sE8rDQ vuNTyljCMKbV0adZzIRwhFCQvLiXVhdXLS3WKvw7p5q+Rf871AIae5WG4xg67SeI 2zNFG55dKtnDIlpL/sgwP2coNjTTSv8Mzo8pwXX+PV7N4QhGpzBXZB4eeAYuDNMn G/DknlfqZYvLlXq4TOQGmmxYeK+/lFqKrZibd63FvJrW8hdrKfTg6ABlFUgjcChW wAk12atzhifOHQa75bg0wLIgrJay713pwIvz2XismIW3F2ui/i02RlJcjnGlXbyB btAfA9fYRVexD6fdUcQ+6DscN5hatYwmGyrwMYlvXGQk1v+hLFNapvcCn839AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFND9YbJAbRKCyN64d3+9Q4KqVnAwHwYDVR0j BBgwFoAUN6lIhqDiddyPkikwMoyVXMQwf/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMS8zN0E5NDg4NkEw RTI3NURDOEY5MjI5MzAzMjhDOTU1Q0M0MzA3RkYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1NUNDNDMw N0ZGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzEvMzdBOTQ4ODZBMEUyNzVEQzhGOTIyOTMwMzI4Qzk1 NUNDNDMwN0ZGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMjj6VC1DSO1APlaWQNcTtqzJPEIcSJPc4wi +wLhdZAuJDhvIjduwPZKKxCIQ279++DKVpXZ6BLTJrhpmUTIHDNyYpDw5Bzzfnzr edFYzLKgeReqflMD/LkbQ9+M6TuOoR+I+x4uHLtbAeybN53o6G6fggZl/FmpmDnN dPwrKGG1f38LiZeb1e7V7imvkswQDCeA9fWo9XwJ4kcSuMUDPku2GNwT59hNOZ1T DxpFDiS8rYo2oyThN0LXYlx0Wkw39y4inwgVQcG7n0P36fdJwemhk3Z2XjXK3QHo tPuL+Kna6OzoPUk1nFj3Ori//B8jdlmBRv4tuTTl7cTakhCC4dk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:26 2025 by rpki-client