This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: oCmEGo8a+ZeJW2wgC3CpBxYHoAzhWWuGd6OI5eRuGZc= Subject key identifier: C2:ED:E0:AE:60:3C:D0:4C:7D:BB:A8:33:61:F0:35:A7:48:33:25:7A Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 02D1095B6DC042EE1D7ED90CD101BC039C719923 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 023F Signing time: Mon 01 Dec 2025 20:11:13 +0000 Manifest this update: Mon 01 Dec 2025 20:06:13 +0000 Manifest next update: Thu 04 Dec 2025 23:55:13 +0000 Files and hashes: 1: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 2: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 3: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 4: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 5: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 6: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: f/WHS6vz4mRsFTCb5cQ2GukvsU/KpZ8rJCAbQwkJPpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d1:09:5b:6d:c0:42:ee:1d:7e:d9:0c:d1:01:bc:03:9c:71:99:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Dec 1 20:06:13 2025 GMT Not After : Dec 4 23:55:13 2025 GMT Subject: CN=C2EDE0AE603CD04C7DBBA83361F035A74833257A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:c5:3a:ed:ec:d7:34:37:ed:08:78:ac:9f: 75:38:1e:d4:0a:61:cf:99:dc:a7:be:2a:64:43:9f: 78:16:cc:79:e6:f2:14:0c:c5:11:dd:05:36:85:23: 9b:5e:ff:83:16:6f:7b:19:41:23:b4:fe:75:01:eb: a0:4c:55:6a:55:c1:f9:dd:5b:9f:45:08:8d:c2:56: 0e:85:30:8d:e8:99:3d:83:db:e5:40:bb:bf:71:32: 7b:ad:75:53:30:d2:eb:ed:46:0e:db:34:f1:86:c2: d4:80:3f:d6:ac:6f:f6:5a:69:37:3b:00:49:5a:f2: 1c:66:8b:85:0e:67:0d:09:09:df:d6:5c:5b:e0:dd: c9:3c:9d:a6:e6:cc:7a:aa:02:ab:83:34:d4:ea:14: 72:3d:81:9b:84:99:13:b9:f2:e4:e1:b3:ba:d5:79: 3f:4f:2b:ff:88:e9:47:01:21:8b:0c:4c:ee:0a:14: 99:9e:6b:bf:71:79:a5:f8:00:53:6d:be:a3:9c:49: c8:ec:7e:d5:36:9c:81:11:f9:79:75:40:f5:71:28: 02:56:14:27:00:31:68:53:ba:75:0c:21:6b:c8:b9: 97:ca:a5:de:9b:4c:28:a8:03:d6:39:64:8f:1e:0d: f0:6f:d2:14:90:53:9f:47:8a:81:86:a6:30:0b:d4: eb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:ED:E0:AE:60:3C:D0:4C:7D:BB:A8:33:61:F0:35:A7:48:33:25:7A X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:99:61:45:40:b0:9e:e1:d3:87:9b:ae:d2:0d:50:83:f3: 91:c5:b3:64:0d:ad:8e:45:2e:50:ab:d9:08:07:ff:42:b2:6a: 18:10:02:eb:21:38:dc:7f:c6:94:7f:56:54:3e:32:1a:7c:04: 97:43:7b:4c:a0:a4:21:49:d4:f1:cc:0f:85:90:ae:ea:3b:27: bc:c6:43:22:c6:0b:f1:1f:ed:25:dd:86:c1:d6:c6:5d:ac:4a: dd:37:ea:b8:89:b5:e2:29:7c:39:42:bc:40:00:58:63:4e:cb: 43:86:a2:7e:98:e7:24:7d:9a:bf:b8:14:0f:d4:08:a9:e4:b7: dc:75:34:6e:47:01:67:a4:ef:19:14:d5:28:b6:14:a2:3c:fd: ea:b2:4d:da:a6:aa:b7:65:7e:f5:2e:45:0e:81:84:17:32:20: ce:ef:95:91:3d:e0:cc:5d:1e:56:41:65:e3:10:eb:70:c9:ed: 69:aa:c9:49:3d:01:78:f1:fc:46:57:b2:0f:d1:fd:44:a2:c7: 38:14:4a:6c:40:3b:f1:02:76:6f:59:a9:4c:61:cf:fd:60:08: 85:75:9f:bb:1a:36:76:a3:c9:7a:8d:70:12:57:f3:ec:0a:7a: 7b:6d:1d:f8:e0:d8:ca:54:87:16:4e:98:46:72:3a:13:35:87: e0:58:71:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAtEJW23AQu4dftkM0QG8A5xxmSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTEyMDEyMDA2MTNaFw0yNTEyMDQyMzU1MTNaMDMxMTAvBgNV BAMTKEMyRURFMEFFNjAzQ0QwNEM3REJCQTgzMzYxRjAzNUE3NDgzMzI1N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSMU67ezXNDftCHisn3U4HtQK Yc+Z3Ke+KmRDn3gWzHnm8hQMxRHdBTaFI5te/4MWb3sZQSO0/nUB66BMVWpVwfnd W59FCI3CVg6FMI3omT2D2+VAu79xMnutdVMw0uvtRg7bNPGGwtSAP9asb/ZaaTc7 AEla8hxmi4UOZw0JCd/WXFvg3ck8nabmzHqqAquDNNTqFHI9gZuEmRO58uThs7rV eT9PK/+I6UcBIYsMTO4KFJmea79xeaX4AFNtvqOcScjsftU2nIER+Xl1QPVxKAJW FCcAMWhTunUMIWvIuZfKpd6bTCioA9Y5ZI8eDfBv0hSQU59HioGGpjAL1OuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwu3grmA80Ex9u6gzYfA1p0gzJXowHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO8mWFFQLCe4dOHm67SDVCD85HFs2QNrY5F LlCr2QgH/0KyahgQAushONx/xpR/VlQ+Mhp8BJdDe0ygpCFJ1PHMD4WQruo7J7zG QyLGC/Ef7SXdhsHWxl2sSt036riJteIpfDlCvEAAWGNOy0OGon6Y5yR9mr+4FA/U CKnkt9x1NG5HAWek7xkU1Si2FKI8/eqyTdqmqrdlfvUuRQ6BhBcyIM7vlZE94Mxd HlZBZeMQ63DJ7WmqyUk9AXjx/EZXsg/R/USixzgUSmxAO/ECdm9ZqUxhz/1gCIV1 n7saNnajyXqNcBJX8+wKenttHfjg2MpUhxZOmEZyOhM1h+BYcfA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:48 2025 by rpki-client