This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: z2kleGqhhqrIFZ2VduiH5CCQuEP1pq/Z7/juSyt3unQ= Subject key identifier: AD:8D:5E:D2:62:9B:D5:81:31:B2:6F:4C:FD:47:0F:23:C9:EE:FB:A1 Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 60E5CB97AADA7FC4816D0AFEFAF0171AB7C588A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 026E Signing time: Wed 17 Dec 2025 09:12:03 +0000 Manifest this update: Wed 17 Dec 2025 09:07:03 +0000 Manifest next update: Sat 20 Dec 2025 12:12:03 +0000 Files and hashes: 1: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 2: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=) 3: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: WSVhyRR+trsrg30gwFTbEDMKhkrY9B3NjFpaxQSHTTs=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:e5:cb:97:aa:da:7f:c4:81:6d:0a:fe:fa:f0:17:1a:b7:c5:88:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Dec 17 09:07:03 2025 GMT Not After : Dec 20 12:12:03 2025 GMT Subject: CN=AD8D5ED2629BD58131B26F4CFD470F23C9EEFBA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:63:5c:15:19:b3:6f:6c:16:a9:fc:3e:fa:8c: 15:a1:26:e4:74:36:cf:2b:6d:16:0e:43:b2:26:01: 14:c7:8f:82:55:4d:19:98:ae:76:8f:75:1c:ab:b6: 86:4f:9e:7d:bb:20:1b:0e:0e:2f:7c:d6:01:6f:b8: 94:05:db:ef:85:0b:b6:d2:03:84:d2:1a:be:8d:12: 17:e6:35:eb:7d:8d:af:ab:e1:b9:12:9f:6c:e2:81: f5:71:da:22:c9:28:3c:17:fb:99:0c:70:46:cb:4b: e2:ec:16:3a:c2:dd:62:a2:8b:0a:32:22:00:c1:47: d0:77:af:e3:9f:bc:80:8c:e3:03:72:2c:99:cd:51: c6:8b:0e:86:ee:a9:08:cf:40:b8:a1:64:55:5e:2f: e4:bc:92:53:70:2e:fc:f5:77:f6:11:1c:ac:7d:95: f9:9b:d6:95:61:b3:07:13:b5:ba:24:3e:32:5f:db: 34:c3:9f:b9:38:01:de:00:c3:b2:8e:60:28:f5:ea: a8:8b:ea:df:3b:b9:63:d7:bb:9e:79:ea:d0:fb:e7: 4b:e3:25:fb:5b:90:d3:b0:e2:9f:6e:11:b6:c3:c7: 5d:58:03:b0:35:dd:26:aa:bc:28:13:d5:1f:20:eb: c7:d6:87:65:37:68:b8:e3:2d:01:3e:27:05:ca:d4: 5c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8D:5E:D2:62:9B:D5:81:31:B2:6F:4C:FD:47:0F:23:C9:EE:FB:A1 X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6a:1c:ff:01:ad:45:14:64:f4:fb:c5:61:b3:92:68:31:43: 22:64:58:c4:20:40:9b:b1:21:74:85:4e:37:10:59:0d:b7:fa: 82:a6:31:7d:4b:ea:f9:33:f0:f8:f3:6f:c4:0e:a0:56:f5:d0: b5:03:db:b9:d4:40:de:5d:ee:de:1e:2f:1b:77:1b:24:7c:ce: 31:56:8a:96:2c:f4:2b:30:ce:35:3d:3e:45:7a:f2:d8:ac:4b: 0c:21:ca:b5:14:1a:88:cc:4a:06:c6:9d:95:33:8b:8e:40:66: fe:94:ff:2a:78:8d:64:f8:5a:5b:2c:7a:61:4c:bf:79:83:ed: 98:79:77:59:96:31:a4:3a:6c:1c:30:37:3a:04:38:d3:80:d7: 3f:92:63:1b:f4:90:4c:ae:98:32:1b:1a:17:60:e3:c4:22:d4: d4:34:71:e4:68:50:77:d8:87:2e:2d:4e:19:b0:1b:4f:76:5a: f7:20:95:06:74:9a:fe:56:6c:88:f3:72:0c:21:39:a0:59:d2: 1b:ba:da:34:48:94:56:b7:8f:ea:cf:a1:6b:3a:03:9e:1d:0c: d8:a8:28:c0:1c:3e:7d:de:09:fa:13:24:fb:55:cf:d5:9e:64: 31:7a:b1:74:fb:0d:bc:bc:54:9e:e5:ec:d3:81:0c:ba:40:08: 2b:19:72:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOXLl6raf8SBbQr++vAXGrfFiKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTEyMTcwOTA3MDNaFw0yNTEyMjAxMjEyMDNaMDMxMTAvBgNV BAMTKEFEOEQ1RUQyNjI5QkQ1ODEzMUIyNkY0Q0ZENDcwRjIzQzlFRUZCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfY1wVGbNvbBap/D76jBWhJuR0 Ns8rbRYOQ7ImARTHj4JVTRmYrnaPdRyrtoZPnn27IBsODi981gFvuJQF2++FC7bS A4TSGr6NEhfmNet9ja+r4bkSn2zigfVx2iLJKDwX+5kMcEbLS+LsFjrC3WKiiwoy IgDBR9B3r+OfvICM4wNyLJnNUcaLDobuqQjPQLihZFVeL+S8klNwLvz1d/YRHKx9 lfmb1pVhswcTtbokPjJf2zTDn7k4Ad4Aw7KOYCj16qiL6t87uWPXu5556tD750vj JftbkNOw4p9uEbbDx11YA7A13SaqvCgT1R8g68fWh2U3aLjjLQE+JwXK1FzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrY1e0mKb1YExsm9M/UcPI8nu+6EwHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBqHP8BrUUUZPT7xWGzkmgxQyJkWMQgQJux IXSFTjcQWQ23+oKmMX1L6vkz8Pjzb8QOoFb10LUD27nUQN5d7t4eLxt3GyR8zjFW ipYs9CswzjU9PkV68tisSwwhyrUUGojMSgbGnZUzi45AZv6U/yp4jWT4WlssemFM v3mD7Zh5d1mWMaQ6bBwwNzoEONOA1z+SYxv0kEyumDIbGhdg48Qi1NQ0ceRoUHfY hy4tThmwG092WvcglQZ0mv5WbIjzcgwhOaBZ0hu62jRIlFa3j+rPoWs6A54dDNio KMAcPn3eCfoTJPtVz9WeZDF6sXT7Dby8VJ7l7NOBDLpACCsZcqc= -----END CERTIFICATE-----Generated at Fri Dec 19 01:54:30 2025 by rpki-client