This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: uyP+yCF6I4fkXUfVLAuq/XfgN+p/9vkdPRuKCVGWgUc= Subject key identifier: AB:EE:C4:23:F7:11:80:A7:D1:16:DD:17:D8:A5:52:D8:AE:27:51:EF Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 3A432464D66481B7C764839ABE60EF91D0768EAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 026D Signing time: Sun 14 Dec 2025 23:22:06 +0000 Manifest this update: Sun 14 Dec 2025 23:17:06 +0000 Manifest next update: Thu 18 Dec 2025 09:05:06 +0000 Files and hashes: 1: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: Gdlj4E5FXStAS9oz5SkAIaD5MaRp7duyKAqNBdT7myE=) 2: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) 4: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 09:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:43:24:64:d6:64:81:b7:c7:64:83:9a:be:60:ef:91:d0:76:8e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Dec 14 23:17:06 2025 GMT Not After : Dec 18 09:05:06 2025 GMT Subject: CN=ABEEC423F71180A7D116DD17D8A552D8AE2751EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:da:68:68:06:69:b7:6e:24:e9:59:c7:26:a8: 21:c9:de:35:12:a3:75:22:3e:23:91:54:29:60:28: ed:27:9f:c7:05:f9:b3:93:bf:97:73:8e:0e:af:7f: 45:b4:7e:dd:cd:7d:4d:a7:48:b0:a5:fb:6f:fa:ce: c1:91:af:89:55:ed:17:0f:22:a5:a4:6a:8e:a0:6f: bb:30:a7:22:9f:89:58:70:66:1a:51:ea:d5:de:80: 33:75:e7:24:a7:99:78:cb:cf:6a:26:20:06:6d:84: 58:7f:a1:16:1d:8e:75:cf:2d:4b:5b:39:18:92:44: 94:9a:4e:5e:34:95:5c:85:c2:4d:fb:ef:69:a5:8a: 86:18:ee:dd:09:e6:98:20:ec:35:ca:5a:7a:ec:b5: 68:bb:ba:1b:71:ed:92:60:b3:31:60:3c:3b:b5:2f: 97:99:cf:8c:1d:54:61:ab:aa:3c:cd:61:82:1a:c6: 26:d4:a4:25:c5:01:43:35:6d:0b:6d:e0:f0:1a:8b: d8:37:26:fd:11:fe:72:61:b9:c4:4d:46:a2:fb:74: 13:3a:21:8f:98:8b:7a:78:c3:8a:76:68:4c:c9:d9: c0:90:19:e9:28:65:f7:04:76:bf:f3:eb:dc:c3:75: 37:64:4b:87:c7:b2:c0:35:06:65:34:b9:9f:e7:4f: 10:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EE:C4:23:F7:11:80:A7:D1:16:DD:17:D8:A5:52:D8:AE:27:51:EF X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:02:0a:4b:97:89:34:8e:e7:1e:a5:a1:e6:23:a9:75:cd:67: f6:a4:7c:5c:30:ea:a8:ee:df:18:49:38:5c:85:cf:fa:6c:1c: 24:97:a3:b2:63:35:eb:d8:85:da:e9:f1:c8:e0:86:33:c2:36: b4:77:d7:e7:56:46:d3:c5:39:0f:30:0a:15:93:21:3c:76:d2: 01:64:b0:22:3e:e8:ae:59:ae:cd:77:0c:3f:65:4f:6f:af:45: b9:df:27:02:aa:d7:6d:12:ee:6a:4f:7d:f3:d3:f2:0f:52:e7: 1f:b7:9e:22:67:53:86:ce:9b:a1:fb:80:6a:24:c6:1b:0b:1b: 1e:a3:69:86:8a:75:16:aa:7e:a7:2b:25:bf:0a:36:59:2c:0d: c7:c7:6f:22:23:71:a6:96:11:ea:d5:8e:bd:e9:b3:fc:3a:05: 03:8c:9a:cd:45:c0:24:a3:04:31:94:e0:39:14:02:f4:98:c0: 97:e0:56:0a:ff:af:01:c4:44:e1:77:49:17:15:24:f8:be:22: 3b:8c:19:e1:21:1e:69:df:2b:6d:77:11:8c:7d:52:17:a2:0d: e0:a8:02:ea:57:cb:39:00:0f:0d:5f:46:6b:a1:7e:ca:5b:82: f1:10:fc:2f:33:26:b9:d6:b4:97:11:f3:85:21:c9:13:21:5c: ce:4f:61:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkMkZNZkgbfHZIOavmDvkdB2jqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTEyMTQyMzE3MDZaFw0yNTEyMTgwOTA1MDZaMDMxMTAvBgNV BAMTKEFCRUVDNDIzRjcxMTgwQTdEMTE2REQxN0Q4QTU1MkQ4QUUyNzUxRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2mhoBmm3biTpWccmqCHJ3jUS o3UiPiORVClgKO0nn8cF+bOTv5dzjg6vf0W0ft3NfU2nSLCl+2/6zsGRr4lV7RcP IqWkao6gb7swpyKfiVhwZhpR6tXegDN15ySnmXjLz2omIAZthFh/oRYdjnXPLUtb ORiSRJSaTl40lVyFwk3772mlioYY7t0J5pgg7DXKWnrstWi7uhtx7ZJgszFgPDu1 L5eZz4wdVGGrqjzNYYIaxibUpCXFAUM1bQtt4PAai9g3Jv0R/nJhucRNRqL7dBM6 IY+Yi3p4w4p2aEzJ2cCQGekoZfcEdr/z69zDdTdkS4fHssA1BmU0uZ/nTxBvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq+7EI/cRgKfRFt0X2KVS2K4nUe8wHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0CCkuXiTSO5x6loeYjqXXNZ/akfFww6qju 3xhJOFyFz/psHCSXo7JjNevYhdrp8cjghjPCNrR31+dWRtPFOQ8wChWTITx20gFk sCI+6K5Zrs13DD9lT2+vRbnfJwKq120S7mpPffPT8g9S5x+3niJnU4bOm6H7gGok xhsLGx6jaYaKdRaqfqcrJb8KNlksDcfHbyIjcaaWEerVjr3ps/w6BQOMms1FwCSj BDGU4DkUAvSYwJfgVgr/rwHEROF3SRcVJPi+IjuMGeEhHmnfK213EYx9UheiDeCo AupXyzkADw1fRmuhfspbgvEQ/C8zJrnWtJcR84UhyRMhXM5PYZI= -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:05 2025 by rpki-client