This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json)
Hash identifier: juTYzy0d0Yn85eSOhg90Su37OWBdpPjN/fFcZAG2p+w=
Subject key identifier: 01:B1:89:23:00:6B:0B:52:41:97:5D:04:64:9E:6A:71:48:31:E9:91
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial: 3DD94B43812759B4F0D5AA8EF61D4EA09001F64A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
Manifest number: 0530
Signing time: Wed 03 Dec 2025 04:51:47 +0000
Manifest this update: Wed 03 Dec 2025 04:46:47 +0000
Manifest next update: Sat 06 Dec 2025 08:14:47 +0000
Files and hashes: 1: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=)
2: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: 5JVOP3sJ/KSoAnVd3nPwui1KeY41b5QAHZTJ/a/8gnU=)
3: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: 5Y7VKVGAwoV13ggWiT5P3tddndqLMhgJ2T7ImNwkOmc=)
4: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=)
5: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 08:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d9:4b:43:81:27:59:b4:f0:d5:aa:8e:f6:1d:4e:a0:90:01:f6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Validity
Not Before: Dec 3 04:46:47 2025 GMT
Not After : Dec 6 08:14:47 2025 GMT
Subject: CN=01B18923006B0B5241975D04649E6A714831E991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:8c:20:61:94:fa:76:56:b4:d2:4c:d5:e0:
5b:92:a3:81:76:0d:51:4d:31:44:a0:77:db:6a:3e:
90:c0:e6:5a:83:c8:b3:4b:c0:c9:39:ec:52:21:13:
df:d0:65:ef:8d:53:8f:d0:83:18:2d:8d:27:ae:c6:
1a:3d:fe:53:63:5d:31:dc:32:44:9c:cd:ef:7f:c4:
d0:4c:88:0e:60:3f:0d:f0:57:eb:59:b5:bf:e5:49:
5d:38:ac:73:e1:7f:07:b3:ea:20:dd:66:33:e3:a2:
92:e6:1a:f7:bc:5b:d8:c1:6f:76:34:1a:b4:eb:07:
12:5e:28:3d:b2:04:39:9d:4e:e0:38:e5:ba:1b:16:
58:6b:f8:58:f2:12:fc:53:a3:7d:ce:99:c4:f8:e3:
32:ef:ea:62:c2:a7:d6:18:f5:7b:15:c5:b2:c8:f6:
91:76:5a:89:74:21:c4:68:61:e2:31:21:8e:7a:70:
16:6f:04:da:ba:1b:27:a0:fe:df:89:bb:e9:92:d1:
08:16:08:e9:e0:1a:6b:7f:a4:61:2a:fc:6d:f7:e7:
9f:bd:5f:f3:96:39:c3:cd:91:7d:cf:ae:87:4a:7c:
73:46:29:31:8a:d4:4a:65:8b:85:ae:0b:35:58:4c:
4d:b9:5b:50:83:0c:eb:fb:34:8f:92:b5:1e:43:46:
2b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:89:23:00:6B:0B:52:41:97:5D:04:64:9E:6A:71:48:31:E9:91
X509v3 Authority Key Identifier:
keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9e:af:ab:b6:c2:6d:52:0d:bf:58:fc:e1:82:94:ed:08:84:
81:b8:67:3e:48:01:a1:1c:7e:f8:bf:3b:c3:03:b4:70:1b:78:
84:22:a3:31:44:17:74:66:2c:99:e5:d2:17:bb:c3:31:eb:9f:
06:4b:b1:c1:ee:62:95:7c:da:c3:34:63:0d:2f:05:dc:58:76:
08:e2:ff:f7:7d:cc:a7:e5:59:9f:a8:72:83:4d:a1:29:5f:02:
2e:c9:91:29:a5:ff:37:e2:1a:fb:a9:86:c0:dd:89:70:fb:c7:
44:9f:69:40:6c:8d:cd:7e:4b:c2:43:6a:74:80:ec:01:a2:b6:
3c:e4:e3:f5:00:56:96:c0:75:2c:20:0c:09:13:28:95:85:77:
5b:36:40:55:23:01:64:af:57:fe:ec:e4:7e:ef:77:ef:e2:82:
f6:09:63:9b:a4:85:0e:63:54:cd:b1:91:49:70:1b:68:55:64:
ee:55:10:32:73:66:f9:ce:a3:ea:6a:11:47:55:ac:ed:b6:f8:
3e:19:31:d5:cd:97:e7:ce:8a:57:37:58:36:f8:e2:6b:58:29:
61:a5:77:e4:8d:28:e7:54:5f:be:f0:30:a4:fd:9b:1e:d0:7e:
de:b4:db:2b:21:6e:b9:07:88:e0:e6:12:80:e2:b0:7b:84:93:
71:34:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:41:36 2025 by rpki-client