This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft (raw, json) Hash identifier: ICRys/VD9JDeBs8uhbn53EYALXzGmu+/58c7HiroeJY= Subject key identifier: 57:F5:FC:E9:A2:52:5D:18:8F:DF:91:77:6A:FF:1D:5D:1C:D0:5C:D9 Authority key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Certificate issuer: /CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Certificate serial: 4C7D1D8F54FDF0F62644D54011280002B9B4663B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft Manifest number: 0354 Signing time: Tue 02 Dec 2025 04:41:58 +0000 Manifest this update: Tue 02 Dec 2025 04:36:58 +0000 Manifest next update: Fri 05 Dec 2025 14:27:58 +0000 Files and hashes: 1: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl (hash: Q4V8D3m109vXtIt96ffA7KaMeh4aAmDpNpAQS61IKog=) 2: 3230322e382e32392e302f32342d3234203d3e203435373234.roa (hash: vTpKFtEuSQzd7i6WWufB9z0/u+k/lMjz3IOnInep2vs=) 3: 3230322e382e32382e302f32342d3234203d3e203435373234.roa (hash: mN4kUWey1FjzRsPdo9biO1LPdXh7z4TjPNv+IxlpTMI=) 4: 3130332e3233312e3131322e302f32322d3234203d3e203435373234.roa (hash: B3IC/AW+40oETvGKZUM7eObcGOyNmLTwTu+s/VISsCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:27:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7d:1d:8f:54:fd:f0:f6:26:44:d5:40:11:28:00:02:b9:b4:66:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Validity Not Before: Dec 2 04:36:58 2025 GMT Not After : Dec 5 14:27:58 2025 GMT Subject: CN=57F5FCE9A2525D188FDF91776AFF1D5D1CD05CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:01:a8:57:53:be:ff:d2:65:4a:01:65:f2:f2: 40:f9:ce:a4:e0:46:13:a6:f6:14:5b:08:9b:a1:fd: c7:cc:66:c0:d3:24:b1:63:73:a9:a8:07:92:1e:aa: c2:3e:72:53:10:2d:7a:ea:94:37:48:a1:00:5a:e4: 57:2d:67:98:b2:74:79:78:41:23:82:7b:3a:d4:dd: 3c:9a:47:79:0e:b8:4c:71:7f:4b:a6:ea:a3:13:06: 71:33:e4:a5:f9:61:2e:9d:c2:40:6e:7a:3a:9b:26: 53:e5:47:1f:20:a3:db:e1:69:76:0e:5f:bd:a3:2f: 4d:95:47:18:12:42:20:c0:f9:53:a8:36:16:3b:4d: 3c:76:88:d8:d0:34:3c:79:68:9c:ab:f2:7c:40:64: 06:3e:56:4f:d0:02:13:60:dc:3b:97:8c:0a:dd:4a: 57:b6:f1:74:da:68:ec:da:16:cc:ba:1e:ae:40:02: 61:6b:0b:28:df:a5:1c:ca:c9:00:bc:34:82:b8:c3: 23:3a:96:1a:4a:71:5a:dc:81:0b:60:04:b9:8e:15: e5:ca:ca:76:d8:8c:e1:26:81:b4:3b:1f:55:cb:b9: 71:9c:d3:c3:63:07:f1:b0:6a:b5:b7:b2:b3:e9:ce: 50:e4:30:5b:97:c3:1c:96:c7:9e:86:89:54:19:21: 30:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F5:FC:E9:A2:52:5D:18:8F:DF:91:77:6A:FF:1D:5D:1C:D0:5C:D9 X509v3 Authority Key Identifier: keyid:37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:18:b5:9a:5e:6a:df:99:58:86:5c:82:b9:a6:4e:02:46:fb: 81:67:60:07:f4:ed:19:89:c5:6a:4b:5e:de:e8:a0:e2:41:71: 54:cd:1b:31:56:d5:dc:19:39:4e:da:ff:01:83:7e:0e:ad:a7: 53:af:8e:39:17:de:93:bc:db:20:37:59:11:67:12:ac:11:3b: b5:9f:85:a0:74:b8:c8:50:55:ba:ae:48:a2:a8:2d:6d:95:de: 91:3e:65:2a:f0:80:ef:0f:72:1f:86:d7:33:60:ec:a7:a9:a0: 14:fa:39:6d:64:1d:c4:8b:39:95:71:42:5f:c4:79:16:35:9c: 0f:ee:a0:88:cc:ce:a7:70:87:2c:e4:3f:51:82:b5:82:2b:ae: 97:38:1e:f8:c8:6f:6c:b6:f5:1d:b7:04:4c:ba:bb:a7:6c:27: 12:05:cf:5f:ac:e0:9f:86:cf:4b:d7:93:51:6c:cd:17:fd:89: 02:59:aa:c1:fd:83:5e:12:ab:41:59:c1:a5:bc:73:23:7c:55: be:7d:28:e0:0a:00:96:93:81:2d:76:7a:3a:f9:12:44:b2:bf: 38:5c:39:8b:66:56:0d:31:84:99:5e:82:15:bf:2c:44:06:b6: 7d:5a:ca:c9:70:bd:9a:ec:b4:d3:3e:55:a2:7b:04:af:b9:d8: 7b:25:6b:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH0dj1T98PYmRNVAESgAArm0ZjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBD ODhFNEJBOTAeFw0yNTEyMDIwNDM2NThaFw0yNTEyMDUxNDI3NThaMDMxMTAvBgNV BAMTKDU3RjVGQ0U5QTI1MjVEMTg4RkRGOTE3NzZBRkYxRDVEMUNEMDVDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAahXU77/0mVKAWXy8kD5zqTg RhOm9hRbCJuh/cfMZsDTJLFjc6moB5IeqsI+clMQLXrqlDdIoQBa5FctZ5iydHl4 QSOCezrU3TyaR3kOuExxf0um6qMTBnEz5KX5YS6dwkBuejqbJlPlRx8go9vhaXYO X72jL02VRxgSQiDA+VOoNhY7TTx2iNjQNDx5aJyr8nxAZAY+Vk/QAhNg3DuXjArd Sle28XTaaOzaFsy6Hq5AAmFrCyjfpRzKyQC8NIK4wyM6lhpKcVrcgQtgBLmOFeXK ynbYjOEmgbQ7H1XLuXGc08NjB/GwarW3srPpzlDkMFuXwxyWx56GiVQZITChAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV/X86aJSXRiP35F3av8dXRzQXNkwHwYDVR0j BBgwFoAUNxln370gOi/UToj3htnw8MiOS6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMC8zNzE5NjdERkJE MjAzQTJGRDQ0RTg4Rjc4NkQ5RjBGMEM4OEU0QkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYwRjBDODhF NEJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGViOGI4ODktM2IzZC00ZWY1LWFk NzAtNWIxMDQ1ZWZmMzkzLzAvMzcxOTY3REZCRDIwM0EyRkQ0NEU4OEY3ODZEOUYw RjBDODhFNEJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUYtZpeat+ZWIZcgrmmTgJG+4FnYAf07RmJ xWpLXt7ooOJBcVTNGzFW1dwZOU7a/wGDfg6tp1OvjjkX3pO82yA3WRFnEqwRO7Wf haB0uMhQVbquSKKoLW2V3pE+ZSrwgO8Pch+G1zNg7KepoBT6OW1kHcSLOZVxQl/E eRY1nA/uoIjMzqdwhyzkP1GCtYIrrpc4HvjIb2y29R23BEy6u6dsJxIFz1+s4J+G z0vXk1FszRf9iQJZqsH9g14Sq0FZwaW8cyN8Vb59KOAKAJaTgS12ejr5EkSyvzhc OYtmVg0xhJleghW/LEQGtn1ayslwvZrstNM+VaJ7BK+52Hsla68= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:46 2025 by rpki-client