This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: /hUpFW526T41iMkvV52Eshn2aityYwY7n+YCuE9le+I= Subject key identifier: 48:53:7E:FC:FB:FC:00:8D:84:3F:39:72:DA:FC:23:79:A9:45:78:7F Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 3C24B56CB3E9B3474B79BA7A5FC0DC2FE045F97E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 022B Signing time: Wed 03 Dec 2025 15:03:08 +0000 Manifest this update: Wed 03 Dec 2025 14:58:08 +0000 Manifest next update: Sun 07 Dec 2025 00:37:08 +0000 Files and hashes: 1: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=) 2: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: oqvlaXnbzfoFvT04d/0HRY7x8YXBXewksndpMduymGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 00:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:24:b5:6c:b3:e9:b3:47:4b:79:ba:7a:5f:c0:dc:2f:e0:45:f9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Dec 3 14:58:08 2025 GMT Not After : Dec 7 00:37:08 2025 GMT Subject: CN=48537EFCFBFC008D843F3972DAFC2379A945787F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:13:46:f8:c3:52:52:84:fb:c3:9f:ee:1f:9f: 04:33:80:67:22:95:eb:bb:0c:ef:5e:22:00:d4:56: 9f:b9:bc:26:5d:c8:da:f8:5f:e1:fb:fb:66:07:01: aa:17:9f:3f:dd:9f:69:12:84:e9:c0:91:5b:0a:b5: a7:ae:45:87:00:77:09:02:a7:d3:6a:ff:e6:78:8d: 8c:5b:20:6f:56:6e:f4:44:ca:24:dc:99:11:2d:6f: 14:e9:21:b0:d3:b3:76:6e:d9:40:4e:57:1c:68:9d: d3:85:3b:4a:dc:dd:b7:36:7e:f4:bc:d6:ef:6f:38: 81:bb:7a:08:97:21:ea:56:7b:79:13:1e:eb:f2:7d: 63:3d:84:cb:92:b4:a3:31:3d:4e:b8:0f:5b:c8:86: 51:6f:c3:d7:2b:dd:a9:54:1b:14:d8:77:14:cb:d2: eb:d7:f9:11:78:ab:b4:be:60:4c:56:4f:7c:a4:5b: bd:56:49:c7:23:21:fc:bf:12:6e:30:d4:b4:94:f9: 08:d0:c7:41:25:f5:b8:9d:eb:52:eb:b9:3e:e5:cc: 6d:11:75:f3:0f:72:0b:2e:5a:71:8e:fa:a8:6a:66: a8:29:1c:e7:fb:27:e2:16:08:db:70:5e:86:d6:c5: d5:b6:e7:04:92:2c:05:78:e2:50:f8:22:e3:48:0b: 9e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:7E:FC:FB:FC:00:8D:84:3F:39:72:DA:FC:23:79:A9:45:78:7F X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4c:e9:f1:d1:32:c6:2c:fd:3b:4c:17:0c:01:16:25:62:21: 7f:42:59:8d:92:6a:11:48:05:82:8b:db:79:72:5f:23:92:26: e0:9d:95:75:30:fe:1e:0c:5c:c2:2b:8c:f5:ef:b6:a0:d2:e5: cf:17:0b:c5:4f:aa:25:cb:78:a0:1a:4e:a4:e2:3b:c8:96:0f: ad:4c:b9:be:fc:4a:2d:b3:18:ff:2e:dc:a7:75:39:c8:71:0b: fe:c2:a7:f4:f9:f9:25:df:f1:74:ae:4d:ec:49:d7:a9:4f:6e: a2:bc:a3:2c:90:f3:65:24:8e:57:d6:9d:64:9f:46:9e:0d:14: de:e5:6e:10:56:f5:ba:3f:13:a7:d4:97:52:16:96:cf:94:b3: c2:d0:f6:68:5e:f5:a8:4e:ff:81:d2:45:f9:17:6d:ab:ce:db: a5:72:4e:3a:9b:5b:d9:d4:0a:d5:c2:a2:5b:56:ef:77:7f:1c: 1d:10:89:a3:79:eb:88:f6:49:92:77:0a:f7:68:da:57:11:ee: bb:d2:58:09:93:b5:03:f4:28:eb:fc:a9:eb:1b:44:53:c9:77: 85:cb:a7:30:6e:8f:e0:cd:bd:a7:a6:13:48:62:6f:98:4f:0a: ab:0a:04:8d:6e:ad:dd:69:90:c6:fe:b8:b1:43:79:47:ef:3d: 1d:e8:81:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCS1bLPps0dLebp6X8DcL+BF+X4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTEyMDMxNDU4MDhaFw0yNTEyMDcwMDM3MDhaMDMxMTAvBgNV BAMTKDQ4NTM3RUZDRkJGQzAwOEQ4NDNGMzk3MkRBRkMyMzc5QTk0NTc4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDE0b4w1JShPvDn+4fnwQzgGci leu7DO9eIgDUVp+5vCZdyNr4X+H7+2YHAaoXnz/dn2kShOnAkVsKtaeuRYcAdwkC p9Nq/+Z4jYxbIG9WbvREyiTcmREtbxTpIbDTs3Zu2UBOVxxondOFO0rc3bc2fvS8 1u9vOIG7egiXIepWe3kTHuvyfWM9hMuStKMxPU64D1vIhlFvw9cr3alUGxTYdxTL 0uvX+RF4q7S+YExWT3ykW71WSccjIfy/Em4w1LSU+QjQx0El9bid61LruT7lzG0R dfMPcgsuWnGO+qhqZqgpHOf7J+IWCNtwXobWxdW25wSSLAV44lD4IuNIC56rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSFN+/Pv8AI2EPzly2vwjealFeH8wHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVM6fHRMsYs/TtMFwwBFiViIX9CWY2SahFI BYKL23lyXyOSJuCdlXUw/h4MXMIrjPXvtqDS5c8XC8VPqiXLeKAaTqTiO8iWD61M ub78Si2zGP8u3Kd1OchxC/7Cp/T5+SXf8XSuTexJ16lPbqK8oyyQ82UkjlfWnWSf Rp4NFN7lbhBW9bo/E6fUl1IWls+Us8LQ9mhe9ahO/4HSRfkXbavO26VyTjqbW9nU CtXColtW73d/HB0QiaN564j2SZJ3Cvdo2lcR7rvSWAmTtQP0KOv8qesbRFPJd4XL pzBuj+DNvaemE0hib5hPCqsKBI1urd1pkMb+uLFDeUfvPR3ogQQ= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:55 2025 by rpki-client