This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: fj9aG0h7P9qLyWN2gULS+uVn0H2x/JN8qdKtrcrfEWA= Subject key identifier: 21:FA:BC:D6:12:5D:91:19:92:20:B6:26:8F:FD:29:CF:0E:54:46:97 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 5C7281B55D084778A6D7A95CE17E9765B661B326 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 020C Signing time: Sat 31 Jan 2026 10:41:53 +0000 Manifest this update: Sat 31 Jan 2026 10:36:53 +0000 Manifest next update: Tue 03 Feb 2026 11:08:53 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: Uho6I1DVihdEuXpglMU85zSehKVFKyUim++oAWj48KQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Feb 2026 11:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:72:81:b5:5d:08:47:78:a6:d7:a9:5c:e1:7e:97:65:b6:61:b3:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jan 31 10:36:53 2026 GMT Not After : Feb 3 11:08:53 2026 GMT Subject: CN=21FABCD6125D91199220B6268FFD29CF0E544697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6d:ef:0d:6e:6f:4e:b6:6d:33:a0:4d:46:fa: 88:5a:09:44:71:69:f1:26:bb:6a:25:75:e7:a6:c8: 8a:d2:31:4e:b8:c3:a5:bb:a3:55:db:ab:fa:ba:37: 28:5c:eb:5e:26:c8:0b:28:d8:eb:92:c6:05:e8:3b: 4d:b1:cd:66:fa:ba:3d:f4:12:e6:70:aa:5f:e9:a4: ee:3d:38:db:8c:0a:dd:4f:91:94:67:b0:27:47:e4: 7f:d0:ba:d9:72:6e:07:f4:3f:52:fb:b4:56:8c:f1: fd:90:d0:17:b8:8c:90:a8:c6:a4:29:00:96:35:2f: da:24:bd:da:47:da:c5:69:c4:13:5e:61:e5:a7:eb: ec:ec:b0:8e:dc:66:0f:b2:19:a2:5c:cc:84:9e:6f: 69:a3:b5:b1:cc:88:79:2c:42:dc:a5:ee:fa:a3:89: 8f:fe:55:f0:b9:c3:35:27:15:70:f1:cb:4e:75:00: e8:bf:c8:09:e8:ad:65:a1:d3:8d:3d:c6:13:4e:96: 1c:60:2b:19:3a:22:1a:8d:8d:5d:aa:ac:ff:a9:1e: 5d:61:79:99:e4:a7:a4:d1:95:f2:f1:0d:cd:aa:06: e8:47:bd:25:82:40:7f:3e:17:f4:95:e1:f7:65:d3: 10:80:dc:1b:55:56:03:45:24:b8:c1:39:fd:0b:d3: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:BC:D6:12:5D:91:19:92:20:B6:26:8F:FD:29:CF:0E:54:46:97 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9c:3a:56:8b:67:9d:67:88:aa:91:9e:1c:93:60:ce:cd:4a: 90:86:22:b5:77:21:e5:1f:97:78:4b:52:e6:9e:83:4a:94:82: 86:90:8a:21:01:fc:c9:be:3e:b9:95:73:43:9f:58:e5:5f:6d: cc:f4:75:16:a9:06:a8:96:09:ad:3e:a3:34:69:b3:26:f3:b1: 43:7d:8e:0f:40:e0:81:0e:27:01:87:c5:ea:44:28:0b:54:e3: 01:aa:84:23:27:e5:27:af:6f:6b:4d:13:e8:b0:d2:59:63:8f: c5:48:0d:57:f4:fe:f6:51:2f:f0:46:67:7a:02:76:a2:06:74: b4:15:ed:53:26:41:3f:e8:2b:94:ec:2f:48:85:e7:8b:55:0f: 7d:63:26:22:30:90:91:84:fc:af:ce:8d:48:20:ca:aa:cd:b7: 05:29:1e:50:29:25:15:6c:1f:5c:e0:32:30:72:6d:a8:96:eb: 65:ae:ee:03:e3:9a:f9:6d:2e:92:ed:07:45:16:1c:38:a5:61: 39:30:d0:ce:0e:12:58:5d:37:a5:08:2e:e7:89:01:e6:60:64: a5:29:4e:03:15:54:7f:8d:59:b8:61:c1:f0:ce:cb:65:a1:74: d8:f2:f2:21:9e:93:8e:4b:de:d4:9b:8b:25:eb:78:e5:d7:de: 9c:ee:53:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHKBtV0IR3im16lc4X6XZbZhsyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNjAxMzExMDM2NTNaFw0yNjAyMDMxMTA4NTNaMDMxMTAvBgNV BAMTKDIxRkFCQ0Q2MTI1RDkxMTk5MjIwQjYyNjhGRkQyOUNGMEU1NDQ2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCube8Nbm9Otm0zoE1G+ohaCURx afEmu2oldeemyIrSMU64w6W7o1Xbq/q6Nyhc614myAso2OuSxgXoO02xzWb6uj30 EuZwql/ppO49ONuMCt1PkZRnsCdH5H/Qutlybgf0P1L7tFaM8f2Q0Be4jJCoxqQp AJY1L9okvdpH2sVpxBNeYeWn6+zssI7cZg+yGaJczISeb2mjtbHMiHksQtyl7vqj iY/+VfC5wzUnFXDxy051AOi/yAnorWWh0409xhNOlhxgKxk6IhqNjV2qrP+pHl1h eZnkp6TRlfLxDc2qBuhHvSWCQH8+F/SV4fdl0xCA3BtVVgNFJLjBOf0L03zLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIfq81hJdkRmSILYmj/0pzw5URpcwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADucOlaLZ51niKqRnhyTYM7NSpCGIrV3IeUf l3hLUuaeg0qUgoaQiiEB/Mm+PrmVc0OfWOVfbcz0dRapBqiWCa0+ozRpsybzsUN9 jg9A4IEOJwGHxepEKAtU4wGqhCMn5Sevb2tNE+iw0lljj8VIDVf0/vZRL/BGZ3oC dqIGdLQV7VMmQT/oK5TsL0iF54tVD31jJiIwkJGE/K/OjUggyqrNtwUpHlApJRVs H1zgMjBybaiW62Wu7gPjmvltLpLtB0UWHDilYTkw0M4OElhdN6UILueJAeZgZKUp TgMVVH+NWbhhwfDOy2WhdNjy8iGek45L3tSbiyXreOXX3pzuU0I= -----END CERTIFICATE-----Generated at Mon Feb 2 10:05:05 2026 by rpki-client