This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json)
Hash identifier: nGdXKlKBqAVh+A1GLuDolOv1imQq2qPuiBGxph5f9sc=
Subject key identifier: 85:7F:82:EC:48:44:A7:8A:80:19:75:ED:CE:A5:8E:26:44:56:C9:5F
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial: 2B1275F6A76E43C73DD13974DD3D6C9BA1F0D358
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
Manifest number: 01F7
Signing time: Sun 14 Dec 2025 16:21:55 +0000
Manifest this update: Sun 14 Dec 2025 16:16:55 +0000
Manifest next update: Thu 18 Dec 2025 01:18:55 +0000
Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: 0RN4Ptw3ruymSJDNc36PZ2rBdvbvKf7nHRFFPSgV2qM=)
2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 01:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:12:75:f6:a7:6e:43:c7:3d:d1:39:74:dd:3d:6c:9b:a1:f0:d3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Validity
Not Before: Dec 14 16:16:55 2025 GMT
Not After : Dec 18 01:18:55 2025 GMT
Subject: CN=857F82EC4844A78A801975EDCEA58E264456C95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:be:61:41:da:03:b2:ce:a7:16:97:b6:ae:
d8:a7:d1:87:05:1a:a2:de:0f:4a:7d:0a:88:61:41:
05:75:c8:2a:65:2d:d0:a2:7f:75:52:d0:a8:67:fa:
bc:0b:5f:1c:d4:2e:69:2e:01:fe:2a:58:f7:8e:60:
30:73:cb:42:38:b8:9f:9a:72:f6:87:61:5e:fb:78:
8d:e6:06:a9:2d:d8:d1:b5:48:3c:27:8d:c0:d4:79:
06:b3:d6:8e:d8:14:1a:26:31:c9:4e:d2:cb:5f:91:
24:be:63:67:89:69:20:77:80:1a:f5:2f:25:a9:cb:
f3:1c:9f:ab:55:3f:03:a8:97:c3:9e:6e:e2:bc:12:
39:79:d1:13:67:0d:23:f1:eb:50:83:a9:f1:f0:1e:
7a:4f:c2:65:cb:e9:69:3c:71:be:a4:cb:8b:ca:1f:
2c:71:27:8c:c1:27:43:b2:5b:79:9f:22:16:31:dc:
f4:ba:88:ac:6a:86:73:7e:a9:2d:7b:f5:e3:06:21:
97:b4:96:80:5b:62:bd:e6:72:2d:8c:52:aa:d7:43:
a2:b1:af:12:f2:c4:98:c8:0c:7c:59:21:31:4d:c0:
17:9c:77:8b:6b:0a:0d:1d:75:d1:81:9a:09:d5:d9:
b7:ad:cc:ab:0d:6b:34:2c:e3:8e:da:a8:53:e9:f7:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7F:82:EC:48:44:A7:8A:80:19:75:ED:CE:A5:8E:26:44:56:C9:5F
X509v3 Authority Key Identifier:
keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d6:d2:20:78:bd:79:77:13:ea:6f:99:7d:55:fe:ed:04:a7:
2a:da:7d:34:70:77:37:9d:b0:25:1d:42:ac:9e:12:f8:ce:94:
d0:6c:f8:2a:7e:9d:f9:8f:62:c8:8f:f1:35:0d:1b:e2:ba:4b:
3e:ca:ba:c5:35:2e:a0:7a:92:eb:c0:c4:85:cb:0d:75:73:19:
e1:90:29:ea:4c:4c:88:c6:78:87:2a:fe:1a:dd:03:00:7a:19:
54:a2:fb:b2:b3:b3:bf:34:eb:8b:1d:36:b0:40:32:a9:fc:c6:
1d:6b:64:96:a4:ef:67:08:3b:98:10:16:34:a3:58:c7:ff:d9:
10:10:b0:32:ba:18:3c:17:17:33:65:47:b0:e4:16:5d:2a:61:
92:64:5e:a6:08:c5:34:05:03:41:9c:a3:af:d6:03:24:69:cc:
bc:a8:af:dd:0a:ca:26:4b:ec:e8:0a:47:e3:cd:03:26:5c:47:
b0:29:33:8d:5b:b5:86:2e:f6:a1:cb:86:d6:d7:dc:c5:cb:40:
0b:d0:20:6d:d4:2c:43:41:1c:3d:77:25:f0:c7:18:36:df:70:
82:80:56:96:54:84:91:e5:3b:9f:9d:f1:c2:63:06:b7:2d:58:
7d:9f:87:04:eb:17:7b:da:e7:ce:f0:81:8e:80:a6:28:a8:68:
36:26:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:03:23 2025 by rpki-client