This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft File: C37B0700A782E6CCEE7D187B10AAF240353AB253.mft (raw, json) Hash identifier: qGTPvKqTNRk6aD1wO2SBfV6zCRZQ5x0uQwtWUnK4luM= Subject key identifier: 42:6E:7F:53:91:D1:7A:E0:7E:82:9E:81:E7:9E:0B:C1:4B:E1:5B:4E Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 Certificate issuer: /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Certificate serial: 71A42A1E2F6D044A0653327E92B23227D8AD8C64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft Manifest number: 026F Signing time: Fri 19 Dec 2025 12:13:15 +0000 Manifest this update: Fri 19 Dec 2025 12:08:15 +0000 Manifest next update: Mon 22 Dec 2025 15:12:15 +0000 Files and hashes: 1: 3130332e3138342e31362e302f32342d3234203d3e20313439333135.roa (hash: +a0J/aEe/HBxQSyjFU8Jpy6sg/8IuKYftoVKqedXGVw=) 2: C37B0700A782E6CCEE7D187B10AAF240353AB253.crl (hash: WShdzlmAZSwzMqtYWmcCzSEKHIineNrNvS+VjlOIhoo=) 3: 3130332e3138342e31372e302f32342d3234203d3e20313439333135.roa (hash: zb0DM+/iZNl/DFkGsnnNLfcL5wMKgWl+9ippNLqTYd4=) 4: 3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (hash: 5OD+ySaoYqwtpeDmzQIRWYH7Dq1Wh3/KhlzdkZcccKU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 15:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a4:2a:1e:2f:6d:04:4a:06:53:32:7e:92:b2:32:27:d8:ad:8c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253 Validity Not Before: Dec 19 12:08:15 2025 GMT Not After : Dec 22 15:12:15 2025 GMT Subject: CN=426E7F5391D17AE07E829E81E79E0BC14BE15B4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4d:58:ac:4a:14:99:3b:b1:09:c9:a8:dc:22: 6a:6a:56:71:7b:43:7f:4f:62:7e:ef:f1:e7:d0:5f: 7e:5f:b7:b2:5c:4a:d4:14:46:fa:ab:3b:4a:fb:3e: fa:55:a0:3b:39:57:2d:b1:16:e0:99:1a:54:9f:8b: 97:b6:1d:2f:87:4e:99:8c:91:1a:c9:39:69:cd:77: 26:6d:68:49:98:2c:65:bc:49:74:e3:a9:d4:69:6d: ba:31:45:d6:ce:7a:e9:32:e3:3a:e8:99:95:c4:73: 97:7c:40:02:7f:9e:9f:bb:7d:33:e2:bc:5c:93:9f: ec:12:0b:bc:54:14:8b:58:f4:f8:37:7c:99:15:b8: 9b:03:4f:1b:e4:cd:18:04:76:1a:3d:ac:53:04:9e: 9e:1d:79:d9:38:98:6b:28:93:11:52:10:93:d0:f8: 5c:25:d1:9b:a9:73:e0:9e:33:e0:9c:b2:a0:a4:72: 57:35:5c:75:29:1b:2f:b9:99:45:da:44:91:2b:79: 83:09:c1:13:44:13:df:0e:fc:17:e4:7e:16:8d:08: 9e:f1:94:d8:80:5c:26:15:96:ef:0d:77:ef:80:7b: 67:99:c5:24:ff:2a:b4:35:be:ba:31:c1:1e:f2:1e: 85:e4:fd:6b:e3:32:bd:0d:76:d9:dc:48:d5:fb:02: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6E:7F:53:91:D1:7A:E0:7E:82:9E:81:E7:9E:0B:C1:4B:E1:5B:4E X509v3 Authority Key Identifier: keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e9:44:43:c1:fa:dc:6b:9b:54:29:53:c3:b4:cf:d0:64:b7: 03:9d:82:81:2e:e3:e7:d5:45:d3:59:93:10:37:42:90:dc:fd: cc:4a:4f:fb:45:bb:47:f2:4e:4f:3b:c0:01:da:46:a3:93:89: ea:f4:b7:29:66:6e:f5:e8:c7:68:e2:b2:c0:f0:ef:9c:e9:11: f0:90:22:ef:30:1d:e7:e2:51:2e:46:3a:70:00:47:f4:7f:39: bc:fc:30:6a:01:9c:7a:a6:db:d5:fc:64:3c:fd:15:45:ac:d0: 11:71:ab:b6:a0:4c:e0:d1:b3:ff:5d:5a:7f:5e:11:0a:52:01: 99:e1:19:35:b2:9a:db:b8:e2:c4:8b:e7:8a:96:68:07:76:cd: bc:ac:90:89:41:26:45:a8:c2:94:7d:7d:55:a8:85:07:76:15: 2c:ee:1e:70:81:3a:e5:a3:4d:63:01:d0:e3:a5:87:de:3e:2a: 78:94:cc:c2:e1:bd:b8:84:e4:e6:68:0a:09:e7:3d:71:f9:e6: 20:75:fa:93:77:3d:c5:d6:1a:f5:cb:63:64:47:49:83:f0:31: 29:48:02:45:bb:47:e5:54:2e:0b:30:65:7f:13:f8:03:bf:7d: 67:88:b3:57:0b:51:23:54:ae:ea:aa:e9:56:c1:b2:0a:e6:d2: dd:fc:db:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcaQqHi9tBEoGUzJ+krIyJ9itjGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz NTNBQjI1MzAeFw0yNTEyMTkxMjA4MTVaFw0yNTEyMjIxNTEyMTVaMDMxMTAvBgNV BAMTKDQyNkU3RjUzOTFEMTdBRTA3RTgyOUU4MUU3OUUwQkMxNEJFMTVCNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTVisShSZO7EJyajcImpqVnF7 Q39PYn7v8efQX35ft7JcStQURvqrO0r7PvpVoDs5Vy2xFuCZGlSfi5e2HS+HTpmM kRrJOWnNdyZtaEmYLGW8SXTjqdRpbboxRdbOeuky4zromZXEc5d8QAJ/np+7fTPi vFyTn+wSC7xUFItY9Pg3fJkVuJsDTxvkzRgEdho9rFMEnp4dedk4mGsokxFSEJPQ +Fwl0Zupc+CeM+CcsqCkclc1XHUpGy+5mUXaRJEreYMJwRNEE98O/BfkfhaNCJ7x lNiAXCYVlu8Nd++Ae2eZxST/KrQ1vroxwR7yHoXk/WvjMr0NdtncSNX7AgOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQm5/U5HReuB+gp6B554LwUvhW04wHwYDVR0j BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3 ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB QjI1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVkMzhiNDItYjdjMi00MmI2LWEy ZmMtNjc1ZGEyNTRjNzc2LzAvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYy NDAzNTNBQjI1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrpREPB+txrm1QpU8O0z9BktwOdgoEu4+fV RdNZkxA3QpDc/cxKT/tFu0fyTk87wAHaRqOTier0tylmbvXox2jissDw75zpEfCQ Iu8wHefiUS5GOnAAR/R/Obz8MGoBnHqm29X8ZDz9FUWs0BFxq7agTODRs/9dWn9e EQpSAZnhGTWymtu44sSL54qWaAd2zbyskIlBJkWowpR9fVWohQd2FSzuHnCBOuWj TWMB0OOlh94+KniUzMLhvbiE5OZoCgnnPXH55iB1+pN3PcXWGvXLY2RHSYPwMSlI AkW7R+VULgswZX8T+AO/fWeIs1cLUSNUruqq6VbBsgrm0t382yk= -----END CERTIFICATE-----Generated at Sun Dec 21 03:25:16 2025 by rpki-client