This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft File: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft (raw, json) Hash identifier: uCWH2Wbv3c7/ufIcPIob1+/UU8YBrwWNo9X+UItnieY= Subject key identifier: CC:6D:77:85:80:60:8F:6A:F4:65:53:10:A7:74:BA:6B:DB:A4:24:BC Authority key identifier: 37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 Certificate issuer: /CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Certificate serial: 44FAB76DF163961FE78218768368F81610DD6E55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft Manifest number: 0534 Signing time: Wed 24 Dec 2025 15:10:39 +0000 Manifest this update: Wed 24 Dec 2025 15:05:39 +0000 Manifest next update: Sat 27 Dec 2025 22:20:39 +0000 Files and hashes: 1: 37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl (hash: Pfu/p2tLnbFcqqvTUxZnXruKkDZvvT4mqgMKpsE/qGA=) 2: 3131332e32302e3133362e302f32312d3234203d3e203435373136.roa (hash: ghYDscgkEkmdPz9NuYZxp4pY2E2dRL+ayWbivu6Gtd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fa:b7:6d:f1:63:96:1f:e7:82:18:76:83:68:f8:16:10:dd:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37D7265DD2BAA67ECABEEC597D30727F574E8A01 Validity Not Before: Dec 24 15:05:39 2025 GMT Not After : Dec 27 22:20:39 2025 GMT Subject: CN=CC6D778580608F6AF4655310A774BA6BDBA424BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:44:5b:8d:29:9e:9a:ae:e4:9c:6a:9d:7d: 48:55:3b:85:e6:39:c8:22:a2:9a:f4:af:c6:f1:22: 30:54:f6:5e:8e:7d:e3:bc:3c:c3:be:1d:6a:d3:f1: a5:1d:85:7e:aa:78:d4:0a:90:b9:45:0f:83:8d:51: 98:9b:9a:a6:a3:96:05:7a:cb:f5:d0:99:c0:ee:96: 63:72:42:4b:67:7a:51:71:54:35:a1:8f:5d:96:15: a7:85:f3:b0:81:84:56:67:75:28:37:4d:c4:e8:bf: 74:15:f6:3a:bb:63:3b:23:e9:67:c1:f4:f3:c5:76: a7:35:e9:05:86:a3:41:83:b0:9f:72:a9:e1:e4:36: 01:03:eb:82:ab:7a:c6:77:22:c1:5d:9a:69:c6:17: 8c:54:24:b5:ff:5c:5f:ab:7d:d7:8b:a6:c4:64:07: 21:1c:3d:48:40:c3:bb:ef:04:de:59:9f:46:80:05: f0:a7:0e:b3:a2:f5:0f:93:18:4e:04:0f:42:7e:8c: 83:38:02:1c:3b:a9:da:55:96:3c:27:d4:63:c7:12: fa:3e:ea:6e:d1:9a:8f:da:17:c4:08:23:ea:d1:34: d4:0b:18:23:98:a1:d1:ce:5a:b0:bd:fc:51:89:89: 51:cc:fd:78:9b:2d:94:6e:cc:21:87:9d:f0:d9:ab: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6D:77:85:80:60:8F:6A:F4:65:53:10:A7:74:BA:6B:DB:A4:24:BC X509v3 Authority Key Identifier: keyid:37:D7:26:5D:D2:BA:A6:7E:CA:BE:EC:59:7D:30:72:7F:57:4E:8A:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37D7265DD2BAA67ECABEEC597D30727F574E8A01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59af00ec-d083-4a9f-821f-7da18f815417/0/37D7265DD2BAA67ECABEEC597D30727F574E8A01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d4:7f:89:bb:2f:52:6e:9f:4f:26:06:4e:b7:ac:10:01:ed: 61:b2:fe:c6:8a:8e:02:d3:24:7c:71:0e:c3:96:9d:ad:06:36: 47:07:1d:b6:b7:12:33:15:c6:1d:84:53:df:e8:43:76:db:d0: 45:29:03:16:d0:64:6e:4a:d9:e2:b6:20:ad:0d:03:a5:ff:ec: be:ef:0e:73:28:45:53:a2:73:6a:a5:6a:9b:b2:22:9f:a6:5d: a3:e8:4a:55:c3:3f:73:08:f7:5f:36:6a:8c:b8:06:96:84:68: a9:61:e6:ba:64:f5:1e:16:98:06:29:38:98:61:74:c2:5e:c3: 86:78:87:32:85:24:da:92:3d:2a:c2:5a:1f:a7:aa:ee:7a:81: 00:03:ad:5f:dc:15:42:6a:b0:13:04:a3:c8:72:18:f4:02:89: 6f:a3:1f:0e:88:fe:8f:08:c6:ae:85:44:60:26:b4:e6:f9:45: 72:91:2b:36:c7:0e:20:6a:59:76:be:3a:8c:0b:ef:cf:66:2b: 41:ba:a7:02:2b:03:df:58:fe:54:b3:ec:c2:ce:77:33:12:7b: b9:e1:16:6c:69:b2:08:84:ee:2e:d3:fa:43:5c:12:d7:a0:9f: 61:4f:ae:76:9c:d2:b1:bc:63:0b:37:9c:22:0b:da:9f:18:c0: bf:28:92:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPq3bfFjlh/nghh2g2j4FhDdblUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1 NzRFOEEwMTAeFw0yNTEyMjQxNTA1MzlaFw0yNTEyMjcyMjIwMzlaMDMxMTAvBgNV BAMTKENDNkQ3Nzg1ODA2MDhGNkFGNDY1NTMxMEE3NzRCQTZCREJBNDI0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AkRbjSmemq7knGqdfUhVO4Xm Ocgiopr0r8bxIjBU9l6OfeO8PMO+HWrT8aUdhX6qeNQKkLlFD4ONUZibmqajlgV6 y/XQmcDulmNyQktnelFxVDWhj12WFaeF87CBhFZndSg3TcTov3QV9jq7Yzsj6WfB 9PPFdqc16QWGo0GDsJ9yqeHkNgED64KresZ3IsFdmmnGF4xUJLX/XF+rfdeLpsRk ByEcPUhAw7vvBN5Zn0aABfCnDrOi9Q+TGE4ED0J+jIM4Ahw7qdpVljwn1GPHEvo+ 6m7Rmo/aF8QII+rRNNQLGCOYodHOWrC9/FGJiVHM/XibLZRuzCGHnfDZq5xdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzG13hYBgj2r0ZVMQp3S6a9ukJLwwHwYDVR0j BBgwFoAUN9cmXdK6pn7KvuxZfTByf1dOigEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWFmMDBlYy1kMDgzLTRhOWYtODIxZi03ZGExOGY4MTU0MTcvMC8zN0Q3MjY1REQy QkFBNjdFQ0FCRUVDNTk3RDMwNzI3RjU3NEU4QTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcyN0Y1NzRF OEEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhZjAwZWMtZDA4My00YTlmLTgy MWYtN2RhMThmODE1NDE3LzAvMzdENzI2NUREMkJBQTY3RUNBQkVFQzU5N0QzMDcy N0Y1NzRFOEEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjUf4m7L1Jun08mBk63rBAB7WGy/saKjgLT JHxxDsOWna0GNkcHHba3EjMVxh2EU9/oQ3bb0EUpAxbQZG5K2eK2IK0NA6X/7L7v DnMoRVOic2qlapuyIp+mXaPoSlXDP3MI9182aoy4BpaEaKlh5rpk9R4WmAYpOJhh dMJew4Z4hzKFJNqSPSrCWh+nqu56gQADrV/cFUJqsBMEo8hyGPQCiW+jHw6I/o8I xq6FRGAmtOb5RXKRKzbHDiBqWXa+OowL789mK0G6pwIrA99Y/lSz7MLOdzMSe7nh FmxpsgiE7i7T+kNcEtegn2FPrnac0rG8Yws3nCIL2p8YwL8oknI= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:47 2025 by rpki-client