This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
File:                     37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json)
Hash identifier:          EOzBLwwl1C6ZqxNsxKvm7eQn4NgHfDGIto3g5L65XRU=
Subject key identifier:   AA:5C:4C:13:5F:0D:6B:52:E8:B9:92:89:7F:70:9E:4D:29:CC:65:BC
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Certificate issuer:       /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial:       5B0E44BFB5EF419C3BEE13EDA7E6FEBE98CA66DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
Manifest number:          0537
Signing time:             Thu 18 Dec 2025 07:53:55 +0000
Manifest this update:     Thu 18 Dec 2025 07:48:55 +0000
Manifest next update:     Sun 21 Dec 2025 18:22:55 +0000
Files and hashes:         1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=)
                          2: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=)
                          3: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: wQJwZZl21tjfLVToR4CpEEEZaaSG7q4dLVsZeve5pGI=)
                          4: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=)
                          5: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
                          rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 13:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0e:44:bf:b5:ef:41:9c:3b:ee:13:ed:a7:e6:fe:be:98:ca:66:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
        Validity
            Not Before: Dec 18 07:48:55 2025 GMT
            Not After : Dec 21 18:22:55 2025 GMT
        Subject: CN=AA5C4C135F0D6B52E8B992897F709E4D29CC65BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:84:13:26:22:6f:48:7b:a3:fc:5b:38:07:
                    6f:0a:3e:ea:97:f8:a9:40:25:bc:00:35:09:e2:fb:
                    be:7d:76:72:e7:8e:67:e6:81:e2:36:fd:5b:74:b7:
                    2f:bd:27:28:90:68:8a:14:0f:29:8a:b9:9d:1c:b1:
                    12:61:d5:62:ed:db:98:9c:0f:44:dd:ec:aa:7c:63:
                    6f:d0:3e:9a:54:a2:d2:a8:d0:6c:61:8a:81:74:d9:
                    37:64:d8:27:07:aa:0d:ac:e4:ce:00:90:3d:61:37:
                    7c:ae:ff:88:b8:b7:9c:40:cb:d5:1e:1d:43:8a:66:
                    69:23:42:6c:73:51:0b:f9:44:55:07:d4:48:6b:47:
                    d9:b6:19:51:00:f9:87:2e:2d:18:24:61:34:27:ac:
                    0c:33:8f:00:1b:15:76:a8:c1:c0:23:90:95:a2:a2:
                    6e:3b:f6:26:5b:1f:d7:db:37:99:be:93:3d:92:63:
                    8d:06:b2:3a:50:df:5c:1e:67:74:d2:ae:f9:79:a7:
                    b0:b0:d1:0c:09:f9:11:12:0a:37:86:80:89:0c:dd:
                    c3:a4:0b:7f:29:9d:7a:46:c3:a9:82:f6:ca:e6:6f:
                    d4:42:1d:31:eb:84:e4:7b:84:26:4e:c0:4b:15:12:
                    18:42:d0:ad:68:1d:00:82:7f:07:8c:ac:94:62:20:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:4C:13:5F:0D:6B:52:E8:B9:92:89:7F:70:9E:4D:29:CC:65:BC
            X509v3 Authority Key Identifier:
                keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:44:3d:14:02:21:57:70:a2:bd:12:ee:d6:28:0d:a1:05:86:
         3e:5a:c1:15:2b:33:2a:c0:a7:f5:e0:bc:7e:00:89:b7:f1:fe:
         28:6d:fb:42:22:d2:6a:7e:fb:d5:b5:4b:45:64:e1:09:d7:aa:
         2b:1e:38:0e:00:dd:cd:53:44:12:f4:39:ee:6b:dd:39:bb:fd:
         3f:56:66:35:4e:e8:6e:55:2b:0e:0d:5f:dd:0d:64:3f:8e:e9:
         52:3a:c5:c9:bd:bc:7a:15:1e:e8:10:a4:12:9c:87:ca:80:19:
         c8:cb:37:86:bf:d9:64:31:dd:6f:55:06:f1:b7:bf:98:92:44:
         56:43:cd:64:fd:16:3b:ba:c8:1f:3a:a4:57:6b:a9:be:6e:34:
         93:d0:87:1f:2c:e9:ad:42:c8:0e:e2:a9:d1:fa:29:d9:df:c9:
         64:53:d8:a6:87:4e:09:bf:1f:23:d4:c3:13:d1:8f:a0:54:3c:
         e6:cf:1b:ed:7f:d1:9f:82:f8:b0:07:d9:e6:67:ee:b5:d9:6d:
         bb:a0:6a:85:89:fb:9c:d3:ec:43:fe:e8:53:b9:9c:e1:ea:4c:
         cf:00:f7:14:0e:2f:c4:4e:8b:0a:2c:21:31:c4:bd:d1:1f:ac:
         21:71:0d:89:c7:03:ca:e9:9f:88:99:00:54:9e:05:a9:97:de:
         97:2b:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 17:30:12 2025 by rpki-client