This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: VBExkLEQShKg80p4ESfpzwZsyg6XRC+wfK/AJNnVrGw= Subject key identifier: 48:C6:32:4C:40:DA:9F:F4:F3:25:E4:68:DC:6A:A2:1D:5B:C0:28:8A Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 4844E5EB04805C0A1124DCA083837DD4CEDC521E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 0231 Signing time: Wed 17 Dec 2025 08:21:19 +0000 Manifest this update: Wed 17 Dec 2025 08:16:19 +0000 Manifest next update: Sat 20 Dec 2025 18:31:19 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: wlu9xwSJ9ersi8JOw3Jsw25vVWYbZosd7k4NQbgZSYE=) 2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:e5:eb:04:80:5c:0a:11:24:dc:a0:83:83:7d:d4:ce:dc:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Dec 17 08:16:19 2025 GMT Not After : Dec 20 18:31:19 2025 GMT Subject: CN=48C6324C40DA9FF4F325E468DC6AA21D5BC0288A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f1:28:93:31:ef:13:60:f5:09:03:00:be:5b: 3d:bc:b5:13:e5:5b:33:eb:df:18:6b:d1:f0:0d:55: af:a0:02:a8:54:54:15:fc:bc:67:30:22:26:7b:74: 58:1c:ab:71:fc:5f:2c:78:40:66:ab:ca:ca:57:cd: 94:b0:8a:d5:17:b4:bd:fa:1a:93:04:d1:d6:09:aa: 9a:75:db:9f:57:f3:35:77:13:be:01:95:20:d7:88: d5:62:a9:98:4b:c0:ca:ec:a2:a2:ed:ae:a6:64:b7: 12:03:3d:09:38:7c:3a:15:91:07:90:88:97:02:22: 6d:9e:fd:7a:6c:27:cc:02:9e:b2:f2:82:be:13:0b: 3d:95:7b:72:75:6a:48:16:b5:67:9e:b2:e5:c2:dd: 48:92:dd:e8:af:15:d5:42:9e:20:ca:6f:47:f0:23: 20:55:5b:67:96:f0:df:59:d9:3d:0e:a4:c3:29:bb: e6:57:ab:dc:93:77:86:0a:04:7c:f1:4b:87:2a:3d: 19:aa:73:29:8d:b3:26:a5:3f:aa:25:35:2b:e2:df: b5:28:ba:14:af:5f:a3:fe:45:4e:a9:93:88:37:ce: 98:eb:3f:6e:a2:ef:ec:2b:74:c5:d9:fd:b7:14:14: 5e:8c:e8:64:82:e5:4a:2d:52:3b:4d:35:be:d0:58: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:32:4C:40:DA:9F:F4:F3:25:E4:68:DC:6A:A2:1D:5B:C0:28:8A X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8a:65:df:ce:1e:08:c7:29:0d:35:a5:8d:70:93:cc:20:2c: d3:76:82:cc:c8:33:37:48:f3:ea:1a:63:3b:a3:0e:c7:a6:6f: 22:e7:72:fd:70:28:c5:5a:68:31:c5:d2:3a:f6:93:22:21:49: f0:bf:87:10:be:c7:02:39:ee:a6:1e:10:97:5f:9e:e5:61:3d: 2a:ed:36:9b:69:a7:54:55:75:70:5e:92:25:63:e2:3f:71:b5: cb:44:f9:cc:85:63:4f:58:e2:65:10:9f:2e:62:67:5c:83:ef: 50:28:10:5f:d5:7a:5a:0e:d5:b6:da:4d:18:4f:75:12:86:de: 7c:82:0f:77:05:90:9e:fe:84:96:80:b1:3e:cb:b2:a3:64:cd: b9:88:40:63:16:fc:b5:96:43:2e:85:95:22:e4:83:3a:1a:4c: 98:8b:7c:b5:85:af:e7:ad:56:27:cd:f9:7e:ec:aa:a5:3c:5f: 91:5e:dc:00:3e:cc:57:2e:68:b1:a6:5c:5b:f5:b2:42:b3:af: 3a:e7:c1:ea:e0:17:a6:95:31:0b:f7:ee:09:5f:a0:9d:86:56: a1:b8:8d:47:d9:6f:ac:02:05:58:9b:6d:ae:d4:1d:6d:fd:31: 41:58:03:e4:1b:d8:6b:a3:36:bd:5d:6f:31:f4:20:ae:9f:e6: 9b:7c:d7:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSETl6wSAXAoRJNygg4N91M7cUh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTEyMTcwODE2MTlaFw0yNTEyMjAxODMxMTlaMDMxMTAvBgNV BAMTKDQ4QzYzMjRDNDBEQTlGRjRGMzI1RTQ2OERDNkFBMjFENUJDMDI4OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48SiTMe8TYPUJAwC+Wz28tRPl WzPr3xhr0fANVa+gAqhUVBX8vGcwIiZ7dFgcq3H8Xyx4QGaryspXzZSwitUXtL36 GpME0dYJqpp1259X8zV3E74BlSDXiNViqZhLwMrsoqLtrqZktxIDPQk4fDoVkQeQ iJcCIm2e/XpsJ8wCnrLygr4TCz2Ve3J1akgWtWeesuXC3UiS3eivFdVCniDKb0fw IyBVW2eW8N9Z2T0OpMMpu+ZXq9yTd4YKBHzxS4cqPRmqcymNsyalP6olNSvi37Uo uhSvX6P+RU6pk4g3zpjrP26i7+wrdMXZ/bcUFF6M6GSC5UotUjtNNb7QWFsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMYyTEDan/TzJeRo3GqiHVvAKIowHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuKZd/OHgjHKQ01pY1wk8wgLNN2gszIMzdI 8+oaYzujDsembyLncv1wKMVaaDHF0jr2kyIhSfC/hxC+xwI57qYeEJdfnuVhPSrt Nptpp1RVdXBekiVj4j9xtctE+cyFY09Y4mUQny5iZ1yD71AoEF/VeloO1bbaTRhP dRKG3nyCD3cFkJ7+hJaAsT7LsqNkzbmIQGMW/LWWQy6FlSLkgzoaTJiLfLWFr+et VifN+X7sqqU8X5Fe3AA+zFcuaLGmXFv1skKzrzrnwergF6aVMQv37glfoJ2GVqG4 jUfZb6wCBVibba7UHW39MUFYA+Qb2GujNr1dbzH0IK6f5pt819Q= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:45 2025 by rpki-client