This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: 1OxWYpsmNTtc1E9Ec3+K6BBTVj8mdEKzZ7VtuhQXE/k= Subject key identifier: FE:9A:4E:C2:44:73:B4:5E:21:54:60:92:25:DD:1D:2C:AD:35:D8:06 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 18018EFC45CF5320FC05D205451E9F53A287E81E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01F8 Signing time: Wed 17 Dec 2025 01:21:52 +0000 Manifest this update: Wed 17 Dec 2025 01:16:52 +0000 Manifest next update: Sat 20 Dec 2025 12:39:52 +0000 Files and hashes: 1: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: isHjB48gP3uiskcyxnZmHGphDHov6smCcEhtHwPoQUk=) 2: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:8e:fc:45:cf:53:20:fc:05:d2:05:45:1e:9f:53:a2:87:e8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Dec 17 01:16:52 2025 GMT Not After : Dec 20 12:39:52 2025 GMT Subject: CN=FE9A4EC24473B45E2154609225DD1D2CAD35D806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:51:45:ab:57:52:7e:d4:64:03:ef:1a:c2:bb: 62:22:71:83:f0:60:02:bc:8c:fc:c1:b9:e3:39:e6: fd:21:eb:77:93:9b:13:0a:56:5f:28:59:e5:bb:76: 1b:de:57:17:78:6c:9a:bb:2b:0d:35:a7:51:01:f2: 0a:ba:7a:ee:70:60:ec:72:6e:b2:74:bb:35:10:63: 60:56:0e:bd:f3:3a:db:41:2a:56:5a:ee:14:8e:29: 96:1d:4a:ce:4f:6e:56:c4:cb:26:fb:9a:13:a9:07: eb:fa:9f:7f:ca:28:ad:82:63:dd:ce:c5:70:4c:b2: 1f:2c:12:41:b6:e3:f0:da:b9:85:a1:f3:d4:47:a2: c9:f5:5e:a3:93:35:3d:3b:4a:2a:14:52:cd:9e:31: 43:e1:92:45:9d:f8:03:26:04:79:e9:ba:66:a2:0d: 81:03:af:32:3a:48:71:f5:b8:e8:5b:bb:a0:28:54: e4:6c:a7:30:4c:b6:ff:86:5b:12:bb:1b:30:fa:7b: a1:68:56:46:26:9b:ea:9a:21:f8:cb:6c:37:9d:b7: 6d:29:fd:ee:28:f1:8c:82:45:aa:1f:2d:0b:96:70: 93:3e:35:8f:b9:6f:91:48:c3:a7:f5:bc:21:32:aa: f0:c4:74:2f:fc:44:ba:6f:b8:be:3b:0a:fc:4a:3b: 7e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:4E:C2:44:73:B4:5E:21:54:60:92:25:DD:1D:2C:AD:35:D8:06 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:91:52:60:db:b4:7a:d3:0b:f4:09:40:2f:c9:03:6e:b6:77: 90:99:93:bd:a3:ca:de:a5:5a:3d:88:8d:ca:ef:7b:d7:59:ad: 09:31:f5:87:fa:c8:7e:82:5d:24:56:fd:ee:4a:1e:4c:0c:87: 0a:2f:b8:b1:f3:ec:40:4c:ba:d2:6d:ea:5d:80:1d:bb:41:20: fd:41:15:3e:ef:35:c0:2e:74:29:cf:66:eb:25:91:7b:f4:0d: c5:01:14:e3:e6:0f:03:d7:97:b3:14:62:77:9f:36:53:cb:30: 0a:86:74:a2:66:c3:f2:b0:fa:42:bb:e2:77:e0:91:5e:84:de: 27:2a:ee:50:de:4c:cf:59:cc:47:f4:c7:98:36:af:a8:e0:c1: 98:b5:f5:ae:08:f9:0b:e5:bb:25:5d:d6:ec:f3:f3:20:f2:5c: d3:ad:fb:9a:5e:e7:e0:c0:eb:34:e6:22:0d:98:38:a4:91:35: 4a:42:88:e4:0d:6e:91:e4:83:13:a4:f6:c9:0f:07:ae:5c:8b: ff:9e:3e:6d:9d:83:82:25:7a:86:3c:d5:4e:08:4c:99:6c:86: c1:39:a0:65:d9:6f:e7:6a:01:48:8d:9a:1e:80:27:ce:4b:bd: 70:6d:3c:8c:cb:b8:90:d2:be:bf:b4:22:ed:bf:e9:cc:8a:4b: 51:21:62:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGAGO/EXPUyD8BdIFRR6fU6KH6B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTEyMTcwMTE2NTJaFw0yNTEyMjAxMjM5NTJaMDMxMTAvBgNV BAMTKEZFOUE0RUMyNDQ3M0I0NUUyMTU0NjA5MjI1REQxRDJDQUQzNUQ4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUUWrV1J+1GQD7xrCu2IicYPw YAK8jPzBueM55v0h63eTmxMKVl8oWeW7dhveVxd4bJq7Kw01p1EB8gq6eu5wYOxy brJ0uzUQY2BWDr3zOttBKlZa7hSOKZYdSs5PblbEyyb7mhOpB+v6n3/KKK2CY93O xXBMsh8sEkG24/DauYWh89RHosn1XqOTNT07SioUUs2eMUPhkkWd+AMmBHnpumai DYEDrzI6SHH1uOhbu6AoVORspzBMtv+GWxK7GzD6e6FoVkYmm+qaIfjLbDedt20p /e4o8YyCRaofLQuWcJM+NY+5b5FIw6f1vCEyqvDEdC/8RLpvuL47CvxKO35LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/ppOwkRztF4hVGCSJd0dLK012AYwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSRUmDbtHrTC/QJQC/JA262d5CZk72jyt6l Wj2Ijcrve9dZrQkx9Yf6yH6CXSRW/e5KHkwMhwovuLHz7EBMutJt6l2AHbtBIP1B FT7vNcAudCnPZuslkXv0DcUBFOPmDwPXl7MUYnefNlPLMAqGdKJmw/Kw+kK74nfg kV6E3icq7lDeTM9ZzEf0x5g2r6jgwZi19a4I+QvluyVd1uzz8yDyXNOt+5pe5+DA 6zTmIg2YOKSRNUpCiOQNbpHkgxOk9skPB65ci/+ePm2dg4IleoY81U4ITJlshsE5 oGXZb+dqAUiNmh6AJ85LvXBtPIzLuJDSvr+0Iu2/6cyKS1EhYjU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:55 2025 by rpki-client