This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: dlWLAX70Wj9J/wznbngf0tMtme85a7ufrtvnsor6j8A= Subject key identifier: 90:D4:0F:E1:48:27:A1:E0:C0:24:82:51:76:18:63:AE:67:27:69:A1 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 211B090B813B3BAF88572C347E0B7D0DF50F8918 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 0257 Signing time: Sat 24 Jan 2026 14:01:09 +0000 Manifest this update: Sat 24 Jan 2026 13:56:09 +0000 Manifest next update: Tue 27 Jan 2026 14:21:09 +0000 Files and hashes: 1: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 2: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 3: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 4: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 5: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) 6: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: Y/mTInHcNPV5JdNdEFYx7yMOK4BWTygNub+eJwZ4s7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 14:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:1b:09:0b:81:3b:3b:af:88:57:2c:34:7e:0b:7d:0d:f5:0f:89:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Jan 24 13:56:09 2026 GMT Not After : Jan 27 14:21:09 2026 GMT Subject: CN=90D40FE14827A1E0C0248251761863AE672769A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9d:3d:f3:92:da:88:01:15:59:11:96:d0:df: c6:bf:1d:97:4c:95:fa:7d:40:1c:02:20:60:bc:03: 3b:a9:db:a1:2d:90:a7:15:a1:ed:2a:fa:2e:ef:df: 05:18:af:1d:9a:84:89:a2:1b:31:48:65:7c:ed:1a: ae:33:4c:c7:ec:4a:ce:ed:f3:48:c0:42:a3:f3:b4: 84:29:c0:bc:a1:06:37:a2:46:30:e8:1d:0f:cd:95: d3:d5:a7:ca:51:6b:05:f8:16:ba:cd:51:8e:1e:59: bb:15:87:34:ce:cf:ba:2e:6d:48:48:3c:3d:a5:18: 09:55:38:9e:ad:3e:89:2e:d5:57:e1:8b:f3:33:e3: 61:9d:2b:96:ae:79:e5:43:70:52:f0:d7:88:fc:7d: 0d:11:c5:2f:9c:0d:37:b4:7c:40:f3:07:1d:e9:2f: ab:24:00:29:7f:06:e5:c5:5b:7b:6b:34:56:84:d4: db:00:e6:dd:19:9c:08:1e:15:d8:cb:c7:ae:90:8c: af:c5:be:9d:80:a0:85:d6:7d:5a:c8:bd:2a:9d:35: 12:71:a7:c4:ed:62:c6:c7:30:08:f4:27:ec:94:1c: 41:ee:b6:1c:ea:5c:60:1e:7e:cd:4b:2c:b0:ae:27: 16:37:e9:1d:75:df:d0:65:4a:2f:26:45:96:0e:3b: d7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D4:0F:E1:48:27:A1:E0:C0:24:82:51:76:18:63:AE:67:27:69:A1 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:47:72:e9:76:9a:ee:2c:8a:25:aa:23:ad:57:1e:5a:c4:bb: 75:70:45:f3:c8:b1:8a:a6:ba:6c:a4:39:dd:7e:09:b5:10:03: a9:86:8d:54:e4:61:96:ba:9b:26:b3:71:6f:59:62:f3:08:4c: ab:c2:a8:60:ef:d2:26:07:6f:8b:3d:b3:7c:6c:a0:74:31:78: 99:75:5f:18:42:16:b9:cb:c5:ab:fe:c8:84:38:e9:ca:15:c8: cf:0a:7b:0e:88:19:5f:1c:90:04:49:f9:32:22:8c:0f:83:eb: d1:eb:69:89:94:25:bc:42:30:68:cb:58:b8:c6:bf:f6:a0:4e: a7:01:7a:df:57:40:3b:06:90:a8:f1:60:6b:b3:75:25:b2:d5: 50:bf:4e:20:2e:de:0c:4b:13:0a:6e:d5:9b:7c:51:19:e4:74: 42:2b:03:72:79:ad:5e:02:99:e3:7b:93:66:b3:13:3b:1a:23: cc:be:52:54:a4:f0:fe:fc:79:b8:ae:72:95:1e:4c:77:83:6c: e9:b1:2f:dc:ea:f8:b9:36:77:05:df:e3:6c:07:0d:7a:63:cc: ba:a6:19:ab:13:0a:85:d9:08:41:5a:29:4f:ef:24:7b:72:ec: fc:ff:7b:c0:dc:3c:0b:d3:00:58:fd:ba:bc:f0:82:f8:80:ba: 14:99:3d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIRsJC4E7O6+IVyw0fgt9DfUPiRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNjAxMjQxMzU2MDlaFw0yNjAxMjcxNDIxMDlaMDMxMTAvBgNV BAMTKDkwRDQwRkUxNDgyN0ExRTBDMDI0ODI1MTc2MTg2M0FFNjcyNzY5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdnT3zktqIARVZEZbQ38a/HZdM lfp9QBwCIGC8Azup26EtkKcVoe0q+i7v3wUYrx2ahImiGzFIZXztGq4zTMfsSs7t 80jAQqPztIQpwLyhBjeiRjDoHQ/NldPVp8pRawX4FrrNUY4eWbsVhzTOz7oubUhI PD2lGAlVOJ6tPoku1Vfhi/Mz42GdK5aueeVDcFLw14j8fQ0RxS+cDTe0fEDzBx3p L6skACl/BuXFW3trNFaE1NsA5t0ZnAgeFdjLx66QjK/Fvp2AoIXWfVrIvSqdNRJx p8TtYsbHMAj0J+yUHEHuthzqXGAefs1LLLCuJxY36R1139BlSi8mRZYOO9e1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNQP4UgnoeDAJIJRdhhjrmcnaaEwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9Hcul2mu4siiWqI61XHlrEu3VwRfPIsYqm umykOd1+CbUQA6mGjVTkYZa6myazcW9ZYvMITKvCqGDv0iYHb4s9s3xsoHQxeJl1 XxhCFrnLxav+yIQ46coVyM8Kew6IGV8ckARJ+TIijA+D69HraYmUJbxCMGjLWLjG v/agTqcBet9XQDsGkKjxYGuzdSWy1VC/TiAu3gxLEwpu1Zt8URnkdEIrA3J5rV4C meN7k2azEzsaI8y+UlSk8P78ebiucpUeTHeDbOmxL9zq+Lk2dwXf42wHDXpjzLqm GasTCoXZCEFaKU/vJHty7Pz/e8DcPAvTAFj9urzwgviAuhSZPcw= -----END CERTIFICATE-----Generated at Sun Jan 25 18:53:33 2026 by rpki-client