This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft File: 37EECBD045CA279ED50372AC86831099D2FD896F.mft (raw, json) Hash identifier: e8sTMPGJkSndh3h2wkoWl4G/LDouzmFjvTnRsLkx3d0= Subject key identifier: 78:30:B3:7B:AF:62:18:08:3A:1F:CA:E3:EC:73:11:0E:88:10:65:66 Authority key identifier: 37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F Certificate issuer: /CN=37EECBD045CA279ED50372AC86831099D2FD896F Certificate serial: 78D5FAD23D10CA89839BA4D61CB59E8925EF2107 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft Manifest number: 0241 Signing time: Sat 06 Dec 2025 09:31:08 +0000 Manifest this update: Sat 06 Dec 2025 09:26:08 +0000 Manifest next update: Tue 09 Dec 2025 10:43:08 +0000 Files and hashes: 1: 3130332e3133342e3234342e302f32322d3232203d3e20313331373733.roa (hash: q5y0x20QRi/wrHXnT1ANwgoYKODaVTFPhwpND9w3YmQ=) 2: 3130332e3133342e3234342e302f32342d3234203d3e20313331373733.roa (hash: 5Bf2jikCN3gYWsYKhxSa01VhTxjotLPuadtMQJAAO+A=) 3: 3130332e3133342e3234372e302f32342d3234203d3e20313331373733.roa (hash: 5c0nthd23+j6Ag0gaaZMv9VZhTnQO18ppv18K7deeCc=) 4: 37EECBD045CA279ED50372AC86831099D2FD896F.crl (hash: B1EVaQw3XJTpNMvL6iixnqf1MskCSza4yAjxUVc6TDs=) 5: 3130332e3133342e3234352e302f32342d3234203d3e20313331373733.roa (hash: Wq8oI5uJOukII5L3zk611oNE/jiA40kO5VyLfYVxSmQ=) 6: 3130332e3133342e3234362e302f32342d3234203d3e20313331373733.roa (hash: 54f1hlVAyBoUYAJvfubN5BMRlDVY7RrMT0X14y7mHmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d5:fa:d2:3d:10:ca:89:83:9b:a4:d6:1c:b5:9e:89:25:ef:21:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37EECBD045CA279ED50372AC86831099D2FD896F Validity Not Before: Dec 6 09:26:08 2025 GMT Not After : Dec 9 10:43:08 2025 GMT Subject: CN=7830B37BAF6218083A1FCAE3EC73110E88106566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:10:1f:95:6e:63:9b:db:d7:31:40:be:c9:7b: 1d:75:85:9b:a2:1c:51:d6:2e:de:b7:04:88:a4:b2: d1:58:42:eb:34:05:91:d3:d3:34:73:b3:99:48:6a: 62:48:25:47:ba:12:99:12:22:0c:cd:b8:c0:c4:85: f7:57:6b:37:85:b0:8a:16:ca:dc:44:d6:24:40:b6: 60:14:b7:84:ed:45:0c:d8:e5:34:af:c0:43:4e:df: 73:f3:5a:cc:ec:79:b4:4f:30:b7:53:97:b7:1d:46: 49:de:e5:6d:73:3e:78:6e:63:74:b5:84:3a:da:d7: b2:ec:d0:6d:7a:a4:b4:ef:7b:da:d7:f7:66:73:4e: 65:0c:c6:a9:2d:7f:78:82:eb:5d:55:07:08:79:cc: 55:78:92:c3:ef:30:33:df:d4:78:c2:75:ba:61:00: c8:e1:c2:3d:b2:10:df:3c:06:ca:e0:e0:93:be:41: 25:e2:82:c8:9d:aa:60:15:a9:20:82:7c:8d:f7:d2: 81:88:16:cf:cc:ce:56:ff:c0:83:c4:c7:dd:93:14: 59:37:36:f3:51:65:e4:d2:95:38:d3:6c:b9:4b:50: ca:0a:7e:37:11:09:79:68:e3:6f:84:a5:d3:0c:5b: a0:69:b8:1d:97:3d:d0:5f:5c:1a:e9:87:51:72:a3: 1d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:30:B3:7B:AF:62:18:08:3A:1F:CA:E3:EC:73:11:0E:88:10:65:66 X509v3 Authority Key Identifier: keyid:37:EE:CB:D0:45:CA:27:9E:D5:03:72:AC:86:83:10:99:D2:FD:89:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37EECBD045CA279ED50372AC86831099D2FD896F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/227de071-3aaa-4e2e-974e-a78c81729f06/0/37EECBD045CA279ED50372AC86831099D2FD896F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:32:b2:09:a0:95:cf:1c:62:7f:e4:52:4f:ae:56:86:24:cf: 0d:22:6e:ea:59:a9:e8:7e:52:4f:73:34:49:0e:54:85:59:47: 5a:77:79:f4:8a:c6:aa:a0:da:f0:18:d0:4e:bd:3e:e3:bd:75: c8:b4:69:6e:d4:b3:00:71:84:87:c5:4a:ae:6f:96:e0:07:5b: b5:24:be:a7:2d:a7:0c:a0:ed:e6:75:70:d1:ad:d9:17:75:9d: 43:4e:79:a4:77:36:7d:cb:95:e7:36:32:57:95:0f:d1:8b:54: c7:23:5d:2d:c4:00:94:fe:3d:46:4c:c4:91:0d:67:90:43:da: e7:38:7b:29:a8:db:83:3c:d8:b5:1d:e4:f0:6d:19:56:aa:28: 91:34:52:e9:2a:81:97:51:f3:81:63:52:62:6a:6e:07:9b:95: 15:ef:66:91:2d:7d:8d:ae:5e:69:b7:d1:25:89:71:62:4f:87: 28:cf:db:13:4c:3a:44:22:d8:b6:5d:33:15:86:af:76:e6:67: f3:50:e7:dd:fe:2f:48:85:72:79:6d:c1:0f:06:44:c9:2f:56: cd:e6:70:de:1a:e1:b2:43:de:02:8e:6b:ff:c8:37:68:1f:78: 0b:35:45:7f:96:63:17:f4:ab:f4:ca:fd:79:65:0d:6b:27:75: 00:d0:c5:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNX60j0QyomDm6TWHLWeiSXvIQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlE MkZEODk2RjAeFw0yNTEyMDYwOTI2MDhaFw0yNTEyMDkxMDQzMDhaMDMxMTAvBgNV BAMTKDc4MzBCMzdCQUY2MjE4MDgzQTFGQ0FFM0VDNzMxMTBFODgxMDY1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEB+VbmOb29cxQL7Jex11hZui HFHWLt63BIikstFYQus0BZHT0zRzs5lIamJIJUe6EpkSIgzNuMDEhfdXazeFsIoW ytxE1iRAtmAUt4TtRQzY5TSvwENO33PzWszsebRPMLdTl7cdRkne5W1zPnhuY3S1 hDra17Ls0G16pLTve9rX92ZzTmUMxqktf3iC611VBwh5zFV4ksPvMDPf1HjCdbph AMjhwj2yEN88Bsrg4JO+QSXigsidqmAVqSCCfI330oGIFs/Mzlb/wIPEx92TFFk3 NvNRZeTSlTjTbLlLUMoKfjcRCXlo42+EpdMMW6BpuB2XPdBfXBrph1Fyox2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDCze69iGAg6H8rj7HMRDogQZWYwHwYDVR0j BBgwFoAUN+7L0EXKJ57VA3KshoMQmdL9iW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjdkZTA3MS0zYWFhLTRlMmUtOTc0ZS1hNzhjODE3MjlmMDYvMC8zN0VFQ0JEMDQ1 Q0EyNzlFRDUwMzcyQUM4NjgzMTA5OUQyRkQ4OTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEwOTlEMkZE ODk2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3ZGUwNzEtM2FhYS00ZTJlLTk3 NGUtYTc4YzgxNzI5ZjA2LzAvMzdFRUNCRDA0NUNBMjc5RUQ1MDM3MkFDODY4MzEw OTlEMkZEODk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwysgmglc8cYn/kUk+uVoYkzw0ibupZqeh+ Uk9zNEkOVIVZR1p3efSKxqqg2vAY0E69PuO9dci0aW7UswBxhIfFSq5vluAHW7Uk vqctpwyg7eZ1cNGt2Rd1nUNOeaR3Nn3Llec2MleVD9GLVMcjXS3EAJT+PUZMxJEN Z5BD2uc4eymo24M82LUd5PBtGVaqKJE0UukqgZdR84FjUmJqbgeblRXvZpEtfY2u Xmm30SWJcWJPhyjP2xNMOkQi2LZdMxWGr3bmZ/NQ593+L0iFcnltwQ8GRMkvVs3m cN4a4bJD3gKOa//IN2gfeAs1RX+WYxf0q/TK/XllDWsndQDQxZk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:04 2025 by rpki-client