This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
File: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft (raw, json)
Hash identifier: dUYL8GLCNIAMgdFmQ1Qj/cTaGBjIOMewn+BIOrQnM8s=
Subject key identifier: D7:E9:F7:68:E2:D0:6D:72:6C:87:55:64:C6:D2:A7:26:68:18:24:6C
Authority key identifier: 37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
Certificate issuer: /CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Certificate serial: 5693B31C3BA4F06F8C162E60AA7D062447A065B3
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
Manifest number: 0547
Signing time: Fri 23 Jan 2026 16:21:45 +0000
Manifest this update: Fri 23 Jan 2026 16:16:45 +0000
Manifest next update: Tue 27 Jan 2026 00:10:45 +0000
Files and hashes: 1: 3130332e3231372e3231372e302f32342d3234203d3e203234353239.roa (hash: r6bDLYYIyERHbAoCwxWGZY4ywTgVflQracjKfLYbn5I=)
2: 3130332e3231372e3231382e302f32342d3234203d3e203234353239.roa (hash: r5FJio9tKv9JNtA5eG5F3RQatFMR61KMFIqTgV3qbBk=)
3: 3130332e3231372e3231362e302f32342d3234203d3e203234353239.roa (hash: CSDWBlIV2G6aqdhFlFLDoZ0ooert/+t0AJaoDV04pCg=)
4: 37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl (hash: MhMj+TUkpoQycaYw9d94oBefoI33o0UilHf07Iz0fSc=)
5: 3130332e3231372e3231392e302f32342d3234203d3e203234353239.roa (hash: RtJ2p5QNEW/uF9klgSx5eHDHY6XjqqipAM/35eEdr1s=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 00:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:93:b3:1c:3b:a4:f0:6f:8c:16:2e:60:aa:7d:06:24:47:a0:65:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37DE961707CEC8F63834DCDB8C5A278376D51AC8
Validity
Not Before: Jan 23 16:16:45 2026 GMT
Not After : Jan 27 00:10:45 2026 GMT
Subject: CN=D7E9F768E2D06D726C875564C6D2A7266818246C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:05:9a:0a:91:cf:f6:7a:a5:73:9d:09:6c:
cf:c2:fa:1c:db:e2:5a:45:7f:e3:2d:6d:7e:ac:22:
60:99:71:43:dc:85:a1:e1:3a:c2:bf:39:f6:2b:ac:
f8:2a:2b:26:7f:c7:b0:48:4b:b7:db:37:c2:ce:e7:
19:45:9c:65:07:f2:73:17:45:f0:76:04:68:4a:4b:
ba:94:9d:31:f8:74:66:48:8f:a5:dd:e9:77:c8:62:
7e:9e:bf:e7:8a:b4:dd:7f:41:af:e8:22:86:41:19:
6f:f9:84:56:f5:ff:e4:ab:a0:06:dd:69:9b:44:1c:
df:b5:4a:70:53:dd:5b:b4:21:81:9f:74:3d:05:6c:
35:34:66:6d:74:ee:f7:d3:bf:05:b8:b2:f3:4a:3a:
a6:88:cf:1a:9d:63:69:43:a9:ab:72:5d:f4:40:cc:
06:c1:14:61:25:25:ef:92:26:a1:dd:b5:e0:e8:50:
71:dc:23:2d:3d:4c:71:aa:43:64:df:6a:c6:9a:bb:
7d:c6:e7:93:46:b3:0b:de:c7:33:8c:38:a3:46:9b:
32:1b:0f:44:16:43:57:8e:7e:e7:75:6b:4e:6a:13:
68:bd:33:ab:02:67:5e:2d:fb:63:6b:a6:41:6d:7a:
51:e5:c2:fc:f0:13:c7:26:c3:8c:50:6b:0f:2b:42:
8b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:F7:68:E2:D0:6D:72:6C:87:55:64:C6:D2:A7:26:68:18:24:6C
X509v3 Authority Key Identifier:
keyid:37:DE:96:17:07:CE:C8:F6:38:34:DC:DB:8C:5A:27:83:76:D5:1A:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/37DE961707CEC8F63834DCDB8C5A278376D51AC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/622f5152-a295-47b7-addc-fbfef3247e3b/0/37DE961707CEC8F63834DCDB8C5A278376D51AC8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:8d:99:6b:c5:b8:8c:33:29:d0:f6:52:1b:e4:40:4b:f4:
2b:2d:07:28:b2:00:32:3a:2f:92:1e:ab:25:cb:3c:47:2e:48:
3b:f5:c6:db:2f:16:d0:ae:fe:29:7d:56:96:da:ee:03:99:65:
3f:f0:b1:02:00:37:a4:f1:85:53:79:e8:1d:34:ca:f5:39:5a:
ba:1e:22:c0:fb:c9:ad:06:3b:40:50:19:2b:61:3c:d4:fa:9d:
d2:49:cb:8d:96:86:77:8e:80:0c:4c:9a:d6:4d:9f:59:ab:59:
da:67:74:fd:07:89:41:bb:30:6d:94:d4:36:16:ff:f1:ac:56:
36:be:dc:91:6b:60:db:62:74:c1:f0:82:2d:2f:83:94:97:66:
7b:de:57:5b:eb:2d:97:4f:be:48:f2:10:99:0c:7b:64:17:a4:
d3:8a:c8:5b:91:86:36:db:16:13:37:65:80:23:5d:e1:a2:b2:
8f:25:02:50:fa:f0:2a:a7:f9:1e:99:88:fc:94:5f:6a:d4:9e:
2b:c1:cc:52:9b:5d:94:3a:1c:a7:fa:b2:36:09:1a:c9:6a:89:
ca:c0:6c:b0:1a:66:82:48:86:33:12:57:12:f6:43:b4:6e:cc:
17:90:68:33:33:9f:ef:0e:fc:23:2e:7b:ad:ee:96:32:04:de:
8b:4f:ac:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:39:40 2026 by rpki-client