This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: MYaKvWX4NelRqmW9diGLICvU+CuRtnjzoBssO+0DSvE= Subject key identifier: 10:19:BB:AE:93:84:60:8E:D3:54:79:4F:0C:A2:F8:31:3E:36:AC:6F Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 1E248CF46BAE998912F294B5929B460E095E6B1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 0242 Signing time: Sat 24 Jan 2026 12:41:18 +0000 Manifest this update: Sat 24 Jan 2026 12:36:18 +0000 Manifest next update: Tue 27 Jan 2026 20:02:18 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: Ym4Ia+OVrkMctKstPt7Il/D9c01mMovrkbrzOKA46bs=) 2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 20:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:24:8c:f4:6b:ae:99:89:12:f2:94:b5:92:9b:46:0e:09:5e:6b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Jan 24 12:36:18 2026 GMT Not After : Jan 27 20:02:18 2026 GMT Subject: CN=1019BBAE9384608ED354794F0CA2F8313E36AC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:a7:ca:d7:c8:5f:5e:af:83:a7:72:ea:f2: d9:14:9c:fb:99:e3:5c:84:4c:d9:21:26:21:02:b0: e3:df:7d:61:63:0a:35:d7:d7:8c:c2:ab:19:fa:07: 12:34:b4:8c:39:41:4f:2f:b8:d1:4d:2c:15:80:6e: a9:97:42:77:0e:ac:61:b2:0e:24:c6:a6:7d:24:02: 47:7b:43:68:46:10:da:ff:0b:2a:96:4f:40:aa:61: aa:e4:55:3a:14:5e:a8:9d:9e:d3:23:56:24:16:82: ba:93:9c:9d:72:90:20:e3:fa:80:e3:ca:7f:f0:de: 6a:5f:56:26:a5:81:3d:ce:ee:71:42:b5:df:08:e6: 8c:56:bc:9e:0f:6e:a8:7b:03:b9:2e:42:5f:b9:6e: b1:80:83:58:85:d6:8c:e0:7c:dd:38:46:7f:99:ad: 4e:4b:10:0d:f6:0e:74:2f:f4:16:be:e2:49:1a:dd: ba:73:47:4c:a3:d9:ab:ce:06:f3:46:8b:10:66:e5: 76:43:91:ae:54:ba:ab:e2:3c:5b:5f:de:41:7b:d6: 3d:62:cb:64:a1:66:41:12:dc:f0:16:17:e6:18:e1: c1:cb:86:26:c4:27:09:8e:ed:fc:2c:97:1b:c5:0b: 69:e6:cb:f8:90:8c:de:43:5c:54:1a:00:96:7c:f1: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:19:BB:AE:93:84:60:8E:D3:54:79:4F:0C:A2:F8:31:3E:36:AC:6F X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cb:49:32:42:02:bd:22:6f:be:18:f6:8d:f5:43:5c:a9:2f: de:e7:db:6c:07:8b:52:a9:00:05:2a:a4:c8:b3:6e:6f:b5:a2: db:4f:45:36:a5:ee:e6:cd:3f:0c:07:87:6a:c5:8e:95:82:55: 46:9f:a1:33:d1:ad:4c:38:a2:fc:f0:fe:95:61:5d:fd:69:04: bc:df:90:29:db:a3:7e:52:91:8f:41:58:49:10:42:ed:dc:ac: a6:5c:80:fd:87:96:b6:f4:9d:ad:aa:3d:df:6d:d1:9a:13:b5: b3:ec:36:33:c4:d4:3c:a9:d8:1f:f6:41:b1:b1:cd:9b:c5:6e: da:0a:a6:98:ac:f6:08:02:8e:bb:92:59:c2:7d:52:fe:ca:78: d0:4c:9a:0e:48:ad:e6:36:38:fc:39:92:d8:7f:43:cf:66:24: 73:8e:ec:da:e7:b3:9b:c2:fa:c5:99:a3:53:ee:36:52:1b:09: 2b:73:d5:85:bc:5b:08:30:ee:08:98:d2:ea:42:f8:f7:29:5d: 44:3c:3e:e9:fa:56:66:5d:26:64:a4:e3:05:fb:81:c2:f9:6a: ea:4b:1b:32:c8:6b:d2:82:70:ab:51:7d:24:1e:34:62:bd:f8: 26:b9:fe:dd:95:e5:14:b9:32:1e:1c:3a:a3:11:d2:14:25:58: 95:87:75:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiSM9GuumYkS8pS1kptGDgleaxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNjAxMjQxMjM2MThaFw0yNjAxMjcyMDAyMThaMDMxMTAvBgNV BAMTKDEwMTlCQkFFOTM4NDYwOEVEMzU0Nzk0RjBDQTJGODMxM0UzNkFDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNafK18hfXq+Dp3Lq8tkUnPuZ 41yETNkhJiECsOPffWFjCjXX14zCqxn6BxI0tIw5QU8vuNFNLBWAbqmXQncOrGGy DiTGpn0kAkd7Q2hGENr/CyqWT0CqYarkVToUXqidntMjViQWgrqTnJ1ykCDj+oDj yn/w3mpfVialgT3O7nFCtd8I5oxWvJ4Pbqh7A7kuQl+5brGAg1iF1ozgfN04Rn+Z rU5LEA32DnQv9Ba+4kka3bpzR0yj2avOBvNGixBm5XZDka5UuqviPFtf3kF71j1i y2ShZkES3PAWF+YY4cHLhibEJwmO7fwslxvFC2nmy/iQjN5DXFQaAJZ88c1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEBm7rpOEYI7TVHlPDKL4MT42rG8wHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPLSTJCAr0ib74Y9o31Q1ypL97n22wHi1Kp AAUqpMizbm+1ottPRTal7ubNPwwHh2rFjpWCVUafoTPRrUw4ovzw/pVhXf1pBLzf kCnbo35SkY9BWEkQQu3crKZcgP2Hlrb0na2qPd9t0ZoTtbPsNjPE1Dyp2B/2QbGx zZvFbtoKppis9ggCjruSWcJ9Uv7KeNBMmg5IreY2OPw5kth/Q89mJHOO7Nrns5vC +sWZo1PuNlIbCStz1YW8Wwgw7giY0upC+PcpXUQ8Pun6VmZdJmSk4wX7gcL5aupL GzLIa9KCcKtRfSQeNGK9+Ca5/t2V5RS5Mh4cOqMR0hQlWJWHdSA= -----END CERTIFICATE-----Generated at Sun Jan 25 20:37:11 2026 by rpki-client