This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft File: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft (raw, json) Hash identifier: 1xAUhsHmMbnoG7xyD3x6/m0aKEtGxifmRxNT89ba8c0= Subject key identifier: 5B:DA:18:63:67:02:86:37:39:0C:F2:60:B2:73:32:2A:78:B7:EF:C3 Authority key identifier: 23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 Certificate issuer: /CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Certificate serial: 2FE005086B02A4CC986AA747C897D5F09ADC700C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft Manifest number: 022C Signing time: Sat 06 Dec 2025 00:41:18 +0000 Manifest this update: Sat 06 Dec 2025 00:36:18 +0000 Manifest next update: Tue 09 Dec 2025 03:41:18 +0000 Files and hashes: 1: 2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl (hash: GhUowrQ/i3WEGyFdu/pztoBm5HCfvngJGwcNGC0J6IE=) 2: 3130332e3138352e3235322e302f32342d3234203d3e20313439393132.roa (hash: C1EotO9BJTaqVbunTPAaWJ0CvR6X2Eyc5cI9862YoWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 03:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:e0:05:08:6b:02:a4:cc:98:6a:a7:47:c8:97:d5:f0:9a:dc:70:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2337E63A0142984FAFF0AD9D462EB6810AC6A036 Validity Not Before: Dec 6 00:36:18 2025 GMT Not After : Dec 9 03:41:18 2025 GMT Subject: CN=5BDA186367028637390CF260B273322A78B7EFC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:ee:4d:07:04:31:54:b4:01:ce:8d:b2:78: 4a:51:a2:00:e7:11:47:f2:0e:1c:ff:19:06:ff:b6: ed:4d:fd:06:12:b0:bb:9a:27:1e:9b:12:8d:ac:a2: b2:8b:3d:ed:d4:ec:9b:2b:39:3d:a0:d8:93:6a:6f: 39:5d:f8:9c:e1:ac:e4:c5:ae:39:54:cb:50:6d:10: 56:2e:1d:df:c9:67:3a:c9:6a:1a:21:30:2b:ed:10: fa:65:2f:f3:b8:87:80:eb:17:0e:af:b1:4e:9d:7d: 90:fc:41:1e:ae:21:00:3c:93:02:c8:76:93:46:6f: cf:93:a3:f3:0d:6f:a9:e0:b9:6f:dc:e2:d9:ae:09: 57:4a:46:76:d3:ab:eb:fb:64:3b:b7:2d:ca:a5:d2: 16:fd:29:7b:e1:62:4e:40:f3:9d:6c:61:65:21:3f: c0:97:7e:3d:eb:a6:98:8c:19:7e:c2:9f:6e:a5:47: 10:63:aa:e8:d7:79:49:b5:bb:c5:71:c6:66:15:88: 9d:d2:ea:7d:5e:71:63:5f:4e:c7:0d:11:6b:77:f6: 06:3d:dd:fe:c0:ae:f5:6f:88:e9:09:f7:ca:87:1e: 93:41:9b:c2:e4:3b:b2:74:a4:ba:ca:86:11:61:54: b2:70:e0:e8:d3:c3:10:b9:bc:4d:c5:77:d5:1e:db: 74:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DA:18:63:67:02:86:37:39:0C:F2:60:B2:73:32:2A:78:B7:EF:C3 X509v3 Authority Key Identifier: keyid:23:37:E6:3A:01:42:98:4F:AF:F0:AD:9D:46:2E:B6:81:0A:C6:A0:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2337E63A0142984FAFF0AD9D462EB6810AC6A036.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e523d060-b7a5-4455-9940-4fb7c704430f/0/2337E63A0142984FAFF0AD9D462EB6810AC6A036.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ca:58:c9:d9:f1:12:fd:8a:cc:0f:cf:59:6f:cf:fc:8a:36: 6b:37:df:69:d0:7b:c8:8d:81:82:94:d5:d6:a4:0a:16:40:47: 35:5f:d3:1d:da:ad:f8:ca:de:ee:05:67:8e:98:d9:70:7b:8d: e6:ab:3e:f3:f5:1b:94:8e:95:c2:c3:22:61:eb:01:6c:18:d2: 59:0c:72:29:a5:bf:5b:3c:fa:0a:bb:4b:c6:2a:74:4d:34:65: 11:fb:2a:d2:50:b9:ef:16:c9:4e:dc:3d:5b:d4:f3:b6:b1:20: bc:9c:32:07:97:b3:d2:82:e1:4a:13:92:88:1c:c3:c7:8a:45: 9d:c6:56:67:3b:23:7c:5c:09:9f:6c:6e:79:4a:54:26:af:9c: 55:7c:60:28:7d:6a:0f:da:66:bf:77:63:44:44:80:55:aa:cf: 87:1c:6f:35:08:7e:01:af:3f:8a:2b:77:d6:97:a6:ca:9f:71: 60:b4:62:e8:06:c9:5f:f3:72:cc:1e:50:04:6b:8d:f9:75:d2: 83:7b:2b:8a:f8:1d:5b:40:35:d0:84:4c:09:b7:7a:70:27:24: 5d:0b:38:19:31:66:93:49:fd:60:33:29:de:41:ff:aa:e2:b3: ef:f5:f8:90:13:72:92:1f:a3:c0:e8:8d:95:9e:ca:21:42:b2: 93:bb:39:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+AFCGsCpMyYaqdHyJfV8JrccAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEw QUM2QTAzNjAeFw0yNTEyMDYwMDM2MThaFw0yNTEyMDkwMzQxMThaMDMxMTAvBgNV BAMTKDVCREExODYzNjcwMjg2MzczOTBDRjI2MEIyNzMzMjJBNzhCN0VGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Y+5NBwQxVLQBzo2yeEpRogDn EUfyDhz/GQb/tu1N/QYSsLuaJx6bEo2sorKLPe3U7JsrOT2g2JNqbzld+JzhrOTF rjlUy1BtEFYuHd/JZzrJahohMCvtEPplL/O4h4DrFw6vsU6dfZD8QR6uIQA8kwLI dpNGb8+To/MNb6nguW/c4tmuCVdKRnbTq+v7ZDu3Lcql0hb9KXvhYk5A851sYWUh P8CXfj3rppiMGX7Cn26lRxBjqujXeUm1u8VxxmYViJ3S6n1ecWNfTscNEWt39gY9 3f7ArvVviOkJ98qHHpNBm8LkO7J0pLrKhhFhVLJw4OjTwxC5vE3Fd9Ue23RPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9oYY2cChjc5DPJgsnMyKni378MwHwYDVR0j BBgwFoAUIzfmOgFCmE+v8K2dRi62gQrGoDYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTIzZDA2MC1iN2E1LTQ0NTUtOTk0MC00ZmI3YzcwNDQzMGYvMC8yMzM3RTYzQTAx NDI5ODRGQUZGMEFEOUQ0NjJFQjY4MTBBQzZBMDM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2ODEwQUM2 QTAzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUyM2QwNjAtYjdhNS00NDU1LTk5 NDAtNGZiN2M3MDQ0MzBmLzAvMjMzN0U2M0EwMTQyOTg0RkFGRjBBRDlENDYyRUI2 ODEwQUM2QTAzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/KWMnZ8RL9iswPz1lvz/yKNms332nQe8iN gYKU1dakChZARzVf0x3arfjK3u4FZ46Y2XB7jearPvP1G5SOlcLDImHrAWwY0lkM cimlv1s8+gq7S8YqdE00ZRH7KtJQue8WyU7cPVvU87axILycMgeXs9KC4UoTkogc w8eKRZ3GVmc7I3xcCZ9sbnlKVCavnFV8YCh9ag/aZr93Y0REgFWqz4ccbzUIfgGv P4ord9aXpsqfcWC0YugGyV/zcsweUARrjfl10oN7K4r4HVtANdCETAm3enAnJF0L OBkxZpNJ/WAzKd5B/6ris+/1+JATcpIfo8DojZWeyiFCspO7Od0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:40 2025 by rpki-client