This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: ugj7+hs0KGMVzAlD4LFthEqJfZsF0tiWWlcGbXyjg6k= Subject key identifier: 0D:B1:CA:58:F0:0B:CE:43:4A:8D:B1:FA:C3:95:DE:BA:90:9E:10:29 Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 21C9E70D5003425D723F48C67CE1C6732BF5EA17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 01F3 Signing time: Fri 05 Dec 2025 10:21:53 +0000 Manifest this update: Fri 05 Dec 2025 10:16:53 +0000 Manifest next update: Mon 08 Dec 2025 17:06:53 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: d6xZkj6rcd21i1h5T8deMQnLVCDpnGYRDgptpuqXc8Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c9:e7:0d:50:03:42:5d:72:3f:48:c6:7c:e1:c6:73:2b:f5:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Dec 5 10:16:53 2025 GMT Not After : Dec 8 17:06:53 2025 GMT Subject: CN=0DB1CA58F00BCE434A8DB1FAC395DEBA909E1029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:b7:1d:9e:c3:d4:39:1a:65:be:05:f5:4b: 74:28:a7:6d:9b:26:0c:ba:de:0f:39:5c:ba:33:a0: ce:53:15:aa:4c:6f:e7:22:4d:37:5e:29:10:9b:09: dc:e4:0f:3a:e4:d4:72:48:0a:74:7c:ff:8a:04:2f: 19:ed:79:df:8c:aa:1b:cb:24:8b:58:8b:e9:64:db: 65:fd:94:b2:e5:81:81:93:f7:6e:e3:ab:ab:be:82: bd:91:f7:60:f9:5e:36:0b:24:4f:bc:df:3d:0f:01: 97:76:9d:66:ca:89:10:23:2a:64:9b:f2:41:58:46: 30:7c:3a:ef:92:c6:c9:9a:fb:60:5c:c5:31:57:89: 7a:4f:c5:c3:c9:fc:86:26:7f:d0:8a:cf:43:24:6b: f3:8a:ea:b5:69:ed:08:17:3a:f5:df:49:d2:e1:c7: db:e3:14:36:9b:fd:ba:67:81:3e:37:c0:11:3a:6e: 7f:1f:96:79:c3:84:84:ee:5a:6f:11:2b:8c:76:8f: 14:06:5a:32:2b:27:05:9c:b2:d1:82:0b:e0:16:61: 1a:fa:93:92:66:6b:9c:4a:3b:c8:3c:96:8a:76:ec: d4:50:f7:a6:ce:6d:c5:bf:1e:fd:79:91:3b:c2:2a: 7a:ff:e2:3a:e8:c7:6d:f4:da:1b:f6:b3:29:bd:25: 90:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B1:CA:58:F0:0B:CE:43:4A:8D:B1:FA:C3:95:DE:BA:90:9E:10:29 X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7b:b1:e1:19:24:ea:49:cf:64:3a:6c:99:98:b8:4e:58:c2: ff:39:28:35:c6:c4:cf:fa:53:96:01:c9:a8:c0:0f:20:ea:7e: de:45:ea:a6:f3:a1:88:fa:9f:f1:c0:6a:45:d3:c6:e4:7c:ff: 23:bf:73:a1:13:be:69:dd:d8:ef:4c:35:08:a2:bc:bd:82:05: ec:1c:b1:98:b3:9f:80:f1:f2:0b:c4:de:ea:e8:17:5e:bd:77: 2a:22:7b:5e:d1:e8:23:95:a3:a7:0d:64:9a:ea:88:00:aa:b2: 34:17:be:1a:49:42:20:fd:bc:ab:5d:11:57:94:12:ed:20:f4: 1e:95:1f:38:3b:67:d9:27:dc:aa:79:25:87:13:67:2f:fd:50: 06:ac:8c:43:b7:1a:d2:9d:54:3d:ba:7b:38:04:3b:18:52:77: 57:13:97:91:d6:35:79:cd:57:c6:1b:03:36:92:39:25:f0:29: 47:b6:13:d0:42:f8:9f:1f:23:3f:01:cf:7f:a6:ae:23:b9:6c: 0e:4d:ba:47:cc:9c:8d:d9:b3:9d:96:b3:a3:d4:9b:46:c5:a0: 61:3b:d0:b1:71:86:f2:12:79:92:3a:c4:be:f8:b3:e6:eb:bf: ce:fc:6d:5f:d7:c6:63:2f:58:67:a6:63:4e:04:92:00:55:c8: 7c:df:e7:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcnnDVADQl1yP0jGfOHGcyv16hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNTEyMDUxMDE2NTNaFw0yNTEyMDgxNzA2NTNaMDMxMTAvBgNV BAMTKDBEQjFDQTU4RjAwQkNFNDM0QThEQjFGQUMzOTVERUJBOTA5RTEwMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1LcdnsPUORplvgX1S3Qop22b Jgy63g85XLozoM5TFapMb+ciTTdeKRCbCdzkDzrk1HJICnR8/4oELxnted+MqhvL JItYi+lk22X9lLLlgYGT927jq6u+gr2R92D5XjYLJE+83z0PAZd2nWbKiRAjKmSb 8kFYRjB8Ou+Sxsma+2BcxTFXiXpPxcPJ/IYmf9CKz0Mka/OK6rVp7QgXOvXfSdLh x9vjFDab/bpngT43wBE6bn8flnnDhITuWm8RK4x2jxQGWjIrJwWcstGCC+AWYRr6 k5Jma5xKO8g8lop27NRQ96bObcW/Hv15kTvCKnr/4jrox2302hv2sym9JZBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbHKWPALzkNKjbH6w5XeupCeECkwHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHR7seEZJOpJz2Q6bJmYuE5Ywv85KDXGxM/6 U5YByajADyDqft5F6qbzoYj6n/HAakXTxuR8/yO/c6ETvmnd2O9MNQiivL2CBewc sZizn4Dx8gvE3uroF169dyoie17R6COVo6cNZJrqiACqsjQXvhpJQiD9vKtdEVeU Eu0g9B6VHzg7Z9kn3Kp5JYcTZy/9UAasjEO3GtKdVD26ezgEOxhSd1cTl5HWNXnN V8YbAzaSOSXwKUe2E9BC+J8fIz8Bz3+mriO5bA5NukfMnI3Zs52Ws6PUm0bFoGE7 0LFxhvISeZI6xL74s+brv878bV/XxmMvWGemY04EkgBVyHzf5yo= -----END CERTIFICATE-----Generated at Sat Dec 6 20:36:29 2025 by rpki-client