This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft File: 2370B87417B78EB4410F4394F29FB327D1401F0D.mft (raw, json) Hash identifier: LiRuvkPBFHMtqcKOMQnYK9DN3S6Ma+vFGLHZBpf5axw= Subject key identifier: 0E:C8:FC:CE:FA:BB:9A:4C:36:71:CC:D1:DF:11:FE:F0:24:2C:76:CD Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D Certificate issuer: /CN=2370B87417B78EB4410F4394F29FB327D1401F0D Certificate serial: 092D44618D42F08F909AD04F63221424E787B8A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft Manifest number: 0209 Signing time: Sat 24 Jan 2026 16:11:54 +0000 Manifest this update: Sat 24 Jan 2026 16:06:54 +0000 Manifest next update: Tue 27 Jan 2026 21:03:54 +0000 Files and hashes: 1: 3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (hash: ZMf4hqz32o6JWeuknkypuSEYiicMrl6BzPzDdk4JbqY=) 2: 2370B87417B78EB4410F4394F29FB327D1401F0D.crl (hash: x1Nf9z3PUzlpkeAwgcUUMeEIKGtjS5DRF3sflFqVLZc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 21:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2d:44:61:8d:42:f0:8f:90:9a:d0:4f:63:22:14:24:e7:87:b8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D Validity Not Before: Jan 24 16:06:54 2026 GMT Not After : Jan 27 21:03:54 2026 GMT Subject: CN=0EC8FCCEFABB9A4C3671CCD1DF11FEF0242C76CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8a:a9:59:f6:61:7c:56:f4:a6:13:31:17:15: e1:31:6c:eb:a9:f0:31:3f:fd:6d:a0:d2:c4:5d:1c: b6:d1:0a:7e:3c:f1:f9:8c:e6:f3:fd:bd:99:82:18: 78:ec:4f:e2:f6:a1:dc:23:38:7b:fa:2d:93:4f:11: 77:b1:dd:1a:73:9b:32:94:12:6a:af:e6:ca:bd:57: fd:85:e2:f6:1e:0f:19:59:3c:05:79:1d:1d:69:b2: 71:c3:8f:bc:fa:db:20:a6:bc:68:3e:89:4d:c0:c7: 09:eb:df:95:9e:32:ee:0b:ab:73:68:32:dc:dc:49: a2:ec:ef:a1:b0:1d:de:e4:e5:a7:d6:cf:00:44:7b: ff:07:9a:91:07:68:21:f4:56:0c:eb:29:45:76:87: a7:3c:d1:6c:05:3a:4c:43:11:42:ea:9e:3e:5d:b8: 4e:d5:69:82:25:e0:a2:14:c4:e9:b9:f9:07:94:82: cc:7d:7a:97:c6:79:92:88:6e:88:98:34:85:0c:f8: 9a:90:27:ae:28:8e:99:08:59:cc:0e:ba:b9:4f:4f: 9f:fe:99:54:7e:36:9f:9d:66:e0:c3:52:50:0e:d1: b5:bc:c4:e9:4e:a5:65:c7:2d:61:ec:29:1f:a7:1a: f2:0b:7e:a3:35:6f:a0:d9:ae:df:ab:57:05:9e:d5: 81:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C8:FC:CE:FA:BB:9A:4C:36:71:CC:D1:DF:11:FE:F0:24:2C:76:CD X509v3 Authority Key Identifier: keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a5:ca:cc:87:76:01:cc:4c:36:d0:d2:c4:18:89:92:c8:9c: 4e:59:2d:2d:06:d4:fc:a9:cc:c9:bc:fb:df:e1:ca:49:ee:63: fd:95:78:18:13:13:dc:79:19:1d:e3:8f:37:d8:57:37:b1:b0: 8a:2d:f1:36:e5:72:4d:37:ca:58:b1:35:fd:d7:a4:34:1a:71: 0c:24:97:57:85:ea:49:76:6e:3e:ff:ed:80:7a:ee:c4:71:2d: d0:b0:3c:8a:3b:39:94:ac:6d:ed:73:9e:ae:69:32:92:d3:63: bd:3d:65:ac:40:5f:d8:dd:92:8a:44:35:a1:3c:a7:1d:30:b5: 5a:a7:6a:43:cc:f3:57:a5:7f:18:55:8f:8f:da:ca:ef:c1:58: 2e:23:42:18:bf:d6:0b:d5:b8:84:92:ad:90:93:7e:14:10:63: e5:14:22:24:e2:4d:37:49:fb:38:09:f9:6d:d0:a6:57:30:f0: ab:04:4e:12:4b:15:f9:b7:dc:12:e5:c0:5b:f0:18:87:9a:1c: c5:18:d1:dd:e7:89:07:c1:85:4d:a0:4b:a5:24:e4:c4:b7:ce: ed:72:74:1b:2d:7f:14:12:77:8b:50:83:c0:77:28:f2:5f:44: 34:3a:50:83:87:80:cd:18:64:5c:1a:69:54:28:b2:c2:d2:02: 15:5d:da:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCS1EYY1C8I+QmtBPYyIUJOeHuKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE MTQwMUYwRDAeFw0yNjAxMjQxNjA2NTRaFw0yNjAxMjcyMTAzNTRaMDMxMTAvBgNV BAMTKDBFQzhGQ0NFRkFCQjlBNEMzNjcxQ0NEMURGMTFGRUYwMjQyQzc2Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbiqlZ9mF8VvSmEzEXFeExbOup 8DE//W2g0sRdHLbRCn488fmM5vP9vZmCGHjsT+L2odwjOHv6LZNPEXex3RpzmzKU Emqv5sq9V/2F4vYeDxlZPAV5HR1psnHDj7z62yCmvGg+iU3Axwnr35WeMu4Lq3No MtzcSaLs76GwHd7k5afWzwBEe/8HmpEHaCH0VgzrKUV2h6c80WwFOkxDEULqnj5d uE7VaYIl4KIUxOm5+QeUgsx9epfGeZKIboiYNIUM+JqQJ64ojpkIWcwOurlPT5/+ mVR+Np+dZuDDUlAO0bW8xOlOpWXHLWHsKR+nGvILfqM1b6DZrt+rVwWe1YG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsj8zvq7mkw2cczR3xH+8CQsds0wHwYDVR0j BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3 Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw MUYwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc0ZDBiZjktY2M5YS00MmEzLTgz MGEtNzZmNmQzMmIyZjQ1LzAvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIz MjdEMTQwMUYwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOlysyHdgHMTDbQ0sQYiZLInE5ZLS0G1Pyp zMm8+9/hyknuY/2VeBgTE9x5GR3jjzfYVzexsIot8Tblck03ylixNf3XpDQacQwk l1eF6kl2bj7/7YB67sRxLdCwPIo7OZSsbe1znq5pMpLTY709ZaxAX9jdkopENaE8 px0wtVqnakPM81elfxhVj4/ayu/BWC4jQhi/1gvVuISSrZCTfhQQY+UUIiTiTTdJ +zgJ+W3Qplcw8KsEThJLFfm33BLlwFvwGIeaHMUY0d3niQfBhU2gS6Uk5MS3zu1y dBstfxQSd4tQg8B3KPJfRDQ6UIOHgM0YZFwaaVQossLSAhVd2us= -----END CERTIFICATE-----Generated at Sun Jan 25 15:25:49 2026 by rpki-client