This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: 5eQf+zPHYnHCeeR1pZniJiCBU2rNFwkrDv1lJz1maAM= Subject key identifier: 6F:6E:F3:8A:D8:74:40:23:AE:AB:54:0C:01:CD:0B:9B:90:2B:50:C3 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 6DA4DF91F6A797290BAF8BC065A06BDE9A8E2FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 0549 Signing time: Thu 18 Dec 2025 20:52:26 +0000 Manifest this update: Thu 18 Dec 2025 20:47:26 +0000 Manifest next update: Sun 21 Dec 2025 21:40:26 +0000 Files and hashes: 1: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) 2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) 3: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) 4: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: 71mXPPwg+9hjXFbmbAQo0rdoYKX5MSEKJ86umxWBVQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a4:df:91:f6:a7:97:29:0b:af:8b:c0:65:a0:6b:de:9a:8e:2f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Dec 18 20:47:26 2025 GMT Not After : Dec 21 21:40:26 2025 GMT Subject: CN=6F6EF38AD8744023AEAB540C01CD0B9B902B50C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cb:76:ea:0b:b0:22:b5:1e:97:b0:7d:27:a3: 64:ae:19:59:f8:31:da:20:1f:11:46:33:ef:4d:af: 9d:16:e1:26:b7:d9:54:6a:03:61:ce:33:e4:50:df: c9:85:29:01:0b:da:af:69:ed:7c:4f:2d:f6:92:9d: e4:f9:65:04:b1:e8:f9:4d:5d:e7:6e:01:52:8b:99: d2:26:e4:10:c4:44:38:23:bf:a0:7e:38:69:6e:9c: 88:9b:69:7a:e5:c0:67:26:d7:39:51:a9:ca:45:c4: 5a:ce:6c:4f:5e:c7:a8:bf:e7:f1:51:47:78:ef:70: da:bc:2b:cc:4e:87:cc:11:d5:1d:f9:65:38:a9:7d: 56:a5:c8:a2:be:41:0f:a3:a4:fb:20:36:a4:d3:6d: f6:54:05:49:45:04:05:1f:62:58:fe:ed:6c:dd:8d: 63:17:34:98:f5:78:cc:2d:e0:56:8d:2c:08:89:9b: 1e:42:77:18:27:72:a2:99:39:59:5c:16:ec:a4:77: 75:ec:48:d9:bf:40:5d:ea:9d:05:46:ef:2c:d5:44: ae:e9:c2:00:ca:3d:ed:9c:bb:5a:fb:d2:dd:78:6c: 56:1e:af:0e:76:92:ff:10:74:98:3c:87:15:ef:b2: 98:84:89:81:2f:42:f8:88:c3:44:81:7c:30:c8:df: cd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6E:F3:8A:D8:74:40:23:AE:AB:54:0C:01:CD:0B:9B:90:2B:50:C3 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:14:5f:be:a4:b5:00:71:c9:ec:11:d7:67:bc:00:b4:51:7a: c7:7a:07:3f:51:b7:50:e3:c1:39:8e:dd:38:08:c1:27:2e:5c: b2:31:d5:dd:bc:d7:95:8e:3d:01:6a:46:d4:ef:d2:3e:f8:7a: 89:a1:d1:ac:63:d3:6a:03:f9:3a:5d:9b:5e:4f:27:59:99:10: 79:ed:82:16:b1:4b:70:46:ba:62:5a:f3:73:21:35:a5:74:cc: 7e:13:42:4f:6a:05:cf:9f:4f:0f:ec:22:dd:51:5f:c8:4e:ce: bd:ec:c4:4c:b3:0f:f8:5e:31:45:fc:18:30:7d:e3:9e:f8:73: 45:55:bc:44:ae:4c:1d:09:eb:fe:eb:d8:9c:82:06:1a:0c:1e: 97:78:7c:55:a7:f7:b2:df:31:06:86:16:a9:fa:42:14:4a:0c: ef:4f:05:00:87:03:18:cc:6f:14:81:c0:b2:85:85:d0:64:90: 4f:97:e6:58:76:cc:04:c2:e1:e3:c3:59:1c:b8:78:a4:c5:36: 17:ce:31:5e:c9:fc:3f:bb:5d:d9:bf:d1:bb:0a:fe:d3:e8:b8: 2e:de:28:f3:b9:19:d7:84:88:bd:ac:0d:9e:77:f2:50:a6:47: 97:e1:84:c5:ee:76:bb:30:a2:eb:b6:97:0a:3b:e7:87:a6:2f: 05:eb:f4:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbaTfkfanlykLr4vAZaBr3pqOL+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTEyMTgyMDQ3MjZaFw0yNTEyMjEyMTQwMjZaMDMxMTAvBgNV BAMTKDZGNkVGMzhBRDg3NDQwMjNBRUFCNTQwQzAxQ0QwQjlCOTAyQjUwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvy3bqC7AitR6XsH0no2SuGVn4 MdogHxFGM+9Nr50W4Sa32VRqA2HOM+RQ38mFKQEL2q9p7XxPLfaSneT5ZQSx6PlN XeduAVKLmdIm5BDERDgjv6B+OGlunIibaXrlwGcm1zlRqcpFxFrObE9ex6i/5/FR R3jvcNq8K8xOh8wR1R35ZTipfValyKK+QQ+jpPsgNqTTbfZUBUlFBAUfYlj+7Wzd jWMXNJj1eMwt4FaNLAiJmx5CdxgncqKZOVlcFuykd3XsSNm/QF3qnQVG7yzVRK7p wgDKPe2cu1r70t14bFYerw52kv8QdJg8hxXvspiEiYEvQviIw0SBfDDI3807AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb27zith0QCOuq1QMAc0Lm5ArUMMwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQUX76ktQBxyewR12e8ALRResd6Bz9Rt1Dj wTmO3TgIwScuXLIx1d2815WOPQFqRtTv0j74eomh0axj02oD+Tpdm15PJ1mZEHnt ghaxS3BGumJa83MhNaV0zH4TQk9qBc+fTw/sIt1RX8hOzr3sxEyzD/heMUX8GDB9 4574c0VVvESuTB0J6/7r2JyCBhoMHpd4fFWn97LfMQaGFqn6QhRKDO9PBQCHAxjM bxSBwLKFhdBkkE+X5lh2zATC4ePDWRy4eKTFNhfOMV7J/D+7Xdm/0bsK/tPouC7e KPO5GdeEiL2sDZ538lCmR5fhhMXudrswouu2lwo754emLwXr9NM= -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:11 2025 by rpki-client