This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft
File: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft (raw, json)
Hash identifier: T/LR8oWos+PdXQtY8+tB5EyrQxU9MHKw9HVJTS5DtVI=
Subject key identifier: FD:76:F3:EC:00:5F:4A:F4:8A:F0:65:A6:05:F7:E8:42:B2:F4:C8:58
Authority key identifier: 57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24
Certificate issuer: /CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24
Certificate serial: 484B534458BC879B49E6181CA0630F8BE7613EE8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft
Manifest number: 047E
Signing time: Mon 15 Dec 2025 05:00:01 +0000
Manifest this update: Mon 15 Dec 2025 04:55:01 +0000
Manifest next update: Thu 18 Dec 2025 05:02:01 +0000
Files and hashes: 1: 3130332e34312e3138382e302f32322d3234203d3e203538333937.roa (hash: 2o165ipoUQ5xC+3YJyvZSSnkLXwty1Hk0oFl5RqIxMo=)
2: 57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl (hash: 2Nk2FSg6MFYh3ggfviEZvr8DWRCTMhDrGTPPIIAzqXM=)
3: 3131372e35332e34342e302f32322d3234203d3e203538333937.roa (hash: R//rU13s2JPenNUsihOvlbAbpj+HfKGOOTSxdjuipA4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl
rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 05:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:4b:53:44:58:bc:87:9b:49:e6:18:1c:a0:63:0f:8b:e7:61:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D4B8269ADDA460E8F7925D0AA126ECD6F60E24
Validity
Not Before: Dec 15 04:55:01 2025 GMT
Not After : Dec 18 05:02:01 2025 GMT
Subject: CN=FD76F3EC005F4AF48AF065A605F7E842B2F4C858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:44:3f:07:96:96:ba:db:7c:f6:d2:51:7a:
da:68:6c:78:16:46:b6:d5:b0:69:a3:2b:f6:ef:ea:
63:9c:11:3c:d8:57:96:c3:ed:a5:05:01:dc:91:4a:
11:17:c3:3c:eb:0f:a6:ab:68:aa:8b:7a:bb:a0:8d:
05:30:28:a2:3e:2b:4e:2c:2a:8f:71:9c:1f:09:8d:
e4:89:d3:32:dc:07:88:85:15:35:33:fa:bc:4e:be:
6a:90:47:74:56:c9:41:8f:44:3d:a9:f7:eb:6f:f9:
ee:a5:ea:71:f8:c1:a7:66:86:cf:cd:87:07:fc:d6:
fc:28:a3:27:94:77:3f:d1:4e:d7:81:4a:a4:ea:c2:
35:a5:5d:8a:c0:9a:2d:68:6c:d7:3d:a1:47:ef:90:
43:eb:37:11:8a:1b:e4:8d:d0:ac:a5:69:da:94:56:
77:ef:55:5b:f3:9f:b4:a0:57:1b:2e:68:ef:35:54:
4a:81:52:57:c9:10:6d:4a:d6:1e:66:8a:95:b8:0f:
87:de:4b:0f:8d:63:93:07:5a:bf:3b:97:6f:39:ae:
a7:73:31:1b:d8:51:d8:15:07:96:e0:41:b7:57:09:
ff:a4:fb:4d:a8:e5:14:80:5d:7b:9f:8f:ae:ba:98:
10:f2:90:9c:7a:28:1c:e3:d6:8f:42:8f:3e:d7:2e:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:76:F3:EC:00:5F:4A:F4:8A:F0:65:A6:05:F7:E8:42:B2:F4:C8:58
X509v3 Authority Key Identifier:
keyid:57:D4:B8:26:9A:DD:A4:60:E8:F7:92:5D:0A:A1:26:EC:D6:F6:0E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f499c56-a246-4d18-be86-f461d8f559c8/0/57D4B8269ADDA460E8F7925D0AA126ECD6F60E24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:52:3e:42:46:78:7b:60:8d:92:24:dc:94:f0:39:11:2b:e4:
d4:9d:a4:36:4f:9c:2e:96:59:e1:05:64:61:da:e2:a4:be:33:
7d:8f:ee:77:55:e6:79:b6:29:9f:13:d6:48:12:07:ec:03:c7:
24:a3:a2:3b:8e:b1:fe:6a:c9:25:23:96:c4:c2:79:65:ad:a2:
49:d2:b4:c4:97:c4:55:38:1b:19:de:4b:f0:7d:f7:79:db:ce:
86:d4:7b:2b:6f:f7:4e:3c:04:62:a1:ca:b1:11:52:57:45:78:
2d:18:2c:e3:98:fd:c1:4b:6f:f1:60:8f:9a:7d:63:30:dc:40:
f4:b6:f4:f7:14:97:de:bd:5c:04:76:55:4e:96:b8:a8:8f:ca:
3b:80:2e:0a:02:ed:d2:ea:f1:c4:f9:b0:fd:82:b6:4d:2d:08:
ba:5e:d2:8c:cc:09:3f:f5:40:1c:30:1d:e0:72:f3:69:51:97:
84:6c:d1:43:17:75:a9:85:fb:8d:1d:5c:cf:39:7c:74:ee:4f:
63:3d:8a:7f:42:1f:01:ec:44:fd:c9:85:bf:c8:99:ef:1f:37:
99:da:a0:c6:18:55:d3:35:6f:6d:e0:7f:84:42:7e:5b:52:6f:
a1:99:47:47:41:48:de:cd:f7:d4:4b:52:7d:17:b4:b2:81:ae:
31:01:82:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 06:21:51 2025 by rpki-client