This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json)
Hash identifier: OFqMPELolbznbrDweie8H59BMxzK4TpaI6pAwcXxYsQ=
Subject key identifier: 85:7A:48:1C:2F:EB:43:B2:32:32:B0:60:A4:96:B6:DA:12:EE:7C:B9
Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2
Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
Certificate serial: 1FABADDED48DA71F14B1BEFF662C60C06E222258
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
Manifest number: 0170
Signing time: Sun 01 Feb 2026 23:12:14 +0000
Manifest this update: Sun 01 Feb 2026 23:07:14 +0000
Manifest next update: Thu 05 Feb 2026 09:41:14 +0000
Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=)
2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: bNaZtYi9GOqQvCRgQgEAFDrGe8aQqmLR21ohaPKNLCs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl
rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 05:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:ab:ad:de:d4:8d:a7:1f:14:b1:be:ff:66:2c:60:c0:6e:22:22:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2
Validity
Not Before: Feb 1 23:07:14 2026 GMT
Not After : Feb 5 09:41:14 2026 GMT
Subject: CN=857A481C2FEB43B23232B060A496B6DA12EE7CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:ec:78:23:f1:24:5d:d1:04:93:78:d2:f0:
07:60:da:c6:6f:34:6c:cd:e1:80:de:4c:da:b9:59:
bb:8a:94:b7:8c:97:4c:83:7d:52:b1:76:23:e4:70:
34:76:30:d3:4c:6b:14:70:2c:24:64:ee:72:0d:b8:
08:7b:a2:85:16:b7:f1:f3:55:83:5e:2f:85:65:c8:
ea:e5:b5:b2:2e:ba:f7:78:71:79:c4:6e:92:e1:42:
7f:9c:de:2c:bc:77:fc:27:1f:02:07:1c:25:5f:87:
dc:3b:26:45:98:c9:30:60:49:b9:bb:5e:5c:6f:b9:
21:b5:d2:ae:15:ab:30:e9:a7:66:ce:2d:3b:a9:88:
31:ab:51:22:1e:fd:5b:b7:f2:2b:6e:82:28:50:d7:
41:06:bc:6e:4e:0e:d0:f7:bc:b0:cf:42:03:c4:e6:
d7:ec:c8:c2:22:da:68:e6:93:9e:ed:df:d1:95:eb:
e1:52:92:52:8c:cc:30:41:1e:c3:ed:b0:c3:fa:7c:
54:7a:cf:5e:a7:af:b4:e0:58:c2:5a:56:43:7a:22:
17:0e:2b:0e:48:98:4b:8a:f1:8f:aa:ee:0a:93:67:
e3:ed:1c:36:83:8b:19:fe:c1:04:e3:ff:36:a8:ad:
ac:ab:9f:91:44:04:9f:c7:e9:fc:de:07:76:52:e2:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7A:48:1C:2F:EB:43:B2:32:32:B0:60:A4:96:B6:DA:12:EE:7C:B9
X509v3 Authority Key Identifier:
keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:61:3d:b6:63:d2:03:f9:5c:a4:c6:98:40:36:15:21:a6:
15:7c:04:c1:31:85:30:b1:84:0e:82:52:7a:ca:94:b3:e5:fe:
af:2c:03:7c:60:dd:42:c1:a2:b0:ad:7c:f2:a4:34:6d:8f:8b:
c5:d9:dc:30:27:3e:c4:96:7b:c2:5e:53:a2:1a:a5:68:10:b6:
28:79:b6:0b:4e:8e:d1:74:4c:dc:51:90:68:60:41:31:b9:fd:
8d:93:5e:7e:76:ab:03:3d:72:95:25:67:21:9b:7a:bb:c6:26:
06:fd:6b:5c:6e:a6:b5:82:81:9a:17:3f:12:7e:82:18:c9:55:
99:74:ea:1b:74:95:4d:d6:ee:83:04:44:20:37:36:e6:ec:d9:
45:50:ff:8b:0a:3e:81:28:56:ef:88:d5:ff:fe:ec:59:09:23:
05:1a:21:0d:c6:44:68:40:69:c2:3b:a5:43:0b:d0:fb:2e:09:
88:ca:fc:63:fe:bb:d6:44:b9:28:50:b1:9d:87:11:28:de:5c:
f2:0d:0e:e6:d3:45:f0:b9:11:2e:ef:e6:7d:18:65:e2:ec:9c:
85:1d:71:6d:1b:dc:07:cd:70:d5:3e:d2:4b:73:91:4f:50:3e:
f5:a3:e2:ed:39:a4:9c:fa:0d:d3:3f:e5:e8:ee:5a:cf:13:37:
f1:5c:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 10:02:53 2026 by rpki-client