This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: C+sy91TylNEEsGTs3K6hW4VRU5EZv4TQ+GbHem+AsB0= Subject key identifier: 29:CD:27:66:FA:1E:B0:EB:0B:65:AB:A6:6E:47:3E:D8:D3:70:0A:6F Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 568FD2A6CBB555E96894DBA05924FF7D8BD2B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 0154 Signing time: Mon 01 Dec 2025 12:02:17 +0000 Manifest this update: Mon 01 Dec 2025 11:57:17 +0000 Manifest next update: Thu 04 Dec 2025 22:29:17 +0000 Files and hashes: 1: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: oqdaQ7rDG6TJomzqdqa4uxGdv1pHskGETtjpVcMKvf0=) 2: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8f:d2:a6:cb:b5:55:e9:68:94:db:a0:59:24:ff:7d:8b:d2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Dec 1 11:57:17 2025 GMT Not After : Dec 4 22:29:17 2025 GMT Subject: CN=29CD2766FA1EB0EB0B65ABA66E473ED8D3700A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:87:76:03:49:63:ad:59:10:6e:c2:aa:70:d5: a6:63:72:89:d9:08:20:0f:a1:2d:5c:9b:a3:9c:56: 91:95:ea:31:ae:9a:4f:84:26:1d:ea:ac:cb:38:a5: 1c:41:34:e2:2a:fa:be:ac:07:04:59:a4:13:ab:6e: d3:28:0f:5d:74:1e:78:03:e1:fc:7c:9d:bb:ab:f6: a1:ef:cd:22:72:f1:e9:bc:73:b6:86:67:31:30:5f: 88:15:00:09:d1:d1:d4:2b:42:0a:08:19:bf:9f:ef: 86:37:2c:ff:f2:04:bd:83:f7:e1:cf:56:a0:62:28: f8:ff:39:61:d3:55:fa:1c:32:1d:a2:69:3b:e2:d7: 72:85:17:79:a9:22:9e:31:de:ef:7c:34:a6:d1:20: 73:5a:ad:7f:bb:e9:e8:2b:77:e6:55:66:3a:cf:b8: d5:e3:21:61:ee:5d:be:d9:c5:d4:7c:63:8f:2f:32: 80:97:79:80:99:ef:33:cf:5e:a5:0f:83:83:03:1e: f2:63:e1:f6:e5:3b:44:13:b1:bb:38:23:b0:64:1e: 63:46:00:f9:c6:ed:aa:80:e7:56:07:86:02:3e:30: 6d:94:06:b8:e5:ca:c8:a3:3f:de:c4:f8:09:74:26: 2e:16:60:0d:ea:a4:a7:6a:41:35:7e:72:8b:45:2f: f5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CD:27:66:FA:1E:B0:EB:0B:65:AB:A6:6E:47:3E:D8:D3:70:0A:6F X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:07:5b:5b:3f:fc:73:be:25:9a:d0:31:28:5e:1d:5f:41:ef: ca:ea:3a:7f:0d:d3:d3:cf:9f:33:3f:e9:44:18:81:08:f9:5d: 05:99:9d:3e:f6:4f:a5:c8:63:b6:d5:a0:15:ad:28:63:75:f9: 97:f0:81:a1:29:42:9c:3e:ab:75:43:9c:97:af:8d:d1:8d:c0: c8:f4:0c:93:db:97:55:31:37:ab:3f:d6:96:3a:b3:6b:49:32: 86:a8:82:2d:48:18:ad:97:e1:a2:5c:71:5a:22:40:22:4c:9a: 28:83:ae:5d:89:b3:e8:8a:61:66:00:1c:19:e9:b7:ea:60:0f: 0f:10:e7:d3:2c:78:e7:1a:3e:18:43:74:45:42:93:fa:9a:14: ad:21:f6:55:5f:32:59:13:cc:80:3a:5c:ca:74:78:8d:9f:14: 6b:f0:b0:1a:1a:4e:ca:f3:77:39:af:b8:81:4b:26:28:dd:22: 3a:11:0a:11:e8:dd:b8:a8:a4:01:03:53:3b:bc:a4:de:01:3c: aa:c5:ff:8e:14:f1:71:47:d6:37:54:33:1b:35:4e:cf:c8:75: 56:7e:c6:55:f7:b4:6a:af:87:ec:c3:98:6d:58:4f:95:51:45: aa:71:bd:d1:8f:b0:77:66:9c:57:e2:e8:b5:31:fb:c4:04:9a: e3:49:fb:a8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITVo/Spsu1VelolNugWST/fYvSszANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1NzVDMzk4NjVEM0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0 MEZCOEMyMB4XDTI1MTIwMTExNTcxN1oXDTI1MTIwNDIyMjkxN1owMzExMC8GA1UE AxMoMjlDRDI3NjZGQTFFQjBFQjBCNjVBQkE2NkU0NzNFRDhEMzcwMEE2RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPSHdgNJY61ZEG7CqnDVpmNyidkI IA+hLVybo5xWkZXqMa6aT4QmHeqsyzilHEE04ir6vqwHBFmkE6tu0ygPXXQeeAPh /Hydu6v2oe/NInLx6bxztoZnMTBfiBUACdHR1CtCCggZv5/vhjcs//IEvYP34c9W oGIo+P85YdNV+hwyHaJpO+LXcoUXeakinjHe73w0ptEgc1qtf7vp6Ct35lVmOs+4 1eMhYe5dvtnF1Hxjjy8ygJd5gJnvM89epQ+DgwMe8mPh9uU7RBOxuzgjsGQeY0YA +cbtqoDnVgeGAj4wbZQGuOXKyKM/3sT4CXQmLhZgDeqkp2pBNX5yi0Uv9S8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQpzSdm+h6w6wtlq6ZuRz7Y03AKbzAfBgNVHSME GDAWgBRXXDmGXTriPczDIq0I0UJP1A+4wjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgx MWQ5YWJjLTQ5ODctNGRiYy05NzZkLTNmMzJiMjkxNzE1ZC8wLzU3NUMzOTg2NUQz QUUyM0RDQ0MzMjJBRDA4RDE0MjRGRDQwRkI4QzIuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81NzVDMzk4NjVEM0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZC OEMyLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84MTFkOWFiYy00OTg3LTRkYmMtOTc2 ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVEM0FFMjNEQ0NDMzIyQUQwOEQxNDI0 RkQ0MEZCOEMyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAigdbWz/8c74lmtAxKF4dX0Hvyuo6fw3T08+f Mz/pRBiBCPldBZmdPvZPpchjttWgFa0oY3X5l/CBoSlCnD6rdUOcl6+N0Y3AyPQM k9uXVTE3qz/Wljqza0kyhqiCLUgYrZfholxxWiJAIkyaKIOuXYmz6IphZgAcGem3 6mAPDxDn0yx45xo+GEN0RUKT+poUrSH2VV8yWRPMgDpcynR4jZ8Ua/CwGhpOyvN3 Oa+4gUsmKN0iOhEKEejduKikAQNTO7yk3gE8qsX/jhTxcUfWN1QzGzVOz8h1Vn7G Vfe0aq+H7MOYbVhPlVFFqnG90Y+wd2acV+LotTH7xASa40n7qA== -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:47 2025 by rpki-client