This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json)
Hash identifier: 609qyHnxogX43XeXFZ5a5MnaqJxmoNVEbjYGXPa8ZCY=
Subject key identifier: 09:DA:60:22:34:D8:30:97:E9:DE:06:16:BC:62:07:4E:72:EF:D2:E3
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 68D97065E141A27A6F0E6FB1E84100C85CFAA392
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
Manifest number: 03D8
Signing time: Sat 31 Jan 2026 22:41:46 +0000
Manifest this update: Sat 31 Jan 2026 22:36:46 +0000
Manifest next update: Tue 03 Feb 2026 23:01:46 +0000
Files and hashes: 1: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=)
2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: UPLaTa3IKq7IAwHaCgyepCYFVvoiam08S4EX9reGhck=)
3: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=)
4: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=)
5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Feb 2026 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d9:70:65:e1:41:a2:7a:6f:0e:6f:b1:e8:41:00:c8:5c:fa:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Jan 31 22:36:46 2026 GMT
Not After : Feb 3 23:01:46 2026 GMT
Subject: CN=09DA602234D83097E9DE0616BC62074E72EFD2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:3d:8e:51:ce:a2:0a:b3:a1:db:b0:d4:41:
8b:f8:d5:9e:15:82:e4:f0:68:9a:54:e3:46:f0:a2:
7e:2b:0d:6e:b1:e6:6f:56:87:b6:02:f5:d8:c8:eb:
76:2b:9a:ba:88:44:5b:f4:b7:4d:f1:be:77:ff:7c:
ce:d5:4c:58:3f:39:2c:3b:dd:20:af:e6:40:1a:2a:
f7:ad:2c:d5:63:5d:1e:7d:6d:6e:89:e3:51:d1:f1:
ed:24:09:99:f0:19:ea:00:cf:22:e4:42:4a:11:ab:
1c:56:d3:f1:55:c8:46:fa:4f:08:b9:de:0c:60:e7:
fa:8e:02:2d:e1:5e:9b:d4:89:63:09:5e:3a:92:6f:
93:66:41:35:70:6a:aa:13:a1:36:4d:88:75:10:f9:
8d:4b:c3:2e:a3:84:ef:fc:19:92:30:4e:65:21:fe:
56:af:9e:14:08:25:93:0a:77:24:fd:8e:a9:18:1e:
79:cc:7e:79:c2:62:29:73:64:e3:dd:e9:82:72:a8:
c6:8d:98:da:83:71:99:48:67:fd:f6:5b:08:85:86:
7e:13:f5:2f:67:9e:4b:94:2e:5b:50:bb:fa:17:d9:
64:d9:b4:5f:a0:36:a4:f3:1d:fe:7a:d9:c1:86:13:
f2:14:a6:85:fa:11:41:a8:de:93:30:02:76:c3:d0:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:60:22:34:D8:30:97:E9:DE:06:16:BC:62:07:4E:72:EF:D2:E3
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:e5:f4:5c:1b:3e:f1:c1:b5:61:93:5e:1a:e8:6e:3c:ea:
d4:0e:cb:c7:c9:c2:fa:e1:c7:32:2c:fb:7a:ee:0b:29:cc:5c:
9e:10:14:4a:be:db:c4:0b:c8:af:4c:fd:7c:f1:0a:f2:1e:8a:
5c:53:67:6e:ce:4d:71:a3:46:10:6f:82:d5:68:c7:e1:87:80:
94:15:d7:12:e9:13:3e:5e:7f:63:71:54:8f:fc:b8:9e:b0:35:
e8:f8:58:45:bd:bf:21:d8:3b:a0:04:b1:e9:58:23:c6:6d:6e:
9e:b5:8a:91:c8:b9:bd:25:45:56:1c:57:a3:38:65:21:a9:15:
bc:1a:99:01:2f:fe:b5:9a:a1:93:b5:36:b9:da:69:82:1d:1b:
06:3a:5f:da:7f:37:79:79:72:48:33:94:e5:1d:25:cc:b5:6b:
1f:97:01:4e:5a:56:17:de:4a:b9:05:50:81:53:33:8d:db:8e:
27:c2:ca:fc:12:99:67:d0:45:e1:25:e8:6b:dc:68:4e:bd:cc:
5e:67:ac:aa:12:e3:56:61:96:44:3e:8f:79:54:c7:8b:0e:cb:
cc:52:aa:89:6c:da:80:9e:bc:ef:df:60:1d:61:99:a4:fd:dd:
bc:4f:71:eb:12:e7:a0:eb:b7:0b:23:e3:d0:bc:3b:a8:23:92:
ac:40:e0:4f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUaNlwZeFBonpvDm+x6EEAyFz6o5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2
RUI5QTYxMTAeFw0yNjAxMzEyMjM2NDZaFw0yNjAyMDMyMzAxNDZaMDMxMTAvBgNV
BAMTKDA5REE2MDIyMzREODMwOTdFOURFMDYxNkJDNjIwNzRFNzJFRkQyRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMT2OUc6iCrOh27DUQYv41Z4V
guTwaJpU40bwon4rDW6x5m9Wh7YC9djI63YrmrqIRFv0t03xvnf/fM7VTFg/OSw7
3SCv5kAaKvetLNVjXR59bW6J41HR8e0kCZnwGeoAzyLkQkoRqxxW0/FVyEb6Twi5
3gxg5/qOAi3hXpvUiWMJXjqSb5NmQTVwaqoToTZNiHUQ+Y1Lwy6jhO/8GZIwTmUh
/lavnhQIJZMKdyT9jqkYHnnMfnnCYilzZOPd6YJyqMaNmNqDcZlIZ/32WwiFhn4T
9S9nnkuULltQu/oX2WTZtF+gNqTzHf562cGGE/IUpoX6EUGo3pMwAnbD0CKVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUCdpgIjTYMJfp3gYWvGIHTnLv0uMwHwYDVR0j
BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3
M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5
QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk
ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD
NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGzm5fRcGz7xwbVhk14a6G486tQOy8fJwvrh
xzIs+3ruCynMXJ4QFEq+28QLyK9M/XzxCvIeilxTZ27OTXGjRhBvgtVox+GHgJQV
1xLpEz5ef2NxVI/8uJ6wNej4WEW9vyHYO6AEselYI8Ztbp61ipHIub0lRVYcV6M4
ZSGpFbwamQEv/rWaoZO1NrnaaYIdGwY6X9p/N3l5ckgzlOUdJcy1ax+XAU5aVhfe
SrkFUIFTM43bjifCyvwSmWfQReEl6GvcaE69zF5nrKoS41ZhlkQ+j3lUx4sOy8xS
qols2oCevO/fYB1hmaT93bxPcesS56Drtwsj49C8O6gjkqxA4E8=
-----END CERTIFICATE-----
Generated at Mon Feb 2 14:27:46 2026 by rpki-client