This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: gf7fH6QmuM+KpJSENnDS3mbq2ZBefDBM2DXla2d9vpQ= Subject key identifier: D5:66:C1:BF:1A:AB:70:6B:7C:72:0E:7A:79:58:36:1C:A5:C5:1B:D2 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 2AE7F88AE8DB1DDCDE64CB02FF1A988381D13CE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03C2 Signing time: Sun 14 Dec 2025 10:01:47 +0000 Manifest this update: Sun 14 Dec 2025 09:56:46 +0000 Manifest next update: Wed 17 Dec 2025 14:36:46 +0000 Files and hashes: 1: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 2: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: qpwbL+mxB1PcGzoHwFrxf8RVTqJceFuBWn0i7uFhKcU=) 3: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 4: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) 5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e7:f8:8a:e8:db:1d:dc:de:64:cb:02:ff:1a:98:83:81:d1:3c:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Dec 14 09:56:46 2025 GMT Not After : Dec 17 14:36:46 2025 GMT Subject: CN=D566C1BF1AAB706B7C720E7A7958361CA5C51BD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4a:a8:31:62:87:82:6b:65:b4:b5:e9:40:b9: 8a:d4:90:3a:34:31:39:23:ae:56:39:41:53:73:ad: 5e:9a:e2:9c:99:ce:49:0b:82:b8:07:11:64:bb:7e: 98:48:df:b9:c8:14:e3:60:4d:b4:08:23:30:42:30: 55:05:41:86:fe:58:e0:3b:07:36:65:a5:fd:14:06: 67:49:56:e3:5c:98:67:89:c3:87:b8:76:d6:e8:fb: f8:0c:e8:d2:dd:0d:1d:89:cc:5b:1d:9e:4a:ac:06: 04:b7:ff:61:b8:4d:66:52:9c:d6:0b:9d:aa:0d:cd: 3f:2a:67:df:fc:2b:b6:e4:e3:85:2f:2e:e7:8b:a4: b9:79:ab:9e:94:a8:91:a0:70:05:e7:28:ae:2f:e9: 5d:3a:28:9a:5b:e1:5e:da:43:e8:2f:97:fe:9d:94: 7a:6d:3d:d6:3a:16:f9:6e:91:6f:d8:30:cc:8e:28: 43:fe:4b:5e:23:fd:22:23:bd:3c:77:68:a3:85:8e: 95:98:0f:d4:ad:fb:4f:a6:18:56:38:72:9a:92:af: f7:52:fe:e3:e3:e2:bd:a1:7e:da:cb:e0:29:f1:82: db:3b:d3:b0:96:76:a5:e8:66:3e:a5:09:15:29:7c: e1:7e:01:ce:16:38:d0:55:ad:9d:c5:5d:bc:78:96: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:66:C1:BF:1A:AB:70:6B:7C:72:0E:7A:79:58:36:1C:A5:C5:1B:D2 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:42:23:30:01:b8:80:2b:03:4c:2a:ce:28:56:af:57:52:70: 5c:3c:cf:f5:de:64:16:b0:a4:91:ff:b8:8b:c1:57:b2:22:fe: 52:45:ac:52:3f:4f:40:b6:7a:d9:23:ac:2f:cd:aa:de:01:ed: 0b:0d:64:66:aa:a4:70:65:84:66:29:4e:f7:d3:bc:fb:b6:4e: 05:d9:58:35:13:d5:25:00:a1:f1:da:84:4c:c2:b9:2b:82:93: 00:93:21:2d:26:66:c7:0c:ce:8b:5a:1d:0a:2a:98:31:01:06: f7:fc:21:73:a6:0e:af:2d:37:a6:f6:ed:d9:f8:14:5a:68:83: 8f:bb:67:85:0f:a6:c0:f8:b2:4b:db:97:35:89:ef:73:cb:1f: dc:a8:1f:47:76:6d:34:f7:e9:42:a2:19:e7:a3:1d:69:01:17: 22:69:d9:91:f7:af:7c:f0:03:13:7f:9b:c2:15:29:b9:22:eb: 98:0e:67:31:6f:04:9e:19:bd:7d:8a:28:62:d2:c8:03:d5:48: 5e:32:13:c3:a9:dc:5d:3f:dd:90:dd:ce:63:29:f9:5e:3e:dd: b7:01:9d:a9:af:3c:2d:2d:6b:a0:d4:20:e1:0a:de:7d:21:29: 7b:6e:39:2d:fa:40:c2:a8:2c:50:14:3c:c9:4f:d3:31:b5:1d: ee:c9:03:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuf4iujbHdzeZMsC/xqYg4HRPOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNTEyMTQwOTU2NDZaFw0yNTEyMTcxNDM2NDZaMDMxMTAvBgNV BAMTKEQ1NjZDMUJGMUFBQjcwNkI3QzcyMEU3QTc5NTgzNjFDQTVDNTFCRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSqgxYoeCa2W0telAuYrUkDo0 MTkjrlY5QVNzrV6a4pyZzkkLgrgHEWS7fphI37nIFONgTbQIIzBCMFUFQYb+WOA7 BzZlpf0UBmdJVuNcmGeJw4e4dtbo+/gM6NLdDR2JzFsdnkqsBgS3/2G4TWZSnNYL naoNzT8qZ9/8K7bk44UvLueLpLl5q56UqJGgcAXnKK4v6V06KJpb4V7aQ+gvl/6d lHptPdY6FvlukW/YMMyOKEP+S14j/SIjvTx3aKOFjpWYD9St+0+mGFY4cpqSr/dS /uPj4r2hftrL4Cnxgts707CWdqXoZj6lCRUpfOF+Ac4WONBVrZ3FXbx4lpavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1WbBvxqrcGt8cg56eVg2HKXFG9IwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBCIzABuIArA0wqzihWr1dScFw8z/XeZBaw pJH/uIvBV7Ii/lJFrFI/T0C2etkjrC/Nqt4B7QsNZGaqpHBlhGYpTvfTvPu2TgXZ WDUT1SUAofHahEzCuSuCkwCTIS0mZscMzotaHQoqmDEBBvf8IXOmDq8tN6b27dn4 FFpog4+7Z4UPpsD4skvblzWJ73PLH9yoH0d2bTT36UKiGeejHWkBFyJp2ZH3r3zw AxN/m8IVKbki65gOZzFvBJ4ZvX2KKGLSyAPVSF4yE8Op3F0/3ZDdzmMp+V4+3bcB namvPC0ta6DUIOEK3n0hKXtuOS36QMKoLFAUPMlP0zG1He7JA7Y= -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:22 2025 by rpki-client