This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft File: 575614534DD1047EA1BA290176D96470FCBA1ECA.mft (raw, json) Hash identifier: Bz7aS011m9MuMG+Q9XdTduLVP9HmdOhtMul5c3xLX+0= Subject key identifier: 1F:08:30:49:4E:40:E4:33:43:DC:2C:7C:C5:30:80:6F:D2:2A:1C:1C Authority key identifier: 57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA Certificate issuer: /CN=575614534DD1047EA1BA290176D96470FCBA1ECA Certificate serial: 5AC096BBD70C43798ADB7087902843247C75443E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft Manifest number: EF Signing time: Sun 07 Dec 2025 08:20:43 +0000 Manifest this update: Sun 07 Dec 2025 08:15:43 +0000 Manifest next update: Wed 10 Dec 2025 09:59:43 +0000 Files and hashes: 1: 3136302e32322e39302e302f32342d3234203d3e20313532383135.roa (hash: s193StwN0Z9fOKLEn3xGZ1WwxkYPgh/jBrrzDTrFlDA=) 2: 575614534DD1047EA1BA290176D96470FCBA1ECA.crl (hash: efBPUfeOOI0l9Oc94v1JLn1gjSn/XTSCSp4G+7OOwrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c0:96:bb:d7:0c:43:79:8a:db:70:87:90:28:43:24:7c:75:44:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575614534DD1047EA1BA290176D96470FCBA1ECA Validity Not Before: Dec 7 08:15:43 2025 GMT Not After : Dec 10 09:59:43 2025 GMT Subject: CN=1F0830494E40E43343DC2C7CC530806FD22A1C1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:56:de:7f:28:eb:2a:da:04:dd:be:e9:8f: 6d:a8:c0:fd:03:cb:62:e4:d3:2b:a2:ce:cd:93:57: 67:87:bb:f7:ed:bb:13:7e:9b:63:3e:96:2a:e8:e4: 4f:be:59:12:cf:26:03:8e:ce:fc:7f:54:45:e9:0f: bb:45:1c:22:c9:8e:5c:96:00:22:c0:78:67:ed:9d: 7a:f4:98:ef:7b:3f:9f:9d:08:19:e4:26:2b:ae:f8: 54:27:72:59:21:04:e5:ad:76:15:3a:e8:cd:80:9d: b7:8a:bc:3f:5a:0d:a5:65:b7:fb:d5:c1:1a:b5:fb: 2e:79:f2:a7:8f:cc:54:87:43:4e:3a:a8:3b:98:2f: 31:15:ba:a6:7a:43:b1:ce:fc:93:66:0e:ef:9a:ca: d4:d3:09:9d:33:23:ab:9c:04:72:72:e4:8d:22:68: bd:94:51:cb:e3:e3:49:65:98:1b:24:a5:b9:ea:0a: ec:1b:38:a4:8b:d3:57:a9:c2:43:de:8d:2a:e7:88: a8:25:30:d6:d1:5f:33:91:fa:b4:fd:19:0f:ca:36: 73:76:b1:0b:79:9b:4b:92:20:40:0a:f1:8a:78:15: e4:42:59:2d:2d:95:2a:c6:fd:c4:24:04:1f:e5:89: 2c:13:82:8d:71:4f:e8:f3:81:91:98:69:4e:81:5c: 97:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:08:30:49:4E:40:E4:33:43:DC:2C:7C:C5:30:80:6F:D2:2A:1C:1C X509v3 Authority Key Identifier: keyid:57:56:14:53:4D:D1:04:7E:A1:BA:29:01:76:D9:64:70:FC:BA:1E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/575614534DD1047EA1BA290176D96470FCBA1ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f17f79b0-b9e3-4c3d-a113-b6c6a18af4d1/0/575614534DD1047EA1BA290176D96470FCBA1ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5f:b7:3c:c2:f0:28:0e:a1:53:5b:4e:b2:a8:1a:87:12:c8: f7:7d:7b:16:7c:02:be:8f:f2:3d:8d:38:92:4e:b2:a2:9f:59: 52:9a:b5:1e:ba:1d:f7:84:f8:41:86:d5:4f:ea:af:45:c7:74: 91:c5:f3:ca:b1:62:13:91:a0:64:28:c9:e3:68:6e:f8:b8:e8: bd:36:ed:a7:d2:48:6c:67:4b:7b:22:11:2c:e2:ec:f2:6e:48: af:29:d4:0a:f7:45:32:a9:39:0d:74:5e:08:96:89:fa:16:65: 4e:53:ad:79:ad:d4:70:9b:12:b8:4a:3a:10:a4:a1:cd:e4:fd: a2:79:01:75:c6:47:77:3d:81:4c:89:74:fa:af:09:46:5f:b4: db:7c:91:57:e0:4d:19:6a:c1:77:0e:73:10:43:cf:05:86:7e: 62:66:63:94:6c:aa:21:d0:41:1b:36:39:9e:76:f3:37:00:3d: 6a:87:5b:db:a2:c5:28:8a:58:4a:59:20:f8:b7:99:74:ef:7f: db:73:6f:12:ab:14:05:87:f7:6c:6d:93:7c:b8:4a:3b:cb:c9: fb:d4:83:72:d9:75:0a:6e:1b:f4:0e:23:57:53:9c:d0:bd:67: 47:15:f6:fb:61:d4:3d:9d:9e:b4:9d:d8:c1:7a:4f:64:94:9a: 7b:20:c0:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsCWu9cMQ3mK23CHkChDJHx1RD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBG Q0JBMUVDQTAeFw0yNTEyMDcwODE1NDNaFw0yNTEyMTAwOTU5NDNaMDMxMTAvBgNV BAMTKDFGMDgzMDQ5NEU0MEU0MzM0M0RDMkM3Q0M1MzA4MDZGRDIyQTFDMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU9lbefyjrKtoE3b7pj22owP0D y2Lk0yuizs2TV2eHu/ftuxN+m2M+liro5E++WRLPJgOOzvx/VEXpD7tFHCLJjlyW ACLAeGftnXr0mO97P5+dCBnkJiuu+FQnclkhBOWtdhU66M2AnbeKvD9aDaVlt/vV wRq1+y558qePzFSHQ046qDuYLzEVuqZ6Q7HO/JNmDu+aytTTCZ0zI6ucBHJy5I0i aL2UUcvj40llmBskpbnqCuwbOKSL01epwkPejSrniKglMNbRXzOR+rT9GQ/KNnN2 sQt5m0uSIEAK8Yp4FeRCWS0tlSrG/cQkBB/liSwTgo1xT+jzgZGYaU6BXJc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHwgwSU5A5DND3Cx8xTCAb9IqHBwwHwYDVR0j BBgwFoAUV1YUU03RBH6huikBdtlkcPy6HsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTdmNzliMC1iOWUzLTRjM2QtYTExMy1iNmM2YTE4YWY0ZDEvMC81NzU2MTQ1MzRE RDEwNDdFQTFCQTI5MDE3NkQ5NjQ3MEZDQkExRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0NzBGQ0JB MUVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE3Zjc5YjAtYjllMy00YzNkLWEx MTMtYjZjNmExOGFmNGQxLzAvNTc1NjE0NTM0REQxMDQ3RUExQkEyOTAxNzZEOTY0 NzBGQ0JBMUVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZftzzC8CgOoVNbTrKoGocSyPd9exZ8Ar6P 8j2NOJJOsqKfWVKatR66HfeE+EGG1U/qr0XHdJHF88qxYhORoGQoyeNobvi46L02 7afSSGxnS3siESzi7PJuSK8p1Ar3RTKpOQ10XgiWifoWZU5TrXmt1HCbErhKOhCk oc3k/aJ5AXXGR3c9gUyJdPqvCUZftNt8kVfgTRlqwXcOcxBDzwWGfmJmY5RsqiHQ QRs2OZ528zcAPWqHW9uixSiKWEpZIPi3mXTvf9tzbxKrFAWH92xtk3y4SjvLyfvU g3LZdQpuG/QOI1dTnNC9Z0cV9vth1D2dnrSd2MF6T2SUmnsgwIw= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:50 2025 by rpki-client