This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: hy3gE+IdRkkoYBqEgKx9SwHKUZKRvqvaTUWFsdJWvY4= Subject key identifier: 35:12:1C:D8:F9:77:B3:65:75:AB:A4:28:0F:24:87:3E:5B:89:1D:91 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 496ABD9BAB30544B127A8F81AE34B3D97D808155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 054B Signing time: Tue 23 Dec 2025 02:12:56 +0000 Manifest this update: Tue 23 Dec 2025 02:07:56 +0000 Manifest next update: Fri 26 Dec 2025 11:45:56 +0000 Files and hashes: 1: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) 2: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: oMW/juSzl+5S8B2tH+GiR7KV/7mKnJINuimdyFIaiWU=) 3: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: I49x4AjjWunvLHnAnmPWzlRah2isOn6uFzxJB3cTrsk=) 4: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6a:bd:9b:ab:30:54:4b:12:7a:8f:81:ae:34:b3:d9:7d:80:81:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Dec 23 02:07:56 2025 GMT Not After : Dec 26 11:45:56 2025 GMT Subject: CN=35121CD8F977B36575ABA4280F24873E5B891D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:22:b7:55:ba:75:69:be:d1:4d:15:52:42: da:15:f3:25:91:7c:33:35:25:e7:16:e9:52:71:65: 86:2c:36:fd:8e:25:6c:84:46:69:40:80:ea:d7:ca: 75:da:17:3c:13:1d:81:cf:56:3c:a3:95:66:73:17: 5b:b9:50:28:ad:ce:da:bf:e8:2b:5d:a0:cd:83:6a: f7:1e:bb:93:9c:7d:11:05:03:69:56:ac:70:67:f0: 21:a9:bd:96:c2:89:af:f2:95:06:f4:a9:24:73:ef: c3:69:9e:0e:a9:6d:eb:08:36:09:cb:9c:0b:8f:03: 01:39:91:8a:93:11:61:33:d6:8b:ce:c5:1a:b4:6e: 75:c4:e9:ae:84:1b:4e:00:b8:70:5f:71:c0:24:10: 52:71:84:09:d9:83:23:f7:c1:2b:e9:85:28:73:f2: c8:04:09:41:29:3c:ea:1d:0f:82:ef:01:56:c2:0d: 70:bb:cc:70:9a:4b:d1:fd:19:95:ce:90:dc:82:90: ca:76:24:71:1d:16:8c:76:bf:b3:e8:2f:e2:d8:cc: ac:40:66:17:98:37:3c:1b:7e:e7:c1:1b:98:68:ae: d8:b4:59:b0:06:aa:9f:2c:dc:12:86:91:09:72:16: 82:09:c5:30:74:6e:f4:c5:f6:a3:d6:e6:1f:7f:ae: 50:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:1C:D8:F9:77:B3:65:75:AB:A4:28:0F:24:87:3E:5B:89:1D:91 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b8:7d:53:08:12:04:ff:74:42:df:26:60:1c:d8:26:18:af: d9:db:0d:5c:d2:da:6f:be:e0:1f:b8:b9:81:30:7a:73:4d:90: b8:24:f8:75:ab:a2:4d:96:39:1c:f3:67:bc:9d:de:ee:e7:c1: 55:fa:c1:b9:7a:50:6c:b7:aa:3f:54:26:4e:d1:2e:6f:da:cb: e7:20:b4:7b:59:2c:32:ed:8a:ae:5f:9a:a1:6c:1e:b7:42:0a: 0d:99:a2:0f:1a:28:ec:01:d4:b2:67:4b:a1:d4:c7:4c:e4:b0: 72:c0:0f:6b:16:52:6c:d3:14:09:4f:ea:9e:e3:37:d6:10:9d: 73:eb:9b:08:0f:b9:cc:bd:71:d8:8c:d6:f4:87:95:54:6c:53: 6d:b4:24:03:89:da:1b:3e:63:9b:e7:a8:2a:d6:54:ba:cb:b6: 77:48:89:a7:1a:54:0b:72:2a:4f:86:c4:7b:ee:04:d8:6a:b3: d3:a4:55:c8:cd:f5:78:70:fa:f1:f4:a1:31:f6:7b:68:29:ca: ca:ce:7f:32:1e:11:2c:9b:34:38:20:1a:af:00:c9:33:4c:3e: a4:b7:4e:a6:72:ea:26:1d:b7:66:89:ed:ce:7a:dc:d8:2b:df: 32:72:b5:db:b3:fd:f6:d9:46:e2:fe:30:5c:eb:6c:2a:d9:fa: fd:3c:a7:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSWq9m6swVEsSeo+BrjSz2X2AgVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNTEyMjMwMjA3NTZaFw0yNTEyMjYxMTQ1NTZaMDMxMTAvBgNV BAMTKDM1MTIxQ0Q4Rjk3N0IzNjU3NUFCQTQyODBGMjQ4NzNFNUI4OTFEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1CK3Vbp1ab7RTRVSQtoV8yWR fDM1JecW6VJxZYYsNv2OJWyERmlAgOrXynXaFzwTHYHPVjyjlWZzF1u5UCitztq/ 6CtdoM2Davceu5OcfREFA2lWrHBn8CGpvZbCia/ylQb0qSRz78Npng6pbesINgnL nAuPAwE5kYqTEWEz1ovOxRq0bnXE6a6EG04AuHBfccAkEFJxhAnZgyP3wSvphShz 8sgECUEpPOodD4LvAVbCDXC7zHCaS9H9GZXOkNyCkMp2JHEdFox2v7PoL+LYzKxA ZheYNzwbfufBG5horti0WbAGqp8s3BKGkQlyFoIJxTB0bvTF9qPW5h9/rlApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRIc2Pl3s2V1q6QoDySHPluJHZEwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW4fVMIEgT/dELfJmAc2CYYr9nbDVzS2m++ 4B+4uYEwenNNkLgk+HWrok2WORzzZ7yd3u7nwVX6wbl6UGy3qj9UJk7RLm/ay+cg tHtZLDLtiq5fmqFsHrdCCg2Zog8aKOwB1LJnS6HUx0zksHLAD2sWUmzTFAlP6p7j N9YQnXPrmwgPucy9cdiM1vSHlVRsU220JAOJ2hs+Y5vnqCrWVLrLtndIiacaVAty Kk+GxHvuBNhqs9OkVcjN9Xhw+vH0oTH2e2gpysrOfzIeESybNDggGq8AyTNMPqS3 TqZy6iYdt2aJ7c563Ngr3zJytduz/fbZRuL+MFzrbCrZ+v08pys= -----END CERTIFICATE-----Generated at Wed Dec 24 18:34:43 2025 by rpki-client