This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft File: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft (raw, json) Hash identifier: cgBNgK7Ut4abNcSBW4UOUCYMvLItbxI+sKbSoZreyEw= Subject key identifier: D3:0E:46:7B:26:2B:D7:F2:24:A8:C7:E6:18:A0:FC:06:71:11:8A:18 Authority key identifier: 57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 Certificate issuer: /CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Certificate serial: 20102CF7EE634F22D6DCF16AE5B145EDE7F1C73A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft Manifest number: 015D Signing time: Sun 21 Dec 2025 06:22:20 +0000 Manifest this update: Sun 21 Dec 2025 06:17:20 +0000 Manifest next update: Wed 24 Dec 2025 12:55:20 +0000 Files and hashes: 1: 3130332e3235302e3132392e302f32342d3234203d3e20313531353536.roa (hash: WtVfPZfCZ+ZExAyfqDCdWvXE48LKmIllvsd8uUvXohQ=) 2: 575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl (hash: dCBqGFJt8J4o0giOnYm392Bqm+w+32uHBko6C5fRzzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:10:2c:f7:ee:63:4f:22:d6:dc:f1:6a:e5:b1:45:ed:e7:f1:c7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=575C39865D3AE23DCCC322AD08D1424FD40FB8C2 Validity Not Before: Dec 21 06:17:20 2025 GMT Not After : Dec 24 12:55:20 2025 GMT Subject: CN=D30E467B262BD7F224A8C7E618A0FC0671118A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:62:36:42:53:ae:0c:7a:4a:b2:81:fd:bb: 86:f1:8a:e5:0d:ff:cf:a0:19:1a:e3:9d:d0:bb:59: 26:33:4b:fa:82:9d:3c:01:5d:21:52:5e:0a:c2:05: 4e:b5:6d:38:95:fe:f0:e0:92:fb:7b:2c:90:36:f4: 30:77:8e:6f:86:dd:2a:11:ca:dc:a6:f0:cb:71:ae: 60:ba:73:8c:d1:69:1d:7f:24:85:7c:b1:f0:11:4b: b8:4c:9f:22:51:0c:80:70:d8:59:c9:11:15:d0:f0: 2f:38:a9:e2:bd:ed:f0:b7:cd:58:55:23:aa:16:35: 80:37:07:da:32:32:6f:dd:3c:02:6b:43:a9:68:b6: 74:57:86:35:5c:79:70:55:37:76:3b:fd:3f:18:5b: e7:d6:e6:46:89:bc:fd:ac:6c:73:5d:6f:10:0b:f4: 23:b5:7c:9c:d2:38:07:7a:5e:15:2e:40:77:80:a5: da:aa:f3:2c:80:95:f6:6f:c7:96:6c:b8:bb:02:5a: b0:64:2d:55:72:b1:61:52:a8:3b:e0:dd:e0:28:66: 4e:7e:fa:08:76:3a:ee:43:e0:5b:0e:52:b3:27:ac: 06:ec:25:9d:7f:c1:fd:90:2d:11:60:b1:3b:a7:91: fd:79:24:56:a2:d1:38:92:d5:57:77:c0:2b:6f:6c: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0E:46:7B:26:2B:D7:F2:24:A8:C7:E6:18:A0:FC:06:71:11:8A:18 X509v3 Authority Key Identifier: keyid:57:5C:39:86:5D:3A:E2:3D:CC:C3:22:AD:08:D1:42:4F:D4:0F:B8:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/811d9abc-4987-4dbc-976d-3f32b291715d/0/575C39865D3AE23DCCC322AD08D1424FD40FB8C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e2:24:30:e8:4c:9b:6d:7b:21:d6:2b:27:7c:57:ad:33:5d: ff:3b:7c:9b:d8:b7:63:1a:a8:87:6f:fa:92:04:28:51:11:47: ae:5d:46:4a:c7:c4:4a:40:94:26:94:2e:b2:07:6a:4d:67:8e: 0b:4b:f9:b0:25:43:28:b3:12:89:9e:c8:98:65:50:05:7d:77: 3a:68:9b:8e:7f:3b:9b:11:95:da:cb:1c:28:1d:d6:06:44:6f: dd:90:22:a2:73:f2:d3:34:80:48:cc:ed:0f:b3:d3:b7:09:98: b3:e8:c4:4b:4c:7c:f7:24:ca:bc:28:ed:9c:0c:ba:4c:49:ed: 3d:b9:c4:d2:c6:98:0f:4c:80:e5:43:b2:c4:7c:14:ed:8f:b2: 41:53:ef:61:c2:d4:04:5c:8f:2f:2b:29:8f:ed:49:1e:33:c0: 5d:c5:4a:05:c9:b6:db:40:0d:3b:c5:40:20:ea:47:33:89:3e: e1:de:16:b8:4b:36:c4:cb:1b:b9:2c:42:c3:81:2c:3f:80:03: 70:22:44:d3:ab:72:d4:3c:d9:66:74:47:cc:86:0d:fd:40:f0: 17:2e:42:20:9f:f3:40:e0:19:50:06:4a:f9:b4:73:e8:23:e7: d8:cb:80:49:28:30:57:73:14:80:ee:48:81:04:4b:6d:2c:ae: 2d:29:46:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBAs9+5jTyLW3PFq5bFF7efxxzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZE NDBGQjhDMjAeFw0yNTEyMjEwNjE3MjBaFw0yNTEyMjQxMjU1MjBaMDMxMTAvBgNV BAMTKEQzMEU0NjdCMjYyQkQ3RjIyNEE4QzdFNjE4QTBGQzA2NzExMThBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnUmI2QlOuDHpKsoH9u4bxiuUN /8+gGRrjndC7WSYzS/qCnTwBXSFSXgrCBU61bTiV/vDgkvt7LJA29DB3jm+G3SoR ytym8MtxrmC6c4zRaR1/JIV8sfARS7hMnyJRDIBw2FnJERXQ8C84qeK97fC3zVhV I6oWNYA3B9oyMm/dPAJrQ6lotnRXhjVceXBVN3Y7/T8YW+fW5kaJvP2sbHNdbxAL 9CO1fJzSOAd6XhUuQHeApdqq8yyAlfZvx5ZsuLsCWrBkLVVysWFSqDvg3eAoZk5+ +gh2Ou5D4FsOUrMnrAbsJZ1/wf2QLRFgsTunkf15JFai0TiS1Vd3wCtvbM7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0w5GeyYr1/IkqMfmGKD8BnERihgwHwYDVR0j BBgwFoAUV1w5hl064j3MwyKtCNFCT9QPuMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTFkOWFiYy00OTg3LTRkYmMtOTc2ZC0zZjMyYjI5MTcxNWQvMC81NzVDMzk4NjVE M0FFMjNEQ0NDMzIyQUQwOEQxNDI0RkQ0MEZCOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQyNEZENDBG QjhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODExZDlhYmMtNDk4Ny00ZGJjLTk3 NmQtM2YzMmIyOTE3MTVkLzAvNTc1QzM5ODY1RDNBRTIzRENDQzMyMkFEMDhEMTQy NEZENDBGQjhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJriJDDoTJtteyHWKyd8V60zXf87fJvYt2Ma qIdv+pIEKFERR65dRkrHxEpAlCaULrIHak1njgtL+bAlQyizEomeyJhlUAV9dzpo m45/O5sRldrLHCgd1gZEb92QIqJz8tM0gEjM7Q+z07cJmLPoxEtMfPckyrwo7ZwM ukxJ7T25xNLGmA9MgOVDssR8FO2PskFT72HC1ARcjy8rKY/tSR4zwF3FSgXJtttA DTvFQCDqRzOJPuHeFrhLNsTLG7ksQsOBLD+AA3AiRNOrctQ82WZ0R8yGDf1A8Bcu QiCf80DgGVAGSvm0c+gj59jLgEkoMFdzFIDuSIEES20sri0pRtU= -----END CERTIFICATE-----Generated at Tue Dec 23 14:13:17 2025 by rpki-client