This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft File: 571E2EFA23FEA611810611410635E23A090F4550.mft (raw, json) Hash identifier: yvCKvh/uYQVWqNRX9BVDBr7Vcgz9IO5AG4Rnw8uNuic= Subject key identifier: 2C:B5:BB:60:00:6C:20:EC:FA:CB:46:BD:74:F5:B8:E2:C9:9D:97:96 Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 Certificate issuer: /CN=571E2EFA23FEA611810611410635E23A090F4550 Certificate serial: 4D822C6563033CCD6CB720D5981185B180DA6C4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft Manifest number: 0559 Signing time: Sat 24 Jan 2026 01:22:21 +0000 Manifest this update: Sat 24 Jan 2026 01:17:21 +0000 Manifest next update: Tue 27 Jan 2026 01:28:21 +0000 Files and hashes: 1: 571E2EFA23FEA611810611410635E23A090F4550.crl (hash: kDWX/aiGzMfM/8oqzQpS49auSDcTw/8sp/dlh3kLorc=) 2: 3130332e3135352e36342e302f32332d3233203d3e20313432333831.roa (hash: YxNi6/uAllHxRs/TmMjIhKw+j/AevGbXCAwCtWlO7/Y=) 3: 3130332e3135352e36352e302f32342d3234203d3e20313432333831.roa (hash: VkpKpUc35y0m6RakFxnBA9Bw4QZgnk8+t/RVySTimJ4=) 4: 3130332e3135352e36342e302f32342d3234203d3e20313432333831.roa (hash: heGyyo+ETT8V3dgjREKU/fLp6uNkHbiH2GVik5PI5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 01:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:82:2c:65:63:03:3c:cd:6c:b7:20:d5:98:11:85:b1:80:da:6c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550 Validity Not Before: Jan 24 01:17:21 2026 GMT Not After : Jan 27 01:28:21 2026 GMT Subject: CN=2CB5BB60006C20ECFACB46BD74F5B8E2C99D9796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:58:50:8c:63:ae:c7:cd:50:7f:60:78:ec: 38:20:55:b7:fb:c0:44:59:40:75:16:50:bb:4b:24: f8:f4:b9:17:60:9f:14:8d:58:df:01:71:36:01:f1: 97:2e:e9:3d:04:2a:4b:7d:f5:e9:26:e2:07:f5:c5: 8a:04:6e:54:a5:c8:97:1b:74:09:bd:3b:87:9d:f3: ef:93:0b:b0:1c:09:fd:cf:79:42:3b:30:ca:be:d7: 15:0a:0f:6a:78:95:76:43:e2:bb:f3:9b:0a:71:67: a7:93:77:55:7a:02:47:c1:c3:3c:7e:f8:ee:96:0a: 4b:b8:55:57:93:fe:05:15:22:1a:f6:86:9c:5c:a0: 80:52:f8:48:b1:1e:e2:25:f5:aa:2e:5a:ed:1a:89: 6a:ec:34:20:79:dc:cc:06:da:f8:3c:27:c6:9e:5d: 6b:ec:66:23:61:d2:8f:55:17:6d:66:ad:af:f9:07: a1:bf:41:26:5b:9d:26:eb:5b:1f:27:77:c7:1b:7b: 54:ec:8a:91:54:87:38:9c:bc:96:ba:5d:5a:6c:3a: 53:a9:af:d0:69:6e:c0:90:c4:0d:6d:66:33:7e:54: 20:eb:2e:a1:32:77:4d:9f:c6:4d:6d:e6:7e:11:c4: f2:24:66:97:65:45:fd:7a:4a:67:3b:75:9a:b1:e3: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B5:BB:60:00:6C:20:EC:FA:CB:46:BD:74:F5:B8:E2:C9:9D:97:96 X509v3 Authority Key Identifier: keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:df:4a:7c:90:23:7d:a1:ff:f0:6a:ca:8e:71:f8:b5:af:23: fd:f4:ad:40:c6:09:0d:d1:8d:1b:95:31:81:12:b1:d0:bd:65: 91:5d:ea:6d:93:6e:b9:ab:7d:0f:75:92:78:ab:1d:5d:f7:0b: fd:1a:10:a4:0b:da:1b:f3:ad:c5:1f:45:a1:0a:2d:6a:cb:37: a8:15:23:7f:ba:d0:d3:d9:67:74:a3:e6:05:e1:e8:98:92:57: 8f:5e:04:45:4d:6d:80:ed:fa:a8:98:49:44:03:6a:20:ae:46: 83:32:7d:49:d8:0d:fc:92:24:07:6a:29:55:af:ea:ea:83:d1: fd:2b:63:49:51:33:4c:f0:71:7f:3c:8c:92:52:89:96:b2:cd: 35:f6:9b:c4:45:83:31:a0:4a:0b:4e:85:db:cb:0c:4f:77:df: 80:df:08:fd:e0:f1:48:05:e9:ab:94:61:60:d3:62:be:cf:70: d0:fd:20:67:06:f8:4a:ef:8f:53:2c:b1:56:1d:9b:f3:0a:45: dd:2d:38:66:9a:e9:ed:11:61:ce:51:34:5a:c8:67:01:b8:f6: fb:bf:c0:be:dd:bf:dc:e0:54:3a:16:14:6d:24:b5:00:4e:89: 29:dd:ac:e7:3d:1b:e4:59:a0:cd:c4:8c:87:09:90:dc:4c:19: 52:b1:93:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTYIsZWMDPM1styDVmBGFsYDabEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew OTBGNDU1MDAeFw0yNjAxMjQwMTE3MjFaFw0yNjAxMjcwMTI4MjFaMDMxMTAvBgNV BAMTKDJDQjVCQjYwMDA2QzIwRUNGQUNCNDZCRDc0RjVCOEUyQzk5RDk3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/VhQjGOux81Qf2B47DggVbf7 wERZQHUWULtLJPj0uRdgnxSNWN8BcTYB8Zcu6T0EKkt99ekm4gf1xYoEblSlyJcb dAm9O4ed8++TC7AcCf3PeUI7MMq+1xUKD2p4lXZD4rvzmwpxZ6eTd1V6AkfBwzx+ +O6WCku4VVeT/gUVIhr2hpxcoIBS+EixHuIl9aouWu0aiWrsNCB53MwG2vg8J8ae XWvsZiNh0o9VF21mra/5B6G/QSZbnSbrWx8nd8cbe1TsipFUhzicvJa6XVpsOlOp r9BpbsCQxA1tZjN+VCDrLqEyd02fxk1t5n4RxPIkZpdlRf16Smc7dZqx44avAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLW7YABsIOz6y0a9dPW44smdl5YwHwYDVR0j BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG NDU1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU2NGFiZmItMTk2Mi00NGE5LTgz NzYtY2JmYjFlZmNkYWJhLzAvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUy M0EwOTBGNDU1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrfSnyQI32h//Bqyo5x+LWvI/30rUDGCQ3R jRuVMYESsdC9ZZFd6m2TbrmrfQ91knirHV33C/0aEKQL2hvzrcUfRaEKLWrLN6gV I3+60NPZZ3Sj5gXh6JiSV49eBEVNbYDt+qiYSUQDaiCuRoMyfUnYDfySJAdqKVWv 6uqD0f0rY0lRM0zwcX88jJJSiZayzTX2m8RFgzGgSgtOhdvLDE9334DfCP3g8UgF 6auUYWDTYr7PcND9IGcG+Ervj1MssVYdm/MKRd0tOGaa6e0RYc5RNFrIZwG49vu/ wL7dv9zgVDoWFG0ktQBOiSndrOc9G+RZoM3EjIcJkNxMGVKxk90= -----END CERTIFICATE-----Generated at Sun Jan 25 20:22:11 2026 by rpki-client