This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json)
Hash identifier: IVYyKiuZjHWpkews7UedbVrnRaDD7Eho/0Qj8RItJMw=
Subject key identifier: 17:4F:F1:1F:C4:C7:0A:25:F0:8F:C8:36:6A:AB:EC:D7:38:E8:3C:EC
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial: 52AF9869666CDAA02718652B0321368731F9182E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
Manifest number: 03BE
Signing time: Fri 05 Dec 2025 20:51:45 +0000
Manifest this update: Fri 05 Dec 2025 20:46:45 +0000
Manifest next update: Mon 08 Dec 2025 21:27:45 +0000
Files and hashes: 1: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=)
2: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=)
3: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: Wad1sZzNklU65s+/OxMQVp4Q3HPPMWWG9OCa6JTXlp4=)
4: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=)
5: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 21:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:af:98:69:66:6c:da:a0:27:18:65:2b:03:21:36:87:31:f9:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Validity
Not Before: Dec 5 20:46:45 2025 GMT
Not After : Dec 8 21:27:45 2025 GMT
Subject: CN=174FF11FC4C70A25F08FC8366AABECD738E83CEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:99:8c:ec:ee:c9:9c:f1:60:d3:6b:d8:e2:
e1:42:0a:e9:1a:ff:f4:8a:fc:1a:ed:dd:a0:f2:85:
03:79:93:bd:8c:e6:0d:6d:f4:28:d3:ca:ee:a9:78:
a3:6b:a0:52:c4:45:15:bd:55:a2:66:2d:93:7b:2e:
e4:85:18:13:b0:71:3f:b1:b0:55:33:ba:28:c3:44:
cc:c9:16:ec:52:fc:32:d1:88:01:50:29:9f:88:54:
f9:66:7e:dd:46:f6:3f:ee:7f:ea:d1:19:8b:43:42:
8b:07:40:9a:d9:b3:b3:0a:d4:f0:2b:fc:cd:3e:c9:
a2:1b:56:d6:8f:79:45:50:6d:a1:5a:7a:bc:cb:25:
85:36:55:f4:86:ad:be:c9:cb:f7:69:14:d1:57:cd:
c1:0d:82:30:1f:65:eb:a4:7c:61:0a:d7:a9:fb:39:
e6:5a:18:6e:86:3b:25:ad:5e:cc:ca:53:d7:07:b1:
0a:be:25:8b:3c:55:91:1e:d4:03:f4:21:09:2d:c9:
5c:14:dc:cf:fc:5d:57:01:a0:d5:b2:b7:55:52:b8:
25:99:73:f4:71:0d:2e:37:48:d0:af:d2:4e:99:5e:
1a:30:e1:0f:7c:10:c9:dc:b2:9a:3f:3b:d2:dc:73:
ea:1e:44:c1:22:f0:1d:80:a1:f4:41:ad:ea:46:59:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4F:F1:1F:C4:C7:0A:25:F0:8F:C8:36:6A:AB:EC:D7:38:E8:3C:EC
X509v3 Authority Key Identifier:
keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f6:eb:49:cd:80:52:71:99:99:ce:3e:37:20:fa:3d:7f:81:
5f:4f:a3:34:bf:c5:fe:1a:44:e7:54:24:fe:94:5f:21:f7:8a:
39:72:6a:48:91:33:2f:50:b6:fd:4c:01:fc:a9:dd:40:73:c9:
6a:b0:a7:ef:a0:4d:6b:8d:0e:a2:38:45:3d:ed:e6:cf:99:6e:
51:e9:a2:79:a1:af:5c:72:6b:f5:26:c2:4d:9b:63:a0:44:9b:
7e:7e:47:2e:a2:83:5f:6f:92:a9:92:db:44:51:23:2c:8f:e8:
a7:bd:b7:ee:c8:fa:98:bb:7e:b4:13:e8:97:48:ca:af:fe:c5:
6a:3d:4e:c2:bd:aa:13:3a:1d:b7:29:26:bb:dc:bb:15:94:ae:
b3:bd:e1:16:01:48:cf:64:8f:06:56:1f:7b:30:9e:3e:2e:dc:
6b:ab:b9:08:7e:e6:4e:ae:03:ce:a5:b5:2e:58:49:06:2a:95:
31:34:cd:ed:69:ec:14:66:07:11:05:5b:00:73:7f:a8:3c:01:
20:bd:f7:f0:94:c4:a0:8b:ca:d8:80:e1:10:7c:9d:76:87:66:
84:02:2a:82:40:8b:e3:9f:f1:3e:21:23:fe:94:9a:75:72:87:
5c:fb:42:8d:87:19:d4:ff:2f:2e:4c:2d:d0:79:65:8b:61:ac:
ef:c7:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:33:51 2025 by rpki-client