This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft File: 57D075B2873A1E1F844485DAAC774C656EB9A611.mft (raw, json) Hash identifier: xY1QmPgDKpwjFQznu3bP8WoZweSWk6LE0DMq37a4ODY= Subject key identifier: 23:C7:94:76:7E:22:DB:66:82:2F:2A:C3:C6:C2:29:24:B3:99:58:92 Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 Certificate issuer: /CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Certificate serial: 23E4024868AFDD73E5986636819C9E6BF83C68F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft Manifest number: 03D5 Signing time: Sun 25 Jan 2026 11:51:45 +0000 Manifest this update: Sun 25 Jan 2026 11:46:45 +0000 Manifest next update: Wed 28 Jan 2026 16:13:45 +0000 Files and hashes: 1: 3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (hash: iMulVgKCxwqPFbAFOeAzE5yh4tPkiOrz17ayjx5bBCI=) 2: 3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (hash: N91VkEyIONXI8YjWF6UzPMS2HMBAziqn1kBl9mmK1M4=) 3: 57D075B2873A1E1F844485DAAC774C656EB9A611.crl (hash: K+SaXV1ghQML2kUVVy9UKL62Z+vMLnW5FqEynFrrXJI=) 4: 3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (hash: VfuZSouZTsq571ghIBuDI0RvCeUniEkqt+AyLLYswCI=) 5: 3130332e39302e3235352e302f32342d3234203d3e20313338303836.roa (hash: CMIYNlZq2wW30QRZM8aVN94gnX6NjhrlvsnBm9PvN+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e4:02:48:68:af:dd:73:e5:98:66:36:81:9c:9e:6b:f8:3c:68:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611 Validity Not Before: Jan 25 11:46:45 2026 GMT Not After : Jan 28 16:13:45 2026 GMT Subject: CN=23C794767E22DB66822F2AC3C6C22924B3995892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a3:ef:61:b9:89:e9:53:d3:51:47:3e:aa:c5: b9:ee:88:af:c5:6f:88:2c:f2:82:9a:c8:6e:59:57: b9:df:26:b9:6e:d7:b4:ca:b4:8f:0d:3e:86:32:e6: c3:a9:c3:c4:93:77:24:4b:c8:4f:e5:f9:99:7d:a9: c6:b0:d3:e9:3e:08:95:2a:69:54:a1:7c:be:04:21: 2e:df:b3:97:31:b2:ab:27:a2:56:b4:1a:3a:55:97: 3a:34:17:9b:7f:7a:c0:92:4e:e5:d6:cb:7a:34:f5: 2c:34:f7:79:85:c6:f3:5a:b7:db:28:94:ce:df:65: 81:96:da:e5:06:a6:3c:57:de:31:66:5e:37:5c:68: f8:fb:a0:cc:ba:e1:01:04:37:42:7b:10:7c:c7:70: cb:ed:6f:3f:c8:98:db:bb:3a:e8:b2:cd:8c:b7:4e: 37:a0:6e:86:4d:8f:22:67:10:88:cc:31:89:d6:e3: 03:fd:f9:eb:24:f1:89:b7:61:dd:f9:3e:b9:b3:7e: 3f:31:fd:1f:72:5b:f5:8d:19:3b:cb:52:8e:7d:55: e7:24:ab:3a:fd:d3:11:21:81:8e:97:1d:a2:1c:79: 51:da:26:fe:a8:69:92:8e:16:f8:59:ae:dd:0f:b2: e8:52:88:d5:9f:f5:dd:58:fc:d4:e7:63:00:c3:b3: 62:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C7:94:76:7E:22:DB:66:82:2F:2A:C3:C6:C2:29:24:B3:99:58:92 X509v3 Authority Key Identifier: keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:df:d3:e6:65:bd:b2:5d:93:03:2f:1d:fe:ab:d4:cb:60:03: 7f:97:35:1a:af:03:f0:c0:e7:d2:ab:40:75:60:7d:1c:d9:d9: 93:3e:2e:e0:bb:a6:5e:81:43:3d:8e:b2:5e:6f:48:0e:62:96: 0b:4f:fe:2f:a3:42:42:b2:df:96:64:b0:d0:6d:1a:10:c2:2f: 55:16:a5:8f:b3:53:25:b5:85:b0:58:5f:9e:13:a8:b0:13:bb: e9:45:86:ac:cc:3d:fc:40:c0:f0:68:a0:d1:4e:94:e4:61:00: 86:4f:a9:6b:f2:55:27:8c:d3:65:ac:eb:90:76:3a:0a:af:57: be:bc:bd:a4:08:11:b0:68:42:4d:63:31:ea:68:ad:a2:f5:7c: 76:2e:d0:ad:76:eb:b1:4a:73:02:89:44:51:d9:9a:48:93:46: 31:e2:ec:13:58:ed:29:8e:98:18:de:bc:8b:de:9d:58:13:90: b1:4a:fa:7d:63:c6:76:46:6b:24:4e:69:ec:b3:50:0e:dc:4d: 29:8b:12:e1:e8:80:21:6b:b3:ff:04:06:b4:9d:11:89:c7:aa: 38:b5:67:45:b2:31:b2:25:3a:42:f9:8f:6e:6c:d3:72:8f:24: 80:28:35:f1:49:cf:5d:e5:31:34:4b:2a:5b:b1:36:b6:d8:56: 0e:77:2e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI+QCSGiv3XPlmGY2gZyea/g8aPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2 RUI5QTYxMTAeFw0yNjAxMjUxMTQ2NDVaFw0yNjAxMjgxNjEzNDVaMDMxMTAvBgNV BAMTKDIzQzc5NDc2N0UyMkRCNjY4MjJGMkFDM0M2QzIyOTI0QjM5OTU4OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3o+9huYnpU9NRRz6qxbnuiK/F b4gs8oKayG5ZV7nfJrlu17TKtI8NPoYy5sOpw8STdyRLyE/l+Zl9qcaw0+k+CJUq aVShfL4EIS7fs5cxsqsnola0GjpVlzo0F5t/esCSTuXWy3o09Sw093mFxvNat9so lM7fZYGW2uUGpjxX3jFmXjdcaPj7oMy64QEEN0J7EHzHcMvtbz/ImNu7OuiyzYy3 TjegboZNjyJnEIjMMYnW4wP9+esk8Ym3Yd35Prmzfj8x/R9yW/WNGTvLUo59Veck qzr90xEhgY6XHaIceVHaJv6oaZKOFvhZrt0PsuhSiNWf9d1Y/NTnYwDDs2JDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8eUdn4i22aCLyrDxsIpJLOZWJIwHwYDVR0j BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3 M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5 QTYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc3NGIxOGMtZjI2My00ZmUxLThk ZjgtMWU3YzY4YmZiZWZjLzAvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRD NjU2RUI5QTYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDf0+ZlvbJdkwMvHf6r1MtgA3+XNRqvA/DA 59KrQHVgfRzZ2ZM+LuC7pl6BQz2Osl5vSA5ilgtP/i+jQkKy35ZksNBtGhDCL1UW pY+zUyW1hbBYX54TqLATu+lFhqzMPfxAwPBooNFOlORhAIZPqWvyVSeM02Ws65B2 OgqvV768vaQIEbBoQk1jMeporaL1fHYu0K1267FKcwKJRFHZmkiTRjHi7BNY7SmO mBjevIvenVgTkLFK+n1jxnZGayROaeyzUA7cTSmLEuHogCFrs/8EBrSdEYnHqji1 Z0WyMbIlOkL5j25s03KPJIAoNfFJz13lMTRLKluxNrbYVg53Loc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:56 2026 by rpki-client