This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: VtEc1AJv4NXvNv6POg/lqncc5fEdStHxfgUo4s54axI= Subject key identifier: 40:FF:51:F8:BA:E1:82:99:13:F0:50:84:B0:4C:C4:D2:AB:99:CD:BE Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 41D33B7CDA9AFBADE007352D641EC17017B26336 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 0528 Signing time: Fri 05 Dec 2025 08:41:20 +0000 Manifest this update: Fri 05 Dec 2025 08:36:20 +0000 Manifest next update: Mon 08 Dec 2025 20:08:20 +0000 Files and hashes: 1: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 2: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 4: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) 5: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: zIW674e+F47ZVZx7T5se9mDxvVgZ9clRpLiArWDpmC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 20:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d3:3b:7c:da:9a:fb:ad:e0:07:35:2d:64:1e:c1:70:17:b2:63:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Dec 5 08:36:20 2025 GMT Not After : Dec 8 20:08:20 2025 GMT Subject: CN=40FF51F8BAE1829913F05084B04CC4D2AB99CDBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:d0:9b:2f:ad:c4:fe:65:85:c5:d2:dc:bb: 09:0f:f4:84:71:35:1a:18:f3:10:67:e3:12:91:a0: 92:6c:28:9e:e4:41:cc:42:68:82:77:d3:d4:59:31: 4c:59:ed:27:7c:b2:54:57:a5:fd:ca:33:1e:de:48: 1d:02:5f:23:b2:8c:17:a0:d5:84:e6:cb:a0:06:d4: 19:9a:67:ed:89:90:f2:db:28:88:bc:30:b4:44:16: 1b:02:c0:e9:09:5f:56:c6:91:ca:f3:5e:cb:4f:60: 63:56:3f:f0:ad:4f:56:32:08:87:8c:1e:bd:19:c9: c1:41:ff:3c:12:e0:78:98:b5:c3:8e:a6:5c:1e:5b: 0e:8e:b5:e0:bc:34:41:63:e3:46:e1:82:37:17:44: 1c:c1:90:06:93:12:fe:64:81:10:fd:c6:76:56:79: 2e:ea:41:01:6a:00:d8:c9:fc:bf:1f:d0:1c:41:77: 77:ce:e9:d9:da:3d:01:dd:4c:a9:14:84:73:27:3b: 8f:31:19:be:ca:09:4c:32:0a:d4:20:01:cf:a3:2d: 6e:52:50:74:93:b1:ba:db:28:b9:e9:f0:0c:82:6d: 06:ae:4e:a1:6f:73:0b:5c:8b:5f:33:a9:87:a0:52: a1:6f:5e:d6:cf:b5:7f:99:71:a7:36:30:e6:d7:e1: 34:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FF:51:F8:BA:E1:82:99:13:F0:50:84:B0:4C:C4:D2:AB:99:CD:BE X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:21:c7:f1:a0:39:91:14:de:ee:5b:35:7a:94:d3:33:2b:fc: 10:e2:88:9c:ec:e5:05:57:79:76:a3:b1:31:de:29:69:a1:39: 41:a0:fb:fc:f5:b5:f0:aa:16:20:da:88:0e:01:30:ea:39:79: 18:52:91:dd:c6:ac:58:c2:ca:f7:25:58:85:a9:55:11:b9:d4: 6a:d9:58:8f:26:58:8d:36:3b:31:77:40:c8:4f:cb:7c:48:c8: 32:eb:6f:6f:bf:b6:cf:f5:12:cd:c3:2b:89:e3:25:10:f8:6a: 19:80:76:b0:87:75:ef:3e:f8:22:cb:88:5a:8a:05:15:19:83: 9a:db:f8:ca:b1:fc:9a:e0:b3:92:bd:cb:6b:d5:81:d4:75:96: 1d:37:83:23:65:57:59:6c:66:e0:e2:7c:6a:13:6a:a8:18:89: e4:48:e0:5b:00:ed:bb:bb:21:19:f6:bf:f5:ca:4c:ba:d6:96: e3:f0:d5:e8:d6:b1:e9:2e:09:ba:7a:ed:1e:18:f5:08:93:98: b8:d8:e8:80:36:2b:8f:de:3a:2f:db:11:e4:1d:58:5d:af:ed: 9e:c5:15:6c:6b:5a:33:d8:7b:20:5a:67:e7:9f:c7:b9:76:b3: e9:60:d7:ba:10:d5:6d:0e:cb:fc:09:70:3b:fd:64:0d:47:ca: 08:30:da:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQdM7fNqa+63gBzUtZB7BcBeyYzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTEyMDUwODM2MjBaFw0yNTEyMDgyMDA4MjBaMDMxMTAvBgNV BAMTKDQwRkY1MUY4QkFFMTgyOTkxM0YwNTA4NEIwNENDNEQyQUI5OUNEQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPtCbL63E/mWFxdLcuwkP9IRx NRoY8xBn4xKRoJJsKJ7kQcxCaIJ309RZMUxZ7Sd8slRXpf3KMx7eSB0CXyOyjBeg 1YTmy6AG1BmaZ+2JkPLbKIi8MLREFhsCwOkJX1bGkcrzXstPYGNWP/CtT1YyCIeM Hr0ZycFB/zwS4HiYtcOOplweWw6OteC8NEFj40bhgjcXRBzBkAaTEv5kgRD9xnZW eS7qQQFqANjJ/L8f0BxBd3fO6dnaPQHdTKkUhHMnO48xGb7KCUwyCtQgAc+jLW5S UHSTsbrbKLnp8AyCbQauTqFvcwtci18zqYegUqFvXtbPtX+Zcac2MObX4TRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQP9R+LrhgpkT8FCEsEzE0quZzb4wHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEhx/GgOZEU3u5bNXqU0zMr/BDiiJzs5QVX eXajsTHeKWmhOUGg+/z1tfCqFiDaiA4BMOo5eRhSkd3GrFjCyvclWIWpVRG51GrZ WI8mWI02OzF3QMhPy3xIyDLrb2+/ts/1Es3DK4njJRD4ahmAdrCHde8++CLLiFqK BRUZg5rb+Mqx/Jrgs5K9y2vVgdR1lh03gyNlV1lsZuDifGoTaqgYieRI4FsA7bu7 IRn2v/XKTLrWluPw1ejWsekuCbp67R4Y9QiTmLjY6IA2K4/eOi/bEeQdWF2v7Z7F FWxrWjPYeyBaZ+efx7l2s+lg17oQ1W0Oy/wJcDv9ZA1Hyggw2sU= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:36 2025 by rpki-client