This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
File:                     0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft (raw, json)
Hash identifier:          FEviT2Tva1zHUY4CCAGUJXP9ZiZb0/nvmogoAPP+RK0=
Subject key identifier:   F7:9B:21:BC:F6:63:77:32:4C:32:5C:E1:1C:1D:77:8E:4D:10:DB:3E
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Certificate issuer:       /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial:       441DC8A0E268F99ED381B39D2477E38AA4959B56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
Manifest number:          0529
Signing time:             Sat 06 Dec 2025 14:40:54 +0000
Manifest this update:     Sat 06 Dec 2025 14:35:54 +0000
Manifest next update:     Wed 10 Dec 2025 01:56:54 +0000
Files and hashes:         1: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl (hash: ddpCJZAwSBQvoxYArsy5AukTgMwXV/Ln0EK9h2dVqWo=)
                          2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 55PcLzem2BCpJqiABflzpPI/pSTP6UsU+JbaeHq127k=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
                          rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 15:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1d:c8:a0:e2:68:f9:9e:d3:81:b3:9d:24:77:e3:8a:a4:95:9b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
        Validity
            Not Before: Dec  6 14:35:54 2025 GMT
            Not After : Dec 10 01:56:54 2025 GMT
        Subject: CN=F79B21BCF66377324C325CE11C1D778E4D10DB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a0:98:47:35:2c:6a:c6:4e:b6:39:80:29:f1:
                    40:7b:92:e1:36:49:d0:df:9b:d1:24:39:81:47:6b:
                    ee:16:cb:74:8f:3d:68:2a:ab:a2:85:ac:20:03:11:
                    6d:c6:a8:dc:5b:8a:51:f2:83:2e:02:87:2e:7c:d0:
                    89:9c:a1:09:77:45:7f:34:c0:4c:13:21:82:d3:e8:
                    6d:0d:02:5a:30:b1:54:5c:dc:ac:b6:69:1d:1e:23:
                    86:37:e8:96:84:98:bb:45:2b:8e:02:d0:29:9b:53:
                    72:e9:6e:21:7d:c5:8c:1a:f6:29:ed:ac:09:67:bb:
                    6d:a2:79:b6:cc:44:49:57:c4:73:21:17:7b:bf:46:
                    31:bf:d2:a4:5d:0c:cc:74:8c:3f:0e:ec:29:56:5e:
                    ea:ca:a4:65:5e:1d:73:86:77:e9:c5:ca:57:4a:7f:
                    2f:9d:54:1c:75:1a:dd:c3:33:df:f9:8d:a9:2f:e9:
                    c0:18:27:6d:7d:ce:bc:47:d8:6f:6e:69:e7:14:cd:
                    26:5a:59:6b:74:b8:89:6d:5f:b1:61:25:fe:e9:58:
                    f3:38:76:a7:4e:4d:8d:c7:1a:84:0f:03:48:ff:85:
                    2e:bc:ff:f4:ba:4c:06:61:b6:1a:28:68:88:4c:51:
                    d6:7d:ac:41:9e:f3:a1:a4:ce:05:f4:0d:07:f7:45:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9B:21:BC:F6:63:77:32:4C:32:5C:E1:1C:1D:77:8E:4D:10:DB:3E
            X509v3 Authority Key Identifier:
                keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a2:88:6f:e3:8e:17:d4:e6:32:2a:11:85:f6:2a:0b:8a:5f:
         10:6e:33:06:a7:c4:67:8b:9d:2e:48:0b:05:77:f3:2f:03:f9:
         ff:06:f0:3b:04:51:75:a9:f8:68:4b:09:ff:64:06:94:63:27:
         1d:c7:1a:f2:a6:db:df:2b:05:8f:f4:da:e1:55:37:a1:d1:b8:
         c9:94:a0:98:f4:6d:13:08:cc:4c:9b:d1:8b:2e:e5:36:6b:1f:
         14:d8:af:68:be:04:7a:48:4c:10:d7:94:3c:a5:15:2e:c2:3c:
         53:10:3a:99:ab:fd:73:cc:e2:5a:96:de:ca:df:6e:ae:ad:1c:
         65:20:0c:18:4f:80:64:dd:7f:ac:ca:7e:ad:a8:6b:88:13:c4:
         8a:c7:af:5b:1d:cb:53:e0:64:e0:38:6a:90:e7:1c:d7:45:d8:
         5d:6a:9b:18:4b:63:0b:4a:73:63:c6:51:ff:72:ff:d6:f8:b0:
         e2:f4:8f:5b:61:95:7e:9e:53:f0:fe:e7:b4:fb:1f:3f:5a:80:
         56:f6:e5:0d:01:6e:d9:9e:2e:c2:b4:5d:67:7a:ac:f5:04:00:
         2e:f8:57:64:2e:51:86:a9:24:5c:dd:ca:8a:7f:bd:9c:e2:56:
         f1:5a:ff:64:1d:bf:65:17:84:8e:72:1f:e3:68:cc:6a:1e:13:
         95:16:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:35 2025 by rpki-client