This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
File: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft (raw, json)
Hash identifier: FEviT2Tva1zHUY4CCAGUJXP9ZiZb0/nvmogoAPP+RK0=
Subject key identifier: F7:9B:21:BC:F6:63:77:32:4C:32:5C:E1:1C:1D:77:8E:4D:10:DB:3E
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Certificate issuer: /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial: 441DC8A0E268F99ED381B39D2477E38AA4959B56
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
Manifest number: 0529
Signing time: Sat 06 Dec 2025 14:40:54 +0000
Manifest this update: Sat 06 Dec 2025 14:35:54 +0000
Manifest next update: Wed 10 Dec 2025 01:56:54 +0000
Files and hashes: 1: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl (hash: ddpCJZAwSBQvoxYArsy5AukTgMwXV/Ln0EK9h2dVqWo=)
2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 55PcLzem2BCpJqiABflzpPI/pSTP6UsU+JbaeHq127k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:1d:c8:a0:e2:68:f9:9e:d3:81:b3:9d:24:77:e3:8a:a4:95:9b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Validity
Not Before: Dec 6 14:35:54 2025 GMT
Not After : Dec 10 01:56:54 2025 GMT
Subject: CN=F79B21BCF66377324C325CE11C1D778E4D10DB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a0:98:47:35:2c:6a:c6:4e:b6:39:80:29:f1:
40:7b:92:e1:36:49:d0:df:9b:d1:24:39:81:47:6b:
ee:16:cb:74:8f:3d:68:2a:ab:a2:85:ac:20:03:11:
6d:c6:a8:dc:5b:8a:51:f2:83:2e:02:87:2e:7c:d0:
89:9c:a1:09:77:45:7f:34:c0:4c:13:21:82:d3:e8:
6d:0d:02:5a:30:b1:54:5c:dc:ac:b6:69:1d:1e:23:
86:37:e8:96:84:98:bb:45:2b:8e:02:d0:29:9b:53:
72:e9:6e:21:7d:c5:8c:1a:f6:29:ed:ac:09:67:bb:
6d:a2:79:b6:cc:44:49:57:c4:73:21:17:7b:bf:46:
31:bf:d2:a4:5d:0c:cc:74:8c:3f:0e:ec:29:56:5e:
ea:ca:a4:65:5e:1d:73:86:77:e9:c5:ca:57:4a:7f:
2f:9d:54:1c:75:1a:dd:c3:33:df:f9:8d:a9:2f:e9:
c0:18:27:6d:7d:ce:bc:47:d8:6f:6e:69:e7:14:cd:
26:5a:59:6b:74:b8:89:6d:5f:b1:61:25:fe:e9:58:
f3:38:76:a7:4e:4d:8d:c7:1a:84:0f:03:48:ff:85:
2e:bc:ff:f4:ba:4c:06:61:b6:1a:28:68:88:4c:51:
d6:7d:ac:41:9e:f3:a1:a4:ce:05:f4:0d:07:f7:45:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9B:21:BC:F6:63:77:32:4C:32:5C:E1:1C:1D:77:8E:4D:10:DB:3E
X509v3 Authority Key Identifier:
keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a2:88:6f:e3:8e:17:d4:e6:32:2a:11:85:f6:2a:0b:8a:5f:
10:6e:33:06:a7:c4:67:8b:9d:2e:48:0b:05:77:f3:2f:03:f9:
ff:06:f0:3b:04:51:75:a9:f8:68:4b:09:ff:64:06:94:63:27:
1d:c7:1a:f2:a6:db:df:2b:05:8f:f4:da:e1:55:37:a1:d1:b8:
c9:94:a0:98:f4:6d:13:08:cc:4c:9b:d1:8b:2e:e5:36:6b:1f:
14:d8:af:68:be:04:7a:48:4c:10:d7:94:3c:a5:15:2e:c2:3c:
53:10:3a:99:ab:fd:73:cc:e2:5a:96:de:ca:df:6e:ae:ad:1c:
65:20:0c:18:4f:80:64:dd:7f:ac:ca:7e:ad:a8:6b:88:13:c4:
8a:c7:af:5b:1d:cb:53:e0:64:e0:38:6a:90:e7:1c:d7:45:d8:
5d:6a:9b:18:4b:63:0b:4a:73:63:c6:51:ff:72:ff:d6:f8:b0:
e2:f4:8f:5b:61:95:7e:9e:53:f0:fe:e7:b4:fb:1f:3f:5a:80:
56:f6:e5:0d:01:6e:d9:9e:2e:c2:b4:5d:67:7a:ac:f5:04:00:
2e:f8:57:64:2e:51:86:a9:24:5c:dd:ca:8a:7f:bd:9c:e2:56:
f1:5a:ff:64:1d:bf:65:17:84:8e:72:1f:e3:68:cc:6a:1e:13:
95:16:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:59:35 2025 by rpki-client