This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft (raw, json) Hash identifier: U2NLsNpgnjbnKrSp3eSnT+nVzGPmFM3G5tidSX605Vs= Subject key identifier: 33:B6:37:BA:96:AC:D9:BC:A0:FC:A0:63:98:21:05:B3:5C:F6:65:45 Authority key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Certificate issuer: /CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Certificate serial: 6C74A1B5CC4C73CD78D69FBFD4E1199B77A0A130 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 19:21:06 +0000 Manifest this update: Sat 06 Dec 2025 19:16:06 +0000 Manifest next update: Wed 10 Dec 2025 04:32:06 +0000 Files and hashes: 1: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl (hash: 2pbm99/NiY2NwUxBkgtU0uli6ZTxC25EwbpjYVWAbRw=) 2: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: zYQUx+ql30PPLkUcmDWdEwPKMJFZU5b5VUJfAZqzXL8=) 3: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: 1EZSjvRP2SRnr2FbtmEkuDAZWdhz/ERYDxYK2+TR5jA=) 4: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: G0VeuaYXS/KgF8/ez14lbGq6IneUYgvcmaO4bAZiGEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:74:a1:b5:cc:4c:73:cd:78:d6:9f:bf:d4:e1:19:9b:77:a0:a1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Validity Not Before: Dec 6 19:16:06 2025 GMT Not After : Dec 10 04:32:06 2025 GMT Subject: CN=33B637BA96ACD9BCA0FCA063982105B35CF66545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:15:2f:2c:40:b6:53:2e:be:86:1e:a3:b3: 2b:e7:ae:ee:54:9b:bb:43:5f:3a:a0:a9:9c:81:bb: 5a:d1:65:ce:c3:ef:c8:2d:9f:4b:8d:37:ec:fd:d8: 7e:cf:ac:5e:ff:5b:d0:f7:42:2a:be:1a:e0:6a:b2: 03:20:d8:fd:09:00:a1:5a:a5:09:5a:e4:2e:0f:1d: 2a:23:ef:b9:35:b5:0c:da:4a:79:44:2f:9e:ff:fe: 1a:79:d1:31:7a:e1:ff:81:31:ee:f8:30:0e:63:be: aa:46:bb:de:7d:84:59:5f:c7:e8:b5:ec:d2:70:87: 54:cc:c3:e0:3d:2e:f2:a7:35:bc:f6:d3:ab:e0:8b: 82:ac:1a:b0:88:35:f7:2b:a3:11:a1:1f:5a:ba:82: 84:3d:e9:6c:21:50:3d:e6:0f:7e:eb:b7:83:0a:d2: 33:3f:a5:3e:76:34:28:72:54:d9:86:8d:99:b2:1e: b0:f9:50:3b:5b:5d:61:a6:bc:d2:83:7c:4d:17:59: f2:fb:6f:93:a8:36:1c:53:b2:12:9b:80:d4:e1:96: e8:54:8b:9c:da:5e:3b:05:16:f5:80:ca:87:50:bb: a6:64:ca:2a:90:ec:3a:a4:42:50:ca:00:a2:d1:8d: da:0a:4c:92:ce:ca:9b:6b:d6:75:bf:f6:4a:d2:b1: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B6:37:BA:96:AC:D9:BC:A0:FC:A0:63:98:21:05:B3:5C:F6:65:45 X509v3 Authority Key Identifier: keyid:59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9c:d1:76:40:31:3a:65:a7:65:fe:bd:05:95:ad:0a:8e:07: 22:92:81:ea:13:d8:ca:0d:26:82:50:65:89:3c:8b:ef:82:f6: 67:b2:63:dd:20:d5:f4:ff:8e:40:e4:f2:47:92:6d:14:2d:b7: 3d:a1:b6:af:d2:3d:34:5c:51:a6:bb:05:11:b9:45:5a:31:11: 99:9d:d9:e2:64:f3:c9:07:4c:5e:7c:b4:71:21:50:53:a9:73: 9b:27:41:e7:6f:98:f8:24:5a:57:35:74:ee:e3:5f:fd:0b:dc: a1:4e:13:0d:41:98:78:8c:d9:61:6d:c5:05:bb:22:f7:6c:70: d1:2a:45:f7:4b:94:d9:98:39:7a:5a:5f:3e:f4:69:33:3a:a5: b9:c1:e8:39:f6:08:50:47:10:20:56:0f:e5:ba:b5:ea:72:82: 32:69:94:2d:14:14:98:18:fb:5e:c7:c4:86:db:f6:f6:34:cb: 4d:31:b2:cf:62:98:00:51:80:48:59:93:c8:09:31:f8:51:6a: 14:d3:f3:a9:2f:07:26:a2:89:2b:37:e4:30:f5:79:2b:be:4a: 6c:4e:ac:5a:88:54:37:1b:30:4a:d1:40:a2:47:14:df:65:0e: dc:9f:fb:d0:7a:f2:33:42:1c:2a:75:00:49:57:00:e0:25:ab: fe:3e:b2:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbHShtcxMc8141p+/1OEZm3egoTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5 OUZCMTg1NDAeFw0yNTEyMDYxOTE2MDZaFw0yNTEyMTAwNDMyMDZaMDMxMTAvBgNV BAMTKDMzQjYzN0JBOTZBQ0Q5QkNBMEZDQTA2Mzk4MjEwNUIzNUNGNjY1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rRUvLEC2Uy6+hh6jsyvnru5U m7tDXzqgqZyBu1rRZc7D78gtn0uNN+z92H7PrF7/W9D3Qiq+GuBqsgMg2P0JAKFa pQla5C4PHSoj77k1tQzaSnlEL57//hp50TF64f+BMe74MA5jvqpGu959hFlfx+i1 7NJwh1TMw+A9LvKnNbz206vgi4KsGrCINfcroxGhH1q6goQ96WwhUD3mD37rt4MK 0jM/pT52NChyVNmGjZmyHrD5UDtbXWGmvNKDfE0XWfL7b5OoNhxTshKbgNThluhU i5zaXjsFFvWAyodQu6ZkyiqQ7DqkQlDKAKLRjdoKTJLOyptr1nW/9krSsdX/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM7Y3upas2byg/KBjmCEFs1z2ZUUwHwYDVR0j BBgwFoAUWbGd0dZGeT9fF9icQqwvY5n7GFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMC81OUIxOUREMUQ2 NDY3OTNGNUYxN0Q4OUM0MkFDMkY2Mzk5RkIxODU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJGNjM5OUZC MTg1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvNTlCMTlERDFENjQ2NzkzRjVGMTdEODlDNDJBQzJG NjM5OUZCMTg1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByc0XZAMTplp2X+vQWVrQqOByKSgeoT2MoN JoJQZYk8i++C9meyY90g1fT/jkDk8keSbRQttz2htq/SPTRcUaa7BRG5RVoxEZmd 2eJk88kHTF58tHEhUFOpc5snQedvmPgkWlc1dO7jX/0L3KFOEw1BmHiM2WFtxQW7 IvdscNEqRfdLlNmYOXpaXz70aTM6pbnB6Dn2CFBHECBWD+W6tepygjJplC0UFJgY +17HxIbb9vY0y00xss9imABRgEhZk8gJMfhRahTT86kvByaiiSs35DD1eSu+SmxO rFqIVDcbMErRQKJHFN9lDtyf+9B68jNCHCp1AElXAOAlq/4+snQ= -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:31 2025 by rpki-client