This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft File: 581E644EEC44F9523CF189893E102BCC6008F9BE.mft (raw, json) Hash identifier: 3bmIB3C0pcsBdVmcMwtbELNL1sEveVmxCXvbqGl7vW0= Subject key identifier: ED:FD:89:65:BB:DF:69:0E:2F:44:EB:B1:69:59:A5:D6:53:9A:88:0C Authority key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Certificate issuer: /CN=581E644EEC44F9523CF189893E102BCC6008F9BE Certificate serial: 546B36DA0D73700E3B0690E4BA898CCEA76EB2C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft Manifest number: 01F7 Signing time: Fri 05 Dec 2025 16:00:01 +0000 Manifest this update: Fri 05 Dec 2025 15:55:01 +0000 Manifest next update: Tue 09 Dec 2025 02:28:01 +0000 Files and hashes: 1: 3130332e3138392e3132302e302f32332d3234203d3e20313338383836.roa (hash: BD1xmKcIfvv53+qbSsqU41j3RH48RKcR2IUwYcDCVHU=) 2: 581E644EEC44F9523CF189893E102BCC6008F9BE.crl (hash: kkz/AKGhPdrSSt8dlaSUzVLcMy9BYH4kS+gyGbTKEVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:6b:36:da:0d:73:70:0e:3b:06:90:e4:ba:89:8c:ce:a7:6e:b2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Validity Not Before: Dec 5 15:55:01 2025 GMT Not After : Dec 9 02:28:01 2025 GMT Subject: CN=EDFD8965BBDF690E2F44EBB16959A5D6539A880C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7f:fe:79:c0:93:5e:33:2b:38:44:8b:35:82: 89:46:0b:e9:f8:8e:ff:c5:ca:eb:db:4d:9a:9d:38: 0b:b7:54:89:0f:b9:ba:f3:c4:69:d9:96:2b:22:0c: 17:2d:7c:f0:04:64:4e:f6:48:52:54:c9:65:8f:1c: cb:67:f9:5d:1a:a6:8c:c1:3c:37:22:cd:0b:97:45: c7:54:2c:32:7b:68:d0:8a:4f:2a:aa:7f:20:1c:e5: 23:b1:75:09:e1:d4:dc:7e:9b:65:e9:ef:16:a9:ea: dd:a9:94:7b:7d:85:a8:af:74:87:c2:52:1e:21:05: 3b:28:30:b5:2c:ef:0d:5f:2f:19:4b:7c:8b:18:2e: 3b:c4:60:51:3f:ce:4b:4e:97:05:56:d5:4a:70:0e: 56:0d:92:6d:26:f4:0e:a4:9f:a8:75:ed:0c:7d:8c: 8b:3d:25:0b:90:c1:3a:9b:03:59:a5:63:3f:a1:af: 7c:e4:05:f3:fa:e9:63:c0:40:36:b4:bf:b9:20:cc: af:e4:76:91:63:15:cf:cf:16:9c:be:80:26:74:d9: a9:94:13:a6:9b:ac:7d:7a:42:f2:1a:b9:d8:60:c9: 03:7e:d0:4b:af:13:30:72:a0:be:b9:42:a0:1b:53: 0e:9e:9e:8d:56:2d:4d:3d:0d:c7:72:2b:db:5f:84: 61:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FD:89:65:BB:DF:69:0E:2F:44:EB:B1:69:59:A5:D6:53:9A:88:0C X509v3 Authority Key Identifier: keyid:58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9b:a1:37:a8:ab:77:60:31:c4:df:ce:a4:27:ce:28:83:ad: a3:ad:9e:89:77:0a:e8:4f:f0:95:7a:20:b8:1b:77:b4:aa:70: bb:0c:47:33:e8:f6:c3:f0:24:35:bd:97:b3:01:42:db:c0:0f: cc:fe:db:25:99:98:a8:54:0e:1d:ae:70:8a:83:e1:1a:78:d1: 6c:b5:e3:fb:7c:6c:c9:87:0d:df:66:38:10:cf:65:08:90:06: f2:14:b0:1d:1f:69:15:ac:89:ae:47:83:9b:7f:e5:33:08:8f: 36:ae:5b:7a:c4:17:b1:45:9a:9e:33:a9:42:c3:f5:40:3f:d1: 57:fc:f6:9a:4c:38:2b:8f:5b:f6:1a:ae:34:b3:00:13:93:f7: 12:30:8b:10:c0:85:13:1a:40:ae:85:e3:f3:10:92:43:ac:29: a5:6e:e1:e5:67:87:f9:87:6a:b6:bc:35:4d:19:1e:2f:80:31: ce:19:19:86:41:7a:f6:80:6e:b3:62:c0:79:73:83:15:03:48: b3:36:b4:6c:59:e9:03:ce:9b:6c:70:56:57:0e:91:39:12:31: 70:ad:0b:d3:d9:2a:68:20:69:f2:76:57:ff:59:7d:d4:3b:fd: 37:21:39:d5:d5:08:bc:27:90:6f:67:fe:ea:fb:9f:1e:b0:98: 51:15:ac:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGs22g1zcA47BpDkuomMzqdussgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2 MDA4RjlCRTAeFw0yNTEyMDUxNTU1MDFaFw0yNTEyMDkwMjI4MDFaMDMxMTAvBgNV BAMTKEVERkQ4OTY1QkJERjY5MEUyRjQ0RUJCMTY5NTlBNUQ2NTM5QTg4MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8f/55wJNeMys4RIs1golGC+n4 jv/FyuvbTZqdOAu3VIkPubrzxGnZlisiDBctfPAEZE72SFJUyWWPHMtn+V0apozB PDcizQuXRcdULDJ7aNCKTyqqfyAc5SOxdQnh1Nx+m2Xp7xap6t2plHt9haivdIfC Uh4hBTsoMLUs7w1fLxlLfIsYLjvEYFE/zktOlwVW1UpwDlYNkm0m9A6kn6h17Qx9 jIs9JQuQwTqbA1mlYz+hr3zkBfP66WPAQDa0v7kgzK/kdpFjFc/PFpy+gCZ02amU E6abrH16QvIaudhgyQN+0EuvEzByoL65QqAbUw6eno1WLU09DcdyK9tfhGF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7f2JZbvfaQ4vROuxaVml1lOaiAwwHwYDVR0j BBgwFoAUWB5kTuxE+VI88YmJPhArzGAI+b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMC81ODFFNjQ0RUVD NDRGOTUyM0NGMTg5ODkzRTEwMkJDQzYwMDhGOUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJCQ0M2MDA4 RjlCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3OTQ3YWEtY2U2OS00MDEzLWEy NTYtNTg3OTlhNTY1ODFjLzAvNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4OTg5M0UxMDJC Q0M2MDA4RjlCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiboTeoq3dgMcTfzqQnziiDraOtnol3CuhP 8JV6ILgbd7SqcLsMRzPo9sPwJDW9l7MBQtvAD8z+2yWZmKhUDh2ucIqD4Rp40Wy1 4/t8bMmHDd9mOBDPZQiQBvIUsB0faRWsia5Hg5t/5TMIjzauW3rEF7FFmp4zqULD 9UA/0Vf89ppMOCuPW/YarjSzABOT9xIwixDAhRMaQK6F4/MQkkOsKaVu4eVnh/mH ara8NU0ZHi+AMc4ZGYZBevaAbrNiwHlzgxUDSLM2tGxZ6QPOm2xwVlcOkTkSMXCt C9PZKmggafJ2V/9ZfdQ7/TchOdXVCLwnkG9n/ur7nx6wmFEVrCY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:08:58 2025 by rpki-client