This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json) Hash identifier: mY5PBQ9c3gbZznJoiCYxbrbqx7XCO4uO9yKmHslyBOU= Subject key identifier: 3D:51:C9:89:B7:AD:C7:CC:BA:CB:C2:6B:F3:AE:6D:F1:E5:7C:28:9A Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Certificate serial: 4AAE83A5FD67ECD6BA0CAF0F110BEF72250A8788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft Manifest number: 01BB Signing time: Sat 06 Dec 2025 06:11:52 +0000 Manifest this update: Sat 06 Dec 2025 06:06:52 +0000 Manifest next update: Tue 09 Dec 2025 08:35:52 +0000 Files and hashes: 1: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: szZrGfxfjDvhYMSxWdXsF8gNn9uKqD0sZuSt9/Sp4zs=) 2: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: SlnzGjpM6f9gMbUnYhI9rorKKJMQXMn2DxfABq7iEzA=) 3: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: F98mLIPqX7xW346RCv6louyBJXE+C84977MPR7enwBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ae:83:a5:fd:67:ec:d6:ba:0c:af:0f:11:0b:ef:72:25:0a:87:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Validity Not Before: Dec 6 06:06:52 2025 GMT Not After : Dec 9 08:35:52 2025 GMT Subject: CN=3D51C989B7ADC7CCBACBC26BF3AE6DF1E57C289A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:64:3c:62:c0:43:25:63:cc:fc:7c:5c:24: 24:db:7f:e6:e3:2a:62:10:ce:a2:ae:8a:92:35:2f: d8:a8:c2:23:b4:e8:e1:bd:a6:ba:68:c3:30:53:a0: 8e:4e:31:b2:83:05:d4:82:66:a2:62:30:03:0c:d9: c7:26:be:bb:5f:18:4a:e7:41:ee:df:f9:9c:8d:2c: 74:cb:f1:fe:35:91:7b:81:fc:6c:f3:80:65:29:af: a9:4f:aa:36:78:25:4e:4f:85:ba:d7:a1:ad:ca:3b: 32:44:77:31:10:a1:db:41:06:20:09:3a:b7:9f:25: ab:0a:44:24:14:62:76:c0:49:69:97:2c:de:65:2c: 59:05:e7:5a:ef:ba:da:d2:b8:63:f9:ea:31:ca:70: ec:3a:26:4c:27:ef:cd:ee:ab:a8:9a:10:39:13:1d: 55:d4:b8:e7:3a:ea:88:71:fb:77:32:1b:67:ef:63: df:09:c3:90:3f:cf:c4:74:a1:b4:47:5f:fb:32:be: 41:9e:90:b4:86:da:a6:b2:15:f8:3a:a0:90:70:95: 58:c1:ab:96:c9:84:18:16:ab:75:c5:b6:d0:af:f2: 3b:7a:ec:9b:cb:8f:5f:23:03:a0:54:49:26:f1:09: a6:46:45:2a:9e:52:b0:e4:75:f1:78:34:a0:ef:c4: bc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:C9:89:B7:AD:C7:CC:BA:CB:C2:6B:F3:AE:6D:F1:E5:7C:28:9A X509v3 Authority Key Identifier: keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5f:8c:d8:49:a3:df:20:0c:89:97:fc:7d:c9:2e:0f:e0:c9: ed:53:69:06:a2:1f:38:8e:da:cd:df:15:ff:e5:c8:55:21:5b: a7:e9:a0:d9:e0:49:28:6c:e5:52:aa:06:0e:47:22:74:0c:c1: e8:14:90:fa:77:77:22:6c:b5:05:33:6e:47:19:61:e4:ff:48: bb:8e:35:a6:d3:16:39:35:12:9b:19:aa:ab:be:54:34:a7:9c: f4:02:02:1a:80:a2:0a:55:62:62:71:78:fa:58:fa:6f:76:ce: 25:dc:d1:89:e7:b7:00:44:23:50:f2:d3:12:7d:c8:64:62:b8: 5e:aa:f2:aa:f3:dd:1d:c8:a8:f6:a2:d0:ca:b7:a5:c0:8d:0d: e7:99:c1:48:5c:04:91:4b:0d:f0:47:ac:e5:14:4b:56:32:81: 58:95:ac:7b:cf:67:d9:b8:a8:dc:28:a7:a6:1b:c2:d5:60:2e: 45:e0:1e:37:cb:9b:17:d6:47:07:4b:ee:de:60:79:02:b8:c2: aa:bd:00:07:dc:06:63:81:66:e6:99:46:77:b1:4d:94:b4:2d: 92:99:98:d2:f4:84:0d:5b:f5:f1:17:fe:42:ce:2f:19:4b:b7: 82:18:b4:8a:2f:2c:9d:b8:d1:78:c8:10:f0:da:96:80:37:a3: 75:c4:95:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSq6Dpf1n7Na6DK8PEQvvciUKh4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF QjcxQTNCMTAeFw0yNTEyMDYwNjA2NTJaFw0yNTEyMDkwODM1NTJaMDMxMTAvBgNV BAMTKDNENTFDOTg5QjdBREM3Q0NCQUNCQzI2QkYzQUU2REYxRTU3QzI4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lmQ8YsBDJWPM/HxcJCTbf+bj KmIQzqKuipI1L9iowiO06OG9prpowzBToI5OMbKDBdSCZqJiMAMM2ccmvrtfGErn Qe7f+ZyNLHTL8f41kXuB/GzzgGUpr6lPqjZ4JU5PhbrXoa3KOzJEdzEQodtBBiAJ OrefJasKRCQUYnbASWmXLN5lLFkF51rvutrSuGP56jHKcOw6Jkwn783uq6iaEDkT HVXUuOc66ohx+3cyG2fvY98Jw5A/z8R0obRHX/syvkGekLSG2qayFfg6oJBwlVjB q5bJhBgWq3XFttCv8jt67JvLj18jA6BUSSbxCaZGRSqeUrDkdfF4NKDvxLyBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPVHJibetx8y6y8Jr865t8eV8KJowHwYDVR0j BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0 MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJfjNhJo98gDImX/H3JLg/gye1TaQaiHziO 2s3fFf/lyFUhW6fpoNngSShs5VKqBg5HInQMwegUkPp3dyJstQUzbkcZYeT/SLuO NabTFjk1EpsZqqu+VDSnnPQCAhqAogpVYmJxePpY+m92ziXc0YnntwBEI1Dy0xJ9 yGRiuF6q8qrz3R3IqPai0Mq3pcCNDeeZwUhcBJFLDfBHrOUUS1YygViVrHvPZ9m4 qNwop6YbwtVgLkXgHjfLmxfWRwdL7t5geQK4wqq9AAfcBmOBZuaZRnexTZS0LZKZ mNL0hA1b9fEX/kLOLxlLt4IYtIovLJ240XjIEPDaloA3o3XElaI= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:48 2025 by rpki-client