This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft File: C58E232004125E8B46AB63B600900D92EB71A3B1.mft (raw, json) Hash identifier: sy8+CyBbyk3D+Yw9gbuu91DT92dSlDIteAF8K1lGCZY= Subject key identifier: 48:77:9A:6A:F0:D6:3B:E2:92:97:A6:3E:F3:34:D2:86:DD:56:6C:28 Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 Certificate issuer: /CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Certificate serial: 4CFF228ED76F8D3C5E4939D17B0158CB97AF16CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft Manifest number: 01D2 Signing time: Sun 25 Jan 2026 03:41:54 +0000 Manifest this update: Sun 25 Jan 2026 03:36:54 +0000 Manifest next update: Wed 28 Jan 2026 13:28:54 +0000 Files and hashes: 1: 3130332e3131362e38332e302f32342d3234203d3e20313530393539.roa (hash: uU8O3CwjMgf4TqwrU9ZGAuoUWz86Zcgor68D+YzMzqo=) 2: C58E232004125E8B46AB63B600900D92EB71A3B1.crl (hash: FjSd/UCIaoLN4zCL5ZLRf2t3MKI/Q6al8TPl2riieW4=) 3: 3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (hash: gagkqZ1Th9ULC3nGrIkxBLFj551bmKfZ+zY4Ia+9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 13:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ff:22:8e:d7:6f:8d:3c:5e:49:39:d1:7b:01:58:cb:97:af:16:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1 Validity Not Before: Jan 25 03:36:54 2026 GMT Not After : Jan 28 13:28:54 2026 GMT Subject: CN=48779A6AF0D63BE29297A63EF334D286DD566C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:09:d0:6a:67:27:e1:30:b7:bf:8e:bf:5e: d3:17:0e:19:21:1e:6f:d3:76:f1:0a:5d:2e:41:58: 80:c5:2f:c7:54:b7:e7:dc:ac:a3:42:c1:b8:be:32: 82:dd:d0:58:39:b1:fb:82:c3:93:d8:f5:67:ce:ba: 16:06:f3:23:8d:9a:d1:10:1e:6c:fd:1e:8f:68:02: 8d:31:57:29:80:47:eb:a3:0a:8d:c2:8c:81:fc:73: f7:4c:2c:ca:07:06:9e:bc:69:d2:a9:04:38:c6:3c: 46:69:34:75:13:99:f6:d0:d8:12:26:a3:a2:c0:bb: 98:0f:0f:66:3f:6e:80:8b:5b:20:ec:c7:8d:56:41: e6:ca:1b:f3:89:1b:f1:8d:b0:74:9c:ca:9a:63:98: 56:2a:76:03:9e:e8:20:08:cc:74:30:b8:69:14:83: f4:64:a9:5c:db:f7:a1:66:ad:f4:b5:b5:09:67:67: c4:63:98:94:78:a9:ca:a4:53:09:66:d2:19:1d:bf: a7:ea:9c:45:c4:57:22:85:50:7b:6e:96:42:1d:01: 96:b6:38:3f:ea:e2:1e:2f:74:44:30:cc:a4:b9:fc: fd:b7:e0:2f:03:0f:39:89:0c:6d:74:20:3a:fc:5d: ac:96:b9:3f:10:ea:81:3e:2b:b0:92:53:b0:78:ca: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:77:9A:6A:F0:D6:3B:E2:92:97:A6:3E:F3:34:D2:86:DD:56:6C:28 X509v3 Authority Key Identifier: keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bd:94:5e:54:16:5b:86:19:9e:42:36:21:94:53:8a:98:9f: 74:fa:08:20:6d:31:06:02:dc:75:9d:b2:63:6a:fe:16:a1:25: 5d:ec:89:ce:94:04:04:35:71:11:95:d1:e5:20:e2:23:a6:20: 20:87:61:67:c1:ab:2b:fb:7b:6f:05:b7:08:b4:7c:df:c3:8f: bf:39:a8:73:42:e4:98:31:59:cf:13:d3:a7:2c:91:8d:5c:03: 92:1d:d9:04:9c:8b:e6:b4:5c:1c:b8:ef:b4:10:bd:25:eb:4d: a0:8a:34:04:44:cb:58:e8:f5:e5:8c:ab:8b:38:13:82:20:a0: 4a:bf:aa:70:65:97:d0:e8:c0:3f:c7:2f:8d:e2:ad:09:78:16: f7:e6:dc:4a:83:88:57:62:ab:d4:7a:de:9b:7a:39:de:15:68: 81:db:13:f6:87:37:19:18:4f:22:a2:2a:6d:73:b7:2c:1b:83: 61:9d:49:f0:4a:5f:84:41:79:ce:49:41:f0:94:81:96:f1:c6: 62:7c:59:84:4b:5f:a8:f3:e3:85:94:97:a6:62:a0:09:15:c7: fa:9e:47:19:b6:fd:82:1a:1d:40:76:74:8f:15:a7:d4:22:09: b0:38:c7:d8:d3:71:ca:05:6d:4c:c5:92:5d:66:14:f4:cc:fc: b5:46:9a:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP8ijtdvjTxeSTnRewFYy5evFs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJF QjcxQTNCMTAeFw0yNjAxMjUwMzM2NTRaFw0yNjAxMjgxMzI4NTRaMDMxMTAvBgNV BAMTKDQ4Nzc5QTZBRjBENjNCRTI5Mjk3QTYzRUYzMzREMjg2REQ1NjZDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tAnQamcn4TC3v46/XtMXDhkh Hm/TdvEKXS5BWIDFL8dUt+fcrKNCwbi+MoLd0Fg5sfuCw5PY9WfOuhYG8yONmtEQ Hmz9Ho9oAo0xVymAR+ujCo3CjIH8c/dMLMoHBp68adKpBDjGPEZpNHUTmfbQ2BIm o6LAu5gPD2Y/boCLWyDsx41WQebKG/OJG/GNsHScyppjmFYqdgOe6CAIzHQwuGkU g/RkqVzb96FmrfS1tQlnZ8RjmJR4qcqkUwlm0hkdv6fqnEXEVyKFUHtulkIdAZa2 OD/q4h4vdEQwzKS5/P234C8DDzmJDG10IDr8XayWuT8Q6oE+K7CSU7B4yn9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSHeaavDWO+KSl6Y+8zTSht1WbCgwHwYDVR0j BBgwFoAUxY4jIAQSXotGq2O2AJANkutxo7EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMjQzYS03NjNkLTQ0YjgtOTg3ZC0wOGJkMGRhOWVlM2QvMC9DNThFMjMyMDA0 MTI1RThCNDZBQjYzQjYwMDkwMEQ5MkVCNzFBM0IxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBEOTJFQjcx QTNCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjI0M2EtNzYzZC00NGI4LTk4 N2QtMDhiZDBkYTllZTNkLzAvQzU4RTIzMjAwNDEyNUU4QjQ2QUI2M0I2MDA5MDBE OTJFQjcxQTNCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+9lF5UFluGGZ5CNiGUU4qYn3T6CCBtMQYC 3HWdsmNq/hahJV3sic6UBAQ1cRGV0eUg4iOmICCHYWfBqyv7e28Ftwi0fN/Dj785 qHNC5JgxWc8T06cskY1cA5Id2QSci+a0XBy477QQvSXrTaCKNAREy1jo9eWMq4s4 E4IgoEq/qnBll9DowD/HL43irQl4Fvfm3EqDiFdiq9R63pt6Od4VaIHbE/aHNxkY TyKiKm1ztywbg2GdSfBKX4RBec5JQfCUgZbxxmJ8WYRLX6jz44WUl6ZioAkVx/qe Rxm2/YIaHUB2dI8Vp9QiCbA4x9jTccoFbUzFkl1mFPTM/LVGmrc= -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:54 2026 by rpki-client