This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft File: 580F61C23A4857BE23095E060FE36642F86DA6E8.mft (raw, json) Hash identifier: /p4MIBYKHxcTGu9sLUp45fIQ2kyBrZV+LsLA962QUAs= Subject key identifier: 8A:76:31:58:A8:E0:D9:FD:31:8A:32:2A:53:1E:8B:C5:16:34:71:0A Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 Certificate issuer: /CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Certificate serial: E62E240814DC72FF72247D74B20CCBA9330D39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft Manifest number: 02F7 Signing time: Fri 05 Dec 2025 23:00:39 +0000 Manifest this update: Fri 05 Dec 2025 22:55:39 +0000 Manifest next update: Tue 09 Dec 2025 01:03:39 +0000 Files and hashes: 1: 580F61C23A4857BE23095E060FE36642F86DA6E8.crl (hash: J1tuAqR5ghYrs/dAhUEkTiqAUgWdIoI7GVdM3bpv6BQ=) 2: 3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (hash: ZuAJ9UU5ofuu/a/pfpbxOKyZsNH+A+BhN1h6JCEwmPc=) 3: 323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (hash: wDJx14AXcC6zyLSHO8xooP/SWPirYqE9vUnBStY8roQ=) 4: 3130332e3137332e3233302e302f32332d3233203d3e20313437303837.roa (hash: 6zcVUOjrvBXZsgJ0ACZdVFEnzsSrQV/HWX1p3BUV2ko=) 5: 3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (hash: oQhg18Sbo2ti9rlX+keHdmEowwBTrgS3kdu5j5Tcp6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e6:2e:24:08:14:dc:72:ff:72:24:7d:74:b2:0c:cb:a9:33:0d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8 Validity Not Before: Dec 5 22:55:39 2025 GMT Not After : Dec 9 01:03:39 2025 GMT Subject: CN=8A763158A8E0D9FD318A322A531E8BC51634710A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:e6:24:fe:44:58:4b:44:f3:5a:bb:5b:9e: 41:9a:6c:37:10:dd:5b:a2:05:36:80:2c:e5:b4:04: 84:3c:6d:2c:a1:da:a2:b7:17:76:e0:95:5b:81:63: ce:48:8d:30:b2:65:dd:2d:21:e7:17:0e:7e:b5:a3: e8:d4:5e:c7:69:03:8d:da:33:14:e4:f6:e9:4f:1e: e0:fd:86:4a:8f:d0:28:af:ef:e6:a0:28:91:96:c6: 8d:6c:19:2e:62:5a:16:0c:b2:99:d6:b3:54:9b:74: 62:7b:b1:8b:b5:fc:f4:f2:98:06:d6:2e:22:f9:92: 6a:da:ad:28:e3:49:44:e9:ee:fc:dc:3d:ef:ca:ab: 0c:04:c3:d6:22:43:a6:1e:60:fb:50:b0:a3:2d:c7: 26:67:09:89:b2:03:2d:bc:e1:1e:f1:83:46:d5:b1: 88:84:8d:34:6b:23:71:1b:ad:43:4e:53:65:81:1e: 99:8e:3a:9d:9f:c2:4f:bf:10:8b:01:3a:b9:aa:45: b4:62:cc:04:f1:95:71:44:23:95:4e:36:e2:8b:9c: 68:30:87:2b:08:c1:cf:41:12:04:18:c8:70:13:51: 9f:a3:04:d3:12:20:b8:2e:48:b0:f7:41:db:47:55: e7:44:8f:5a:95:52:2e:4f:35:89:17:ed:ae:ac:f1: 63:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:31:58:A8:E0:D9:FD:31:8A:32:2A:53:1E:8B:C5:16:34:71:0A X509v3 Authority Key Identifier: keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7b:44:f1:19:49:11:f3:ac:fa:b4:38:d3:9c:17:c3:7d:b1: f2:d0:2a:25:c0:84:a0:8a:f2:1a:6b:2d:7c:e5:35:17:88:ca: 3f:32:ae:78:f7:d1:58:4f:98:4c:7c:93:04:35:d1:b6:1f:8c: 35:58:8c:3f:69:bc:2e:4d:21:bd:96:35:8a:53:69:6f:49:e6: 12:11:8a:fd:88:83:19:c0:23:8f:c6:5b:08:88:cc:40:f9:5a: a8:31:cf:18:ba:70:2e:65:24:81:ca:19:a6:99:49:61:07:13: d7:0f:d5:39:db:de:aa:0d:89:25:1e:82:a0:a2:2d:47:cb:e2: bb:62:4e:e3:c6:1a:bb:df:72:e1:91:49:b2:d4:d9:72:5e:19: b7:76:6a:e4:db:e4:1a:23:31:e5:04:f2:fb:1d:65:36:c2:a4: 05:ae:e7:14:a0:54:a1:8e:fe:05:7e:2f:4f:9b:f0:c4:0a:f6: 45:f2:6c:0c:a4:af:a5:e1:7c:e1:8b:73:2e:25:0f:50:9a:be: f9:cf:a0:48:54:1b:01:e0:14:98:69:40:72:97:12:1d:26:85: a0:8f:72:c5:3f:5c:8c:d5:d4:d6:50:df:05:56:4f:c5:70:b2: 0b:3b:df:21:fa:af:a2:29:b8:c8:e1:df:a8:6b:77:95:95:cf: 24:96:e7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOYuJAgU3HL/ciR9dLIMy6kzDTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJG ODZEQTZFODAeFw0yNTEyMDUyMjU1MzlaFw0yNTEyMDkwMTAzMzlaMDMxMTAvBgNV BAMTKDhBNzYzMTU4QThFMEQ5RkQzMThBMzIyQTUzMUU4QkM1MTYzNDcxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKOYk/kRYS0TzWrtbnkGabDcQ 3VuiBTaALOW0BIQ8bSyh2qK3F3bglVuBY85IjTCyZd0tIecXDn61o+jUXsdpA43a MxTk9ulPHuD9hkqP0Civ7+agKJGWxo1sGS5iWhYMspnWs1SbdGJ7sYu1/PTymAbW LiL5kmrarSjjSUTp7vzcPe/KqwwEw9YiQ6YeYPtQsKMtxyZnCYmyAy284R7xg0bV sYiEjTRrI3EbrUNOU2WBHpmOOp2fwk+/EIsBOrmqRbRizATxlXFEI5VONuKLnGgw hysIwc9BEgQYyHATUZ+jBNMSILguSLD3QdtHVedEj1qVUi5PNYkX7a6s8WODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinYxWKjg2f0xijIqUx6LxRY0cQowHwYDVR0j BBgwFoAUWA9hwjpIV74jCV4GD+NmQvhtpugwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDBmOWNjNy00YTY5LTRjOWUtYmJhNi00ZDlhYmI1NmVmZjYvMC81ODBGNjFDMjNB NDg1N0JFMjMwOTVFMDYwRkUzNjY0MkY4NkRBNkU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2NDJGODZE QTZFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAwZjljYzctNGE2OS00YzllLWJi YTYtNGQ5YWJiNTZlZmY2LzAvNTgwRjYxQzIzQTQ4NTdCRTIzMDk1RTA2MEZFMzY2 NDJGODZEQTZFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAl7RPEZSRHzrPq0ONOcF8N9sfLQKiXAhKCK 8hprLXzlNReIyj8yrnj30VhPmEx8kwQ10bYfjDVYjD9pvC5NIb2WNYpTaW9J5hIR iv2IgxnAI4/GWwiIzED5Wqgxzxi6cC5lJIHKGaaZSWEHE9cP1Tnb3qoNiSUegqCi LUfL4rtiTuPGGrvfcuGRSbLU2XJeGbd2auTb5BojMeUE8vsdZTbCpAWu5xSgVKGO /gV+L0+b8MQK9kXybAykr6XhfOGLcy4lD1CavvnPoEhUGwHgFJhpQHKXEh0mhaCP csU/XIzV1NZQ3wVWT8Vwsgs73yH6r6IpuMjh36hrd5WVzySW56c= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:47 2025 by rpki-client