This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft File: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft (raw, json) Hash identifier: N9+McKBur5CeG8e5U0ZL3q6AcC1AoSm5/onOx7shtCM= Subject key identifier: C5:B5:6F:72:95:9A:BB:84:9E:B5:D2:D0:57:9D:E0:0F:E7:8C:E0:1F Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 Certificate issuer: /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Certificate serial: 4CAA27F38E2EA38F8D616E4A00C49C5208CA171C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft Manifest number: 0271 Signing time: Sat 24 Jan 2026 21:50:04 +0000 Manifest this update: Sat 24 Jan 2026 21:45:04 +0000 Manifest next update: Wed 28 Jan 2026 06:19:04 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 9C6JxChFeHLhz/hiGucLeF7/o+dBMXRfwa1cbKwCRWc=) 2: B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl (hash: Hbup+EwsgdVqJLlZEQIV8fIAEiX06PIVGjc070wQLTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Jan 2026 06:19:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:aa:27:f3:8e:2e:a3:8f:8d:61:6e:4a:00:c4:9c:52:08:ca:17:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2 Validity Not Before: Jan 24 21:45:04 2026 GMT Not After : Jan 28 06:19:04 2026 GMT Subject: CN=C5B56F72959ABB849EB5D2D0579DE00FE78CE01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:75:58:f8:7f:55:1e:63:3b:0d:6b:86:5b: f1:58:42:96:32:98:65:c8:da:88:e9:19:0e:e3:7a: a7:10:87:29:8e:cd:6d:de:b5:ff:de:8f:66:16:3f: e5:a3:ec:de:1b:8a:b6:52:a7:78:0b:44:b8:32:35: 52:34:dc:98:76:f4:80:47:f1:61:55:5f:a8:ac:1a: 62:78:f6:df:1c:f5:0a:91:8c:08:37:20:fe:0a:17: 49:74:e3:00:35:9b:d6:fc:21:d0:d2:d0:91:56:5d: 48:7c:55:1c:0a:73:c2:59:d1:62:49:a3:97:03:f0: c5:88:c2:e8:b2:90:d8:76:32:d3:fc:83:7f:30:f6: 09:72:ec:68:b5:0a:c7:f0:ee:8e:8a:ed:f4:99:c7: 6f:de:7c:49:ce:2d:de:11:02:be:31:c9:45:70:27: 98:33:db:7d:ac:60:6a:45:f3:8d:ff:37:88:d3:20: df:82:f3:66:23:2f:d1:b0:48:95:e7:17:bd:84:78: 61:8f:33:87:a9:61:95:dd:d0:97:74:01:17:e6:84: cb:da:9f:cb:22:98:54:37:de:7f:8d:79:9a:c7:df: 12:ca:d1:ed:56:29:45:73:bb:47:63:4d:da:3a:34: 07:c3:d7:a9:ec:f0:b0:5a:74:ad:6c:02:13:b9:10: 27:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B5:6F:72:95:9A:BB:84:9E:B5:D2:D0:57:9D:E0:0F:E7:8C:E0:1F X509v3 Authority Key Identifier: keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:b6:34:e3:d8:c9:42:02:18:4e:38:e9:e7:a2:d6:7e:af: 2f:ae:36:e7:28:01:18:14:91:fc:11:d5:45:9f:cb:b4:60:b2: ce:db:a4:80:0a:22:aa:b9:2a:45:cd:b6:33:cd:ce:ce:9f:99: 26:cd:06:3f:03:7e:b2:02:f4:06:8d:d9:bd:3b:76:59:30:25: bd:56:82:fe:93:74:c9:49:0a:8a:3a:28:d6:58:80:10:cd:ef: 57:7d:ec:de:e4:c6:bb:27:bd:fb:67:01:9f:74:82:f2:fc:a2: 8b:5f:02:92:7d:b9:5f:6a:23:97:08:fa:6c:74:6a:dd:9e:c9: 00:27:01:20:29:df:1e:91:7a:92:6c:42:31:13:3b:7c:e2:2f: 03:52:f0:98:4c:30:40:b0:61:22:b7:e8:bb:f9:56:47:9e:49: ed:9f:41:db:cc:8b:26:10:26:e1:f7:86:25:df:42:9c:d2:cc: 7c:85:ca:a4:ae:d6:95:fd:74:f6:4c:39:0f:19:23:74:3e:05: 8b:50:37:63:43:b1:06:fa:9d:61:fe:7e:cf:b6:75:16:b7:7b: 7b:ec:da:7b:61:e8:da:90:3d:53:1c:cb:5b:32:cc:51:5f:6f: c5:75:cd:b6:7a:c9:03:13:7c:b7:2c:38:c3:7c:8d:77:c1:1c: 84:33:e3:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKon844uo4+NYW5KAMScUgjKFxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw MkIyQUNBMjAeFw0yNjAxMjQyMTQ1MDRaFw0yNjAxMjgwNjE5MDRaMDMxMTAvBgNV BAMTKEM1QjU2RjcyOTU5QUJCODQ5RUI1RDJEMDU3OURFMDBGRTc4Q0UwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC50XVY+H9VHmM7DWuGW/FYQpYy mGXI2ojpGQ7jeqcQhymOzW3etf/ej2YWP+Wj7N4birZSp3gLRLgyNVI03Jh29IBH 8WFVX6isGmJ49t8c9QqRjAg3IP4KF0l04wA1m9b8IdDS0JFWXUh8VRwKc8JZ0WJJ o5cD8MWIwuiykNh2MtP8g38w9gly7Gi1Csfw7o6K7fSZx2/efEnOLd4RAr4xyUVw J5gz232sYGpF843/N4jTIN+C82YjL9GwSJXnF72EeGGPM4epYZXd0Jd0ARfmhMva n8simFQ33n+NeZrH3xLK0e1WKUVzu0djTdo6NAfD16ns8LBadK1sAhO5ECe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxbVvcpWau4SetdLQV53gD+eM4B8wHwYDVR0j BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4 M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy QUNBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFB RkEwMkIyQUNBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXztjTj2MlCAhhOOOnnotZ+ry+uNucoARgU kfwR1UWfy7Rgss7bpIAKIqq5KkXNtjPNzs6fmSbNBj8DfrIC9AaN2b07dlkwJb1W gv6TdMlJCoo6KNZYgBDN71d97N7kxrsnvftnAZ90gvL8ootfApJ9uV9qI5cI+mx0 at2eyQAnASAp3x6RepJsQjETO3ziLwNS8JhMMECwYSK36Lv5VkeeSe2fQdvMiyYQ JuH3hiXfQpzSzHyFyqSu1pX9dPZMOQ8ZI3Q+BYtQN2NDsQb6nWH+fs+2dRa3e3vs 2nth6NqQPVMcy1syzFFfb8V1zbZ6yQMTfLcsOMN8jXfBHIQz4w8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:36:02 2026 by rpki-client