This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
File:                     58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json)
Hash identifier:          3X+JAAY4GMw5m3sQzS6ReFF1e/Lh3dIpz95luBE/KCk=
Subject key identifier:   E9:3A:AB:0E:F2:97:C2:A4:A5:17:A0:3A:EB:FA:9B:C0:43:0D:B1:8F
Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
Certificate issuer:       /CN=58BB439F406646053DA2029A1FDBBE942B381419
Certificate serial:       540244E6C33E071D61374F0D6F3241FEC715B688
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
Manifest number:          04FC
Signing time:             Sat 06 Dec 2025 02:42:13 +0000
Manifest this update:     Sat 06 Dec 2025 02:37:13 +0000
Manifest next update:     Tue 09 Dec 2025 03:56:13 +0000
Files and hashes:         1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: Suwvb6EEdjs1qDsuDclMHovOfqPixyTZrJ1x/GbYLow=)
                          2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=)
                          3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
                          rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Dec 2025 03:56:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:02:44:e6:c3:3e:07:1d:61:37:4f:0d:6f:32:41:fe:c7:15:b6:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419
        Validity
            Not Before: Dec  6 02:37:13 2025 GMT
            Not After : Dec  9 03:56:13 2025 GMT
        Subject: CN=E93AAB0EF297C2A4A517A03AEBFA9BC0430DB18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:41:2e:e0:ba:43:85:33:17:53:de:c5:da:
                    58:45:bd:5e:35:24:8b:2b:c5:8a:11:4b:60:fb:be:
                    8e:84:74:da:6c:3c:07:e7:50:ed:42:09:47:a5:c1:
                    45:f0:56:91:89:e3:56:7a:69:b4:10:9b:d1:37:61:
                    34:6e:38:57:57:74:bb:b9:92:17:91:15:5e:09:15:
                    99:90:45:9d:d1:97:ba:65:04:f8:36:85:ea:52:a6:
                    b8:e3:be:5f:7b:e4:2d:47:24:b6:7f:7f:9d:50:28:
                    b2:55:43:37:ba:83:1f:82:e3:22:50:f5:98:4d:2e:
                    65:b8:05:16:f5:2b:7f:9f:7b:91:11:ce:0a:24:4e:
                    56:76:4c:3b:b5:65:f6:cb:01:65:65:44:c1:07:5a:
                    93:e7:c1:ee:35:74:17:5b:33:20:1f:08:5d:a1:ff:
                    02:c2:67:ca:c9:fd:ab:a8:4f:de:f4:30:d6:33:02:
                    d6:5c:bc:dc:ab:d3:86:d7:3e:ff:6c:75:83:32:97:
                    5c:60:8e:87:b1:4d:7a:a4:0c:c0:07:14:9c:ae:43:
                    8b:f2:7f:7a:67:5b:ec:cf:19:ae:76:42:b1:fa:1f:
                    63:69:ad:0d:cc:1c:1c:2e:c3:ea:03:14:0b:71:db:
                    c7:d2:df:a1:c7:dc:56:c5:e4:74:c2:50:d3:bd:65:
                    6d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3A:AB:0E:F2:97:C2:A4:A5:17:A0:3A:EB:FA:9B:C0:43:0D:B1:8F
            X509v3 Authority Key Identifier:
                keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:c6:20:8f:2c:5c:6c:a5:97:ed:9c:0b:c3:f4:4e:d4:96:
         a5:d8:60:45:b3:51:53:a5:47:e3:ec:60:f1:e8:28:43:79:e0:
         e8:a1:ad:c2:bb:0c:2a:ef:7b:fb:4f:76:d0:68:d9:a5:50:f1:
         5a:26:d3:d4:88:1c:23:58:70:fa:25:da:ee:54:37:fb:46:be:
         a8:b2:ba:65:17:27:0b:bf:3d:2b:b7:d6:66:b2:8d:1d:2d:ef:
         86:84:05:64:85:c8:57:a6:cb:87:ea:9a:24:db:c5:6f:49:40:
         18:55:88:5c:5b:0c:07:56:bd:40:2a:27:bf:00:cf:63:8b:45:
         88:12:f9:a0:fb:1b:4b:27:36:9b:37:ab:86:9a:3e:18:ac:f5:
         ed:8a:38:ff:21:ea:9e:33:37:bd:53:af:50:43:dd:7b:1e:03:
         67:aa:87:0d:59:4b:89:45:12:1d:ae:4a:e5:e4:bc:29:11:90:
         56:28:3a:d2:e7:ae:0e:41:13:ab:44:ac:83:95:3a:98:1c:bf:
         ca:00:8f:a7:a7:ad:31:35:ac:b7:e7:ff:1e:f6:20:7e:cd:2a:
         d5:fd:f6:4b:27:d2:b9:a2:b5:80:fc:3e:da:b6:7c:cc:27:74:
         71:1c:b4:6a:bf:ab:18:2c:4e:a6:39:10:bb:b5:8d:4d:8b:f1:
         29:fc:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:54 2025 by rpki-client