This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json) Hash identifier: ZTPwLVV+BFdkAAYpo5seF78To3K7bBXXPAPx7UbK794= Subject key identifier: E1:E0:90:B9:49:C7:A8:B5:0F:F3:7B:94:57:F0:1E:15:AA:3D:85:85 Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419 Certificate serial: 65554B60AE8CCB66B47EEB7C0513DDB6374152A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft Manifest number: 0512 Signing time: Sat 24 Jan 2026 08:22:09 +0000 Manifest this update: Sat 24 Jan 2026 08:17:09 +0000 Manifest next update: Tue 27 Jan 2026 12:02:09 +0000 Files and hashes: 1: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=) 2: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: dWeP34gvQgJ5TzBGFe+KfR/CmZxLnGCqOORfNWENnb4=) 3: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 12:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:55:4b:60:ae:8c:cb:66:b4:7e:eb:7c:05:13:dd:b6:37:41:52:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419 Validity Not Before: Jan 24 08:17:09 2026 GMT Not After : Jan 27 12:02:09 2026 GMT Subject: CN=E1E090B949C7A8B50FF37B9457F01E15AA3D8585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:f7:10:dd:bc:ba:63:95:13:13:60:4f:c8: 22:ec:3b:2e:d3:c3:f9:ed:2c:f1:92:8b:2e:c4:3b: 80:8b:71:8b:13:44:fe:6b:73:4c:ba:d3:b6:92:77: cd:8d:33:70:24:b8:90:1b:09:7b:62:82:16:06:6a: b3:e2:f7:c8:7d:7c:db:74:50:2a:9e:3b:ff:8c:b3: 2b:93:24:9c:6c:33:3f:b0:95:f7:1c:3d:82:3d:5f: 57:1e:17:7c:90:b7:07:c4:2e:38:be:83:f7:07:be: 21:9f:65:e6:27:fd:0a:38:3d:ab:a5:16:fc:cb:0d: c7:83:d3:8d:9f:82:f9:12:ff:0f:58:18:bf:e0:30: 78:64:c8:fb:f4:df:f7:1c:c0:0f:5a:2c:51:53:f7: eb:93:b4:89:ec:c9:dc:66:d2:5a:34:6f:eb:10:1a: 33:bf:87:b9:48:54:8d:75:e9:f8:c3:98:7f:17:e8: 54:4f:19:d7:57:b9:d3:22:07:54:47:2a:cd:6a:a7: 5f:9a:7c:71:69:b8:5d:14:3b:d5:14:d3:40:82:d6: d4:fc:3b:d1:d8:48:4b:27:36:80:f6:62:b1:51:03: 89:2d:34:cd:89:01:0b:7b:64:60:e1:64:b9:01:68: bb:9b:7c:b2:06:df:5c:42:a7:99:44:de:f8:d9:93: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E0:90:B9:49:C7:A8:B5:0F:F3:7B:94:57:F0:1E:15:AA:3D:85:85 X509v3 Authority Key Identifier: keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:db:ac:93:1f:64:f9:71:ff:fb:55:b4:e1:08:1e:8a:43:d6: c1:11:77:ba:b3:8c:d7:91:16:5a:f1:90:99:e3:30:50:f8:5d: 94:3a:97:c0:e3:ca:0d:19:66:0b:87:6f:19:32:70:8e:76:1d: 4f:b6:27:34:3a:3e:b3:73:dc:7e:d3:ca:67:aa:fd:02:c0:62: 01:58:ca:1f:88:75:db:4b:2b:18:eb:c7:26:84:e3:49:1b:8b: 07:aa:23:09:89:c3:ab:64:6f:a0:ab:b2:73:3a:0a:82:3e:34: e2:15:64:3c:26:6b:46:b3:85:a9:7c:67:8b:86:6e:9c:06:43: 33:40:ba:7c:cc:a0:9d:9e:92:58:41:c3:49:96:c2:d0:75:64: 8f:b0:00:21:d2:a9:b6:9f:b0:26:20:0d:16:d0:17:d4:47:02: 8a:0c:76:e8:97:d5:a9:2b:a7:25:a8:78:99:07:aa:fe:57:a5: 3a:3c:62:70:e3:f3:ff:7b:d2:7c:6c:4a:e0:fb:17:e0:31:6d: 79:10:87:08:cf:de:08:7e:85:4d:df:4c:b1:46:42:c5:d9:6f: a7:41:39:56:4f:f6:8c:7c:6b:0e:de:56:57:a7:39:80:cf:be: 5b:08:f1:3f:7c:87:85:b9:58:93:ee:92:99:ab:61:1b:b7:a0: 5b:fd:f8:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZVVLYK6My2a0fut8BRPdtjdBUqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy QjM4MTQxOTAeFw0yNjAxMjQwODE3MDlaFw0yNjAxMjcxMjAyMDlaMDMxMTAvBgNV BAMTKEUxRTA5MEI5NDlDN0E4QjUwRkYzN0I5NDU3RjAxRTE1QUEzRDg1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn2PcQ3by6Y5UTE2BPyCLsOy7T w/ntLPGSiy7EO4CLcYsTRP5rc0y607aSd82NM3AkuJAbCXtighYGarPi98h9fNt0 UCqeO/+MsyuTJJxsMz+wlfccPYI9X1ceF3yQtwfELji+g/cHviGfZeYn/Qo4Paul FvzLDceD042fgvkS/w9YGL/gMHhkyPv03/ccwA9aLFFT9+uTtInsydxm0lo0b+sQ GjO/h7lIVI116fjDmH8X6FRPGddXudMiB1RHKs1qp1+afHFpuF0UO9UU00CC1tT8 O9HYSEsnNoD2YrFRA4ktNM2JAQt7ZGDhZLkBaLubfLIG31xCp5lE3vjZk/wDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4eCQuUnHqLUP83uUV/AeFao9hYUwHwYDVR0j BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4 MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3 ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/brJMfZPlx//tVtOEIHopD1sERd7qzjNeR FlrxkJnjMFD4XZQ6l8Djyg0ZZguHbxkycI52HU+2JzQ6PrNz3H7Tymeq/QLAYgFY yh+IddtLKxjrxyaE40kbiweqIwmJw6tkb6CrsnM6CoI+NOIVZDwma0azhal8Z4uG bpwGQzNAunzMoJ2eklhBw0mWwtB1ZI+wACHSqbafsCYgDRbQF9RHAooMduiX1akr pyWoeJkHqv5XpTo8YnDj8/970nxsSuD7F+AxbXkQhwjP3gh+hU3fTLFGQsXZb6dB OVZP9ox8aw7eVlenOYDPvlsI8T98h4W5WJPukpmrYRu3oFv9+N4= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:21 2026 by rpki-client