This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
File: 58BB439F406646053DA2029A1FDBBE942B381419.mft (raw, json)
Hash identifier: 3X+JAAY4GMw5m3sQzS6ReFF1e/Lh3dIpz95luBE/KCk=
Subject key identifier: E9:3A:AB:0E:F2:97:C2:A4:A5:17:A0:3A:EB:FA:9B:C0:43:0D:B1:8F
Authority key identifier: 58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
Certificate issuer: /CN=58BB439F406646053DA2029A1FDBBE942B381419
Certificate serial: 540244E6C33E071D61374F0D6F3241FEC715B688
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
Manifest number: 04FC
Signing time: Sat 06 Dec 2025 02:42:13 +0000
Manifest this update: Sat 06 Dec 2025 02:37:13 +0000
Manifest next update: Tue 09 Dec 2025 03:56:13 +0000
Files and hashes: 1: 58BB439F406646053DA2029A1FDBBE942B381419.crl (hash: Suwvb6EEdjs1qDsuDclMHovOfqPixyTZrJ1x/GbYLow=)
2: 323430363a373663303a3a2f33322d3438203d3e203538383231.roa (hash: bNw8LF5Ec6WuKsnsnBnZzpsFS6CBddKmbeAtnWBKzS8=)
3: 3130332e3135352e3139382e302f32332d3234203d3e203538383231.roa (hash: 8VEdbgNMofrOYRUnoYix632qXa5TAcUqt6koDVDvkVQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 03:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:02:44:e6:c3:3e:07:1d:61:37:4f:0d:6f:32:41:fe:c7:15:b6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58BB439F406646053DA2029A1FDBBE942B381419
Validity
Not Before: Dec 6 02:37:13 2025 GMT
Not After : Dec 9 03:56:13 2025 GMT
Subject: CN=E93AAB0EF297C2A4A517A03AEBFA9BC0430DB18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:41:2e:e0:ba:43:85:33:17:53:de:c5:da:
58:45:bd:5e:35:24:8b:2b:c5:8a:11:4b:60:fb:be:
8e:84:74:da:6c:3c:07:e7:50:ed:42:09:47:a5:c1:
45:f0:56:91:89:e3:56:7a:69:b4:10:9b:d1:37:61:
34:6e:38:57:57:74:bb:b9:92:17:91:15:5e:09:15:
99:90:45:9d:d1:97:ba:65:04:f8:36:85:ea:52:a6:
b8:e3:be:5f:7b:e4:2d:47:24:b6:7f:7f:9d:50:28:
b2:55:43:37:ba:83:1f:82:e3:22:50:f5:98:4d:2e:
65:b8:05:16:f5:2b:7f:9f:7b:91:11:ce:0a:24:4e:
56:76:4c:3b:b5:65:f6:cb:01:65:65:44:c1:07:5a:
93:e7:c1:ee:35:74:17:5b:33:20:1f:08:5d:a1:ff:
02:c2:67:ca:c9:fd:ab:a8:4f:de:f4:30:d6:33:02:
d6:5c:bc:dc:ab:d3:86:d7:3e:ff:6c:75:83:32:97:
5c:60:8e:87:b1:4d:7a:a4:0c:c0:07:14:9c:ae:43:
8b:f2:7f:7a:67:5b:ec:cf:19:ae:76:42:b1:fa:1f:
63:69:ad:0d:cc:1c:1c:2e:c3:ea:03:14:0b:71:db:
c7:d2:df:a1:c7:dc:56:c5:e4:74:c2:50:d3:bd:65:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3A:AB:0E:F2:97:C2:A4:A5:17:A0:3A:EB:FA:9B:C0:43:0D:B1:8F
X509v3 Authority Key Identifier:
keyid:58:BB:43:9F:40:66:46:05:3D:A2:02:9A:1F:DB:BE:94:2B:38:14:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58BB439F406646053DA2029A1FDBBE942B381419.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff2506b1-396d-499e-b7f5-5d9f8e7e0bee/0/58BB439F406646053DA2029A1FDBBE942B381419.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9b:c6:20:8f:2c:5c:6c:a5:97:ed:9c:0b:c3:f4:4e:d4:96:
a5:d8:60:45:b3:51:53:a5:47:e3:ec:60:f1:e8:28:43:79:e0:
e8:a1:ad:c2:bb:0c:2a:ef:7b:fb:4f:76:d0:68:d9:a5:50:f1:
5a:26:d3:d4:88:1c:23:58:70:fa:25:da:ee:54:37:fb:46:be:
a8:b2:ba:65:17:27:0b:bf:3d:2b:b7:d6:66:b2:8d:1d:2d:ef:
86:84:05:64:85:c8:57:a6:cb:87:ea:9a:24:db:c5:6f:49:40:
18:55:88:5c:5b:0c:07:56:bd:40:2a:27:bf:00:cf:63:8b:45:
88:12:f9:a0:fb:1b:4b:27:36:9b:37:ab:86:9a:3e:18:ac:f5:
ed:8a:38:ff:21:ea:9e:33:37:bd:53:af:50:43:dd:7b:1e:03:
67:aa:87:0d:59:4b:89:45:12:1d:ae:4a:e5:e4:bc:29:11:90:
56:28:3a:d2:e7:ae:0e:41:13:ab:44:ac:83:95:3a:98:1c:bf:
ca:00:8f:a7:a7:ad:31:35:ac:b7:e7:ff:1e:f6:20:7e:cd:2a:
d5:fd:f6:4b:27:d2:b9:a2:b5:80:fc:3e:da:b6:7c:cc:27:74:
71:1c:b4:6a:bf:ab:18:2c:4e:a6:39:10:bb:b5:8d:4d:8b:f1:
29:fc:db:6f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVAJE5sM+Bx1hN08NbzJB/scVtogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQy
QjM4MTQxOTAeFw0yNTEyMDYwMjM3MTNaFw0yNTEyMDkwMzU2MTNaMDMxMTAvBgNV
BAMTKEU5M0FBQjBFRjI5N0MyQTRBNTE3QTAzQUVCRkE5QkMwNDMwREIxOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQEEu4LpDhTMXU97F2lhFvV41
JIsrxYoRS2D7vo6EdNpsPAfnUO1CCUelwUXwVpGJ41Z6abQQm9E3YTRuOFdXdLu5
kheRFV4JFZmQRZ3Rl7plBPg2hepSprjjvl975C1HJLZ/f51QKLJVQze6gx+C4yJQ
9ZhNLmW4BRb1K3+fe5ERzgokTlZ2TDu1ZfbLAWVlRMEHWpPnwe41dBdbMyAfCF2h
/wLCZ8rJ/auoT970MNYzAtZcvNyr04bXPv9sdYMyl1xgjoexTXqkDMAHFJyuQ4vy
f3pnW+zPGa52QrH6H2NprQ3MHBwuw+oDFAtx28fS36HH3FbF5HTCUNO9ZW2tAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU6TqrDvKXwqSlF6A66/qbwEMNsY8wHwYDVR0j
BBgwFoAUWLtDn0BmRgU9ogKaH9u+lCs4FBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZjI1MDZiMS0zOTZkLTQ5OWUtYjdmNS01ZDlmOGU3ZTBiZWUvMC81OEJCNDM5RjQw
NjY0NjA1M0RBMjAyOUExRkRCQkU5NDJCMzgxNDE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJFOTQyQjM4
MTQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmYyNTA2YjEtMzk2ZC00OTllLWI3
ZjUtNWQ5ZjhlN2UwYmVlLzAvNThCQjQzOUY0MDY2NDYwNTNEQTIwMjlBMUZEQkJF
OTQyQjM4MTQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFabxiCPLFxspZftnAvD9E7UlqXYYEWzUVOl
R+PsYPHoKEN54OihrcK7DCrve/tPdtBo2aVQ8Vom09SIHCNYcPol2u5UN/tGvqiy
umUXJwu/PSu31mayjR0t74aEBWSFyFemy4fqmiTbxW9JQBhViFxbDAdWvUAqJ78A
z2OLRYgS+aD7G0snNps3q4aaPhis9e2KOP8h6p4zN71Tr1BD3XseA2eqhw1ZS4lF
Eh2uSuXkvCkRkFYoOtLnrg5BE6tErIOVOpgcv8oAj6enrTE1rLfn/x72IH7NKtX9
9ksn0rmitYD8Ptq2fMwndHEctGq/qxgsTqY5ELu1jU2L8Sn8228=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:16:54 2025 by rpki-client