This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft File: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft (raw, json) Hash identifier: KedcmnkqKAUpQutNdhbJdgHjeuX9kgex5FGf4mKBloo= Subject key identifier: 4E:C8:D7:52:BF:A9:10:E8:B5:CF:50:31:E5:94:52:C1:CB:78:10:F9 Authority key identifier: AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 Certificate issuer: /CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Certificate serial: 6502692B9C00135F8C57387F28315E491F1F3E92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft Manifest number: 052E Signing time: Thu 18 Dec 2025 20:11:54 +0000 Manifest this update: Thu 18 Dec 2025 20:06:54 +0000 Manifest next update: Mon 22 Dec 2025 06:19:54 +0000 Files and hashes: 1: 3230322e35322e35302e302f32342d3234203d3e203436303536.roa (hash: GtPRtP464WpAY5mEznX+MG2Y26KpfK9+iuhXKPKnbLI=) 2: AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl (hash: WF1tqxvg5X9Y3XHMBUKBHhTe6Bc4E1OsO+Ot397lFRU=) 3: 3130332e3234352e3132322e302f32342d3234203d3e203436303536.roa (hash: sZdVNByPzhJV9m9Y9uWw0VmWp8VvlsFeFU25A1LbDYY=) 4: 3130332e3234352e3132332e302f32342d3234203d3e203436303536.roa (hash: HHh4yWOPjf+3eFvvhURi2TZowgG86xttRK9+B+PgPYQ=) 5: 323030313a6466303a3434613a3a2f34382d3438203d3e203436303536.roa (hash: dUBpU1ehIxbV6F618KP38lS7LkigxBC/nUuk9FmPRks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:02:69:2b:9c:00:13:5f:8c:57:38:7f:28:31:5e:49:1f:1f:3e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06 Validity Not Before: Dec 18 20:06:54 2025 GMT Not After : Dec 22 06:19:54 2025 GMT Subject: CN=4EC8D752BFA910E8B5CF5031E59452C1CB7810F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:f0:96:7a:38:1c:bd:34:91:e8:07:07:36: 1a:61:be:be:ac:38:7b:82:b4:2c:24:90:d0:60:5c: 69:72:07:35:bc:75:87:24:b7:5f:e9:c2:c0:18:09: 5f:29:2e:99:b5:d0:74:62:69:1c:0b:89:83:1a:10: 5e:e6:a3:49:dc:a3:63:88:7a:56:6c:d3:98:46:24: 4d:05:f9:30:08:fb:f2:75:0b:dc:13:09:3e:7b:52: e1:75:f1:bc:02:6f:e7:6b:3c:96:e0:76:91:5c:96: 7e:d4:a2:54:85:48:7d:96:7b:a0:70:bb:78:a3:e4: ab:30:23:1c:57:ed:01:56:e0:93:af:92:b5:30:77: df:92:1a:0d:27:a9:47:e9:8d:56:ab:b6:92:ea:50: 0d:96:2e:0a:fc:b1:c7:0b:17:f7:a1:8d:03:87:53: 50:72:fe:e1:32:36:a4:e9:21:ec:5f:de:83:36:f8: c2:58:41:11:2a:22:22:ae:b0:4c:d0:d7:0a:29:f0: 37:e6:2a:81:5c:09:59:fd:45:dd:c1:6d:71:c8:21: f8:84:71:3d:e0:be:11:15:33:62:66:e5:9d:1d:7a: 98:00:0c:b0:00:ea:c4:e4:f1:1a:5d:13:b8:91:49: 5c:43:a3:c5:73:69:bc:a6:2f:ca:26:90:e9:1d:4e: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C8:D7:52:BF:A9:10:E8:B5:CF:50:31:E5:94:52:C1:CB:78:10:F9 X509v3 Authority Key Identifier: keyid:AB:58:72:11:82:B4:EA:A8:FE:CD:4A:D8:80:8C:EE:F5:CD:DD:1B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2410fa43-0be3-471a-9c20-81046291ca11/0/AB58721182B4EAA8FECD4AD8808CEEF5CDDD1B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5c:36:96:87:cf:5c:d3:16:9d:c6:5f:10:02:14:1e:1a:a7: bf:45:a5:73:dc:f3:93:35:12:53:c2:0d:07:78:7a:5c:57:21: 20:cb:10:c0:32:19:74:79:ad:73:86:eb:7c:de:e3:f6:5f:5b: 83:b0:f5:48:64:7f:33:30:9e:fe:8b:c2:da:33:e8:30:4b:44: b7:9c:e5:37:8f:d3:fb:92:ae:89:d8:ef:9d:7c:05:8a:a8:bb: 24:85:4d:23:2d:30:fc:ad:42:7e:93:bb:dd:d7:0a:09:23:64: 0a:6e:a0:33:dc:7f:d6:82:08:37:22:cf:3a:57:86:c6:3a:0c: 20:8d:9a:99:58:e8:d0:2c:5a:30:04:bb:25:cc:00:6f:6a:57: 04:61:3b:7d:f6:9c:8e:1d:e5:7f:da:cf:2e:11:6f:2c:43:c1: 9a:bd:d5:15:bb:53:60:51:c7:9f:cd:48:6e:59:c1:b3:94:3c: 3c:e3:57:7b:43:cf:7c:1e:ef:e3:71:a9:ff:54:e3:db:cf:98: ed:ee:cb:47:8e:46:d8:60:9f:5a:22:7f:62:8b:b2:22:b4:db: fb:82:7c:40:41:26:3a:68:da:37:c6:59:94:8d:75:13:9b:97: e3:ac:17:94:ca:02:5f:d7:b1:bc:62:f1:32:06:a6:71:a3:6b: e3:8c:52:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQJpK5wAE1+MVzh/KDFeSR8fPpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVD REREMUIwNjAeFw0yNTEyMTgyMDA2NTRaFw0yNTEyMjIwNjE5NTRaMDMxMTAvBgNV BAMTKDRFQzhENzUyQkZBOTEwRThCNUNGNTAzMUU1OTQ1MkMxQ0I3ODEwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyvCWejgcvTSR6AcHNhphvr6s OHuCtCwkkNBgXGlyBzW8dYckt1/pwsAYCV8pLpm10HRiaRwLiYMaEF7mo0nco2OI elZs05hGJE0F+TAI+/J1C9wTCT57UuF18bwCb+drPJbgdpFcln7UolSFSH2We6Bw u3ij5KswIxxX7QFW4JOvkrUwd9+SGg0nqUfpjVartpLqUA2WLgr8sccLF/ehjQOH U1By/uEyNqTpIexf3oM2+MJYQREqIiKusEzQ1wop8DfmKoFcCVn9Rd3BbXHIIfiE cT3gvhEVM2Jm5Z0depgADLAA6sTk8RpdE7iRSVxDo8VzabymL8omkOkdTp/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsjXUr+pEOi1z1Ax5ZRSwct4EPkwHwYDVR0j BBgwFoAUq1hyEYK06qj+zUrYgIzu9c3dGwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NDEwZmE0My0wYmUzLTQ3MWEtOWMyMC04MTA0NjI5MWNhMTEvMC9BQjU4NzIxMTgy QjRFQUE4RkVDRDRBRDg4MDhDRUVGNUNEREQxQjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VFRjVDRERE MUIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjQxMGZhNDMtMGJlMy00NzFhLTlj MjAtODEwNDYyOTFjYTExLzAvQUI1ODcyMTE4MkI0RUFBOEZFQ0Q0QUQ4ODA4Q0VF RjVDREREMUIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1cNpaHz1zTFp3GXxACFB4ap79FpXPc85M1 ElPCDQd4elxXISDLEMAyGXR5rXOG63ze4/ZfW4Ow9UhkfzMwnv6Lwtoz6DBLRLec 5TeP0/uSronY7518BYqouySFTSMtMPytQn6Tu93XCgkjZApuoDPcf9aCCDcizzpX hsY6DCCNmplY6NAsWjAEuyXMAG9qVwRhO332nI4d5X/azy4RbyxDwZq91RW7U2BR x5/NSG5ZwbOUPDzjV3tDz3we7+Nxqf9U49vPmO3uy0eORthgn1oif2KLsiK02/uC fEBBJjpo2jfGWZSNdRObl+OsF5TKAl/Xsbxi8TIGpnGja+OMUoc= -----END CERTIFICATE-----Generated at Fri Dec 19 07:44:51 2025 by rpki-client