This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: 3gFioi7i7LpKVPe86Tn8YizRIUVyOrIiLSPcBvaXX40= Subject key identifier: 78:49:C7:9A:4F:33:9A:73:A9:E6:26:82:38:E6:87:91:9A:27:29:54 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 792BC95D80FEB0A2F3BB572ACB8AE359B3B1A6E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 030F Signing time: Mon 01 Dec 2025 17:42:18 +0000 Manifest this update: Mon 01 Dec 2025 17:37:18 +0000 Manifest next update: Thu 04 Dec 2025 21:58:18 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 3: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) 4: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: XKxM3zBPICE7C2XHdCfRYQAKtJltNEBPW3Q/t1iYDUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2b:c9:5d:80:fe:b0:a2:f3:bb:57:2a:cb:8a:e3:59:b3:b1:a6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Dec 1 17:37:18 2025 GMT Not After : Dec 4 21:58:18 2025 GMT Subject: CN=7849C79A4F339A73A9E6268238E687919A272954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:06:09:88:90:31:49:24:71:1a:15:e9:84: 82:9c:04:1f:15:97:7e:42:55:20:6b:df:db:54:c5: a9:6e:ea:5a:ad:6e:72:8d:c1:28:d3:89:3e:7c:f1: a6:5c:d4:bb:d9:2d:39:e4:31:75:91:fc:64:d7:60: cd:4f:2e:ef:87:dd:97:57:e5:e6:0a:1d:1a:a3:f7: 56:fd:e1:c2:b1:c4:4d:7c:22:a7:ce:04:9a:83:86: cb:dd:a2:a0:01:d5:e7:5a:7f:9c:be:ef:e8:61:24: fe:9b:50:34:53:06:0f:7c:9c:81:ab:12:a0:f6:ea: ab:10:cd:4a:67:91:80:ab:42:52:6b:06:26:ca:73: b3:c1:40:d7:bd:a3:42:cc:85:d5:b4:0b:1e:9f:46: 78:93:f8:94:36:88:ea:f7:f6:24:f4:35:94:45:36: 78:7d:69:86:f6:1c:5f:e4:28:fd:86:35:d0:1b:83: 0e:4e:1e:32:e4:a1:5a:86:12:cb:a2:60:f8:ac:ee: b9:c1:86:9b:e1:f5:6b:d6:09:c1:4c:f9:13:d6:91: dc:37:61:9c:98:ab:61:d7:d9:f6:db:02:27:c5:24: f5:98:02:d5:0e:92:64:7a:31:f8:15:dc:cb:44:68: 19:2b:f8:80:f8:b4:65:5c:1a:56:6a:55:17:27:6d: 18:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:49:C7:9A:4F:33:9A:73:A9:E6:26:82:38:E6:87:91:9A:27:29:54 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:d0:42:09:29:92:4b:77:51:7d:5e:5a:76:89:1b:d0:c6: 7b:ea:81:26:be:0e:76:a9:04:d2:d6:c7:d9:2d:bc:9a:2d:8f: 49:bf:8c:56:e8:78:59:55:b3:24:f0:50:ec:9e:db:95:e1:02: f2:36:aa:65:91:c0:38:b3:4b:5b:47:25:85:69:1b:80:28:0f: 7f:27:cd:4c:49:95:2f:22:c2:9d:43:2a:d9:4b:b1:f4:ef:61: c8:10:cb:41:bf:7e:0b:35:3a:aa:31:69:fc:41:d7:6d:71:44: 0b:63:cc:70:89:02:79:92:63:50:3d:eb:e0:0c:10:1a:de:f2: ec:c5:af:65:8a:23:97:6e:7f:18:c7:a1:40:20:39:bb:b5:f9: 8d:6b:3b:c4:7e:bb:79:b0:86:f3:25:ba:14:ea:8a:39:f3:0c: 35:4d:97:8e:cd:30:60:8d:37:86:80:33:96:da:48:df:29:21: 6b:ee:01:49:23:1c:61:d7:1d:ca:bc:ad:29:65:b2:b5:8c:97: a9:7b:4e:36:5a:9f:18:41:5b:68:49:af:71:b0:3d:d3:83:72: ee:ee:4e:81:45:7c:50:94:80:9a:2f:9a:da:3c:ab:07:35:a7: 46:ec:f2:8e:fd:4c:13:60:34:86:26:a4:27:0f:3d:7b:8d:2d: 57:01:9f:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSvJXYD+sKLzu1cqy4rjWbOxpuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTEyMDExNzM3MThaFw0yNTEyMDQyMTU4MThaMDMxMTAvBgNV BAMTKDc4NDlDNzlBNEYzMzlBNzNBOUU2MjY4MjM4RTY4NzkxOUEyNzI5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxgYJiJAxSSRxGhXphIKcBB8V l35CVSBr39tUxalu6lqtbnKNwSjTiT588aZc1LvZLTnkMXWR/GTXYM1PLu+H3ZdX 5eYKHRqj91b94cKxxE18IqfOBJqDhsvdoqAB1edaf5y+7+hhJP6bUDRTBg98nIGr EqD26qsQzUpnkYCrQlJrBibKc7PBQNe9o0LMhdW0Cx6fRniT+JQ2iOr39iT0NZRF Nnh9aYb2HF/kKP2GNdAbgw5OHjLkoVqGEsuiYPis7rnBhpvh9WvWCcFM+RPWkdw3 YZyYq2HX2fbbAifFJPWYAtUOkmR6MfgV3MtEaBkr+ID4tGVcGlZqVRcnbRiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEnHmk8zmnOp5iaCOOaHkZonKVQwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ/0EIJKZJLd1F9Xlp2iRvQxnvqgSa+Dnap BNLWx9ktvJotj0m/jFboeFlVsyTwUOye25XhAvI2qmWRwDizS1tHJYVpG4AoD38n zUxJlS8iwp1DKtlLsfTvYcgQy0G/fgs1OqoxafxB121xRAtjzHCJAnmSY1A96+AM EBre8uzFr2WKI5dufxjHoUAgObu1+Y1rO8R+u3mwhvMluhTqijnzDDVNl47NMGCN N4aAM5baSN8pIWvuAUkjHGHXHcq8rSllsrWMl6l7TjZanxhBW2hJr3GwPdODcu7u ToFFfFCUgJovmto8qwc1p0bs8o79TBNgNIYmpCcPPXuNLVcBn2M= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:37 2025 by rpki-client