This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft File: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft (raw, json) Hash identifier: CNgrdfCC/ayjX86iy4O+P1iCqBSWoswqtXWiuMUuYSA= Subject key identifier: 8A:CF:9C:0A:82:CB:30:60:43:9C:2A:FE:0B:D2:F3:15:41:21:76:57 Authority key identifier: D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 Certificate issuer: /CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Certificate serial: 6802D770A22DCC2AA8454984A368DA9D53B72052 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft Manifest number: 0315 Signing time: Sun 14 Dec 2025 22:12:22 +0000 Manifest this update: Sun 14 Dec 2025 22:07:22 +0000 Manifest next update: Wed 17 Dec 2025 23:07:22 +0000 Files and hashes: 1: 3130332e3136392e34302e302f32332d3233203d3e20313432333332.roa (hash: lwypc1eue2zj3ktOWvglzu1Jo7qmvdfN4AlugN+i5Zw=) 2: 3130332e3136392e34302e302f32342d3234203d3e20313432333332.roa (hash: yIxyAi+LsGKpwTABrM9lNwtjILhJjgs1G21qada+Ir4=) 3: D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl (hash: NeR2lmQMAI5msj7+cGne/nfT/2PoPyxT1y7JdfL/1Ic=) 4: 3130332e3136392e34312e302f32342d3234203d3e20313432333332.roa (hash: zPRVVEuzND/TSHdVq3ZkAQYAgPmvosaZoKU+TXGH1vc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 23:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:02:d7:70:a2:2d:cc:2a:a8:45:49:84:a3:68:da:9d:53:b7:20:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7 Validity Not Before: Dec 14 22:07:22 2025 GMT Not After : Dec 17 23:07:22 2025 GMT Subject: CN=8ACF9C0A82CB3060439C2AFE0BD2F31541217657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2e:ca:b2:60:98:8c:6a:9c:66:2c:59:af:7d: cf:b3:d1:a8:d6:00:6d:93:5b:a9:61:45:47:90:4e: 19:39:90:57:d9:7c:5c:e9:fc:61:92:e6:fd:91:3d: 23:61:73:5e:5c:fd:be:ee:cb:77:da:4d:ad:65:75: 3b:b8:f2:79:92:4b:f5:6a:ae:ce:d4:b5:19:14:fd: 36:47:7a:41:3d:b9:7f:af:3d:c8:37:b8:95:b8:a9: 50:77:2a:86:24:49:b8:df:bd:32:42:8d:05:ca:b0: 3e:7e:b1:c3:67:0b:30:03:b8:72:76:e8:bb:1c:56: 41:05:6d:b3:17:10:3a:f5:0d:8a:40:1e:75:bf:3e: c2:c8:2f:bd:04:d6:e2:72:52:12:70:a5:2a:cf:54: f6:4a:36:a2:ea:56:b4:9a:9f:94:ff:9b:c7:08:e9: 4a:e1:9c:43:d1:27:9d:23:fd:40:06:57:b2:e9:bb: b0:41:98:17:88:e7:d1:a7:26:e2:5c:00:cb:41:a8: 3a:10:f0:e4:e3:11:30:6d:e9:f2:dd:97:f1:1f:30: 6a:50:5a:db:c3:3a:f1:12:5b:7a:69:a1:6c:2c:d3: aa:4c:9c:ef:53:c3:04:72:8c:2f:89:82:0d:b9:ce: e7:ef:ab:e8:db:df:c2:67:1f:70:94:ca:b1:80:55: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CF:9C:0A:82:CB:30:60:43:9C:2A:FE:0B:D2:F3:15:41:21:76:57 X509v3 Authority Key Identifier: keyid:D5:8B:CD:47:A6:26:3C:C3:A1:2A:BD:E6:E3:A2:AD:28:AF:8B:DE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb52619-379d-430a-b19b-1f0ec53ae909/0/D58BCD47A6263CC3A12ABDE6E3A2AD28AF8BDED7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:44:1b:78:dc:07:b2:b6:92:c1:bd:d5:c8:69:a8:54:03:04: 07:89:46:e0:45:c5:db:91:e9:a1:c9:ea:47:a2:4b:7a:23:aa: 3c:dd:8f:ea:eb:f9:72:a7:fd:87:aa:41:e0:e0:a0:ac:e9:6f: ba:e7:1b:39:f1:dd:e8:1c:c4:8c:d1:38:12:90:bf:be:7b:09: b2:7a:8c:0b:4f:58:00:ce:59:fc:74:cb:95:96:2e:a1:e9:32: 58:53:6f:16:07:c1:35:02:c1:a4:fa:a3:9c:d2:e8:fe:95:e0: 03:49:dc:8a:d9:cb:ce:ca:6e:ef:68:e4:e6:2b:86:c2:33:55: 5b:fd:e7:93:da:a9:e4:a7:8f:cb:25:8a:e4:04:f9:6c:83:7f: e4:81:07:59:0d:3f:2a:3c:25:b2:15:9f:00:91:f2:de:fe:ab: 5e:ac:f4:3d:12:c3:f2:23:8b:c0:17:f8:69:77:f8:f3:cb:7d: a8:c1:1e:28:0c:f7:36:49:7a:40:5b:f9:8a:b0:c9:da:77:8e: 4d:c3:9d:45:15:f6:8f:c8:60:cd:4d:e7:04:5d:07:35:3e:a4: b9:99:2c:4c:e6:4f:1d:76:6a:39:64:d8:da:32:94:48:83:00: 37:aa:fc:14:8e:63:53:43:65:d4:75:b4:e1:7b:06:f3:b1:c3: 11:06:c2:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaALXcKItzCqoRUmEo2janVO3IFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhB RjhCREVENzAeFw0yNTEyMTQyMjA3MjJaFw0yNTEyMTcyMzA3MjJaMDMxMTAvBgNV BAMTKDhBQ0Y5QzBBODJDQjMwNjA0MzlDMkFGRTBCRDJGMzE1NDEyMTc2NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSLsqyYJiMapxmLFmvfc+z0ajW AG2TW6lhRUeQThk5kFfZfFzp/GGS5v2RPSNhc15c/b7uy3faTa1ldTu48nmSS/Vq rs7UtRkU/TZHekE9uX+vPcg3uJW4qVB3KoYkSbjfvTJCjQXKsD5+scNnCzADuHJ2 6LscVkEFbbMXEDr1DYpAHnW/PsLIL70E1uJyUhJwpSrPVPZKNqLqVrSan5T/m8cI 6UrhnEPRJ50j/UAGV7Lpu7BBmBeI59GnJuJcAMtBqDoQ8OTjETBt6fLdl/EfMGpQ WtvDOvESW3ppoWws06pMnO9TwwRyjC+Jgg25zufvq+jb38JnH3CUyrGAVUt3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUis+cCoLLMGBDnCr+C9LzFUEhdlcwHwYDVR0j BBgwFoAU1YvNR6YmPMOhKr3m46KtKK+L3tcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2I1MjYxOS0zNzlkLTQzMGEtYjE5Yi0xZjBlYzUzYWU5MDkvMC9ENThCQ0Q0N0E2 MjYzQ0MzQTEyQUJERTZFM0EyQUQyOEFGOEJERUQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFEMjhBRjhC REVENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiNTI2MTktMzc5ZC00MzBhLWIx OWItMWYwZWM1M2FlOTA5LzAvRDU4QkNENDdBNjI2M0NDM0ExMkFCREU2RTNBMkFE MjhBRjhCREVENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlEG3jcB7K2ksG91chpqFQDBAeJRuBFxduR 6aHJ6keiS3ojqjzdj+rr+XKn/YeqQeDgoKzpb7rnGznx3egcxIzROBKQv757CbJ6 jAtPWADOWfx0y5WWLqHpMlhTbxYHwTUCwaT6o5zS6P6V4ANJ3IrZy87Kbu9o5OYr hsIzVVv955PaqeSnj8sliuQE+WyDf+SBB1kNPyo8JbIVnwCR8t7+q16s9D0Sw/Ij i8AX+Gl3+PPLfajBHigM9zZJekBb+Yqwydp3jk3DnUUV9o/IYM1N5wRdBzU+pLmZ LEzmTx12ajlk2NoylEiDADeq/BSOY1NDZdR1tOF7BvOxwxEGwr4= -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:53 2025 by rpki-client