This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft File: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft (raw, json) Hash identifier: s1buXlUDp9/el5bpeqUReywCz1OGNsN6vAbcdLKwdE4= Subject key identifier: A0:11:7C:13:2F:1C:ED:B1:8F:24:E8:C8:E9:C3:DB:FB:EB:8A:05:BF Authority key identifier: 58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 Certificate issuer: /CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Certificate serial: 42CB63392C45248C2EB66CC2513386FAF125BEAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft Manifest number: 0229 Signing time: Wed 17 Dec 2025 14:31:10 +0000 Manifest this update: Wed 17 Dec 2025 14:26:10 +0000 Manifest next update: Sun 21 Dec 2025 00:34:10 +0000 Files and hashes: 1: 3130332e3138342e32302e302f32332d3233203d3e20313439383833.roa (hash: +E4T7dUXV6aX4bEXGLU3jVOr97rI3sHCGNsBCv/YCaI=) 2: 3130332e3138342e32302e302f32342d3234203d3e20313439383833.roa (hash: GTF74Ft0qa3Ml/qzXNfnDXeDnWgSofyFjshmuk26klk=) 3: 58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl (hash: WKZBcUjbr3/WkQg5/YMFXCdRpu8RVrJ31eImsVFLINo=) 4: 3130332e3138342e32312e302f32342d3234203d3e20313439383833.roa (hash: SYGWmmOnwGKD6Y/4QC0HTfwuXQyWf4xsNcK5v8re6i0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:cb:63:39:2c:45:24:8c:2e:b6:6c:c2:51:33:86:fa:f1:25:be:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58A706EA7468DF0D14CA1817C7CC5DBD5A69C596 Validity Not Before: Dec 17 14:26:10 2025 GMT Not After : Dec 21 00:34:10 2025 GMT Subject: CN=A0117C132F1CEDB18F24E8C8E9C3DBFBEB8A05BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c0:d0:1e:b6:07:2e:d6:b0:1f:92:7e:fa:5a: f5:bc:1e:f3:90:ba:31:a5:62:c6:c1:9e:43:00:e2: 17:ab:75:df:d7:b4:7f:94:fa:4e:7b:6d:24:1e:78: 1b:cd:ef:32:ff:49:cc:36:bb:15:df:50:2f:ee:e8: d2:95:8c:34:93:b5:b7:6e:fd:7c:e7:2f:d8:49:6c: 94:5a:cd:8b:c3:2a:54:e6:d6:b5:42:4a:d7:e7:1a: 8e:85:a5:1b:d6:16:59:d7:e3:8f:98:8b:3b:9a:b9: 13:06:a6:ba:c6:66:80:d8:68:b5:d5:1e:8e:04:9d: f3:90:56:29:f0:d9:b2:62:f1:8b:ed:7e:32:e4:86: b7:77:33:a2:fc:8f:a3:83:e2:53:65:1b:52:d6:c4: b8:1c:70:88:91:54:19:c6:f9:69:fa:da:84:1b:6a: b0:09:7b:76:c7:f6:09:52:de:d5:df:f0:11:e4:dd: cb:3a:70:6e:25:5e:55:32:f0:09:a2:91:df:86:d1: 9a:25:08:f6:52:b2:b9:b3:04:9b:bd:69:9e:10:ac: 15:a2:4c:eb:c1:16:d9:7a:f9:bf:73:ee:7b:84:19: f2:0e:92:dd:3d:5e:09:91:3c:80:4a:5d:6f:86:bd: 7e:09:09:03:17:d1:34:fb:85:dd:f6:0f:9c:75:9d: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:11:7C:13:2F:1C:ED:B1:8F:24:E8:C8:E9:C3:DB:FB:EB:8A:05:BF X509v3 Authority Key Identifier: keyid:58:A7:06:EA:74:68:DF:0D:14:CA:18:17:C7:CC:5D:BD:5A:69:C5:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/32bfab09-c1e9-44d8-819e-fdf6549c6b3f/0/58A706EA7468DF0D14CA1817C7CC5DBD5A69C596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:47:64:2c:52:f1:ec:8d:bf:eb:59:9d:4b:fc:b8:d0:17:13: 23:34:e9:7e:b3:c6:56:d5:8b:d6:c9:84:2c:f1:d3:c7:6f:92: 18:a9:85:2b:f0:30:ad:5a:b1:ea:56:8a:5d:af:3c:f3:d2:64: f0:4a:9d:e8:d4:66:8a:06:a5:ec:9f:23:9f:5a:a5:d7:a2:38: e6:98:a8:b0:54:9d:78:f1:6e:b7:f1:bb:de:a1:66:bd:f1:42: 35:e7:86:d0:73:df:32:82:74:f9:f8:b1:4d:0a:18:6a:9b:4d: f3:61:95:2f:cb:09:1f:c4:44:54:53:64:27:31:2b:a6:c1:f4: a4:23:8e:52:d7:12:44:e0:01:d3:8c:ba:c7:4c:60:73:2d:05: b9:d1:cf:ae:2c:97:77:b3:55:30:6a:02:6c:de:40:b4:fe:c4: fc:59:a7:5a:76:c4:c5:9b:6b:3a:16:c3:16:2c:0d:de:9b:dd: 9f:b9:a0:2c:92:4a:2d:ba:ee:e4:84:3d:59:33:7c:dc:a7:07: d6:4e:fc:85:1c:74:13:1c:ee:1e:1b:e5:17:d7:34:77:13:3c: 57:2b:01:cf:3b:f5:1b:2e:7b:16:02:1d:fe:20:24:9b:e7:cd: f6:09:ef:6f:2f:fd:e3:f3:1d:1f:4c:04:b2:1b:aa:74:21:9e: 01:a4:c0:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQstjOSxFJIwutmzCUTOG+vElvq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1 QTY5QzU5NjAeFw0yNTEyMTcxNDI2MTBaFw0yNTEyMjEwMDM0MTBaMDMxMTAvBgNV BAMTKEEwMTE3QzEzMkYxQ0VEQjE4RjI0RThDOEU5QzNEQkZCRUI4QTA1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwNAetgcu1rAfkn76WvW8HvOQ ujGlYsbBnkMA4herdd/XtH+U+k57bSQeeBvN7zL/Scw2uxXfUC/u6NKVjDSTtbdu /XznL9hJbJRazYvDKlTm1rVCStfnGo6FpRvWFlnX44+YizuauRMGprrGZoDYaLXV Ho4EnfOQVinw2bJi8YvtfjLkhrd3M6L8j6OD4lNlG1LWxLgccIiRVBnG+Wn62oQb arAJe3bH9glS3tXf8BHk3cs6cG4lXlUy8Amikd+G0ZolCPZSsrmzBJu9aZ4QrBWi TOvBFtl6+b9z7nuEGfIOkt09XgmRPIBKXW+GvX4JCQMX0TT7hd32D5x1nT0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoBF8Ey8c7bGPJOjI6cPb++uKBb8wHwYDVR0j BBgwFoAUWKcG6nRo3w0UyhgXx8xdvVppxZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MmJmYWIwOS1jMWU5LTQ0ZDgtODE5ZS1mZGY2NTQ5YzZiM2YvMC81OEE3MDZFQTc0 NjhERjBEMTRDQTE4MTdDN0NDNURCRDVBNjlDNTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVEQkQ1QTY5 QzU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzJiZmFiMDktYzFlOS00NGQ4LTgx OWUtZmRmNjU0OWM2YjNmLzAvNThBNzA2RUE3NDY4REYwRDE0Q0ExODE3QzdDQzVE QkQ1QTY5QzU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtHZCxS8eyNv+tZnUv8uNAXEyM06X6zxlbV i9bJhCzx08dvkhiphSvwMK1asepWil2vPPPSZPBKnejUZooGpeyfI59apdeiOOaY qLBUnXjxbrfxu96hZr3xQjXnhtBz3zKCdPn4sU0KGGqbTfNhlS/LCR/ERFRTZCcx K6bB9KQjjlLXEkTgAdOMusdMYHMtBbnRz64sl3ezVTBqAmzeQLT+xPxZp1p2xMWb azoWwxYsDd6b3Z+5oCySSi267uSEPVkzfNynB9ZO/IUcdBMc7h4b5RfXNHcTPFcr Ac879RsuexYCHf4gJJvnzfYJ728v/ePzHR9MBLIbqnQhngGkwFQ= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:47 2025 by rpki-client