This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
File: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft (raw, json)
Hash identifier: /szrZ046MPZ97Dqk5kA+wxFCmgxdEvgIa+eKtgLf0Mw=
Subject key identifier: 11:FF:39:5A:E8:AA:19:63:85:74:49:E3:9A:01:61:66:4E:A0:96:74
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Certificate issuer: /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial: 1FA67E91B7367CAFEF0208F5F9F55789A60B24B5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
Manifest number: 0542
Signing time: Sun 01 Feb 2026 08:20:55 +0000
Manifest this update: Sun 01 Feb 2026 08:15:55 +0000
Manifest next update: Wed 04 Feb 2026 19:51:55 +0000
Files and hashes: 1: 0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl (hash: XTPzqrQUmg/zcLqEtiJgma72LLyAmU8pGOOvfkAcGL8=)
2: 3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (hash: 55PcLzem2BCpJqiABflzpPI/pSTP6UsU+JbaeHq127k=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Feb 2026 19:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a6:7e:91:b7:36:7c:af:ef:02:08:f5:f9:f5:57:89:a6:0b:24:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Validity
Not Before: Feb 1 08:15:55 2026 GMT
Not After : Feb 4 19:51:55 2026 GMT
Subject: CN=11FF395AE8AA1963857449E39A0161664EA09674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:85:f8:e9:b4:7b:44:2c:c8:67:45:c6:a1:38:
52:3c:1a:dd:d7:80:db:04:84:9f:43:1e:7e:76:d5:
3c:2a:3f:f3:fd:cd:50:09:a3:28:c0:29:2a:6f:5c:
6a:ea:be:af:36:71:7c:ab:0b:69:46:4a:ad:b0:10:
9a:4d:a0:e9:c5:61:d3:b4:ab:70:21:33:c5:93:67:
ef:1e:64:d4:40:d4:04:cd:7a:d6:f2:e4:be:5f:2b:
90:ce:0e:e8:46:47:34:37:c4:11:a2:6f:d8:c4:ef:
78:6a:3a:b9:79:3d:5b:ad:0b:7f:83:30:f7:51:db:
2d:df:8e:ba:0b:33:b5:9f:b0:51:70:de:24:dd:79:
1f:85:96:61:61:f3:9f:0b:a6:4d:90:3d:72:b5:36:
ba:2d:f4:a5:50:13:99:a0:96:2c:c1:f7:16:ff:8d:
2b:d3:e2:08:14:d5:a3:2e:9a:8d:c1:96:97:d0:a9:
6f:9d:dc:55:bf:b8:b2:41:73:8a:ed:19:76:cf:d2:
77:66:9a:91:21:2e:d5:71:97:36:46:2b:02:09:98:
47:51:08:95:c1:ba:36:e9:1a:51:19:8b:bf:31:51:
ea:d0:b6:45:bb:4d:da:e8:05:af:c1:ef:91:c3:91:
56:5f:40:39:fa:c7:ba:a7:81:91:b3:8f:73:59:84:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FF:39:5A:E8:AA:19:63:85:74:49:E3:9A:01:61:66:4E:A0:96:74
X509v3 Authority Key Identifier:
keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a1:06:ff:a1:00:9d:d4:56:57:01:97:62:76:c0:f0:4d:d8:
a5:7d:67:d7:00:8a:49:31:00:43:57:24:43:7b:37:e1:49:66:
4b:56:4b:f8:1b:63:94:cc:42:84:2d:a2:68:05:2a:c3:03:00:
37:d3:38:a6:5c:b5:75:45:7e:15:03:4a:8a:d2:54:13:74:bf:
9d:b9:bd:eb:87:3f:ba:f2:c7:43:df:36:39:4b:a9:9a:e5:cc:
80:fa:66:5f:12:32:11:6d:10:e3:c7:32:07:d7:94:14:4d:f9:
c8:e7:c1:33:b2:23:f9:d5:96:8d:91:c1:5c:2e:5d:4a:9a:e5:
4e:cd:36:0b:e8:cc:73:e5:79:55:14:fd:4c:33:e0:96:e7:25:
6f:a2:5a:13:fc:39:d1:51:0d:7d:e1:a0:91:5c:0f:fb:15:45:
fa:6b:2a:ce:9f:67:16:00:92:ef:30:2a:41:7b:34:8e:ca:12:
df:68:f4:22:1d:28:85:ff:92:3f:1e:eb:19:25:1d:9a:aa:c4:
f7:09:9c:7f:ad:29:0d:59:a7:c2:17:7c:40:fe:75:16:4b:52:
d6:ab:22:bf:db:1d:2e:21:ff:5b:61:f6:bb:f9:5c:b5:8f:25:
43:8f:82:04:1a:04:26:1a:b2:5b:59:ea:a6:cd:8c:12:16:1c:
c4:9b:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:44:57 2026 by rpki-client