This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft File: 585D79944E315672D413B937BFC042F7C0AAB990.mft (raw, json) Hash identifier: NS5/ndk5kg73hIbYwe5n7QVWV4LPlNTpWnvUtqOMAKQ= Subject key identifier: D9:9E:DA:9F:0C:0A:E7:D3:81:37:AC:4F:53:A6:51:DE:CA:80:34:C6 Authority key identifier: 58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 Certificate issuer: /CN=585D79944E315672D413B937BFC042F7C0AAB990 Certificate serial: 4A3F0A99D06EF7B50C5F0A7A3A396171FF18E36E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft Manifest number: 012A Signing time: Mon 01 Dec 2025 23:11:42 +0000 Manifest this update: Mon 01 Dec 2025 23:06:42 +0000 Manifest next update: Fri 05 Dec 2025 09:23:42 +0000 Files and hashes: 1: 3130332e3130302e38352e302f32342d3234203d3e20313336383336.roa (hash: jeEsDMd/+EovuK4uL5Q5qgB89wPIiu04eYRInb+Xh5s=) 2: 585D79944E315672D413B937BFC042F7C0AAB990.crl (hash: 0s+YTjYWKx3BQ2HitsW3H+owUSQZZyqti1w+STy1D+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3f:0a:99:d0:6e:f7:b5:0c:5f:0a:7a:3a:39:61:71:ff:18:e3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585D79944E315672D413B937BFC042F7C0AAB990 Validity Not Before: Dec 1 23:06:42 2025 GMT Not After : Dec 5 09:23:42 2025 GMT Subject: CN=D99EDA9F0C0AE7D38137AC4F53A651DECA8034C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c4:ba:d7:c6:61:fd:51:ea:a5:12:0d:31:bd: 6b:03:eb:06:09:76:dc:ea:07:36:59:bd:53:dc:dd: 69:34:c4:ed:5b:05:97:4b:31:f6:51:d8:12:41:32: 11:04:3d:38:8a:0f:81:d4:af:4c:04:69:a3:0d:02: 72:48:1f:ab:9d:81:df:e2:4d:45:97:11:50:99:1f: 6b:fa:0f:13:b7:bb:fc:8b:62:a5:87:5e:4e:23:78: 69:1f:5f:21:8b:c9:8f:5c:4b:25:4a:0b:fc:9b:81: 9a:84:2a:0b:b3:4d:52:9d:1f:de:ad:2c:4a:e6:cc: f7:1b:f3:00:07:64:24:ac:8f:6d:4c:c8:b4:6e:cb: e2:40:f4:d3:c3:a7:4e:a0:83:d5:aa:0d:ca:ab:e5: 67:0c:0e:5a:7a:41:6d:ee:99:78:0d:96:5e:7f:a1: 26:2b:92:44:e9:e6:90:54:86:d7:63:39:37:de:e6: 53:6c:d2:b8:1c:22:f9:07:4a:58:b5:08:bb:a2:e8: 62:bc:93:5a:01:36:40:e0:47:f9:4d:e6:fc:dd:aa: fc:12:fc:a1:8c:36:02:99:fa:2d:93:41:12:78:98: 70:66:7c:02:36:60:4d:8b:b6:34:39:3a:b0:a0:25: 44:c6:7f:a2:3d:27:6d:e3:46:c1:0a:6a:be:08:2a: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:DA:9F:0C:0A:E7:D3:81:37:AC:4F:53:A6:51:DE:CA:80:34:C6 X509v3 Authority Key Identifier: keyid:58:5D:79:94:4E:31:56:72:D4:13:B9:37:BF:C0:42:F7:C0:AA:B9:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/585D79944E315672D413B937BFC042F7C0AAB990.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4732f191-e380-4013-bce5-4215a493a71d/0/585D79944E315672D413B937BFC042F7C0AAB990.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:2c:82:a2:cb:f0:c3:81:75:b5:7f:3c:eb:68:46:eb:37:c3: 21:ec:4f:3f:d9:53:76:da:2b:0b:38:07:a7:77:bc:cb:e6:25: 8d:bc:b5:e6:6e:17:2b:bd:46:fb:57:27:c1:35:06:14:a5:15: db:9e:70:ae:45:71:7c:1a:aa:0b:78:a5:f2:52:09:9c:51:0e: 50:90:d6:0c:82:be:42:e2:4a:13:e5:92:00:27:44:f9:5f:79: 60:9a:21:9c:75:b6:ba:2d:73:38:95:80:6a:f4:e9:74:a0:d6: f7:fe:fb:fa:e7:6f:11:29:4f:cb:15:2b:7e:47:7d:d7:46:e5: b4:46:95:fa:59:52:16:0b:1b:be:ed:75:2b:3c:ec:f6:13:1d: c1:7f:c8:a6:bc:b8:a8:0b:db:98:5b:bd:0d:b8:e0:b8:97:a8: dc:ea:0a:b4:7f:da:34:ae:66:4c:e8:d6:1b:cc:0e:16:c9:e0: 57:42:6a:02:26:f0:28:2e:e8:7a:d2:18:3a:af:d9:5a:50:e1: e4:ab:52:eb:5a:0e:fb:bd:05:9c:56:3e:8f:56:3b:f5:f7:fe: 73:e9:b0:dc:fe:8c:39:9c:be:52:35:46:f1:64:48:49:18:27: 15:6a:9e:16:96:58:3e:0d:0b:da:a6:98:6f:f1:ca:c2:0c:42: 64:79:71:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSj8KmdBu97UMXwp6Ojlhcf8Y424wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdD MEFBQjk5MDAeFw0yNTEyMDEyMzA2NDJaFw0yNTEyMDUwOTIzNDJaMDMxMTAvBgNV BAMTKEQ5OUVEQTlGMEMwQUU3RDM4MTM3QUM0RjUzQTY1MURFQ0E4MDM0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xLrXxmH9UeqlEg0xvWsD6wYJ dtzqBzZZvVPc3Wk0xO1bBZdLMfZR2BJBMhEEPTiKD4HUr0wEaaMNAnJIH6udgd/i TUWXEVCZH2v6DxO3u/yLYqWHXk4jeGkfXyGLyY9cSyVKC/ybgZqEKguzTVKdH96t LErmzPcb8wAHZCSsj21MyLRuy+JA9NPDp06gg9WqDcqr5WcMDlp6QW3umXgNll5/ oSYrkkTp5pBUhtdjOTfe5lNs0rgcIvkHSli1CLui6GK8k1oBNkDgR/lN5vzdqvwS /KGMNgKZ+i2TQRJ4mHBmfAI2YE2LtjQ5OrCgJUTGf6I9J23jRsEKar4IKjabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Z7anwwK59OBN6xPU6ZR3sqANMYwHwYDVR0j BBgwFoAUWF15lE4xVnLUE7k3v8BC98CquZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzMyZjE5MS1lMzgwLTQwMTMtYmNlNS00MjE1YTQ5M2E3MWQvMC81ODVENzk5NDRF MzE1NjcyRDQxM0I5MzdCRkMwNDJGN0MwQUFCOTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQyRjdDMEFB Qjk5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDczMmYxOTEtZTM4MC00MDEzLWJj ZTUtNDIxNWE0OTNhNzFkLzAvNTg1RDc5OTQ0RTMxNTY3MkQ0MTNCOTM3QkZDMDQy RjdDMEFBQjk5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEsgqLL8MOBdbV/POtoRus3wyHsTz/ZU3ba Kws4B6d3vMvmJY28teZuFyu9RvtXJ8E1BhSlFduecK5FcXwaqgt4pfJSCZxRDlCQ 1gyCvkLiShPlkgAnRPlfeWCaIZx1trotcziVgGr06XSg1vf++/rnbxEpT8sVK35H fddG5bRGlfpZUhYLG77tdSs87PYTHcF/yKa8uKgL25hbvQ244LiXqNzqCrR/2jSu Zkzo1hvMDhbJ4FdCagIm8Cgu6HrSGDqv2VpQ4eSrUutaDvu9BZxWPo9WO/X3/nPp sNz+jDmcvlI1RvFkSEkYJxVqnhaWWD4NC9qmmG/xysIMQmR5cZ8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:39 2025 by rpki-client